Legal information
Privacy & Cookie policy
How we process the personal data of people who visit this site and contact us, under Articles 13 and 14 of Regulation (EU) 2016/679 (GDPR).
Data controller
The controller of your personal data is Volonline di Fly4You Srl, with its registered office at Via Domenico Scarlatti, 26 — 20124 Milano, Italy, VAT and tax code 07488470969. Expirium is a brand of Volonline Group.
For any request about how your data is processed, including exercising the rights described below, write to fly4yousrl@pecimprese.it.
What data we process
Browsing data
While running normally, the systems that operate this site collect certain data whose transmission is built into the use of internet protocols: your IP address, the addresses of the resources requested, the time and method of each request, the server's response code, and some details about your browser and operating system. This data is not used to identify you. We process it only as long as strictly necessary to keep the site secure and working properly.
Data you give us
When you fill out one of the forms on this site — to become a partner, to apply as a supplier, or to request technical documentation — we collect the data you enter:
- your name, company and email address;
- the information about your business that the form asks for, such as the market you work in, your type of business or the product you offer;
- any message you choose to write to us.
The same applies to the data in emails you send to our addresses, such as sales@expirium.it and product@expirium.it.
We do not ask for special categories of personal data or for data about criminal convictions or offenses. Please do not enter them in the free-text fields of the forms.
Booking a call
On the pages for partners and suppliers you can book a call through a scheduling tool provided by Calendly. The data you enter there — name, email and any notes — is collected by Calendly on our behalf.
Links to other sites
Some links, such as the ones to register for or sign in to the agent area, take you to external platforms. From that point on, the privacy policy of the site you are on applies.
Purposes and legal bases
We process your data to:
- respond to your requests and assess a possible business relationship with you. The legal basis is taking steps at your request before entering into a contract (Art. 6(1)(b) GDPR);
- keep the site secure and protect the forms from spam. The legal basis is our legitimate interest (Art. 6(1)(f));
- keep a record of the cookie choices you make, so we can demonstrate your consent. The legal basis is a legal obligation (Art. 6(1)(c) and Art. 7(1) GDPR);
- comply with legal obligations and, where necessary, establish or defend our legal claims (Art. 6(1)(c) and (f)).
We do not use your data for profiling, and we do not make decisions based solely on automated processing.
Whether you have to provide your data
Providing your data is voluntary. However, the fields marked as required in the forms are needed for us to reply: without them, we cannot follow up on your request.
How we process and keep your data
Your data is processed with electronic tools and procedures designed to keep it secure and confidential, and only by authorized people.
We keep it only as long as needed for the purposes it was collected for:
- requests sent through the forms or by email are kept for 24 months from the last contact if no business relationship follows;
- if a business relationship follows, data is kept for as long as it lasts and then for as long as the law requires, up to 10 years, unless a judicial authority requests otherwise or we need it to establish or defend a legal claim;
- browsing data is kept only as long as strictly necessary for security purposes.
Who we share data with
Your data is not disclosed to the public or made available to unspecified parties. It may, however, be shared with:
- people within our organization who are authorized to process it, for example in our sales and product teams;
- companies of Volonline Group, when your request concerns one of their services;
- advisers bound by a duty of confidentiality, to the extent needed for their work;
- authorities and other parties entitled to access it by law;
- the providers of the technical services that run this site, acting as processors on our behalf or, where applicable, as independent controllers:
- Cloudflare, Inc. — site hosting and security (privacy policy (opens in a new tab));
- Mailgun Technologies, Inc. — delivery of the emails generated by the forms (privacy policy (opens in a new tab));
- Calendly LLC — call scheduling (privacy notice (opens in a new tab));
- Burning Flame Srl — the cookie consent banner and the record of consent choices;
- Google Ireland Limited — delivery of the site's typefaces through Google Fonts (privacy policy (opens in a new tab)).
Transfers outside the European Union
Some of the providers listed above are based in the United States or use infrastructure there, so your data may be processed outside the European Union. In these cases the transfer relies on the European Commission's adequacy decision for the EU-U.S. Data Privacy Framework, for providers certified under it, or on the standard contractual clauses approved by the Commission.
Your rights
At any time you can ask us for access to your data, to correct or erase it, or to restrict its processing. You can also object to the processing or ask for your data in a portable format. Where processing is based on consent, you can withdraw it at any time, without affecting the lawfulness of the processing carried out before (Articles 15–22 GDPR).
To exercise your rights, write to fly4yousrl@pecimprese.it. You also have the right to lodge a complaint with the Italian Data Protection Authority, the Garante per la protezione dei dati personali (www.garanteprivacy.it (opens in a new tab)).
Changes to this policy
We may update this policy, for example when the services used by the site or the law change. The date of the last update is shown at the bottom of this page.
Last updated: September 17, 2026