Vox Alta Vox Alta
Legal

Privacy policy.

Last updated 28 October 2026

Owner and Data Controller

Vox Alta is a shared brand, not a legal entity. Elias Loi Visual Studio (VAT IT02732940461) and Morning Lights Studio di L.A. (VAT IT02413580503), both in Italy, act as joint controllers under Article 26 GDPR. Elias Loi Visual Studio is the single point of contact and handles requests concerning personal data. Users may nevertheless exercise their rights against either controller.

Owner contact email: ciao@voxalta.it

Types of Data collected

The Personal Data that voxalta.it collects, by itself or through third parties, includes:

  • Usage Data
  • first name and last name
  • email address
  • time zone, and the date and time of an appointment
  • Data communicated while using the service

Details on each type of Data are given in the section on the processing of Personal Data below. Users provide their Data freely, except Usage Data, which is collected automatically when visiting the website. No law or contract requires Users to provide Personal Data, but without it the Owner cannot reply to them or arrange a call. Users who are unsure which Data is required may contact the Owner.

voxalta.it does not use Trackers. See the Cookie policy.

Mode and place of processing the Data

Methods of processing

The Owner takes appropriate security measures to prevent unauthorised access, disclosure, modification or destruction of the Data. Processing is carried out with IT tools, following procedures strictly related to the purposes indicated. Besides the Owner, the Data may be accessible to external parties, such as technical service and hosting providers, appointed where necessary as Data Processors. The updated list of these parties may be requested from the Owner at any time.

Place

The Data is processed at the Owner's operating offices and wherever the parties involved in the processing are located, which may include countries outside the European Economic Area. The place of processing of each service is indicated below.

Retention time

Personal Data is processed and stored for as long as required by the purpose for which it was collected:

  • Data collected for the performance of a contract, or for steps taken at the User's request before entering one, is kept until that contract has been fully performed, and then for the period required by Italian civil and tax law.
  • Data collected on the basis of the Owner's legitimate interests is kept as long as needed to fulfil those interests.

Once the retention period expires, Personal Data is deleted. After that, the rights of access, erasure, rectification and portability can no longer be enforced.

The purposes of processing

The Data is collected to allow the Owner to reply to Users and provide its services, comply with its legal obligations, protect its rights and detect malicious activity, as well as for the following purposes:

  • Contacting the User
  • Scheduling appointments
  • Platform services and hosting
  • Analytics
  • Handling activities related to productivity

Detailed information on the processing of Personal Data

Contacting the User

Email. voxalta.it has no contact form. By writing to the Owner, Users allow it to use their details to reply to requests for information, quotes or any other request.

  • Personal Data processed: email address, first name, last name, Data communicated while using the service.
  • Legal basis: steps taken at the User's request before entering a contract, or the performance of a contract; otherwise the Owner's legitimate interest in answering enquiries.

Scheduling appointments

Cal.com is an appointment scheduling service provided by Cal.com, Inc. voxalta.it only links to a Cal.com booking page. The service is not embedded in this website and sets no Trackers on it. When Users open that page and confirm an appointment, Cal.com processes the booking details on behalf of the Owner, as a Data Processor.

  • Personal Data processed: first name, last name, email address, time zone, date and time selected, Data communicated while using the service.
  • Place of processing: United States. Privacy policy.
  • Legal basis: steps taken at the User's request before entering a contract; otherwise the Owner's legitimate interest in organising meetings.

Platform services and hosting

Cloudflare Pages is a hosting and security service provided by Cloudflare, Inc., acting as a Data Processor.

  • Personal Data processed: Usage Data.
  • Place of processing: United States. Privacy policy.
  • Legal basis: the Owner's legitimate interest in operating and securing the website.

Analytics

Cloudflare Web Analytics is a statistics service provided by Cloudflare, Inc., acting as a Data Processor. It stores and reads nothing on the User's device, assigns no persistent identifier and shows the Owner aggregated figures only.

  • Personal Data processed: Usage Data.
  • Place of processing: United States. Privacy policy.
  • Legal basis: the Owner's legitimate interest in understanding how the website is used.

Handling activities related to productivity

These services help the Owner manage tasks, documents and collaboration. They may process the Data that Users send to the Owner.

