Privacy Policy
Privacy Policy of www.datlas.it
This Application collects certain Personal Data from its Users.
This document can be printed using the print command available in the settings of any browser.
Data Controller
The Data Controller is Datlas S.p.A., with registered office at Viale della Resistenza no. 47, 42018 San Martino in Rio (RE), VAT no. 02628600351.
Contact details:
Telephone: +39 0265535411
Email: info@datlasgroup.com
Certified email (PEC): datlas@pec.datlasgroup.com
Data Protection Officer
In light of the processing activities carried out, the Data Controller has deemed it necessary to appoint a Data Protection Officer, who may be contacted at: dpo@datlasgroup.com
Types of Data collected
Among the types of Personal Data that this Application collects, either directly or through third parties, are: Usage Data; Trackers; first name; last name; email; company name; geographic location; IP address; job position; profession; work history; professional skills; industry; education; academic background; interests; country; geographic region; company size; company revenue; gender; date of birth; unique device identifiers for advertising purposes (such as Google Advertiser ID or IDFA identifier).
Full details on each type of Personal Data collected are provided in the dedicated sections of this Privacy Policy or in specific information notices displayed before the Data is collected.
Personal Data may be freely provided by the User or, in the case of Usage Data, collected automatically when using this Application.
Unless otherwise specified, all Data requested by this Application is mandatory. If the User refuses to provide such Data, this Application may be unable to provide the Service.
Where this Application states that certain Data is optional, Users are free not to provide such Data, without this affecting the availability or operation of the Service.
Users who are uncertain as to which Data is mandatory are encouraged to contact the Data Controller.
Any use of Cookies – or other tracking tools – by this Application or by the owners of third-party services used by this Application is intended to provide the Service requested by the User, in addition to the other purposes described in this document and in the Cookie Policy.
The User is responsible for any third-party Personal Data obtained, published or shared through this Application.
Methods and location of processing of collected Data
Methods of processing
The Data Controller takes appropriate security measures to prevent unauthorized access, disclosure, alteration or destruction of Personal Data.
Processing is carried out using IT and/or telematic tools, with organizational methods and logic strictly related to the purposes indicated. In addition to the Data Controller, in certain cases, the Data may be accessible to other parties involved in the operation of this Application (administrative, sales, marketing and legal personnel, system administrators) or to external parties (such as third-party technical service providers, postal carriers, hosting providers, IT companies and communication agencies), who may also be appointed, where necessary, as Data Processors by the Data Controller. An up-to-date list of Data Processors may always be requested from the Data Controller.
Location
The Data is processed at the Data Controller’s operating offices and at any other locations where the parties involved in the processing are located. For further information, please contact the Data Controller.
The User’s Personal Data may be transferred to a country other than the one in which the User is located.
For further information on the place of processing, the User may refer to the section containing details on the processing of Personal Data.
Purposes, legal bases and retention
| Purpose | Data | Legal basis | Retention |
| Website browsing, operation and security | IP addresses, logs, technical and usage data | The Data Controller’s legitimate interest in website security and proper operation, Art. 6(1)(f) GDPR | Logs are retained for 12 months, unless they are needed to investigate incidents |
| Responding to contact requests | First name, last name, email, company, content of the request | Pre-contractual measures requested by the Data Subject, Art. 6(1)(b) GDPR; in other cases, legitimate interest in responding, Art. 6(1)(f) GDPR | For the time required to handle the request and, as a rule, no longer than 12 months, unless a relationship is established |
| Account creation | First name, last name, email, company name, credentials | Performance of the requested service, Art. 6(1)(b) GDPR | For the duration of the account and thereafter for the periods required to protect legal rights |
| Non-essential statistical analysis | Online identifiers and Usage Data | Consent, Art. 6(1)(a) GDPR | According to the retention period configured in the service. |
| Advertising, remarketing and profiling | Cookies, identifiers, browsing behavior | Consent, Art. 6(1)(a) GDPR | According to the duration of the individual tools indicated in the Cookie Policy |
| Protection of rights and prevention of abuse | Data relating to website use and communications | Legitimate interest, Art. 6(1)(f) GDPR | For the time required to protect the relevant right and in accordance with the limitation periods under applicable law |
| Compliance with legal obligations or authority requests | Data relevant to the request | Legal obligation, Art. 6(1)(c) GDPR | For the period required by the legislation applicable to the specific case |
At the end of the retention period, Personal Data will be deleted or anonymized, unless further retention is necessary to comply with a legal obligation or to establish, exercise or defend a legal claim.
