Privacy policy
Last updated: 22 October 2026
This policy explains how we process the personal data of the people who visit this website, buy the service, or write to us. For the personal data that a customer puts into its own environment, the customer is the controller and we are its processor: see the data processing agreement.
1. Controller
Galaxy TS, Via Fiamme Gialle, 54 - 38037 PREDAZZO (TN) - Italy, VAT IT01969450228. For anything about your personal data, write to support@agc-platform.cloud.
2. What we process, why, and on what basis
| Data | Purpose | Legal basis |
|---|---|---|
| Company details given with an order: company name, legal entity, VAT number, address, SDI code; the email address of the first administrator | Taking the order, activating the environment, invoicing, contacting you about the service | Performance of the contract (Art. 6(1)(b) GDPR) |
| The account you use on this website: email address and password (stored only as a hash) | Letting you follow your order and your activation | Performance of the contract |
| Payment status and the identifiers Stripe gives us (never your card details) | Knowing that an order has been paid | Performance of the contract |
| Invoices and accounting records | Tax and accounting obligations | Legal obligation (Art. 6(1)(c)) |
| What you write through the contact form: name, email, company, message | Answering you | Steps taken at your request before a contract, or our legitimate interest in answering (Art. 6(1)(b) and (f)) |
| Technical data of each request (IP address, time, page, browser, the page that linked to us) in the server's logs | Security of the website, finding faults, and statistics of the visits: how many, to which pages, from where - and, for an order, which source the buyer arrived from. The statistics are read only in aggregate, by our staff, without cookies or scripts, and are not used to identify or profile anybody | Legitimate interest (Art. 6(1)(f)) |
We do not profile you, we do not sell your data, and we do not send you marketing without your consent.
3. Who receives the data
- Microsoft Ireland Operations Ltd - hosting on Microsoft Azure, in the European Union.
- Stripe Payments Europe Ltd - payment processing. Stripe may transfer data to the United States under the EU-US Data Privacy Framework or the European Commission's standard contractual clauses.
- Aruba S.p.A. - sending our service emails (order received, temporary passwords), in Italy.
- Our accountant and the public authorities, where the law requires it.
Each of them acts as our processor or as an independent controller under its own terms.
4. How long we keep it
- Order and account data: for the duration of the contract and then for as long as needed to defend our rights.
- Invoices and accounting records: ten years, as Italian law requires.
- Contact form messages: for as long as needed to answer, and at most 24 months.
- Server logs: 12 months, then deleted automatically. The daily totals of the visits made from them - how many pages, from which sources, countries and languages - hold no personal data and are kept.
5. Your rights
You can ask for access to your data, its correction or deletion, the restriction of its processing, its portability, and you can object to processing based on legitimate interest (Articles 15-22 GDPR). Write to support@agc-platform.cloud. You also have the right to lodge a complaint with the Italian supervisory authority, the Garante per la protezione dei dati personali (www.garanteprivacy.it).
6. Cookies
This website uses only the technical cookies it needs to work, described in the cookie policy.