Privacy notice

This notice describes how the personal data of those who visit the website www.firstalia.it, use the contact form or write to the addresses given on the website are processed. It is provided pursuant to Articles 13 and 14 of Regulation (EU) 2016/679 and to Italian Legislative Decree no. 196 of 30 June 2003, as amended by Legislative Decree no. 101 of 10 August 2018.

This English version is provided for convenience. In the event of any discrepancy, the Italian version published at www.firstalia.it/privacy/ prevails.

1. Data controller

The controller of the data collected through the website and the contact form is Delphi Group S.r.l., owner of the Firstalia trademark and of the network website, with registered office at Via Lima 7, 00198 Rome, Italy, tax code and VAT number 02846280648, certified e-mail (PEC) delphigroup@pec.net, e-mail info@firstalia.it. Delphi Group S.r.l. does not provide services to businesses: requests concerning services are forwarded to the relevant company in the network, as described in section 5.

The companies using the Firstalia trademark are legally distinct and autonomous entities, and each is an independent controller of the data of its own clients and contacts. For data sent to Firstalia S.r.l., at the address info@firstalia.it given on the Firstalia Private page or through the contact details on that page, the controller is Firstalia S.r.l., with registered office at Via Marco Ulpio Traiano 37/E, 20149 Milan, Italy, tax code and VAT number 14856410965, certified e-mail (PEC) firstalia@pec.it. For data sent to SC S.r.l., which operates under the Firstalia Strategic Capital trademark, at the address info@firstalia-sc.it or through the contact details on the Firstalia Strategic Capital page, the controller is SC S.r.l., with registered office at Via Marco Ulpio Traiano 37/E, 20149 Milan, Italy, tax code and VAT number 10466720967, certified e-mail (PEC) sc@pec.net. Each processes the data under the same conditions described in this notice.

2. Data processed

Browsing data. The website does not use cookies, traffic analysis tools or other tracking tools, and does not load content from third-party services (see the cookie policy). The systems of the provider hosting the website may record, for the operation and security of the service, technical data such as the IP address, the date and time of the request and the page visited; these data are kept for the time strictly necessary for those purposes.

Data provided voluntarily. Through the contact form or by writing to the addresses given on the website, the data subject communicates the data he or she chooses to provide: surname, first name, telephone number, e-mail address, the content of the message and, for job applications, information on his or her professional background.

3. Purposes and legal basis of the processing

The data provided through the contact form or by e-mail are processed to respond to the request, to forward it to the company in the network responsible for the services requested and to carry out the pre-contractual activities that follow; the legal basis is the taking of steps at the request of the data subject prior to entering into a contract, pursuant to Article 6(1)(b) of Regulation (EU) 2016/679, and the legitimate interest of the controller in replying to those who contact it, pursuant to Article 6(1)(f) of the Regulation. Data sent with a job application are processed to assess it, pursuant to Article 6(1)(b) of the Regulation and Article 111-bis of Legislative Decree no. 196 of 30 June 2003. The data may also be processed to comply with legal obligations, pursuant to Article 6(1)(c) of the Regulation. The data are not used for marketing purposes, and no decision concerning the data subject is based solely on automated processing.

4. Provision of data

Providing data is optional. Without the surname, first name, e-mail address and content of the message, however, it is not possible to respond to the request.

5. Recipients of the data

The data are processed by the controller’s staff authorised to process them. They may be processed, as processors pursuant to Article 28 of the Regulation, by the provider of the website hosting service and by the provider of the e-mail service. Since Delphi Group S.r.l. does not provide services to businesses, requests concerning services are forwarded, with the data needed to respond to them, to the company in the Firstalia network responsible for the matter, Firstalia S.r.l. or SC S.r.l., which processes them as an independent controller. The data are not disclosed to the public.

6. Transfer of data outside the European Union

The data are processed within the European Union. If a service provider uses systems located in third countries, the transfer takes place in compliance with Chapter V of Regulation (EU) 2016/679, on the basis of an adequacy decision of the European Commission or of the standard contractual clauses approved by it.

7. Retention of data

The data of contact requests are kept for the time needed to respond and to carry out the pre-contractual activities that follow, and in any event for no longer than twenty-four months from the last contact, unless the relevant company has been engaged to provide services in the meantime, in which case the retention periods applicable to the contractual relationship apply. The data of job applications are kept for twelve months from receipt. Technical browsing data are kept by the hosting provider for the time needed for the security and operation of the service.

8. Rights of the data subject

The data subject may at any time exercise the rights provided for in Articles 15 to 22 of Regulation (EU) 2016/679: to obtain confirmation of the existence of data concerning him or her and access to them, rectification, erasure, restriction of processing and data portability, and to object to processing based on legitimate interest. Requests are to be sent to the controller at the addresses given in section 1. The data subject also has the right to lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali), Piazza Venezia 11, 00187 Rome, Italy, www.garanteprivacy.it.

9. Updates

This notice may be updated; the version in force is the one published on this page. Last updated: 9 October 2026.