Privacy Policy

01 Data Controller

The Data Controller is ALIANTE S.R.L., with registered office in via XXVII Luglio, 4, 98123 Messina (Italy), VAT No. 01334230834, PEC aliante.srl@arubapec.it.

Data Protection Officer (DPO), if appointed: [DPO name/e-mail]

02 Types of Data Processed

The Company may process the following categories of personal data:

2.1 Data Provided by Users

• first and last name;
• e-mail address;
• telephone number;
• moving departure and destination address;
• information relating to the requested move;
• any photographs, documents or notes uploaded voluntarily;
• payment and billing data.

2.2 Data Provided by Providers

• company name;
• identification details of the legal representative;
• VAT number;
• registered and operating office;
• company contact details;
• licenses and authorizations;
• bank details;
• reviews and ratings received.

2.3 Browsing Data

The platform's computer systems and software procedures automatically acquire certain technical data, such as:

• IP address;
• browser used;
• operating system;
• date and time of access;
• technical logs;
• cookies and similar technologies.

03 Purposes and Legal Basis of Processing

Personal data is processed for the following purposes:

04 Manner of Processing

Data processing is carried out using electronic and/or paper-based tools, in compliance with the principles of lawfulness, fairness, transparency, data minimization, integrity and confidentiality. The Controller adopts appropriate technical and organizational measures to ensure the security of personal data and to prevent unauthorized access, loss, destruction or improper disclosure.

05 Geolocation and Tracking

The Management Software may use GPS, vehicle tracking, movement monitoring, telemetry and position detection. Geolocation data is processed solely for operational management, shipment monitoring, route optimization, security, technical support, statistical analysis and service improvement.

06 Nature of Data Provision

The provision of the data necessary for registration and use of the platform is mandatory. Failure to provide such data may result in the inability to register, use the platform, receive quotes, or make use of the available services. The provision of data for marketing purposes is optional.

07 Recipients of the Data

Personal data may be disclosed to: moving service Providers registered on the platform; tax, legal and administrative consultants; IT, hosting and cloud service providers; banks and payment operators; public authorities and competent bodies, where required by law; parties appointed as data processors pursuant to Art. 28 GDPR. The data will not be disseminated indiscriminately.

08 Relationship Between the Company and Providers

The Company acts as the technology manager of the digital platform. Moving contracts are concluded directly between the user and the Provider. Once the Provider has received the customer's data through the platform, it shall act as an autonomous Data Controller within the meaning of Art. 4 GDPR for all activities related to the provision of moving services and the commercial, administrative, tax and contractual management of the relationship with the customer or with companies with which it has collaboration arrangements for the performance of services.

The Company does not determine the purposes or the means of the processing carried out by the Provider after the contact has been transmitted. The parties mutually undertake to comply with applicable privacy law.

09 Cookies and Similar Technologies

The platform uses technical cookies and, subject to consent, analytics and profiling cookies. For further information, the user may consult the Cookie Policy available on the website/app.

10 Data Retention

Personal data will be retained for the time strictly necessary for the purposes for which it was collected and, in any case: for the entire duration of the contractual relationship; within the time limits set by tax and civil law; until consent for marketing purposes is withdrawn; within the applicable statute-of-limitations periods. At the end of the retention period, the data will be deleted or anonymized.

11 Transfer of Data Outside the EU

Should data be transferred to non-EU countries, the Controller guarantees that the transfer will take place in compliance with Articles 44 et seq. GDPR, by means of adequacy decisions of the European Commission, standard contractual clauses, or other appropriate safeguards provided for by applicable law.

12 Rights of the Data Subject

Data subjects may exercise, at any time, the rights provided for by Articles 15-22 GDPR, including: right of access; right of rectification; right to erasure; right to restriction of processing; right to data portability; right to object; right to withdraw consent; right to lodge a complaint with the Italian Data Protection Authority (Garante per la Protezione dei Dati Personali).

Requests may be sent to: PEC aliante.srl@arubapec.it - E-mail: [e-mail address]

13 Data of Minors

The service is aimed at adults acting as representatives of a business. We do not knowingly collect data from minors.

14 Changes to this Notice

The Company reserves the right to modify this Notice at any time. Changes will be published on the platform and will take effect from the date of publication.

15 Contacts

For any information relating to the processing of personal data, please contact: - PEC: aliante.srl@arubapec.it