Last updated: 9 October 2026
Protecting your personal data matters to us. This policy explains which data we process when you visit www.plank.it, for what purpose, and which rights you have.
PLANK SRL
Via Nazionale 35, I-39040 Ora (BZ)
Email: support@plank.it
Phone: +39 0471 803 500
When you access our website, the web server automatically processes technical data: IP address, date and time, page requested, amount of data transferred, browser and operating system, and the previously visited page (referrer). This data is required to deliver the website and to keep the system secure (Art. 6(1)(f) GDPR) and is deleted after a short period unless needed to investigate faults or attacks.
Our website is hosted by an external hosting provider based in the EU, which processes this data on our behalf as a processor (Art. 28 GDPR).
We use cookies and similar technologies. Technically necessary cookies are required to operate the website (Art. 122(1) of the Italian Personal Data Protection Code (Legislative Decree 196/2003, strictly necessary storage)); all other services are loaded only with your consent (Art. 122(1) of the Italian Personal Data Protection Code (Legislative Decree 196/2003), Art. 6(1)(a) GDPR). Which services and cookies these are, how long they are stored and how you can change or withdraw your consent is described in our Cookie Policy. Your consent is stored for 365 days; as proof we log the time, categories, version and an anonymised IP hash.
We embed the following services on our website, grouped by category. Services outside the "Necessary" category are loaded only after your consent, which you can withdraw at any time.
Provider: Adobe Inc. · Location: USA
This service may transfer data to a third country (USA). The provider is certified under the EU-US Data Privacy Framework; the transfer is therefore based on the European Commission’s adequacy decision of 10 July 2023 (Art. 45 GDPR).
Provider: Google LLC · Location: USA
This service may transfer data to a third country (USA). The provider is certified under the EU-US Data Privacy Framework; the transfer is therefore based on the European Commission’s adequacy decision of 10 July 2023 (Art. 45 GDPR).
Provider: Google LLC · Location: USA
This service may transfer data to a third country (USA). The provider is certified under the EU-US Data Privacy Framework; the transfer is therefore based on the European Commission’s adequacy decision of 10 July 2023 (Art. 45 GDPR).
Provider: Meta Platforms, Inc. · Location: USA
This service may transfer data to a third country (USA). The provider is certified under the EU-US Data Privacy Framework; the transfer is therefore based on the European Commission’s adequacy decision of 10 July 2023 (Art. 45 GDPR).
We are joint controllers with Meta Platforms Ireland Ltd. for the collection of data on our website and its transmission (Art. 26 GDPR). The essence of the arrangement is available here: joint controller addendum. Meta Platforms Ireland Ltd. alone is responsible for any further processing.
In addition to the services listed above, we process personal data in the following cases. Where we use external providers for this, they are named in the relevant entry, which also points out any possible transfer of data to a third country.
Provider: Amazon Web Services EMEA SARL · Location: Luxembourg
Location: Italy
If you contact us by email, phone or contact form, we process your details to handle your request (Art. 6(1)(b) GDPR for pre-contractual enquiries, otherwise Art. 6(1)(f) GDPR). The data is deleted once the request has been dealt with and no statutory retention obligations apply.
Providing your details is voluntary; without them, however, we cannot process your request.
You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and objection (Art. 21 GDPR). You may withdraw any consent you have given at any time with effect for the future (Art. 7(3) GDPR). To do so, use the contact details above.
Right to object: Where we process your data on the basis of legitimate interests (Art. 6(1)(f) GDPR), you may object to this processing at any time on grounds relating to your particular situation. You may object to processing for direct marketing purposes at any time without giving reasons (Art. 21 GDPR).
We do not make decisions based solely on automated processing within the meaning of Art. 22 GDPR.
If you believe that the processing of your data infringes data protection law, you may lodge a complaint with a supervisory authority: the Italian Data Protection Authority (Garante per la protezione dei dati personali), Piazza Venezia 11, 00187 Rome (garanteprivacy.it).
This privacy policy is updated whenever the services we use or the legal situation change. The section "Third-party services in use" is generated from our cookie configuration and therefore always reflects the current state of the website.