Privacy Policy
Last updated: 2026-09-16 · www.plank.it
Protecting your personal data matters to us. This policy explains which data we process when you visit www.plank.it, for what purpose, and which rights you have.
1. Controller
PLANK SRL
Nationalstraße 35, I-39040 Auer (BZ)
Email: support@plank.it
2. Hosting and server log files
When you access our website, the web server automatically processes technical data: IP address, date and time, page requested, amount of data transferred, browser and operating system, and the previously visited page (referrer). This data is required to deliver the website and to keep the system secure (Art. 6(1)(f) GDPR) and is deleted after a short period unless needed to investigate faults or attacks.
3. Cookies and consent
We use cookies and similar technologies. Technically necessary cookies are required to operate the website (Art. 122(1) of the Italian Personal Data Protection Code (Legislative Decree 196/2003, strictly necessary storage)); all other services are loaded only with your consent (Art. 122(1) of the Italian Personal Data Protection Code (Legislative Decree 196/2003), Art. 6(1)(a) GDPR). Which services and cookies these are, how long they are stored and how you can change or withdraw your consent is described in our Cookie Policy. Your consent is stored for 365 days; as proof we log the time, categories, version and an anonymised IP hash.
4. Third-party services in use
We embed the following services on our website, grouped by category. Services outside the "Necessary" category are loaded only after your consent, which you can withdraw at any time.
Statistics
Google Analytics (GA4 / Universal)
Provider: Google LLC · Location: USA · Purpose: audience measurement and usage analysis · Legal basis: consent (Art. 6(1)(a) GDPR) · Provider's privacy policy
This service may transfer data to a third country (USA). The transfer is based on an adequacy decision of the European Commission (such as the EU-US Data Privacy Framework) where the provider is certified, and otherwise on standard contractual clauses (Art. 46(2)(c) GDPR).
Marketing
Meta Pixel (Facebook)
Provider: Meta Platforms, Inc. · Location: USA · Purpose: advertising, cross-site audience measurement and embedded content · Legal basis: consent (Art. 6(1)(a) GDPR) · Provider's privacy policy
This service may transfer data to a third country (USA). The transfer is based on an adequacy decision of the European Commission (such as the EU-US Data Privacy Framework) where the provider is certified, and otherwise on standard contractual clauses (Art. 46(2)(c) GDPR).
5. Other processing activities
In addition to the services listed above, we process personal data in the following cases. This processing takes place on our servers and does not use cookies.
Newsletter
Provider: Intuit Inc. (Mailchimp) · Location: United States · Purpose: Sending newsletters and messages · Legal basis: consent (Art. 6(1)(a) GDPR) · Data processed: Email address, First name, Last name, Country, Time of sign-up, Open and click behaviour · Retention: until withdrawal of consent · Provider's privacy policy
This service may transfer data to a third country (United States). The transfer is based on an adequacy decision of the European Commission (such as the EU-US Data Privacy Framework) where the provider is certified, and otherwise on standard contractual clauses (Art. 46(2)(c) GDPR).
Registration and sign-in
Location: Italy · Purpose: Registration and sign-in · Legal basis: performance of a contract (Art. 6(1)(b) GDPR) · Data processed: First name, Last name, Email address, Company name, Job title, Postal address, Postcode, City, Region, Country, Phone number · Retention: until the user account is deleted
6. Contacting us
If you contact us by email, phone or contact form, we process your details to handle your request (Art. 6(1)(b) GDPR for pre-contractual enquiries, otherwise Art. 6(1)(f) GDPR). The data is deleted once the request has been dealt with and no statutory retention obligations apply.
7. Your rights
You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and objection (Art. 21 GDPR). You may withdraw any consent you have given at any time with effect for the future (Art. 7(3) GDPR). To do so, use the contact details above.
8. Right to lodge a complaint
If you believe that the processing of your data infringes data protection law, you may lodge a complaint with a supervisory authority: the Italian Data Protection Authority (Garante per la protezione dei dati personali), Piazza Venezia 11, 00187 Rome (garanteprivacy.it).
9. Currency of this policy
This privacy policy is updated whenever the services we use or the legal situation change. The section "Third-party services in use" is generated from our cookie configuration and therefore always reflects the current state of the website.