Logo PNR

Privacy policy

General Data Protection Regulation 2016/679

Dear user/visitor, welcome to our website www.pnr.eu (hereinafter, the “Site“).

Your privacy is very important to us and to protect it in the best possible way, we provide these notes where you will find information on the type of information collected through the Site and the various options you have to intervene in the collection and use of such information.

Please read carefully the content of this web page (hereinafter, “Privacy Policy“) which applies in any case where you access the Site and decide to browse within it and use its services.

This is an information provided under the General Data Protection Regulation 2016/679 (hereinafter, “EU Regulation 2016/679“).

Please also read the Terms and Conditions of the Site, because they also contain important information on privacy and the security systems adopted by the Site.

This information is provided only for this Site and not for other websites possibly consulted by the user through links.

Navigation on the Site and/or access to certain sections of the Site and/or any requests for information or services by users of the Site may entail the processing of personal data.

Pursuant to Articles 13 and 14 of EU Regulation 2016/679, the following information is provided:

Data Controller

The data controller of the data collected through this Site is the company PNR Italia S.r.l., Via Gandini 2, Voghera (PV), C.F.00833670151 and P.IVA IT01100290186, email: privacy@pnr.it, (hereinafter, “PNR Italia” and/or “Data Controller“).

Data Protection Officer ( DPO)

The data controller has appointed pursuant to Article 37 of the GDPR a Data Protection Officer who can be contacted at the e-mail dpo@pnr.it.

What data do we collect and use?

To access the Site, no registration is required However, within the Site, there are services for which it is necessary to provide your personal data, which will be processed solely for the related purposes and for the strictly necessary time.

PNR Italia will process the personal data collected through the Site, including, for example, name, surname, telephone number, and e-mail address. This is done in full compliance with all applicable regulations (and therefore also in compliance with the principles of fairness, lawfulness, transparency, proportionality, and protection of privacy and rights) and with logic strictly related to the purposes indicated in this statement. Personal data will be stored at the Data Controller’s headquarters and at the appointed Data Processors and will be organized in databases, including electronic ones.

In addition to the personal data provided directly by the user, during the connection to the Site, the computer systems and software procedures responsible for the operation of the Site acquire, during their normal operation, certain personal data whose transmission is implicit in the use of Internet communication protocols.

These are navigation data, information that is not collected to be associated with identified individuals, but which by their nature could, through processing and associations with data held by third parties, allow users to be identified.

This category of data includes IP addresses or domain names of the computers used by users who connect to the Site, the addresses in URI (Uniform Resource Identifier) notation of the requested resources, the time of the request, the method used in submitting the request to the server, the size of the file obtained in response, the numeric code indicating the status of the response given by the server (successful, error, etc.) and other parameters related to the user’s operating system and computer environment.

These data are used solely to obtain anonymous statistical information on the use of the Site and to check its correct operation. The data could be used to ascertain responsibility in case of hypothetical computer crimes against the Site only at the request of the supervisory bodies in charge.

For information on the cookies used by this Site, see the cookies policy.

Why do we process personal data and what is the legal basis for processing?

According to the needs expressed each time by accessing the various sections of the Site (and except for specific regulations and information for individual operations involving the provision of specific personal data, published from time to time on the Site), the purposes of processing personal data, that is, those provided directly by users through the completion of online forms, or those automatically acquired through browsing, are indicated below:

  1. To access the reserved area of the site and download company information documents;
  2. Follow up any requests made by users themselves, for example, by spontaneously sending electronic or traditional mail messages to the addresses indicated on the Site. This entails the subsequent acquisition of the address including e-mail, of the sender, or of the relevant telephone number necessary to reply to requests, as well as in the case of using the “contact us” section. ;
  3. Subject to specific and separate consent, and until consent is revoked, for the submission of offers, commercial communications, and for the subsequent sending of advertising and/or promotional material and/or opinion polls, market research. Sending newsletters (collectively referred to as ‘marketing activities’) on the Controller’s products and services via ‘automated’ contact systems (e-mail);
  4. Direct marketing if the user has selected this option;
  5. Fulfilling an obligation required by law, regulation or Community legislation;
  6. Ascertaining, exercising or defending one of our rights in court;
  7. To obtain anonymous statistical information on the use of the Site and to check its correct functioning;

