Privacy Policy

1. Data Controller

The data controller is PlanetStone S.r.l., with registered office at Viale Dell'Industria, 261 — 37020 Dolcè (VR), Italy.

VAT number: IT04429200233. REA: VR-419559. Email for privacy requests: info@bonentegroup.com. Certified email (PEC): planetstonesrls@pec.it.

2. Types of data processed

Through this website we may process the following categories of personal data:

• Contact and identification data (name, email address, company name, phone number) provided via the contact form or email.
• Technical and browsing data (IP address, browser type, operating system, pages visited, date and time of access) collected automatically through server logs and technical cookies.
• Preference data relating to cookie choices, stored locally in your browser.
• Statistical browsing data (pages visited, session duration, traffic sources, device type) collected via Google Analytics, only with your consent to analytics cookies.

3. Purposes and legal basis

Personal data are processed for the following purposes:

• Responding to information requests and managing commercial contacts — legal basis: performance of pre-contractual measures at the data subject's request (Art. 6(1)(b) GDPR) and, where applicable, legitimate interest (Art. 6(1)(f) GDPR).
• Ensuring the operation, security and maintenance of the website — legal basis: legitimate interest (Art. 6(1)(f) GDPR).
• Compliance with legal obligations — legal basis: legal obligation (Art. 6(1)(c) GDPR).
• Displaying embedded third-party content (e.g. maps), only with your consent — legal basis: consent (Art. 6(1)(a) GDPR).
• Analysing site usage in aggregate form and improving content and navigation via Google Analytics, only with your consent — legal basis: consent (Art. 6(1)(a) GDPR).

4. Data retention

Contact form data are retained for the time necessary to handle the request and for any subsequent contractual relationship, and in any case no longer than 24 months from the last interaction, unless a longer retention period is required by law.

Technical log data are retained for a maximum of 12 months.

Cookie preference data are retained until you change your choice or delete them from your browser.

Data collected via Google Analytics are retained according to Google's policy (typically up to 14 months for event-level data).

5. Recipients and transfers

Data may be processed by personnel authorised by PlanetStone and by external providers acting as data processors (e.g. hosting, IT maintenance, email services), appointed pursuant to Art. 28 GDPR.

Embedded third-party services (such as OpenStreetMap for map display) may process data according to their own policies. Such services are activated only with your consent.

Google Ireland Limited (Google Analytics) processes statistical browsing data on our behalf as a data processor, only with your consent to analytics cookies. Google may transfer data to the United States under GDPR safeguards (Standard Contractual Clauses). Google privacy policy: policies.google.com/privacy.

Data are not transferred outside the European Economic Area except as indicated for the third-party services listed above and where adequate safeguards are in place pursuant to GDPR Chapter V.

6. Your rights

Under Articles 15–22 GDPR, you have the right to access, rectify, erase, restrict processing, object, and data portability, as well as the right to withdraw consent at any time without affecting the lawfulness of processing based on consent before its withdrawal.

You also have the right to lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali — www.garanteprivacy.it).

• To exercise your rights, contact: info@bonentegroup.com
• We will respond within one month of receiving your request.

7. Mandatory or optional nature of data provision

Providing data via the contact form is optional but necessary to receive a response. Failure to provide required data may prevent us from handling your request.

Browsing data are collected automatically; you can manage non-essential cookies via the cookie banner or your browser settings.

8. Automated decision-making

We do not use automated decision-making or profiling that produces legal or similarly significant effects on data subjects.

9. Changes to this policy

We may update this Privacy Policy from time to time. The date of the last update is indicated at the top of this page.