Website Privacy Policy for www.polytradespa.it
This privacy policy contains important information regarding the processing and protection of personal data for users of the website www.polytradespa.it. Data collected through the site is processed in accordance with the principles of fairness, lawfulness, transparency, purpose limitation, storage limitation, data minimization, accuracy, integrity, and confidentiality, as required by EU Regulation 679/2016 (GDPR).
Data Controller
The Data Controller is POLYTRADE S.P.A., P. IVA 01674320971 – registered office: Montemurlo (PO), Via dell’Artigianato 26/28, email: polytrade@polytrade.it.
Website
POLYTRADE S.P.A. owns and manages the content of the website www.polytradespa.it , hereinafter referred to as the “Website”.
The Website is hosted on hosting services managed by Aruba – whose servers are located within the European Union. The relevant policy is available here
What Personal Data Are Collected and Why (type of data, purposes and legal basis)
By browsing this Website, personal data may be collected, as specified below.
Cookies are also installed, as described in the cookie policy.
Browsing Data
The Website’s IT systems implicitly collect, during their normal operation, certain personal data (provided for by Internet communication protocols). These data are not associated with specific individuals, except through a complex processing and matching system with other data held by third parties. This category of personal data includes IP addresses or domain names of the computers used by users connecting to the Website, browsers and IT system parameters used to connect to the Website, browsing data including the time of request and the response received from the server.
Data processed: IP addresses or domain names of users’ computers, browsers and IT system parameters used to connect to the Website, browsing data including time of request and server response.
Purpose: use of the Website and possible anonymous statistics on Website usage.
Legal basis: legitimate interest of the Data Controller.
Transfer outside the EU: no.
Contact Form
When filling out the contact form available on the Website, the User is required to provide their name and email address, which are necessary for the Data Controller to respond to the request received.
Data processed: name and email address.
Purpose: response to a request submitted by the User.
Legal basis: consent, expressed at the bottom of the form.
Transfer outside the EU: no.
Newsletter
To subscribe to the newsletter, Users must provide their name and email address in the relevant form.
Providing these data is voluntary but necessary in order to receive the newsletter.
The personal data provided are processed solely for the purpose of sending the newsletter that the User has requested to subscribe to.
Data processing related to newsletter delivery is carried out using Outlook. You can read the privacy policy here.
Data processed: name, email address.
Purpose: sending the newsletter.
Legal basis: consent provided by the User.
Transfer outside the EU: no.
Social Sharing Buttons
Social sharing buttons are installed on the Website, allowing Users to share blog articles on major social networks.
Using social buttons involves sharing certain User information (as specified below) with the relevant social network, which may collect, store, analyze and archive such data in accordance with the specific privacy notices of each social network (linked below).
In some cases, User data may be collected through the use of cookies.
Data processed: cookies, usage data
Purpose, legal basis and retention period: see https://it.linkedin.com/legal/privacy-policy
Google Analytics (IP anonymized)
Analyzes website traffic data. Relevant policy available at:
https://support.google.com/analytics/answer/6004245?hl=it&utm_id=ad
Data processed: Website usage data.
Purpose: traffic data analysis on the Website.
Legal basis: consent.
Transfer outside the EU: yes.
Google Search Console
Analyzes website traffic data in aggregated and anonymous form. Relevant policy available here.
Data processed: website traffic data.
Purpose: traffic data analysis in aggregated and anonymous form.
Legal basis: legitimate interest of the Data Controller.
Transfer outside the EU: yes.
Facebook Pixel
Facebook Pixel is a user behavior tracking tool that allows the collection of aggregated and anonymous browsing data, enabling users to be grouped according to their expressed interests (user targeting). When users access Facebook, they will be shown advertisements consistent with their interests.
Data processed: online identifiers, including cookie identifiers and IP addresses, data relating to browsing on the Website.
Purpose: user targeting, advertising.
Legal basis: consent.
Transfer outside the EU: yes.
Google ADS
Tool for displaying advertisements consistent with the User’s behavioral profile.
Relevant policy: https://policies.google.com/technologies/cookies?hl=it
Data processed: Website usage data.
Purpose: aggregated and anonymous traffic analysis/marketing.
Legal basis: consent.
Transfer outside the EU: yes.
Methods of Processing and Data Retention
Data processing is carried out in automated form, in compliance with Article 32 of GDPR 2016/679 regarding security measures. Data are processed and managed in such a way as to avoid or minimize risks of loss, destruction or unauthorized access, and to allow restoration in case such events occur.
Pursuant to Article 4 of GDPR 2016/679, the data provided may be collected, recorded, organized, stored, consulted, processed, modified, selected, extracted, compared, used, interconnected, blocked, communicated, deleted and destroyed. Appropriate data protection systems have been adopted.
Data Retention Period
Data are retained for the technical time necessary for the purposes indicated above.
In any case, the User has the right to request destruction or deletion of the data provided.
Data may also be retained for a longer period in order to comply with tax obligations or orders from an Authority.
At the end of the necessary retention period, the data will be deleted and no longer recoverable.
Communication and Disclosure of Data
Personal data will never be disclosed and will not be communicated without the explicit consent of the User.
Access to Data
Data may be made accessible in compliance with legal obligations, which may involve transfer to public bodies, judicial authorities or insurance companies.
Data may also be visible to an IT consultant/technician who needs to operate for repair or maintenance of IT systems and the website.
For any information, you may write via email to polytrade@polytrade.it.
Transfer of Personal Data
Data may be transferred to third countries outside the European Union, as specified above with reference to each function.
Special Categories of Personal Data
The Website does not collect or process data qualifying as “special categories of personal data” pursuant to Articles 9 and 10 of GDPR 2016/679.
Data Subject Rights
At any time, pursuant to Articles 15 to 22 of GDPR 2016/679, the User may exercise the right to:
- a) obtain confirmation as to whether or not personal data concerning them exist;
b) obtain information regarding the purposes of processing, categories of personal data, recipients or categories of recipients to whom the personal data have been or will be disclosed and, where possible, the retention period;
c) obtain rectification and deletion of data;
d) obtain restriction of processing;
e) obtain data portability, i.e., receive data from a data controller in a structured, commonly used and machine-readable format and transmit them to another controller without hindrance;
f) object to processing at any time, including processing for direct marketing purposes;
g) object to automated decision-making processes concerning natural persons, including profiling;
h) request access to personal data and rectification or deletion of the same or restriction of processing or object to their processing, in addition to the right to data portability;
i) withdraw consent at any time without affecting the lawfulness of processing based on consent before its withdrawal;
j) lodge a complaint with a supervisory authority.
How to Exercise Your Rights
To exercise the above rights or to receive clarification or further information regarding the processing of personal data, you may write to polytrade@polytrade.it. A response will be provided within 30 days.
If you intend to lodge a complaint with the Supervisory Authority, you may visit https://www.garanteprivacy.it/home/diritti/come-agire-per-tutelare-i-tuoi-dati-personali for further information.
Policy drafted in February 2026.