(Articles 13 and 14 of EU Regulation 2016/679 and Legislative Decree 196/2003 and subsequent amendments)
Dear User,
Below, we provide you with some information that you need to be aware of, not only to comply with legal obligations but also because transparency and fairness towards individuals are fundamental principles of our activity.
This privacy policy describes how the personal data of users who visit this website, accessible at www.gruppopleiadi.it, is processed.
This information does not apply to other websites, pages, or online services that may be accessible via hyperlinks published on the site but referring to external resources outside this domain.
Data Controller
The Data Controller (the entity that determines the purposes and means of processing your personal data) is: Gruppo imprenditoriale Pleiadi, consisting of:
-
Gruppo Pleiadi Scs, the parent company
-
Pleiadi S.r.l., the subsidiary
VAT No.: 04415430281
Registered Office: Via Cavour, 52 – Vigonza (PD), Italy
Phone: +39 049701778
Email: privacy@gruppopleiadi.it
For processing that includes the publication of content on social networks, the Data Controller has entered into standard joint controller agreements with the platform owners.
Data Protection Officer (DPO)
The Data Protection Officer (DPO) can be contacted at:
-
Email: dpo@privacystudio.it
-
PEC: dataprotectionofficer@pec.it
Categories of Data Processed
-
Data related to the provision of an electronic communication service: traffic data, Internet browsing data, IP addresses or domain names of the computers used by users connecting to the site, request time, method used to submit the request to the server, numerical code indicating the server response status (success, error, etc.), and other parameters related to the user’s operating system and browser.
-
Personal and contact data.
-
Any other data voluntarily provided by the user to the Data Controller.
Data Source
Personal data is collected from the data subject while browsing (see also the cookie policy) or through communications sent by the user, and/or from publicly accessible sources, such as social networks.
Provision of Data
Where indicated, the provision of your data is necessary to pursue the purposes described below. Failure to provide the data will prevent us from carrying out the related processing.
Data Processing Methods and Purposes
Your personal data is collected and processed using automated, semi-automated, and non-automated methods, as specified below:
Purpose |
Legal Basis |
Retention Period |
|---|---|---|
Allow full use of the website’s functionalities |
Pre-contractual or contractual measures (performing the requested service) |
Duration is linked to each cookie and can be found in the relevant cookie policy |
Respond to user requests and manage pre-contractual or contractual obligations |
Pre-contractual or contractual measures |
10 years from the year of the request |
Sending informational and/or promotional materials (e.g., newsletters) |
User consent** |
Until consent is revoked, then only stored for 10 years from the revocation year |
Compliance with data protection regulations |
Legal obligation |
According to the retention periods for the main processing reference; 10 years from the request for rights exercise |
Prevent and/or detect possible misuse and defend the Data Controller’s rights |
Legitimate interest in protecting legal rights in judicial proceedings |
Until the expiry of legal terms, unless litigation arises. In that case, data is stored until the final settlement of the dispute |
Network and IT system management and maintenance |
Legitimate interest of the Data Controller |
According to security policies and as provided for the main reference processing; 18 months for system administrator compliance |
Note: In addition to the necessary time for the expiration of legal terms related to mutual rights and backup retention.
If consent is not provided, personal data will not be processed for these specific purposes. Consent may be revoked at any time by contacting the Data Controller using the details above or via the cookie banner.
Data Communication
Your data may be disclosed exclusively for technical and operational needs strictly related to the above purposes, to:
-
Entities processing data under the authority of the Data Controller, appointed as authorized processors under Article 29 of EU Regulation 2016/679.
-
Entities processing data on behalf of the Data Controller, appointed as data processors under Article 28 of EU Regulation 2016/679.
-
Public authorities where legal obligations require disclosure.
Transfer of Data Outside the EU
Although we strive to select services that minimize the processing of users’ personal data, processing involving cookies and tracking tools may involve transferring some indirectly identifiable data to countries outside the EU or European Economic Area (EEA), particularly the United States.
Data transfer will only occur under one of the conditions set out in Articles 44 et seq. of EU Regulation 2016/679.
User Rights
As provided by Articles 15 et seq. of EU Regulation 2016/679, you have the right to:
-
Request access to your personal data.
-
Request rectification or deletion (right to be forgotten).
-
Request data portability or restriction of processing.
-
Object to data processing.
-
View essential content of joint controller agreements.
-
Withdraw consent at any time (without affecting the lawfulness of processing based on consent before withdrawal).
To exercise your rights or request further information, you may contact the Data Controller using the contact details provided above.
Complaint to the Data Protection Authority
You may also file a complaint with the Italian Data Protection Authority at:
-
Address: Piazza Venezia 11, 00187 – Rome, Italy
-
PEC (Certified Email): protocollo@pec.gdpd.it
Website Use by Minors
This website and its services are not directed at minors. We do not knowingly collect personal data from children. If we learn that we have collected such data inadvertently, we will take reasonable steps to delete it unless there is a legal obligation to retain it.
We encourage users to report any accidental data collection related to minors.
Privacy Policy Updates
The Data Controller reserves the right to make changes to this privacy policy at any time, notifying users on this page. Users are encouraged to check this page frequently, referencing the last updated date.
Third-Party Services
Service |
Description |
|---|---|
Google reCAPTCHA |
Protects the website from spam and automated abuse, verifying that users are real people. |
Google Font API |
Provides optimized web fonts for improved site design and readability. |
Elementor |
A WordPress page builder allowing for easy drag-and-drop web page customization. |