Skip to Content

Privacy Policy

How DOMA Automation S.r.l. processes personal data through ALO Store.

Effective date: August 22, 2026 | Version: 1.0

1. Data controller

DOMA Automation S.r.l., Via G. Ferraris, 258, 52100 Arezzo (AR), Italy, VAT number IT02260270513, is the data controller. Privacy requests may be sent to [email protected] or to the registered office. No Data Protection Officer has been appointed at the effective date of this policy.

2. Data we process

  • Identity and contact data, including name, company, tax/VAT information, email, telephone and billing or delivery addresses.
  • Account and authentication data, including login details and account preferences.
  • Order, contract, delivery, support, invoice and transaction records.
  • Payment status and limited payment references. Complete card details are processed by payment providers and are not stored by ALO.
  • Technical and usage data, including IP address, device/browser information, security logs, pages visited and cookie identifiers where permitted.
  • Communications and information voluntarily supplied through forms, support requests or reviews.
  • Marketing choices and campaign attribution data where applicable.

3. Purposes and legal bases

  • Orders and contracts: to create accounts, process payment, deliver or activate products, manage subscriptions, provide support and handle returns or warranties. Legal basis: performance of a contract or steps requested before entering one.
  • Accounting and compliance: invoicing, tax, record keeping, product-safety, fraud prevention and responses to lawful authority requests. Legal basis: legal obligation and, where applicable, legitimate interest.
  • Security and service operation: protect accounts, prevent abuse, diagnose faults and maintain the store. Legal basis: legitimate interest in providing a secure and reliable service.
  • Customer service and improvement: respond to enquiries and understand service performance. Legal basis: contract and legitimate interest, balanced against user rights.
  • Marketing: send promotional communications or use non-essential analytics/advertising technologies only where valid consent is required and obtained. Consent may be withdrawn at any time.

4. Required and optional data

Data marked as required at checkout or account creation is necessary to enter into or perform the contract or meet legal obligations. Without it, we may be unable to accept or fulfil an order. Marketing information and non-essential cookie choices are optional and do not affect access to essential store functions.

5. Recipients and service providers

Personal data is shared only where necessary with authorised ALO personnel and service providers acting under appropriate obligations, including:

  • Aruba S.p.A. and infrastructure, hosting, backup and security suppliers;
  • Stripe and PayPal for payment processing and fraud prevention;
  • carriers and logistics providers for physical deliveries;
  • email, communications, customer-support and software-maintenance suppliers;
  • Google, where optional Google Analytics is enabled with consent;
  • accountants, legal advisers, insurers, auditors and public authorities where required.

We do not sell personal data.

6. International transfers

Some providers may process data outside the European Economic Area. Where this occurs, we rely on an adequacy decision, approved Standard Contractual Clauses or another lawful safeguard, together with supplementary measures where appropriate. Information about a specific safeguard may be requested at [email protected].

7. Retention

We keep data only for as long as needed for the relevant purpose, subject to legal holds and the time required to establish, exercise or defend legal claims. Our normal criteria are:

  • orders, invoices and accounting records: generally 10 years as required by Italian accounting and tax rules;
  • customer account data: while the account remains active, followed by deletion or anonymisation when no longer required, except for records subject to longer legal retention;
  • support and contact records: normally up to 24 months after the request is closed, unless linked to a contract, warranty or dispute;
  • security and technical logs: normally up to 12 months, unless an incident requires longer retention;
  • marketing data: until consent is withdrawn or after 24 months without meaningful interaction, whichever occurs first;
  • cookies: for the periods described in the Cookie Policy.

8. Cookies and analytics

Essential cookies support login, cart, security and language functions. Non-essential analytics or campaign cookies are used only according to the consent choices presented on the site. Details and controls are available in the Cookie Policy.

9. Security

We use technical and organisational measures appropriate to the risk, including access controls, encrypted transport, backups, monitoring and restricted administrative access. No internet service can guarantee absolute security; users should protect their credentials and notify us of suspected misuse.

10. Your rights

Subject to applicable conditions, you may request access, rectification, erasure, restriction, data portability, or object to processing based on legitimate interest. You may withdraw consent at any time without affecting processing carried out before withdrawal. Requests can be sent to [email protected]. We may need to verify identity and normally respond within one month.

You may also lodge a complaint with the Italian Data Protection Authority, the Garante per la protezione dei dati personali, or the supervisory authority of your habitual residence or workplace. See www.garanteprivacy.it.

11. Automated decisions and children

ALO Store does not use personal data to make decisions producing legal or similarly significant effects solely by automated means. The store is intended for adults and is not directed to children.

12. Changes

We may update this policy to reflect legal, technical or operational changes. The current version and effective date will remain available at store.alo.zone/privacy. Material changes will be highlighted where appropriate.