Privacy Policy

Information on the processing of personal data pursuant to EU Regulation 2016/679 (GDPR)
Last updated: October 2025

1. Data Controller

Company Name: alterBIT SRL

Registered Office: Via L. Bistolfi 49 - 20134 Milan, Italy

VAT Number / Tax Code: 07483880964

Email: info@alterbit.it

Phone: +39 02 45498160

Website: www.alterbit.it

2. Types of Data Collected

The xboard.AI website collects the following categories of personal data:

2.1 Browsing Data

During browsing, some technical data is automatically collected, including:

  • IP address
  • Browser type and version
  • Operating system
  • Pages visited and visit duration
  • Access date and time
  • Referrer (source website)

2.2 Voluntarily Provided Data

Users may voluntarily provide the following data through contact forms:

  • First and last name
  • Email address
  • Phone number
  • Company name
  • Message or request

2.3 Cookies and Similar Technologies

The site uses technical cookies necessary for the site's functionality (e.g., dark/light theme preferences). For more information, please see the Cookie Policy section.

3. Purpose and Legal Basis of Processing

Personal data is processed for the following purposes:

3.1 Managing Contact Requests

Purpose: To respond to information and support requests submitted via the contact form.

Legal basis: Data subject's consent (Art. 6, par. 1, lett. a) GDPR) or execution of pre-contractual measures (Art. 6, par. 1, lett. b) GDPR).

Retention period: Data will be retained for the time necessary to fulfill the request and for the subsequent 12 months.

3.2 Website Operation

Purpose: To ensure the proper functioning of the site, IT security, and analysis of any malfunctions.

Legal basis: Legitimate interest of the Controller (Art. 6, par. 1, lett. f) GDPR).

Retention period: System logs are retained for 30 days, except where necessary for crime investigation.

3.3 Legal Obligations

Purpose: Fulfillment of obligations required by law, regulations, or European legislation.

Legal basis: Legal obligation (Art. 6, par. 1, lett. c) GDPR).

Retention period: For the period required by specific sector regulations.

4. Processing Methods

The processing of personal data is carried out using IT and telematic tools, with logic strictly related to the stated purposes and with the adoption of appropriate security measures to prevent:

  • Unauthorized access
  • Improper disclosure
  • Unauthorized modification or destruction
  • Processing not compliant with collection purposes

5. Data Communication and Disclosure

Personal data may be communicated to:

  • Authorized personnel of the Data Controller
  • Service providers (hosting, technical support) appointed as Data Processors pursuant to Art. 28 GDPR
  • Competent authorities for legal compliance

Personal data is not disclosed publicly, nor is it transferred to countries outside the EU.

6. Data Subject Rights

The data subject may exercise the following rights under the GDPR (Arts. 15-22) at any time:

  • Right of access (Art. 15): Obtain confirmation of the existence of personal data and request a copy
  • Right to rectification (Art. 16): Obtain correction of inaccurate data or integration of incomplete data
  • Right to erasure (Art. 17): Obtain deletion of data (right to be forgotten)
  • Right to restriction (Art. 18): Obtain restriction of processing
  • Right to data portability (Art. 20): Receive data in a structured format and transmit it to another controller
  • Right to object (Art. 21): Object to processing for legitimate reasons
  • Right to withdraw consent: Withdraw consent at any time without prejudice to the lawfulness of processing based on consent given before withdrawal

How to exercise your rights:

To exercise your rights, the data subject may contact the Controller at info@alterbit.it or by registered mail to the registered office address.

The data subject also has the right to lodge a complaint with the Italian Data Protection Authority (Garante per la Protezione dei Dati Personali), located at Piazza Venezia n. 11 - 00187 Rome, or through the website www.garanteprivacy.it.

8. Changes to the Privacy Policy

The Controller reserves the right to modify, update, add, or remove parts of this Privacy Policy at its discretion and at any time. Users are required to periodically check for any changes. The "Last updated" date at the top of the page indicates when it was last modified.

Applicable Legislation:

  • EU Regulation 2016/679 (GDPR) - General Data Protection Regulation
  • Italian Legislative Decree 196/2003 (Privacy Code) as amended by Legislative Decree 101/2018
  • Italian Data Protection Authority Provision No. 229/2014 on Cookies
  • Cookie and Other Tracking Tools Guidelines of June 10, 2021