Privacy policy

Last updated: 27 October 2026

This is a translation of the original Italian text: in case of any discrepancy, the Italian version prevails.

This notice describes how RALLK S.r.l. processes the personal data of people who visit rallk.com or contact us through it, under Article 13 of Regulation (EU) 2016/679 (“GDPR”) and the Italian Personal Data Protection Code (Legislative Decree 196/2003, “Privacy Code”).

1. Data controller

RALLK S.r.l., Via Pastrengo 21, 20159 Milan (MI), Italy, VAT no. 10259660966, email [email protected], phone +39 02 7202 3988.

RALLK has not appointed a Data Protection Officer (DPO): for any question about how your data is processed, write to [email protected].

2. Data we process, purposes and legal bases

PurposeDataLegal basisRetention
Running and securing the website (serving pages, preventing abuse and cyber attacks) Browsing data: IP address, browser and device type, date and time of the request, pages visited, referring page Our legitimate interest in the security and proper functioning of the website (Art. 6(1)(f) GDPR) 90 days, unless needed to investigate offences
Answering requests sent by email or phone Contact details (name, email, phone, company) and the content of the request Steps taken at your request before entering into a contract (Art. 6(1)(b) GDPR) or our legitimate interest in replying (Art. 6(1)(f) GDPR) As long as needed to handle the request, then up to 24 months after the last contact; if it leads to a contract, for its duration and up to 10 years to meet legal obligations
Support via chat Messages, your name and email if you provide them, IP address, browser data and the page you write from Consent to the chat cookies (Art. 122 Privacy Code); pre-contractual steps or legitimate interest for handling the request (Art. 6(1)(b) and (f) GDPR) According to the default settings of the tawk.to service; you can ask for them to be deleted at any time
Sending the RALLK newsletter The data requested in the sign-up form (for example name and email address) Consent (Art. 6(1)(a) GDPR and Art. 130 Privacy Code) Until you unsubscribe or withdraw your consent
Assessing unsolicited job applications Data in the CV sent by email Pre-contractual steps at your request (Art. 6(1)(b) GDPR and Art. 111-bis Privacy Code) 24 months from receipt
Website usage statistics Data collected through Google Analytics cookies Consent (Art. 6(1)(a) GDPR and Art. 122 Privacy Code) As stated in the cookie policy
Measuring advertising campaigns and personalized advertising Data collected through Google Ads, LinkedIn and Meta cookies Consent (Art. 6(1)(a) GDPR and Art. 122 Privacy Code) As stated in the cookie policy
Showing YouTube videos IP address and browser data sent to Google when you load a video Consent or your explicit request (Art. 6(1)(a) GDPR and Art. 122 Privacy Code) As stated in the cookie policy

Newsletter sign-ups are collected through a dedicated Google Forms form that refers to this notice: by filling in and submitting the form you consent to receive the newsletter. The subscriber list is managed by RALLK itself, and the newsletter is sent from our business email account.

We do not process special categories of data (Art. 9 GDPR): please do not include them in the messages you send us.

3. Whether providing data is mandatory

Browsing data is needed to visit the website. Providing any other data is optional, but without contact details we cannot answer your requests, and without an email address we cannot send you the newsletter. You can reject non-essential cookies without any consequence for your use of the website.

4. How we process data

Data is processed electronically by authorized staff, with appropriate technical and organizational measures to protect it from unauthorized access, loss or disclosure, including encrypted connections (HTTPS). We do not take decisions based solely on automated processing that produce legal effects concerning you (Art. 22 GDPR). Advertising platforms may use the data collected through their cookies to build profiles, only if you have consented to marketing cookies.

5. Who receives the data

Data is processed by authorized RALLK staff and may be disclosed to:

  • Processors (Art. 28 GDPR) providing services on our behalf: the website hosting provider, with servers in Italy; Cloudflare, Inc. (content delivery and website protection); tawk.to, Inc. (chat); Google Ireland Limited (Google Workspace business email, Google Analytics and Google Forms).
  • Independent or joint controllers for third-party services, each with its own privacy notice: Google Ireland Limited (Google Ads and YouTube); LinkedIn Ireland Unlimited Company (LinkedIn Insight Tag) and Meta Platforms Ireland Limited (Meta Pixel), with which RALLK is a joint controller only for the collection and transmission of the data (Art. 26 GDPR), under the terms these platforms set for advertisers; Mobissue and Amazon Web Services for the page-flip catalogs.
  • Advisers and professionals (for example lawyers and accountants) and public authorities, where required by law.

Data is not made public.

6. Transfers of data outside the European Union

The server hosting the website is located in Italy. Some providers (in particular Google, LinkedIn, Meta, Cloudflare and tawk.to) may process data in the United States or other countries outside the EU. In these cases the transfer is based on an adequacy decision of the European Commission, such as the EU-U.S. Data Privacy Framework for certified providers, or on the standard contractual clauses approved by the Commission (Art. 45 and 46 GDPR). You can ask us for a copy of the safeguards in place by writing to [email protected].

7. Your rights

At any time you can:

  • access your data and obtain a copy (Art. 15 GDPR);
  • ask for it to be corrected or erased (Art. 16 and 17 GDPR);
  • ask us to restrict processing (Art. 18 GDPR);
  • receive the data you gave us in a structured, machine-readable format (portability, Art. 20 GDPR);
  • object to processing based on legitimate interest (Art. 21 GDPR);
  • withdraw your consent, without affecting the lawfulness of processing carried out before the withdrawal: for cookies from the cookie preferences, for the newsletter with the link in every email or by writing to us.

To exercise your rights, write to [email protected]: we will reply within one month of your request, extendable by two months for complex requests (Art. 12 GDPR). You also have the right to lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali, www.garanteprivacy.it) or with the supervisory authority of the EU country where you live or work.

8. Cookies

Information about the cookies and tracking technologies used on the website, and how to manage your consent, is in the cookie policy.

9. Links to other websites

This notice only covers rallk.com. The websites we link to (for example our social media profiles or the newsletter sign-up form) process data according to their own privacy notices.

10. Changes

We may update this notice, for example if the law or the services we use change. The date of the last update is shown at the top of the page.