Personal Data Processing Information

In compliance with the provisions of Reg. EU 2016/679 (European Regulation for the protection of personal data), we provide you with the necessary information regarding the processing of personal data provided.
This is an information notice provided pursuant to Art. 13 of the EU Regulation for the protection of personal data 2016/679 – GDPR.

The Data Controller is Plato Holding S.R.L., Via Melone 2, Milano – email: info@platoholding.com

Purposes and Legal Basis of Processing

The personal data provided will be processed for the following purposes:

1. a) Management of the contractual relationship: in execution of obligations strictly connected to the establishment and management of the contract between the parties, including the management of the pre-contractual relationship.
   Legal basis: execution of a contract to which the data subject is party or implementation of pre-contractual measures taken at the request of the data subject, Art. 6 par. 1 letter b) of the Regulation.
   b) Administrative-accounting activities related to the contract, in compliance with legal obligations connected to civil, fiscal, and accounting regulations;
   Legal basis: processing is necessary for compliance with legal obligations to which the controller is subject, Art. 6, par. 1, letter c) of the Regulation.
   Data retention period: data will be processed for the duration of the relationship between the parties and, subsequently, for a maximum period of 10 years from termination (limited to what is required by fiscal/tax law).
   c) Defense of rights in court: we may use your data to defend our rights in judicial and extra-judicial proceedings in case of disputes, including insurance matters.
   Legal basis: legitimate interest of the Controller, Art. 6, par. 1, letter f) of the Regulation.
   Data retention period: in this case, data will be processed for the entire duration of the dispute.
   d) Soft Spam: to send communications about similar services or products to those covered by the contract, via email, with the understanding that the Data Subject will have the possibility to opt out of receiving such communications at any time.
   Legal basis: legitimate interest of the Controller, Art. 6, par. 1, letter f) of the Regulation, in conjunction with Art. 130 paragraph 4 of the Privacy Code.
   Personal data retention period: until any objection from the Client.

Nature of Data Processing

The provision of Data for the purposes is mandatory; any refusal prevents the completion of the contractual relationship between the parties or the provision of any clarifications requested during the pre-contractual phase. For the purposes in point d), the data subject has the right to object to data processing at any time.

Processing Methods

Data will be processed using electronic or automated means and also in paper form, in accordance with the principles of necessity and minimization. The Data Controller adopts appropriate technical and organizational measures to protect the processed data.

Data Recipients

Personal Data will be accessible, within their respective functions, to employees and/or collaborators of the Controller assigned to pursue the above purposes, duly authorized and instructed to carry out their related duties. Furthermore, data may be communicated to third parties who perform outsourced activities necessary for the provision of services offered, as data processors or independent controllers. Specifically, they may be communicated to: companies affiliated with Plato Holding, companies and consultants in the field of legal, accounting, and tax assistance; subjects providing technical services for the management of the information system and communication networks (including email); companies collaborating with the Data Controller for direct marketing activities, newsletter sending; banks and other financial institutions for payment management.
The updated list of Data Processors is available at the company’s headquarters. The data might be provided to competent Authorities that request them for the purpose of monitoring compliance with obligations imposed on the company by applicable regulations. The user’s personal data will not be subject to dissemination.

Transfer of Personal Data to a Third Country

No User personal data will be transferred to a third country outside the European Union or to International Organizations.

Rights of Data Subjects

You may exercise your rights as expressed in Articles 15 and following of the Regulation, requesting at any time, from the data controller, access to your personal data, rectification, erasure, restriction of processing, and portability of your data. Furthermore, you have the right to object, at any time, to the processing of your data based on consent and/or legitimate interest. To exercise the above rights, the data subject may contact the Controller at the contact details provided in this notice or send an email to info@platoholding.com

Complaint. In any case, you always have the right to lodge a complaint with the Data Protection Authority, www.garanteprivacy.it, pursuant to Art. 77 of the Regulation, if you believe that the processing of your data violates current regulations or to take appropriate legal action.

Milan, 10/13/2025