pursuant to article 13 of Regulation (EU) 2016/679


Dear user of the website pursuant to Regulation (EU) 2016/679 (hereinafter “Regulation”), this page describes the methods of processing the personal data identified or identifiable by users of the website; this information does not concern other sites, pages or online services accessible via hypertext links that may be published on the site but referring to resources external to this domain.


Owner of the data processing

The Data Controller is PCA S.p.A., with registered office in Ex S.S. 10 for Alessandria, 6 / a, 15057 Tortona (AL), e-mail:


Type of data processed, purpose of the processing, legal basis and retention period

The use of the site involves the processing of the following data:

a. navigation data: the computer systems and software procedures used to operate this site acquire, during their normal operation, some personal data whose transmission is implicit in the use of Internet communication protocols. They are not collected to be associated with identified interested parties, but by their very nature they could, through processing and association with data held by third parties, allow users to be identified.

This category of data includes the IP addresses or domain names of the users’ computers, the URI / URL (Uniform Resource Identifier / Locator) addresses of the requested resources, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response given by the server (successful, error, etc.) and other parameters relating to the operating system and the user’s computer environment.

This processing is to be considered legitimate as it is functional to the navigation of the site requested by the user (Article 6, paragraph 1 letter b) of the Regulation);

b. data provided voluntarily by the user: the data provided by completing and submitting the forms on the site are processed to respond to the requests of the interested party (Article 6 paragraph 1 letter b) of the Regulation) and are kept for a maximum period of 12 months, subject to legal obligations;

c. cookies: cookies are used to ensure navigability within the site (Article 6 paragraph 1 letter b) of the Regulation). These cookies can be disabled, however this could compromise the usability of the site.

For more information on Cookies – definitions, characteristics and application – or on how to disable them, please refer to the Cookies page.


Methods of data processing

The treatment is carried out with the aid of electronic or automated means and with organization and processing logics strictly related to the purposes themselves and in any case in such a way as to guarantee the security, integrity and confidentiality of the data in order to reduce the risk of destruction or loss. unauthorized access, modification and disclosure.

The collected data are not subject to disclosure and are not transferred outside the EU or countries considered safe by the European Commission, nor to subjects not adhering to international programs for the free circulation of data.


Recipients or categories of recipients to whom the personal data may be disclosed

The recipients of the data collected following consultation of the site indicated above are the following subjects designated by the writer, pursuant to Article 28 of the Regulation, as data processors:

– our web platform hosting service provider;

The personal data collected are also processed by the Data Controller’s staff, which acts on the basis of specific authorizations and instructions provided regarding the purposes and methods of the processing itself.


Rights of the interested party

The interested party may exercise the rights referred to in Articles from 15 to 22 of the GDPR (access, rectification, cancellation, limitation, portability, as well as to oppose the processing and to be informed of any automated decision-making processes) by contacting the Data Controller.

The interested party also has the right to file a complaint with the Authority for the Protection of Personal Data (



Interested parties may exercise the aforementioned rights by contacting the data controller based in Ex S.S. 10 for Alessandria, 6 / a, 15057 Tortona (AL), by sending an e-mail to the address or to its DPO PK Consulting S.r.l., to the address