Privacy Policy

1. Data controller

The data controller is DAI PRA’ S.r.l., Via A. Volta 37, 35010 Villafranca Padovana (PD), Taggì di Sopra, Italy.

• VAT number: 03658030287
• Privacy email: amministrazione@daipra.it
• Phone: +39 049 767973

The controller has not appointed a data protection officer (DPO), as one is not required for its activities.

2. Data collected

Data provided by the user

When the user fills in the contact or quote request form, Dai Prà receives the data entered: first name and surname, email, telephone, company, country or market of interest, profile, product or interest, any technical data and the message. The language and the page of the website from which the request is sent are submitted together with these data.

Only the fields marked as required in the form are mandatory: without them Dai Prà cannot reply. Please do not include in the message any data that is not needed for the request, in particular health data or other special categories of data.

Browsing data

During normal browsing, the systems that run the website collect some technical data, including IP address, browser type and operating system, requested page, date and time and server response code. These data are used to deliver the website, protect it from attacks and abuse and solve technical problems; they are not used to identify the user.

Cookies and tracking tools

The website uses technical cookies and, only with the user’s consent, analytics and advertising cookies. Details are in the Cookies section of this page.

3. Purposes, legal bases and retention

Replying to information and quote requests

• Data: data entered in the form.
• Legal basis: taking steps at the request of the data subject prior to entering into a contract (Art. 6.1.b GDPR).
• Retention: 24 months from the last contact; if a contractual relationship follows, for its duration and for the statutory periods, up to 10 years for accounting and tax records.

Operation and security of the website

• Data: browsing data.
• Legal basis: the controller’s legitimate interest in the security and operation of the website (Art. 6.1.f GDPR).
• Retention: for the technical period set by the providers; in the event of abuse, for the time needed to investigate it.

Website usage statistics (Google Analytics 4)

• Data: usage data, online identifiers and cookies.
• Legal basis: consent (Art. 6.1.a GDPR).
• Retention: 14 months.

Advertising conversion measurement and remarketing (Google Ads)

• Data: usage data, online identifiers and cookies.
• Legal basis: consent (Art. 6.1.a GDPR).
• Retention: according to the Google Ads settings, up to 540 days.

With remarketing, people who have visited the website may see Dai Prà ads on other websites and Google services. This only happens if the user has accepted advertising cookies.

Newsletter

• Data: email, name and preferences, with date and proof of consent.
• Legal basis: consent (Art. 6.1.a GDPR), confirmed by double opt-in via email.
• Retention: until unsubscription.

Legal obligations and protection of rights

• Data: the data required for the purpose.
• Legal basis: legal obligation (Art. 6.1.c GDPR) and legitimate interest (Art. 6.1.f GDPR).
• Retention: for the period required by law or needed to protect rights.

Consent is optional and can be withdrawn at any time, without affecting the lawfulness of processing carried out before withdrawal. Refusing non-technical cookies does not limit the use of the website.

Sending a request does not subscribe the user to the newsletter, which requires separate consent.

4. Processing methods and recipients

Data are processed electronically, with appropriate security measures, by authorised Dai Prà staff. Dai Prà uses the following providers, appointed as data processors under Art. 28 GDPR:

• Cloudflare, Inc.: website hosting, content delivery and protection against attacks. It processes browsing data and form data in transit.
• Resend (Plus Five Five, Inc.): email delivery of the requests sent through the forms, with processing in the European Union.
• Microsoft Ireland Operations Ltd. (Microsoft 365): mailbox that receives and stores the requests.
• Google Ireland Limited: Google Tag Manager, Google Analytics 4 and Google Ads, active only with the user’s consent.
• CookieYes Limited: cookie banner and consent log.

Data may also be disclosed to consultants, accountants and lawyers bound by confidentiality, and to the authorities where required by law. Data are not sold or made public. The up-to-date list of processors can be requested from the controller.

5. Transfer of data outside the European Union

Some providers are based in the United States or the United Kingdom, or may process data outside the European Economic Area. In these cases the transfer is based on an adequacy decision of the European Commission, such as the EU-U.S. Data Privacy Framework for certified companies, or on standard contractual clauses (Art. 46 GDPR). A copy of the safeguards can be requested from the controller.

6. Cookies

Cookies are small files that the website stores in the browser. On the first visit, a banner lets the user accept, reject or choose by category the non-technical cookies. The choice can be changed at any time from the “Cookie settings” link at the bottom of every page, where the up-to-date list of cookies is also available.

Technical cookies

Required for the website to work and to store consent preferences, for example the cookieyes-consent cookie (duration 1 year). They do not require consent.

Analytics cookies

Google Analytics 4 uses the _ga cookie and the _ga_ cookie followed by the property identifier (duration 2 years) to measure visits and use of the website in aggregate form. They are active only with the user’s consent.

Advertising cookies

Google Ads uses the _gcl_au cookie (duration 3 months) and cookies on Google domains to measure campaign results and show ads to people who have visited the website. They are active only with the user’s consent.

Consent choices are passed to Google services through Google Consent Mode: without consent, these services do not store analytics or advertising cookies. Cookies can also be deleted from the browser settings.

7. Rights of the data subject

Within the limits of Articles 15-22 GDPR, the user has the right to:

• access their data and receive a copy;
• request their rectification, updating or erasure;
• request restriction of processing;
• receive the data in a structured format and transmit them to another controller;
• object to processing based on legitimate interest and, at any time, to processing for direct marketing purposes;
• withdraw consent: for cookies from the “Cookie settings” link, for the newsletter from the unsubscribe link in every email.

Requests should be sent to amministrazione@daipra.it. They are free of charge and are answered within one month, which may be extended in the cases provided for by law.

The user also has the right to lodge a complaint with the Italian Data Protection Authority, the Garante per la protezione dei dati personali (www.garanteprivacy.it), or to bring proceedings before the courts.

8. Other information

The website does not use decision-making based solely on automated processing that produces legal effects for the user.

The website is aimed at professionals and companies and is not intended for children under 14.

The website contains links to third-party sites, such as social networks, Google Maps, distributors and trade magazines. Opening these links takes the user away from the Dai Prà website, and the privacy notices of the respective owners apply. The website does not embed content from these services in its pages.

9. Changes to this notice

Dai Prà may update this notice, for example when new services are introduced or regulations change. The version in force is always published on this page, with the date of the last update.