{"id":1171,"date":"2026-04-21T16:06:52","date_gmt":"2026-04-21T14:06:52","guid":{"rendered":"https:\/\/www.pentatechsrl.it\/?page_id=1171"},"modified":"2026-06-24T12:45:06","modified_gmt":"2026-06-24T10:45:06","slug":"gdpr-privacy","status":"publish","type":"page","link":"https:\/\/www.pentatechsrl.it\/en\/gdpr-privacy\/","title":{"rendered":"GDPR & privacy policy"},"content":{"rendered":"

INFORMATION ON THE PROCESSING OF PERSONAL DATA \u2013 WEBSITE<\/h1><\/div>

Dear Visitor,<\/p>\n

Pursuant to and in accordance with Article 13 of Regulation (EU) No 679\/2016, the General Data Protection Regulation (hereinafter the \u201cGDPR\u201d), and in accordance with the provisions of Legislative Decree No 196\/2003, as amended by Legislative Decree No 101\/2019 (hereinafter the \u201cCode\u201d), we hereby inform you of how we collect, process and protect your personal data collected via the website pentatechsrl.it (hereinafter the \u201cWebsite\u201d) in relation to users\u2019 browsing activity.<\/p>\n

SECTION 1: OUR PRINCIPLES<\/strong>
Pentatech S.r.l. processes the personal data of visitors to its website in full compliance with current legislation on the protection of personal data and the fundamental principles set out in Article 5 of the GDPR.
Processing is limited to what is strictly necessary for the purposes described in this privacy policy. No data collected via the Website is used for commercial profiling purposes or disclosed to third parties for advertising purposes.<\/p>\n

SECTION 2: DATA CONTROLLER<\/strong>
The data controller is Pentatech S.r.l., with its registered office at Via dell\u2019Industria, 21, 48017 Conselice (RA). For any enquiries regarding the processing of your personal data, you may contact the Data Controller at the following email address: pentatech@pentatechsrl.it, or by sending a written request to Pentatech S.r.l., Via dell\u2019Industria, 21, 48017 Conselice (RA).<\/p>\n

SECTION 3: CATEGORIES OF PERSONAL DATA PROCESSED
<\/strong>Browsing data (collected automatically)<\/strong><\/p>\n

The Website\u2019s IT systems and software procedures automatically collect, during normal operation, certain technical data whose transmission is implicit in the use of Internet communication protocols. This data is not collected to be associated with identified data subjects, but could, by its very nature, allow users to be identified. This category includes:<\/p>\n

    \n
  • IP addresses or domain names of the devices used to connect to the Website;<\/li>\n
  • URI\/URL addresses of the resources requested;<\/li>\n
  • time of the request, method used, size of the file received in response;<\/li>\n
  • numeric code indicating the status of the response from the server;<\/li>\n
  • information about the user\u2019s browser and operating system;<\/li>\n
  • session data (duration, pages visited, navigation path).<\/li>\n<\/ul>\n

    This technical data is stored in the server logs for the IT security purposes described in Section 4.<\/p>\n

    Data collected via third-party tools (cookies and analytics)<\/strong><\/p>\n

    The Website uses tools for statistical traffic analysis (Google Analytics 4) and tag management (Google Tag Manager), as well as components for displaying external content (YouTube, Google Maps, Google Fonts). These tools collect usage data and may use tracking tools (cookies).<\/p>\n

    Data is collected via these tools only with the user\u2019s prior consent, which can be managed via the cookie preferences panel available on the Website. For details of the tools, their purposes, the duration of cookies and how to withdraw consent, please refer to the Website\u2019s Cookie Policy.<\/p>\n

    SECTION 4: PURPOSE OF THE PROCESSING AND LEGAL BASES
    <\/strong>Personal data collected via the Website is processed for the following purposes, each of which is based on a specific legal basis pursuant to Article 6 of the GDPR:<\/p>\n

      \n
    • Technical operation and security of the Website: To ensure the proper functioning of the Website, IT security and the detection of anomalies or attempts at unauthorised access. Legal Basis: Article 6(1)(f) of the GDPR \u2013 the Data Controller\u2019s legitimate interest in security and the proper provision of the service;<\/li>\n
    • Statistical analysis and improvement of the Website: Aggregated analysis of web traffic via Google Analytics 4, to understand how the Website is used and to improve its content and functionality. Legal Basis: Article 6(1)(a) of the GDPR \u2013 the user\u2019s consent, given via the cookie banner<\/li>\n
    • Display of content from external platforms: Integration into the Website of content hosted on third-party platforms (YouTube, Google Maps, Google Fonts). These services may collect data even when the user does not interact directly with the content. Legal basis: Article 6(1)(a) of the GDPR \u2013 user consent, given via the cookie banner<\/li>\n<\/ul>\n

      SECTION 5: METHODS OF PROCESSING
      <\/strong>Personal data is processed using electronic and automated means, in accordance with criteria strictly related to the purposes set out in Section 4 and in compliance with the principles of lawfulness, fairness, transparency, data minimisation and storage limitation as set out in Article 5 of the GDPR.
      The Data Controller implements appropriate technical and organisational measures to ensure a level of security commensurate with the risks associated with the processing, including measures designed to prevent unauthorised access, loss, destruction or unauthorised disclosure of data, in accordance with Article 32 of the GDPR.
      The processing is carried out by the Data Controller\u2019s expressly authorised internal staff, as well as, limited to the activities falling within their remit, by the Data Processors designated in accordance with Article 28 of the GDPR.<\/p>\n

