Privacy Policy

This notice is provided under Article 13 of Regulation (EU) 2016/679 (“GDPR”) and Italian Legislative Decree 196/2003 as amended by Legislative Decree 101/2018 (the “Italian Privacy Code”) to anyone who visits www.alphubs.com or uses its contact form.

It covers this website only. The alpHubs application at app.alphubs.com is a separate service: it requires an account and is governed by its own privacy notice, provided at sign-up. Nothing below applies to that service.

It describes only what this site does with data. This website has no user accounts, no payments, no user-generated content and no profiling or advertising tools.

The Italian text is the authoritative version of this notice. This English text is a courtesy translation; where the two differ, the Italian text prevails.

1. Data controller

The data controller is Diego Bianchi, sole proprietorship DBPROJECTS DI BIANCHI DIEGO, trading as alpHubs, referred to below as “the Controller”.

• Legal name: DBPROJECTS DI BIANCHI DIEGO, sole proprietorship
• Registered address: Località Le Sare 18, 19032 Lerici (SP), Italy
• Italian VAT number: 01530810116
• REA number: SP - 227569 (Chamber of Commerce Riviere di Liguria)
• Privacy contact: info@alphubs.com. Any request concerning personal data can be sent to this address.
• PEC (certified email, digital domicile): diego.bianchi1@widipec.it, the formal channel for exercising your rights.
• Data Protection Officer (DPO): not appointed: the Controller does not fall within the cases in which appointment is mandatory under Article 37 GDPR.

2. Categories of data and purposes

The site processes three categories of data, each for a specific purpose. It collects no others.

• a) Browsing data: the systems that run the site acquire, in the course of their normal operation, some data whose transmission is implicit in the use of Internet communication protocols: IP address, browser and operating system identifier (user agent), the address of the requested page, date and time of the request. They are recorded in the hosting provider’s logs. Purpose: to operate the site, keep it secure, detect and block abuse, and establish liability in the event of computer crimes against the site.
• b) Aggregate statistics: visits are measured with Vercel Web Analytics and Vercel Speed Insights. Neither tool sets a cookie or stores an identifier on your device. Visitors are counted by means of a hash that, according to the provider’s documentation, is not retained beyond the day and cannot recognise the same person from one day to the next. Purpose: to know the number of visits, the most-read pages, the countries of origin and the loading speed of the pages, in aggregate form.
• c) Data you provide through the contact form: your name, your email address, the text of the message you choose to write, the language in which you are reading the site and the address of the page from which you sent the form; the last two are used only to answer you in your language and to understand which page the request came from. The form also contains a hidden field, invisible to anyone filling it in normally, whose sole purpose is to recognise automated submissions: if it is filled in, the message is discarded and no data is forwarded. Purpose: to answer your request and to follow it up, for example to arrange a demo or prepare a proposal. Your address is not used to send you unsolicited promotional messages.

3. Legal basis

Each purpose rests on a distinct legal basis under Article 6(1) GDPR.

• Contact form: the performance of pre-contractual steps taken at your request (Art. 6(1)(b)): answering the message you sent us and following it up. The box you tick before submitting confirms that you have read this notice; it is not a request for consent.
• Security, abuse prevention and aggregate statistics: the Controller’s legitimate interest (Art. 6(1)(f)) in keeping the site running and secure, in defending it against automated submissions and attacks, and in knowing in aggregate form how the site is used. The Controller has assessed that this interest is not overridden by your rights and freedoms, because the data processed is the minimum necessary, measurement takes place without cookies or persistent identifiers, and the rate limit on submissions is held only in the server’s temporary memory and is never written to disk or to any store.
• Legal obligations: compliance with a legal obligation (Art. 6(1)(c)), only where a law requires data to be retained or disclosed to an authority, for example following an order of a judicial authority.

4. Whether you have to provide data, and what happens if you do not

Browsing the site requires no active provision of data. The browsing data described in section 2(a) is transmitted by your browser as part of how the network works and cannot be excluded without giving up visiting the site.

Providing data through the contact form is optional. Name, email address, message and confirmation that you have read this notice are however required to submit the form: without them we cannot answer you and the request is not forwarded. You can always write directly to info@alphubs.com instead.

5. Recipients and processors

Data is processed by the Controller and by the persons it has authorised. It is not sold, assigned or disclosed to third parties for their own purposes. The external providers below process data on the Controller’s behalf and have been appointed as processors under Article 28 GDPR, by virtue of the data processing agreements that form part of their respective service contracts.

• Vercel Inc. (San Francisco, United States): hosting provider for the site and its measurement tools. It processes browsing data and aggregate statistics. The server functions that handle the contact form run in the Frankfurt (Germany) region; the content delivery network and request logs are distributed globally.
• Amazon Web Services EMEA SARL (Luxembourg): provider of the Amazon SES email service, through which the content of the contact form is delivered as an email message from no-reply@alphubs.com to the info@alphubs.com mailbox. The service is configured in the Europe (Ireland, eu-west-1) region.
• Aruba S.p.A. (Italy): provider of the email service that hosts the info@alphubs.com mailbox, in which messages received through the contact form are kept and from which the reply is handled.