Where processing is based on the Data Subject’s consent, consent may be withdrawn at any time, as easily as it was given, by using the features available on the website or by contacting the Data Controller or the DPO using the contact details provided in this notice. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal. Following withdrawal, the Data will no longer be processed for purposes based on consent, without prejudice to any further retention that may be necessary to comply with a legal obligation or to establish, exercise or defend a legal claim.
Transfers of Personal Data outside the European Economic Area
Personal Data may be transferred to countries outside the European Economic Area only in compliance with Articles 44 et seq. of the GDPR. In particular, transfers may take place on the basis of an adequacy decision by the European Commission, including, where applicable, the recipient’s participation in the EU-US Data Privacy Framework, or through the adoption of the Standard Contractual Clauses approved by the European Commission together with any additional safeguards deemed necessary.
The Data Subject may contact the Data Controller or the DPO for further information on transfers carried out, the safeguards applied and how to obtain a copy of them.
Details on the processing of Personal Data
Personal Data is collected for the following purposes and using the following services:
-
Tag management
This type of service allows the Data Controller to manage the tags or scripts required on this Application in a centralized manner. As a result, the User’s Data may be processed by these services and may be retained.
Google Tag Manager (Google Ireland Limited)
Google Tag Manager is a tag management service provided by Google Ireland Limited.
Personal Data processed: Usage Data.
Place of processing: Ireland – Privacy Policy.
-
Interaction with social networks and external platforms
This type of service allows Users to interact with social networks or other external platforms directly from the pages of this Application.
The interactions and information obtained by this Application are always subject to the User’s privacy settings for each social network.
This type of service may still collect traffic data for the pages where the service is installed, even when Users do not use it.
Users are advised to log out of the relevant services to ensure that the data processed on this Application is not linked back to the User’s profile.
LinkedIn social button and widgets (LinkedIn Corporation)
The LinkedIn social button and widgets are services that allow interaction with the LinkedIn social network and are provided by LinkedIn Corporation.
Personal Data processed: Usage Data; Trackers.
Place of processing: United States – Privacy Policy – Opt Out.
-
Traffic optimization and distribution
This type of service allows this Application to distribute its content through servers located across different geographic areas and to optimize its performance.
The Personal Data processed depends on the characteristics and implementation methods of these services, which by their nature filter communications between this Application and the User’s browser.
Given the distributed nature of this system, it is difficult to determine the locations to which content – which may include the User’s Personal Data – is transferred.
Cloudflare (Cloudflare, Inc.)
Cloudflare is a traffic optimization and distribution service provided by Cloudflare Inc.
The way Cloudflare is integrated means that it filters all traffic to this Application, i.e. communications between this Application and the User’s browser, while also enabling the collection of statistical data relating to that traffic.
Personal Data processed: Trackers; various types of Data as specified in the service’s Privacy Policy.
Place of processing: United States – Privacy Policy.
-
Advertising
This type of service allows the User’s Data to be used for commercial communication purposes. These communications are displayed on this Application in the form of banners and other advertising formats, including based on the User’s interests.
This does not mean that all Personal Data is used for this purpose. The relevant Data and terms of use are set out below.
Some of the services listed below may use Trackers to identify the User, use behavioral retargeting techniques – i.e. display personalized advertisements based on the User’s interests and behavior – or measure advertising performance.
For further information, Users are advised to review the Privacy Policies of the respective services.
Services of this kind generally allow Users to opt out of this tracking. Users can learn how to opt out of interest-based advertising by visiting the relevant opt-out section of this document.
LinkedIn Ads (LinkedIn Corporation)
LinkedIn Ads is an advertising service provided by LinkedIn Corporation.
Personal Data processed: Usage Data; Trackers.
Place of processing: United States – Privacy Policy – Opt out.
LinkedIn Predictive Audiences (LinkedIn Corporation)
LinkedIn Predictive Audiences is an advertising service provided by LinkedIn Corporation that allows the Owner to expand the available target audience by finding new Users with characteristics similar to existing Users.
Users can opt out of LinkedIn Trackers used for ad personalization by changing their LinkedIn Ads settings.
Personal Data processed: Trackers.
Place of processing: United States – Privacy Policy – Opt Out.
-
Registration and authentication provided directly by this Application
By registering or authenticating, the User allows this Application to identify them and grant access to dedicated services. Personal Data is collected and stored solely for registration or identification purposes. Only the Data required to provide the service requested by the User is collected.
Direct registration
The User registers by completing the registration form and providing their Personal Data directly to this Application.
Personal Data processed: last name; email; first name; company name.