Google Workspace is a suite of cloud productivity and email services provided by Google Ireland Limited, acting as a Data Processor.

  • Personal Data processed: email address, first name, last name, Data communicated while using the service.
  • Place of processing: Ireland, with processing that may involve the United States. Privacy policy.

Anthropic (Claude) is an AI-based productivity tool provided by Anthropic Ireland, Limited, acting as a Data Processor.

  • Personal Data processed: email address, first name, last name, Data communicated while using the service.
  • Place of processing: Ireland and United States. Privacy policy.

OpenAI (Codex) is an AI-based productivity tool provided by OpenAI, which processes Data under its own terms and privacy policy.

  • Personal Data processed: email address, first name, last name, Data communicated while using the service.
  • Place of processing: United States. Privacy policy.

Legal basis for these services: the same as for the purpose for which the Data was collected, together with the Owner's legitimate interest in organising its work efficiently.

Further information for Users in the European Union

Legal basis of processing

The Owner processes Personal Data only where one of the following applies: processing is necessary for the performance of a contract with the User or for steps taken at the User's request before entering into it; processing is necessary to comply with a legal obligation of the Owner; processing is necessary for the legitimate interests pursued by the Owner or by a third party. The Owner will gladly clarify the legal basis that applies to each processing activity.

Transfers outside the European Economic Area

Where a provider acting as a Data Processor transfers Data to the United States, the transfer relies on the European Commission's standard contractual clauses or, where applicable, the EU-US Data Privacy Framework. Users may ask the Owner for a copy of these safeguards.

The rights of Users

Users may exercise the following rights regarding their Data, to the extent permitted by law:

  • Object to processing. Users may object to processing carried out on a legal basis other than consent.
  • Access their Data. Users may learn whether their Data is processed, obtain information about the processing and receive a copy of the Data.
  • Verify and seek rectification. Users may check the accuracy of their Data and ask for it to be updated or corrected.
  • Restrict processing. Users may restrict the processing of their Data. The Owner will then only store it.
  • Have their Data erased. Users may obtain the erasure of their Data.
  • Receive their Data and have it transferred to another controller. Users may receive their Data in a structured, commonly used and machine-readable format and, where technically feasible, have it transmitted to another controller.
  • Lodge a complaint. Users may bring a claim before their competent data protection authority. In Italy this is the Garante per la protezione dei dati personali.

Details about the right to object

Where Personal Data is processed for the legitimate interests pursued by the Owner, Users may object to that processing at any time, on grounds relating to their particular situation.

How to exercise these rights

Requests can be sent to ciao@voxalta.it. They are free of charge and are answered as early as possible, and always within one month.

Additional information about Data collection and processing

Legal action

The Owner may use Personal Data in court, or in the steps leading to possible legal action, to defend its rights. The Owner may also be required to disclose Personal Data at the request of public authorities.

System logs and maintenance

For operation and maintenance, voxalta.it and the services it uses may record interactions with the website (system logs), including the IP address.

Information not contained in this policy

More details on the collection or processing of Personal Data may be requested from the Owner at any time at ciao@voxalta.it.

Changes to this privacy policy

The Owner may change this privacy policy at any time and will publish the changes on this page. The date at the top refers to the latest version.

Definitions and legal references

  • Personal Data (or Data): any information that, directly or indirectly, allows a natural person to be identified.
  • Usage Data: information collected automatically when visiting voxalta.it, such as the IP address, browser and device details, the pages requested and the time of the request.
  • User: the person using voxalta.it or writing to the Owner, who, unless otherwise specified, is the Data Subject.
  • Data Subject: the natural person to whom the Personal Data refers.
  • Data Processor: the person or body that processes Personal Data on behalf of the Controller.
  • Data Controller (or Owner): the persons who determine the purposes and means of the processing of Personal Data, here the joint controllers named above.
  • Trackers: any technology, such as cookies, that stores or reads information on the User's device.
  • Legal reference: this privacy policy is prepared under Articles 13 and 26 of Regulation (EU) 2016/679 (General Data Protection Regulation).

Vox Alta · Elias Loi Visual Studio and Morning Lights Studio di L.A. · ciao@voxalta.it