Privacy policy

Last updated: 9 June 2026

This notice describes how ARIA S.r.l. processes the personal data of users who visit the www.aria.srl website and who interact with it, in particular through the contact form. This notice is provided only for this website and not for other websites that may be reached via links.

1. Data Controller

The Data Controller is ARIA S.r.l., with registered and operational offices at Via Luigi Colli 24, 10129 Turin (TO), Italy — VAT no. 08820880014, in the person of its legal representative Gianfranco Camuncoli.

For any request concerning the processing of personal data, you may write to: segreteria@aria.srl — tel. +39 011 5806022.

2. Types of data processed

a) Data provided voluntarily by the user

By completing the contact form, the user voluntarily provides the following data: first and last name, company (if applicable), email address, telephone number (if applicable), area of interest and the content of the message. The submission of such data entails its acquisition for the purpose of responding to the request.

b) Browsing data

The computer systems and software procedures responsible for the operation of the website acquire, in the course of their normal operation, certain data whose transmission is implicit in the use of Internet communication protocols (for example IP addresses, browser and device type, date and time of the request). Such data is processed by the hosting service provider for the purposes of the operation and security of the website.

c) Cookies

The website uses solely technical cookies and third-party cookies connected to certain embedded services. For details, please refer to the Cookie Policy.

3. Purposes and legal bases of the processing

Purpose	Legal basis (Article 6 GDPR)
Responding to requests sent through the contact form and managing correspondence with the user	Consent of the data subject and/or performance of pre-contractual measures requested by the data subject (Art. 6.1.a / 6.1.b)
Technical operation, maintenance and security of the website	Legitimate interest of the Controller in ensuring a secure and efficient service (Art. 6.1.f)
Compliance with obligations laid down by laws or regulations	Legal obligation (Art. 6.1.c)

4. Nature of the provision of data

The provision of the data marked as mandatory in the contact form (first and last name, email, message) is necessary in order to act upon the request: failure to provide it makes it impossible to respond. The provision of the other data is optional.

5. Methods of processing

The data is processed using electronic and/or telematic tools, adopting technical and organisational measures appropriate to safeguard its confidentiality, integrity and availability, and to prevent unauthorised access, loss or unlawful use. The processing is carried out by the Controller's authorised personnel and by the parties acting as data processors.

6. Retention period

The data collected through the contact form is retained for the time strictly necessary to handle the request and any relationships that may arise from it. In the absence of a contractual relationship, the data is deleted or made anonymous within 24 months of the last contact, subject to any other legal obligations. Browsing data is retained in accordance with the policies of the hosting provider.

7. Recipients of the data

Personal data may be processed by the Controller's authorised personnel and disclosed to third parties carrying out ancillary activities (for example the hosting and email service provider), appointed as data processors pursuant to Article 28 GDPR. The data is not subject to dissemination, nor to automated decision-making or profiling.

8. Transfer of data to third countries

The Google Maps map embedded on the Contact page is loaded from Google's servers (with a possible transfer of data, such as the IP address, to countries outside the European Economic Area) only following an explicit action by the user (click-to-load): in the absence of such consent, no transfer takes place. The website's typefaces, by contrast, are hosted directly on the website's own servers (self-hosted) and entail no transfer of data to third parties. Any transfers triggered by the user take place on the basis of appropriate safeguards provided for by Articles 44 et seq. of the GDPR. For further details, please refer to the Cookie Policy and to Google's privacy policy.

9. Rights of the data subject

In relation to the data processed, the data subject has the right, within the limits and under the conditions provided for by Articles 15-22 of the GDPR, to:

• obtain access to their personal data and to information relating to the processing;
• obtain the rectification of inaccurate data or the completion of incomplete data;
• obtain the erasure of the data (right to be forgotten) in the cases provided for;
• obtain the restriction of processing;
• obtain the portability of the data provided;
• object to the processing on legitimate grounds;
• withdraw at any time the consent given, without prejudice to the lawfulness of the processing based on consent before its withdrawal.

To exercise these rights, simply send a request to segreteria@aria.srl.

10. Right to lodge a complaint

A data subject who considers that the processing of their data is carried out in breach of the GDPR has the right to lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali) (www.garanteprivacy.it) or to bring the matter before the appropriate judicial authorities.

11. Changes to this notice

The Controller reserves the right to update this notice in order to bring it into line with any subsequent legislative or organisational changes. Updated versions will be published on this page, with an indication of the date of the last update.