Privacy Policy of pan4a.it

Last Updated: January 7, 2026

This policy describes how P.A.N. srls collects, uses, and protects the personal data of users who visit the website https://www.pan4a.it, in compliance with EU Regulation 2016/679 (GDPR).

1. Data Controller

The website address is: https://www.pan4a.it. The Data Controller is P.A.N. srls, with registered office at Via Toma 108, 74026 Pulsano (TA), VAT: 03288020732, REA: TA-205724. The managing director is Francesco Vergallo. For any information regarding the processing of personal data, you may contact: Email: pan.direzione@gmail.com | PEC (Certified Email): pansrls.direzione@pec.it

2. Data Collected and Purpose of Processing

Contact Forms and Questionnaires (Elementor Form Widget)

When visitors fill out contact forms or “Listening” questionnaires on the site, we collect the data shown in the form (e.g., name, email, phone number, company data).

Purpose: To provide the requested consultancy, send results of self-assessment tests, and manage commercial leads.
Legal Basis: Execution of pre-contractual measures or consent of the data subject.

Comments

When visitors leave comments on the site, we collect the data shown in the comments form, as well as the visitor’s IP address and browser user agent string to help spam detection. An anonymized string created from your email address (also called a hash) may be provided to the Gravatar service (Gravatar Privacy Policy). After approval, your profile picture is visible to the public in the context of your comment.

Analytics and Statistics (Google Analytics 4 & Search Console)

We use Google services to monitor and analyze web traffic and user interaction to optimize site performance.

Data Collected: Cookies and usage data (anonymized IP addresses).
Provider: Google Ireland Limited. (Google Privacy Policy)

Marketing and Retargeting (Meta Pixel)

We use the Meta Pixel to measure the effectiveness of advertising campaigns and to show relevant content to users who have previously visited our site.

Provider: Meta Platforms Ireland Limited. (Meta Privacy Policy)

3. Third-Party Services and Security

Google reCAPTCHA: Used to protect contact forms from spam and abuse by distinguishing between human users and automated bots.
Cloudflare: Performance optimization and security service (CDN). It processes technical data to ensure site stability and protection. (Cloudflare Privacy Policy)
Google Fonts & Font Awesome: Services for displaying typography and icons. Usage may involve processing technical data (IP) to deliver the graphical resources.
WordPress (self-hosted): The CMS may process data necessary for the technical functioning of the site.

4. Media

If you upload images to the website, you should avoid uploading images with embedded location data (EXIF GPS) included. Visitors to the website can download and extract any location data from images on the website.

5. Cookies

Comments: If you leave a comment, you may opt-in to saving your name and email in cookies for your convenience (duration: 1 year).
Login: If you visit our login page, we will set a temporary cookie to determine if your browser accepts cookies (discarded when you close your browser). When you log in, cookies last for 2 days (screen options for 1 year). If you select “Remember Me”, your login will persist for 2 weeks.
Tracking: Analytical and profiling cookies (Google/Meta) are activated only upon explicit consent via the dedicated banner.

6. Data Retention and Sharing

Retention: Data from contact forms is kept for as long as necessary to process the request. Comments are retained indefinitely. For registered users, we store the personal information they provide in their user profile.
Sharing: If you request a password reset, your IP address will be included in the reset email. Data is not sold to third parties and is shared only for the technical purposes mentioned above.

7. User Rights

You can request to receive an exported file of the personal data we hold about you, or request that we erase any personal data (excluding data we are obliged to keep for administrative, legal, or security purposes).

8. Data Transfer

Visitor comments may be checked through an automated spam detection service.