6. Transfers to third countries

Data provided through the contact form is processed in Germany, sent from Ireland and stored in the European Union: for this flow no transfer takes place to countries outside the European Economic Area, except for provider access for technical support purposes, which is governed by the safeguards below.

Browsing data and visit-measurement data may instead be processed in the United States and other third countries, because Vercel Inc.’s delivery network and logs are global. The transfer is covered by appropriate safeguards under Chapter V GDPR:

• Vercel Inc.: at the date of this notice is listed as certified under the EU-U.S. Data Privacy Framework, according to the list published at www.dataprivacyframework.gov, recognised as adequate by European Commission Implementing Decision (EU) 2023/1795 (Art. 45 GDPR). In addition, the data processing agreement with Vercel incorporates the Standard Contractual Clauses approved by the European Commission in Decision (EU) 2021/914 (Art. 46(2)(c) GDPR), which apply should the certification cease.
• Amazon Web Services EMEA SARL: data remains in the Europe (Ireland) region. For the residual cases in which a transfer became necessary, the AWS data processing agreement incorporates the same Standard Contractual Clauses (Art. 46(2)(c) GDPR).
• Aruba S.p.A.: data is stored in the European Union. No transfer.
• Copy of the safeguards: A copy of the safeguards applied can be requested from info@alphubs.com.

7. Retention period

Data is kept for no longer than is strictly necessary for the purpose for which it was collected, and is then deleted or anonymised.

• Messages received through the contact form: the form saves nothing in any database of the site. Your message is the email delivered to the info@alphubs.com mailbox, which is kept for 24 months from the last exchange with you, a period considered appropriate to handle the request, and then deleted. If a contractual relationship arises in the meantime, the related correspondence is kept for the duration of the relationship and for the following ten years required by Article 2220 of the Italian Civil Code.
• Browsing data: request logs are retained by Vercel Inc. for the technical period set by the provider for the service plan in use, currently no longer than one day, unless they are needed to establish a computer crime against the site.
• Submission rate limit: the IP address from which a form submission originates is held exclusively in the server’s temporary memory, together with a counter, for one minute, after which it is no longer used and is removed from memory at the first opportunity and in any event when the instance is shut down. It is never written to disk or to any store.
• Statistics: the hash used to count visitors is not retained beyond the day. The resulting aggregate statistics contain no personal data.

8. Your rights

In relation to data concerning you, you may at any time exercise the rights provided for in Articles 15 to 22 GDPR, within the limits and under the conditions set out there:

• Access (Art. 15): obtain confirmation as to whether processing is taking place and, if so, a copy of the data.
• Rectification (Art. 16): have inaccurate data corrected or incomplete data completed.
• Erasure (Art. 17): obtain the erasure of the data, where the conditions are met.
• Restriction (Art. 18): have the data merely stored and not otherwise processed.
• Portability (Art. 20): receive the data you provided in a structured, commonly used and machine-readable format.
• Objection (Art. 21): object, on grounds relating to your particular situation, to processing based on legitimate interest.
• Automated decisions (Art. 22): this site takes no decision based solely on automated processing, including profiling.

9. How to exercise your rights, and complaints to the Garante

Requests should be sent to info@alphubs.com or, formally, to the certified email address diego.bianchi1@widipec.it. The Controller replies without undue delay and in any event within one month of receipt, a period that may be extended by two months in the cases provided for in Article 12(3) GDPR. Exercising your rights is free of charge, except for requests that are manifestly unfounded or excessive.

If you consider that the processing infringes the GDPR or the Italian Privacy Code, you have the right to lodge a complaint with a supervisory authority (Art. 77 GDPR), which in Italy is the Garante per la protezione dei dati personali, Piazza Venezia 11, 00187 Rome, website www.garanteprivacy.it, following the procedure published on the Garante’s website. Your right to an effective judicial remedy is unaffected (Art. 79 GDPR).

10. Cookies

This site sets a single cookie, NEXT_LOCALE, which is technical in nature: it remembers the language chosen with the EN / IT switcher and contains no identifier. For this reason, under Article 122 of the Italian Privacy Code and the Garante’s Guidelines of 10 June 2021, no consent is required and the site shows no banner.

The cookie, its lifetime and how you can block it are described in the Cookie Policy, which forms an integral part of this notice.

11. Minors

The site and its contact form are addressed to businesses and professionals and are not intended for minors. The Controller does not knowingly collect data from children under fourteen. If you become aware that a minor has submitted data through the site, write to info@alphubs.com: the data will be deleted.

12. Changes to this notice

The Controller may update this notice to reflect changes to the site, to its providers or to the law. The version in force is always the one published at this address, with the update date shown at the end.

The Italian text is the official version of this notice. The English version is a courtesy translation: where they differ, the Italian text prevails.

13. Last updated

Last updated: 20 September 2026. The text describes the site as built in the current release.