Privacy notice

Pursuant to Articles 13 and 14 of Regulation (EU) 2016/679 (“GDPR”) and Italian Legislative Decree 196/2003 (“Privacy Code”). Last updated: 3 October 2026 — version 2026-10.

1. Who processes your data

The data controller is Plasmiam S.r.l., registered office at Viale Risorgimento 14, 72100 Brindisi (BR), Italy, tax code 02799840745, VAT no. IT02799840745 (“Plasmiam” or “we”).

For any question about this notice or to exercise your rights, write to info@plasmiam.com.

2. Who this notice is for

It concerns anyone who visits www.plasmiam.com (the “Site”), writes to us through the contact form or by email, or requests a demo. The Site is aimed at businesses and professionals. For cookies, see the cookie policy.

3. What data we process, why, and on what legal basis

3.1 Browsing the Site

To run the Site and protect it from abuse, our servers automatically record some technical data: IP address, date and time of the request, page requested, browser and operating system, response code.

  • Purpose: operation, security, prevention of cyber attacks.
  • Legal basis: our legitimate interest in the security and operation of the Site (Art. 6(1)(f) GDPR).
  • Retention: 30 days. Longer only if needed to investigate a security incident or an offence, for the time strictly necessary.

We do not use analytics tools on the Site.

3.2 Contact form and email

If you write to us, we process the data you give us: name, email, company and the content of your message.

  • Purpose: replying to your request and, if you wish, starting a business relationship.
  • Legal basis: pre-contractual measures taken at your request (Art. 6(1)(b) GDPR); for general enquiries, our legitimate interest in replying (Art. 6(1)(f) GDPR).
  • Provision: the fields marked as required are needed to reply. Without them we cannot handle the request.
  • Retention: 24 months from the last contact, if no contractual relationship follows. If one does, for the duration of the relationship and then for the periods required by law (usually 10 years for accounting and contractual records).

3.3 Demo requests

In addition to the data in 3.2, we ask for technical information about your case (asset type, manufacturer, control systems, number of assets, where the data should stay), so that we can prepare a relevant demo. Please do not enter personal data of others or confidential information about your plant: these can be exchanged later, if appropriate under a non-disclosure agreement.

  • Legal basis: pre-contractual measures at your request (Art. 6(1)(b) GDPR).
  • Retention: as in 3.2.

3.4 Legal obligations and protection of rights

We may process data to comply with legal obligations (Art. 6(1)(c) GDPR) or to establish, exercise or defend legal claims (Art. 6(1)(f) GDPR), for the time strictly necessary.

4. What we don't do

  • We do not sell or transfer your data.
  • We do not carry out profiling or take decisions based solely on automated processing (Art. 22 GDPR).
  • We do not send newsletters or promotional messages.
  • We do not use profiling cookies or third-party advertising tools.

5. How we process data

We use electronic tools and appropriate technical and organisational measures (Art. 32 GDPR): encrypted connections (HTTPS), access limited to authorised staff, backups and security updates.

6. Who receives the data

Data is processed by our authorised staff and by providers acting as processors (Art. 28 GDPR), bound by contract:

  • netcup GmbH (Germany): hosting of the Site's servers in a data centre in the European Union;
  • our email service providers: handling of email and sending of service emails.

Where required by law, data may also be disclosed to advisers (e.g. lawyers) and public authorities. The up-to-date list of processors is available on request at info@plasmiam.com.

7. Transfers outside the European Union

The Site's data is stored on servers in the European Union. Where an email provider processes data outside the EU/EEA, the transfer relies on an adequacy decision of the European Commission (Art. 45 GDPR) or on the Commission's standard contractual clauses (Art. 46 GDPR); you can request a copy by writing to us.

8. Your rights

At any time you can ask us for:

  • access to your data and a copy of it (Art. 15);
  • rectification of inaccurate data (Art. 16);
  • erasure (Art. 17);
  • restriction of processing (Art. 18);
  • portability of the data you provided, for processing based on contract or consent (Art. 20);
  • to object to processing based on our legitimate interest, on grounds relating to your particular situation (Art. 21).

Write to info@plasmiam.com. We reply without undue delay and in any case within one month, extendable by two months for complex requests (Art. 12(3) GDPR). We may ask you to confirm your identity.

9. Complaints

If you believe the processing breaches the GDPR, you can lodge a complaint with the Italian Garante per la protezione dei dati personali (Piazza Venezia 11, 00187 Rome — www.garanteprivacy.it) or with the supervisory authority of the Member State where you live or work, or where the alleged breach occurred (Art. 77 GDPR).

10. Changes

We may update this notice. The date of the last update is shown at the top.

11. Language

This notice is published in English, Italian and Spanish, like the rest of the Site.