How We Protect Your Data

Privacy Policy

Last updated: January 2025

Plank Platform Inc. and Plank Italy Spa Società Benefit (hereinafter “Plank”, “we” or “the Company”) are committed to protecting the privacy and personal data of users who visit this website and use our services. This notice is provided pursuant to Articles 13 and 14 of EU Regulation 2016/679 (GDPR) and applicable national legislation.

1. Data Controller

The Data Controller for personal data processing is:
Plank Italy Spa Società Benefit
Via Privata della Passarella 4, 20122 Milan, Italy
E-mail: [email protected]
Phone: +39 02 30559964

2. Data Collected

Plank may collect the following categories of personal data:

• Browsing data: IP address, browser type, operating system, pages visited, access times, and log data automatically collected by IT systems during website navigation.
• Voluntarily provided data: name, surname, e-mail address, phone number, company name, and any other information entered in contact forms, demo requests, or registrations.
• Contractual data: information necessary for the provision of Plank platform services to business clients (B2B), including billing data and company information.

3. Purposes of Processing

Personal data is processed for the following purposes:

• Service delivery: platform management, customer support, CRM, billing, payment management, and all related services.
• Communications: responding to information requests, sending service-related communications, and, with prior consent, sending commercial communications.
• Legal obligations: compliance with obligations under law, regulations, or European legislation.
• Security: protection of the website and IT systems, prevention of fraud and illegal activities.
• Service improvement: aggregate analysis and statistics to improve user experience and our services.

4. Legal Basis for Processing

Personal data processing is based on the following legal grounds:

• Consent of the data subject (Art. 6.1.a GDPR) for commercial communications and non-essential cookies.
• Performance of a contract or pre-contractual measures (Art. 6.1.b GDPR) for the provision of requested services.
• Legal obligation (Art. 6.1.c GDPR) for tax, accounting, and regulatory compliance.
• Legitimate interest (Art. 6.1.f GDPR) for system security and service improvement.

5. Data Recipients

Personal data may be shared with:

• Authorized Plank personnel, for the purposes indicated above.
• Third-party service providers (hosting, cloud computing, technical support) acting as Data Processors, contractually bound to comply with the GDPR.
• Competent authorities, when required by law.

6. Data Transfers

Some personal data may be transferred to Plank Platform Inc. in the United States of America. In such cases, the transfer is carried out on the basis of adequate safeguards, including Standard Contractual Clauses (SCCs) approved by the European Commission, in accordance with Chapter V of the GDPR.

7. Data Retention Period

Personal data is retained for the time strictly necessary to achieve the purposes for which it was collected and, in any case, in compliance with applicable legal limitation periods. Browsing data is deleted within 12 months of collection, unless required for crime investigation purposes.

8. Data Subject Rights

As a data subject, you have the right to:

• Access (Art. 15 GDPR): obtain confirmation of data processing and access your data.
• Rectification (Art. 16 GDPR): obtain correction of inaccurate data or completion of incomplete data.
• Erasure (Art. 17 GDPR): obtain deletion of your data, in cases provided by law.
• Restriction (Art. 18 GDPR): obtain restriction of processing.
• Portability (Art. 20 GDPR): receive your data in a structured format and transfer it to another controller.
• Objection (Art. 21 GDPR): object to processing based on legitimate interest.
• Withdrawal of consent: withdraw consent at any time, without affecting the lawfulness of processing based on consent prior to withdrawal.

To exercise your rights, you may send a request to [email protected].

9. Complaint to the Supervisory Authority

The data subject has the right to lodge a complaint with the Italian Data Protection Authority (www.garanteprivacy.it) if they believe that the processing of their personal data violates the GDPR.

10. Data Security

Plank adopts appropriate technical and organizational measures to protect personal data from unauthorized access, loss, destruction, or alteration, in compliance with the security standards required by ISO 27001 certification and industry best practices.

11. Changes to the Privacy Policy

This Privacy Policy may be updated periodically. Significant changes will be communicated through the website. We recommend consulting this page regularly to stay informed.

12. Contacts

For any questions regarding this Privacy Policy or the processing of personal data, you may contact us at:
Plank Italy Spa Società Benefit
Via Privata della Passarella 4, 20122 Milan, Italy
E-mail: [email protected]
Phone: +39 02 30559964