      SECTION 6: COMMUNICATION OF DATA
      <\/strong>Browsing data and data collected via cookies may be processed, to the extent strictly necessary and for the purposes indicated, by the following categories of data processors:<\/p>\n

        \n
      • providers of hosting and infrastructure management services for the Website, appointed as data processors pursuant to Article 28 of the GDPR;<\/li>\n
      • Google LLC \/ Google Ireland Limited, for the provision of Google Analytics 4, Google Tag Manager, YouTube, Google Maps and Google Fonts services, within the limits and subject to the safeguards described in the Cookie Policy;<\/li>\n
      • public or judicial authorities, in the cases provided for by law.<\/li>\n<\/ul>\n

        Data collected via the Website is not transferred to third parties for marketing purposes nor is it disclosed.<\/p>\n

        SECTION 7: TRANSFER OF DATA ABROAD
        <\/strong>The Website incorporates services provided by Google LLC (Analytics 4, Tag Manager, YouTube, Google Maps, Google Fonts), the use of which involves the transfer of personal data to the United States of America. This transfer is based on the European Commission\u2019s adequacy decision of 10 July 2023 concerning the EU-US Data Privacy Framework, adopted pursuant to Article 45 of the GDPR, under which Google LLC provides safeguards equivalent to those in place in the European Union.<\/p>\n

        The technical browsing data processed directly by the Data Controller is stored on infrastructure located within the European Union. No further transfers to third countries or international organisations are envisaged.<\/p>\n

        For detailed information on the individual tools, the safeguards in place and how consent is managed, please refer to the Website\u2019s Cookie Policy.<\/p>\n

        SECTION 8: DATA RETENTION PERIODS
        <\/strong>Data is retained for the time strictly necessary for the purposes and, in any event, in accordance with criteria consistent with legal obligations and the protection of rights.
        In particular:<\/p>\n

          \n
        • Technical browsing logs (server data): For the time strictly necessary to ensure the security of the Website, normally not exceeding 90 days, unless it is necessary to investigate cybercrimes.<\/li>\n
        • Statistical data (Google Analytics 4): Up to 2 years from collection, depending on the service configuration; the data is processed only with the user\u2019s prior consent and collection ceases upon withdrawal of consent.<\/li>\n
        • Cookies and tracking tools: According to the specific duration of each cookie, as indicated in the Website\u2019s Cookie Policy.<\/li>\n<\/ul>\n

          SECTION 9: EXISTENCE OF AUTOMATED DECISION-MAKING , INCLUDING PROFILING
          <\/strong>The Data Controller does not use automated decision-making processes, including profiling, which produce legal effects or have a similarly significant impact on the data subject (Article 22 of the GDPR).<\/p>\n

          SECTION 10: RIGHTS OF DATA SUBJECTS
          <\/strong>The data subject may at any time exercise the rights set out below under the GDPR vis-\u00e0-vis Pentatech srl, which are recognised under the legislation on the protection of personal data, by sending a specific written request to the Company in accordance with one of the methods set out in SECTION 2.<\/p>\n

          Within the limits set out in the applicable legislation, the data subject has the right to:<\/p>\n

            \n
          • access their personal data and obtain information on the processing (Article 15 of the GDPR);<\/li>\n
          • obtain the rectification of inaccurate or incomplete data (Article 16 of the GDPR);<\/li>\n
          • obtain the erasure of data, in the cases provided for by law (Article 17 of the GDPR);<\/li>\n
          • to have processing restricted, in the cases provided for by law (Article 18 of the GDPR);<\/li>\n
          • to receive their data in a structured, machine-readable format, where the processing is based on consent and carried out by automated means (data portability, Article 20 of the GDPR);<\/li>\n
          • object to processing carried out on the basis of the Data Controller\u2019s legitimate interests, on grounds relating to their particular situation (Article 21 of the GDPR);<\/li>\n
          • withdraw their consent at any time, without prejudice to the lawfulness of processing carried out prior to withdrawal (Article 7(3) of the GDPR) \u2014 consent to cookies may be withdrawn at any time via the Website\u2019s cookie preferences panel;<\/li>\n
          • lodge a complaint with the Italian Data Protection Authority (protocollo@pec.gpdp.it) or with the supervisory authority of the EU Member State in which the data subject habitually resides.<\/li>\n<\/ul>\n<\/div><\/div><\/div><\/div><\/div>\n","protected":false},"excerpt":{"rendered":"","protected":false},"author":1,"featured_media":0,"parent":0,"menu_order":0,"comment_status":"closed","ping_status":"closed","template":"100-width.php","meta":{"footnotes":""},"class_list":["post-1171","page","type-page","status-publish","hentry"],"_links":{"self":[{"href":"https:\/\/www.pentatechsrl.it\/en\/wp-json\/wp\/v2\/pages\/1171","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.pentatechsrl.it\/en\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/www.pentatechsrl.it\/en\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/www.pentatechsrl.it\/en\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.pentatechsrl.it\/en\/wp-json\/wp\/v2\/comments?post=1171"}],"version-history":[{"count":9,"href":"https:\/\/www.pentatechsrl.it\/en\/wp-json\/wp\/v2\/pages\/1171\/revisions"}],"predecessor-version":[{"id":1408,"href":"https:\/\/www.pentatechsrl.it\/en\/wp-json\/wp\/v2\/pages\/1171\/revisions\/1408"}],"wp:attachment":[{"href":"https:\/\/www.pentatechsrl.it\/en\/wp-json\/wp\/v2\/media?parent=1171"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}