-
Remarketing and behavioral targeting
This type of service allows this Application and its partners to communicate, optimize and serve advertisements based on the User’s past use of this Application.
This activity is facilitated by tracking Usage Data and using Trackers to collect information that is then transferred to partners managing remarketing and behavioral targeting activities.
Some services offer a remarketing option based on email address lists.
Services of this kind generally allow Users to opt out of this tracking. Users can learn how to opt out of interest-based advertising by visiting the relevant opt-out section of this document.
LinkedIn lookalike audience (LinkedIn Ireland Unlimited Company)
LinkedIn lookalike audience is an advertising and behavioral targeting service provided by LinkedIn Ireland Unlimited Company that uses Data collected through LinkedIn Matched Audiences to show advertisements to Users whose behavior is similar to that of Users already included in a Matched Audiences list, based on their past use of this Application or their engagement with relevant content across LinkedIn apps and services. Based on this Data, Users will be shown personalized advertisements suggested by LinkedIn lookalike audience.
Personal Data processed: last name; professional skills; date of birth; Usage Data; company size; education; email; academic background; unique device identifiers for advertising purposes (such as Google Advertiser ID or IDFA identifier); industry; interests; IP address; job position; country; first name; geographic location; profession; company name; geographic region; company revenue; gender; work history; Trackers.
Place of processing: Ireland – Privacy Policy – Opt Out.
LinkedIn Matched Audiences (LinkedIn Corporation)
LinkedIn Matched Audiences is a remarketing and behavioral targeting service provided by LinkedIn Corporation that allows the activity of this Application to be linked with the LinkedIn advertising platform.
Users can opt out of LinkedIn Trackers used for ad personalization by changing their [LinkedIn Ads settings] (https://www.linkedin.com/help/linkedin/answer/a1342443).
Personal Data processed: professional skills; Usage Data; education; academic background; industry; interests; IP address; job position; country; geographic location; profession; company name; geographic region; work history; Trackers.
Place of processing: United States – Privacy Policy – Opt Out.
LinkedIn Website Retargeting (LinkedIn Corporation)
LinkedIn Website Retargeting is a remarketing and behavioral targeting service provided by LinkedIn Corporation that connects the activity of this Application with the LinkedIn advertising network.
Personal Data processed: Usage Data; Trackers.
Place of processing: United States – Privacy Policy – Opt out.
- Analytics
The services contained in this section enable the Data Controller to monitor and analyze traffic data and are used to keep track of User behavior.
Google Analytics 4 (Google Ireland Limited)
Google Analytics is an analytics service provided by Google Ireland Limited (“Google”). Google uses the Personal Data collected to track and examine the use of this Application, compile reports and share them with other services developed by Google.
Google may use Personal Data to contextualize and personalize the advertisements of its advertising network.
In Google Analytics 4, IP addresses are used at the time of collection and then deleted before the data is recorded in any data center or server. For more information, please refer to Google’s official documentation.
For an understanding of how Google uses data, please refer to Google’s partner policies.
Personal Data processed: Trackers.
Place of processing: Ireland – Privacy Policy – Opt out.
Information on how to opt out of interest-based advertising
In addition to any opt-out feature provided by any of the services listed in this document, Users can learn more about opting out of interest-based advertising in the relevant section of the Cookie Policy.
Cookie Policy
This Application uses Trackers. To learn more, Users may consult the Cookie Policy.
User rights under the General Data Protection Regulation (GDPR)
Users may exercise certain rights regarding the Data processed by the Data Controller.
In particular, within the limits provided by law, the User has the right to:
- withdraw consent at any time. The User may withdraw consent previously given to the processing of their Personal Data.
- object to the processing of their Data. The User may object, on grounds relating to their particular situation, to processing based on the performance of a task carried out in the public interest or on the legitimate interests of the Data Controller. Where Data is processed for direct marketing purposes, the Data Subject may object at any time without having to provide any reason.
- access their Data. The User has the right to obtain information about the Data processed by the Data Controller, certain aspects of the processing, and to receive a copy of the Data being processed.
- verify and request rectification. The User may verify the accuracy of their Data and request that it be updated or corrected.
- obtain restriction of processing. The User may request that the processing of their Data be restricted. In such cases, the Data Controller will not process the Data for any purpose other than its storage.
- obtain erasure or removal of their Personal Data. The User may request the erasure of their Data by the Data Controller.
- receive their Data or have it transferred to another controller. The User has the right to receive their Data in a structured, commonly used and machine-readable format and, where technically feasible, to have it transferred to another controller without hindrance.
- lodge a complaint. The User may lodge a complaint with the competent personal data protection supervisory authority or seek judicial remedy.
