This document describes how ASLA S.r.l. processes the personal data of users who visit the website and use the contact forms.

1. Data Controller

A.S.L.A. Srl
Loc.tà Sant'Eramo, 1
66010 - Lama Dei Peligni (CH)
ITALIA
VAT No: 01900500693
Email: info@asla-srl.com

2. Types of data collected

The website collects the following personal data:

• Navigation data – – IP address, browser type, pages visited, access time. These are collected automatically by the website's IT systems and are not associated with identified users.

• Data voluntarily provided via the contact form – first name, last name, email address, phone number (if provided), subject and message.
  

• Curriculum vitae – submitted via the "Work with us" section: name, surname, contact details, educational and professional background, and any other information contained in the CV.
  

3. Purposes and legal bases for processing

• Responding to contact requests – legal basis: performance of pre-contractual measures at the request of the data subject (Art. 6(1)(b) GDPR).
  

• Managing spontaneous applications (CVs submitted via the "Work with us" section) – legal basis: consent of the data subject (Art. 6(1)(a) GDPR). Consent may be withdrawn at any time.
  

• Website navigation – legal basis: legitimate interest of the controller to ensure the security and proper functioning of the website (Art. 6(1)(f) GDPR).
  

4. Processing methods and data retention

Data is processed using IT and/or paper-based tools, with appropriate security measures to prevent unauthorised access, loss or disclosure. No automated profiling is carried out.

Data from the contact form is retained for the time necessary to handle the request and, subsequently, for a maximum of 12 months, unless otherwise required by law.

Curriculum vitae are retained for a maximum of 12 months from receipt, unless consent is withdrawn earlier.

5. Disclosure of data to third parties

Personal data is not sold or transferred to third parties for commercial purposes. It may be shared with:

• Technical service providers (hosting, website maintenance) acting as data processors pursuant to Art. 28 GDPR.

• Public authorities, where required by law.

No transfer of data to non-EU countries is carried out, unless otherwise indicated in a future update to this notice.

6. Cookies and third-party tools

The website uses only technical cookies necessary for its operation. A link to LinkedIn (social icon) is present: clicking on it redirects the user to the third-party platform, which is subject to its own privacy policy. For further details, please refer to the Cookie Policy.

7. Rights of data subjects

Pursuant to Arts. 15–22 GDPR, data subjects have the right to:

• Access their personal data (Art. 15);
  

• Obtain rectification if inaccurate (Art. 16);
  

• Request erasure ("right to be forgotten") (Art. 17);
  

• Restrict processing (Art. 18);
  

• Object to processing (Art. 21);
  

  Receive their data in a structured format (portability, Art. 20);
  

• Object to processing (Art. 21);
  

• Withdraw consent at any time, without affecting the lawfulness of processing carried out prior to withdrawal.
  

To exercise these rights, please write to: info@asla-srl.com.

In the event of a violation of their rights, data subjects have the right to lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali)(www.garanteprivacy.it).

8. Updates to this notice

This privacy policy may be updated to reflect regulatory or operational changes. The updated version will always be available on this page with the date of last revision.

Last updated: marzo 2025