The processing of such data information is allowed by the Regulation, as it:

  1. Necessary to follow up on requests made by the users themselves;
  2. Necessary for our legitimate interests in pursuing the above purposes (e.g. to verify the proper functioning of the site and, for security reasons, needs of an organizational and productive nature to constantly improve the services rendered to users, the quality, and effectiveness of customer care). These interests do not, in any case, conflict with the user’s right to privacy;
  3. In some cases, necessary to fulfil a legal obligation, e.g. in the case of communication to authorities , governmental or regulatory bodies;
  4. Necessary to initiate, prosecute or defend in legal actions;
  5. It is based on the user’s consent.


Please note that registering for the Private Area of the website to download the company’s technical and professional documentation also entails subscribing to the company newsletter and the possibility of being contacted by PNR Italia’s sales department for further insights regarding the downloaded documentation.


We may process personal data for reasons different from those stated in this privacy policy, provided such additional processing is compatible with the purpose for which the data were initially collected or based on your consent and, in any case, following the issuance of appropriate information.

Is it necessary to provide personal data and what are the consequences of refusal?

The provision of your personal data to PNR Italia, as requested on the various occasions of collection, may be necessary to pursue the purposes identified in the specific information, or optional.

The compulsory or optional nature of the provision is specified by the symbol (*) placed next to the compulsory information.

Refusal to provide certain mandatory personal data to PNR Italia will make it impossible to pursue the main purpose of the specific collection: such refusal could, for example, prevent PNR Italia from providing the services available on the site (customer service, newsletter sending).

The provision of additional personal data to PNR Italia, other than those marked as essential, is optional and does not have any consequences on the pursuit of the main purpose of the collection.

Who has access to personal data and with whom are they shared?

Your personal data will not be disseminated. Your data will only be communicated to third parties with your express consent, except in cases where communication is mandatory by law or necessary for purposes provided by law for which the consent of the data subject is not required; in such cases, the data may be made available to third parties who will process them independently and solely for the aforementioned purposes (for example, in the case of requests made by law enforcement or the judiciary or other competent authorities, or to fulfill obligations arising from the contract concluded with you).

PNR Italia relies on third parties for the processing of your personal data for certain activities. Third parties who process data on our behalf and under our authority have been adequately selected and possess experience, skills, and reliability and provide adequate assurance of full compliance with the current provisions on processing, including the data security profile; they are formally appointed data processors pursuant to Article 28 of EU Regulation 679/2016 and are subject to contractual and regulatory obligations to maintain data confidentiality. We periodically verify that data processors have promptly fulfilled their assigned tasks and continue to provide adequate assurances of full compliance with the provisions on the protection of personal data. All parties appointed as data processors, such as marketing companies, IT outsourcers, third-party service providers for sending electronic communications, may therefore know and process your personal data on behalf of the Controller, in accordance with the instructions given by the Controller and under its control. The data processors may process your personal data directly or through employees/collaborators specifically authorized for processing, who perform the activities that these external parties carry out on behalf of the Controller. All employees and collaborators of the Controller who are specifically authorized may also know and process the data, each within the limits of the functions and tasks performed and according to the instructions indicated in the appointment act, such as those responsible for the management and maintenance of IT systems, databases, system administrators, as well as employees of the offices entrusted with activities involving data processing for the purposes set out in this Privacy Policy and in the further information provided in the data collection sections.

A detailed and updated list of such individuals, as well as those operating as data processors, is readily available by sending an email to: privacy@pnr.it

How do we process personal data and how long do we retain it?

