Privacy Policy

Last updated: 5 October 2026

This policy explains how personal data is processed on https://alcaglobal.it, in line with Regulation (EU) 2016/679 (GDPR) and the Italian Privacy Code (Legislative Decree 196/2003, as amended).

1. Data controller

Avinash Dhyani, operating as Avinash Lubricants & Chemical Advisory — sole proprietorship (ditta individuale)
Vicolo Carmel, 1, 26020 Casalmorano (CR), Italy
VAT no. (P.IVA) 01868800192
Email: avinash@alcaglobal.it

No Data Protection Officer has been appointed, as one is not required for this activity.

2. Data we process and why

Contact form. Name, company, email address, country, area of interest, your message and the date sent. Used only to reply to your enquiry and any follow-up you ask for. Legal basis: steps taken at your request before a possible contract (Art. 6(1)(b) GDPR) and our legitimate interest in answering business enquiries (Art. 6(1)(f)). Providing the data is voluntary, but without name, email and message we cannot reply.

"Ask about the data" box. The question you type and the market figures shown on the page are sent to an AI provider to write an answer. Questions are not saved by this website and are sent with storage switched off. Please do not type personal information into this box. Legal basis: legitimate interest in providing the feature you request (Art. 6(1)(f)).

Technical data. When you visit, the hosting provider briefly processes your IP address and browser details to deliver the site and keep it secure. Legal basis: legitimate interest in running a secure website (Art. 6(1)(f)).

We do not use analytics, advertising or profiling, and we never sell your data or use it for marketing.

3. Who processes data for us

These providers act as data processors under agreements that follow Art. 28 GDPR:

• Lovable (Lovable Labs Incorporated) — website hosting, delivered via Cloudflare's network.
• Lovable Cloud, built on Supabase and Amazon Web Services — stores contact enquiries in Ireland (EU).
• Lovable AI Gateway and its AI model provider (OpenAI) — produces answers to market questions.

Market data from the European Central Bank and FRED is fetched by our server; no visitor data reaches them.

4. Transfers outside the EU

Some providers may process data in the United States or elsewhere. Such transfers rely on the EU–US Data Privacy Framework where the provider is certified, or on the European Commission's Standard Contractual Clauses (Art. 46 GDPR).

5. How long we keep data

Enquiries are kept for 12 months after our last contact and then deleted, unless a contract follows or the law requires longer retention. Technical logs are kept only briefly by the hosting provider.

6. Your rights

Under Articles 15–22 GDPR you may ask to access, correct or delete your data, restrict or object to its processing, and receive it in a portable format. Where processing is based on legitimate interest, you may object at any time. Write to avinash@alcaglobal.it; we reply within one month.

You may also lodge a complaint with the Garante per la protezione dei dati personali (www.garanteprivacy.it).

7. Security and automated decisions

Data is sent over encrypted connections and enquiries can only be read by the site administrator. No decisions with legal effect are made by automated means.

8. Changes

We may update this policy; the date at the top shows the latest version.