Users have the right to obtain information regarding the legal basis for transfers of Data abroad, including to any international organization governed by international law or established by two or more countries, such as the United Nations, as well as regarding the security measures adopted by the Data Controller to protect their Data.
Details on the right to object
Where Personal Data is processed in the public interest, in the exercise of official authority vested in the Data Controller, or for the purposes of the Data Controller’s legitimate interests, Users have the right to object to the processing on grounds relating to their particular situation.
Users are informed that, where their Data is processed for direct marketing purposes, they may object to the processing at any time, free of charge and without providing any reason. If Users object to processing for direct marketing purposes, their Personal Data will no longer be processed for those purposes. To determine whether the Data Controller processes Data for direct marketing purposes, Users may refer to the relevant sections of this document.
How to exercise these rights
Requests to exercise User rights may be addressed to the Data Controller using the contact details provided in this document. Requests are free of charge and the Data Controller will respond as soon as possible and, in any event, within one month, providing the User with all information required by law. Any rectification, erasure or restriction of processing will be communicated by the Data Controller to each recipient, if any, to whom the Personal Data has been disclosed, unless this proves impossible or involves disproportionate effort. The Data Controller will inform the User of those recipients upon request.
Further information on processing
Legal defense
The User’s Personal Data may be used by the Data Controller in legal proceedings or in the preparatory stages of possible legal proceedings to defend against misuse of this Application or the related Services by the User.
The User acknowledges that the Data Controller may be required to disclose the Data by order of public authorities.
Specific information notices
At the User’s request, in addition to the information contained in this Privacy Policy, this Application may provide the User with additional and contextual information notices concerning specific Services or the collection and processing of Personal Data.
System logs and maintenance
For operation and maintenance purposes, this Application and any third-party services it uses may collect system logs, i.e. files that record interactions and may also contain Personal Data, such as the User’s IP address.
Information not contained in this Policy
Further information regarding the processing of Personal Data may be requested from the Data Controller at any time using the contact details provided.
Changes to this Privacy Policy
The Data Controller reserves the right to make changes to this Privacy Policy at any time by notifying Users on this page and, where possible, on this Application, as well as, where technically and legally feasible, by sending a notice to Users through one of the contact details available to the Data Controller. Users are therefore encouraged to check this page frequently, referring to the date of the last modification shown at the bottom.
Where changes concern processing activities for which consent is the legal basis, the Data Controller will obtain the User’s consent again, where necessary.
Definitions and legal references
Personal Data (or Data)
Personal Data means any information that, directly or indirectly, including in connection with any other information, such as a personal identification number, identifies or makes identifiable a natural person.
Usage Data
Usage Data is information collected automatically through this Application (including by third-party applications integrated into this Application), including: the IP addresses or domain names of the computers used by the User who connects to this Application, URI (Uniform Resource Identifier) addresses, the time of the request, the method used to submit the request to the server, the size of the file received in response, the numerical code indicating the status of the server response (successful outcome, error, etc.), the country of origin, the features of the browser and operating system used by the visitor, the various time-related details of the visit (such as the time spent on each page), and details of the path followed within the Application, with particular reference to the sequence of pages visited and the parameters relating to the User’s operating system and IT environment.
User
The individual using this Application who, unless otherwise specified, is the Data Subject.
Data Subject
The natural person to whom the Personal Data relates.
Data Processor (or Processor)
The natural or legal person, public authority or other entity that processes Personal Data on behalf of the Data Controller, as described in this Privacy Policy.
Data Controller (or Controller)
The natural or legal person, public authority, service or other body that, alone or jointly with others, determines the purposes and means of the processing of Personal Data and the tools adopted, including the security measures relating to the operation and use of this Application. Unless otherwise specified, the Data Controller is the owner of this Application.
This Application
The hardware or software tool through which Users’ Personal Data is collected and processed.
Service
The Service provided by this Application as defined in the relevant terms, if any, on this website/application.
European Union (or EU)
Unless otherwise specified, any reference to the European Union in this document is intended to include all current Member States of the European Union and the European Economic Area.
Cookie
Cookies are Trackers consisting of small pieces of data stored within the User’s browser.
Tracker
A Tracker means any technology – such as Cookies, unique identifiers, web beacons, embedded scripts, e-tags and fingerprinting – that enables Users to be tracked, for example by collecting or storing information on the User’s device.
work history
Provides access to the User’s work history.
education
Provides access to the Education section of the User’s profile.
________________________________________
Legal references
Unless otherwise specified, this Policy applies exclusively to this Application.
Last modified: 25 September 2026