Privacy Policy

1. Data Controller

The data controller for the processing of personal data collected through this website is RTS S.p.A., with registered office at Via Delle Quattro Fontane 16, 00184 Rome, Italy, VAT/Tax ID (P.IVA) 1470787100, part of the Alcryo S.r.l. group. For any question regarding the processing of your personal data, you can contact us at [email protected].

2. Data We Collect

We process the following categories of personal data:

  • Data you provide through the contact form: name, company name, email address and the content of your message.
  • Data collected automatically (server logs): IP address, browser type, device information, date and time of access, and pages visited, generated during the normal operation of our web server for security and statistical purposes.

We do not knowingly collect special categories of data (Art. 9 GDPR) through this website. Please do not include such data in your messages.

3. Purposes and Legal Basis of Processing

  • Responding to enquiries submitted through the contact form: processing is necessary to take steps prior to entering into a contract or to manage the business relationship with you, pursuant to Art. 6(1)(b) GDPR.
  • Ensuring the security, functioning and protection of the website (e.g., detecting misuse, server logs): pursuant to our legitimate interest, Art. 6(1)(f) GDPR.
  • Complying with legal obligations (e.g., tax, accounting or administrative requirements): pursuant to Art. 6(1)(c) GDPR.

4. Recipients of the Data

Your data may be shared with employees and collaborators of RTS S.p.A. authorised to process personal data, with companies of the Alcryo group for internal administrative purposes, and with third-party providers acting as data processors (e.g., IT hosting and maintenance providers) pursuant to Art. 28 GDPR. Your data is never sold to third parties or used for advertising purposes. If you consent to the loading of the embedded Google Maps widget, certain technical data (such as your IP address) may be transferred to Google LLC; further details are provided in our Cookie Policy.

5. International Data Transfers

As a rule, personal data collected through this website is processed within the European Economic Area. Where a transfer to a country outside the EEA occurs (for example, in connection with the optional Google Maps widget), it is carried out on the basis of an adequacy decision or appropriate safeguards, such as the European Commission's Standard Contractual Clauses, pursuant to Art. 44 et seq. GDPR.

6. Data Retention

Data submitted through the contact form is retained for the time necessary to handle your request and, where a business relationship is established, for the duration of that relationship and for the following period required to comply with statutory limitation and record-keeping obligations (generally up to 10 years for accounting and tax purposes). Server logs are retained for a limited period, generally not exceeding 12 months, unless a longer period is required to investigate a security incident.

7. Your Rights (Arts. 15-22 GDPR)

You may exercise the following rights at any time by writing to [email protected]:

  • right of access to your personal data (Art. 15);
  • right to rectification of inaccurate or incomplete data (Art. 16);
  • right to erasure ("right to be forgotten"), where applicable (Art. 17);
  • right to restriction of processing (Art. 18);
  • right to data portability (Art. 20);
  • right to object to processing based on legitimate interest (Art. 21);
  • right not to be subject to a decision based solely on automated processing (Art. 22).

8. Right to Lodge a Complaint

If you believe that the processing of your personal data infringes the GDPR, you have the right to lodge a complaint with the Italian supervisory authority, the Garante per la protezione dei dati personali (Piazza Venezia 11, 00187 Rome, Italy - www.garanteprivacy.it), or with the supervisory authority of your habitual residence or place of the alleged infringement.

9. Provision of Data

Providing the data requested in the contact form is voluntary; however, failure to provide the mandatory fields will prevent us from processing your request.

10. Changes to this Policy

We may update this Privacy Policy from time to time to reflect changes in our processing activities or in applicable law. We recommend reviewing this page periodically.

Last updated: September 2026.