PRIVACY & COOKIE NOTICE
Pursuant to Articles 13 and 14 of Regulation (EU) 2016/679 (“GDPR”) and to Legislative Decree 196/2003, as amended by Legislative Decree 101/2018 (the “Privacy Code”), Pietrantiche S.r.l. provides the following information on the processing of personal data and on the use of cookies for users who browse the website www.pietrantiche.com and interact with its forms and services.
1. Data Controller
The Data Controller is PIETRANTICHE S.R.L., VAT no. 01747960936, with registered office
at Via Lion 2/A – 33057 Palmanova (UD) and operational office at Via Grado 1 – 33050 Lauzacco (UD).
For any request relating to data processing, you may write to
[email protected].
2. Categories of data processed
Depending on your interaction with the website, the Controller may process:
- Data you provide voluntarily through the contact and catalogue-request forms: name, surname, email address, phone number, any project information and the content of your message;
- Browsing data collected automatically through cookies and similar technologies (e.g. IP address, device and browser identifiers, pages visited and interaction data), as described in section 5;
- Technical and log data generated by the hosting infrastructure for the security and proper functioning of the website.
3. Purposes and legal bases of processing
- a) Responding to requests submitted through the contact and catalogue-request forms and managing the pre-contractual stage — legal basis: performance of pre-contractual measures and the data subject’s consent (Art. 6.1 (b) and (a) GDPR).
- b) Contractual, administrative, accounting and tax obligations where a business relationship is established — legal basis: performance of a contract and legal obligations (Art. 6.1 (b) and (c) GDPR).
- c) Statistical analysis and website improvement via analytics cookies (Google Analytics 4) — legal basis: consent (Art. 6.1 (a) GDPR).
- d) Marketing and advertising via profiling cookies (Google Ads), to measure conversions and display relevant ads — legal basis: consent (Art. 6.1 (a) GDPR).
- e) Security and proper functioning of the website — legal basis: the Controller’s legitimate interest (Art. 6.1 (f) GDPR).
4. Methods of processing
Data is processed using electronic and, where necessary, paper-based tools, adopting technical and organisational measures appropriate to ensure its security, integrity and confidentiality and to prevent unauthorised access. Processing is carried out by the Controller and by duly authorised persons.
5. Cookies and tracking technologies
Cookies are small text files that the websites you visit send to your device, where they are stored and then sent back to the same websites on your next visit. They may be first-party (set by the website) or third-party. In addition to cookies, the website may use similar technologies (e.g. local storage) for related purposes. The website uses the following categories of cookies:
- Necessary cookies — essential for the proper functioning of the website and for storing consent preferences; they do not require consent.
- Statistics cookies — collect aggregated information on the use of the website (Google Analytics 4) to improve its content; installed only with consent.
- Marketing cookies — measure the effectiveness of advertising campaigns and display relevant ads (Google Ads); installed only with consent.
Consent is managed through the Cookiebot platform: on your first visit a banner allows you to accept, reject or customise non-essential cookies. You can change or withdraw your consent at any time by clicking “Cookie Settings” in the footer, or through your browser settings. Details on third-party providers and on transfers outside the EU are provided in sections 6 and 7.
The up-to-date list of cookies used, with their category, purpose and duration, is shown below and is maintained automatically by Cookiebot:
6. Recipients and data processors
Data may be processed, for the respective purposes, by the following parties, appointed as data processors pursuant to Art. 28 GDPR where applicable:
- Netlify, Inc. — website hosting and contact-form management provider (USA);
- Google Ireland Ltd. / Google LLC — tag management, statistical analysis and advertising services (Google Tag Manager, Google Analytics 4, Google Ads) (EU/USA);
- Cybot A/S (Cookiebot by Usercentrics) — cookie consent management platform (EU);
- administrative, legal, tax and IT consultants, authorised employees and collaborators, credit institutions and parties to whom disclosure is required to comply with legal obligations.
Data is not disseminated and is not transferred to third parties for their own purposes.
7. Transfer of data outside the EU
Some providers (in particular Google and Netlify) may process data outside the European Economic Area, in the United States. Such transfers take place in compliance with Articles 44 et seq. of the GDPR, on the basis of the “EU-U.S. Data Privacy Framework” adequacy decision and/or the Standard Contractual Clauses approved by the European Commission.
8. Data retention period
Data provided through the forms is retained for the time needed to handle the request and, where a relationship is established, for its entire duration and for the subsequent periods required by legal obligations (generally 10 years for accounting and tax purposes). Data collected via cookies is retained for the periods indicated in section 5.
9. Rights of the data subject
At any time the data subject may exercise, pursuant to Articles 15-22 GDPR, the rights of: access to their data, rectification, erasure, restriction of processing, data portability, objection to processing, as well as the right to withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal. Requests should be addressed to [email protected].
The data subject also has the right to lodge a complaint with the competent supervisory authority — the Italian Data Protection Authority, Garante per la protezione dei dati personali (www.garanteprivacy.it).
10. Nature of data provision
Providing the data requested by the forms is optional, but failure to provide the fields marked as mandatory makes it impossible to respond to your request. Non-essential cookies are installed only with your consent, and refusing them does not affect your browsing of the website.
11. Changes to this notice
The Controller reserves the right to update this notice to align it with regulatory changes or with the services used. Revisions will be published on this page.
Last updated: 17 June 2026
The Data Controller — Pietrantiche S.r.l.