Personal data will be processed using manual, computerized, and telematic methods for a period not exceeding that necessary to achieve the purposes for which the personal data are collected, or for a longer period, for purposes permitted by law, and in any case deleted without unjustified delay.

However, we keep the user’s personal data if there are ongoing complaints or disputes.

In processing data that may directly or indirectly identify you, we strive to respect a principle of strict necessity.

For this reason, we have configured the Website in such a way that the use of your data is kept to a minimum: therefore, the processing of your data is excluded when the purposes pursued in individual cases can be achieved through the use of anonymous data (such as, for example, in market research aimed at improving services) or through other methods that only allow the person concerned to be identified when necessary or at the request of the authorities and police (such as, for example, for data relating to traffic and your stay on the website or your IP address).

Can we transfer personal data to third countries or international organizations?

We inform you, finally, that your personal data will not be transferred abroad to countries other than those belonging to the European Union, which do not ensure adequate levels of protection for individuals. In case it is necessary to provide you with services, we assure you that the transfer of your personal data to countries that do not belong to the European Union and do not ensure an adequate level of protection will be carried out only after the conclusion of specific contracts between PNR Italia and said parties in accordance with applicable law and regulations.

How is the security of personal data guaranteed?

We take appropriate security measures in order to minimise the risks of destruction or loss – even accidental – of data, unauthorised access or processing that is not permitted or not in accordance with the purposes of collection as set out in our Privacy Policy.

The transfers, storage, and processing of your data collected through the Site are ensured by appropriate technical measures. However, PNR Italia cannot guarantee its users that the measures taken for the security of the Site and the transmission of data and information on the Site limit or exclude any risk of unauthorized access. This includes the dispersion of data by devices belonging to the user. We advise you to ensure that your computer is equipped with appropriate software to protect network data transmission, both incoming and outgoing (such as up-to-date antivirus systems). Your Internet service provider has taken appropriate measures for the security of network data transmission (such as firewalls and spam filters).

Rights of data subjects

Right to access and obtain a copy of personal data

You have the right to request confirmation that we are processing any of your personal data. In some cases, you may request us to provide you with an electronic copy of your data.

Right to rectification of personal data

If the data in our possession is not correct, you have the opportunity to request the update or correction of such data.

Right to restriction of processing and right to erasure

In some circumstances, you have the right to request restriction of the processing of your personal data and/or the deletion of the same. ou have the right to make this request at any time and we will consider the possibility of accepting it. However, this right is subject to legal rights or obligations, and therefore we may need to retain the data in question. In situations where we find that, under the law, your request for deletion of personal data can be accepted, we will do so immediately without undue delay.

Right to object

You have the right to object at any time, for reasons related to your particular situation, to the processing of personal data concerning you, including profiling. In this case, we will refrain from further processing your personal data unless there are compelling legitimate grounds for the processing that override your interests, rights, and freedoms or for the establishment, exercise, or defense of a legal claim. You have the right to object at any time to processing for direct marketing purposes, including profiling to the extent that it is related to such marketing.

Right to data portability

Under certain conditions, you have the right to receive, in a structured, commonly used, and machine-readable format, the personal data concerning you and you have the right to have such data transmitted directly to another controller.

Right to lodge a complaint with the Supervisory Authority

You may lodge a complaint with the Italian Supervisory Authority if necessary, or you may address the same to request information regarding the exercise of your rights.

Withdrawal of consent

You may, at any time, withdraw the consents provided. However, the withdrawal will not affect the lawfulness of the processing based on the consent given before its withdrawal.

Exercise of rights

You may exercise your rights at any time by sending an email to privacy@pnr.it. When we send marketing communications via email, you can choose not to receive further communications by clicking “unsubscribe.”

We inform you that, in case of exercising your rights, we may ask you to identify yourself before proceeding with your request.

Last updated 23-10-2024