Privacy policy

Last Updated: July 1, 2026

Ai sensi degli articoli 13 e 14 del Regolamento (UE) 2016/679 (“GDPR”), PCDUE S.r.l. fornisce la presente informativa relativa al trattamento dei dati personali raccolti attraverso il sito web www.pcdue.com, il form di contatto e il servizio di assistenza clienti MYBOT.

Data controller

The Data Controller is PCDUE S.r.l., with its registered office at Viale Sondrio 7, 20124 Milan (MI), Italy, VAT No. 14157570962. For any requests regarding the processing of your personal data, you may contact us at:

Email: info@pcdue.com

Phone: +39 02 9713 5649

Address: Viale Abruzzi, 94 – 20131 Milano, Italia

2. What data we collect

Browsing Data:

During normal browsing of the website, certain data (such as your IP address, browser type, pages visited, and access times) are automatically collected for the technical operation of the website and for aggregated statistical purposes.

Data Provided Through the Contact Form

When you complete the contact form, we collect the information you voluntarily provide, including your first name, last name, email address, phone number, company name, and the content of your message.

Data Collected Through MYBOT (Customer Support)

When you use the MYBOT chatbot, we collect the content of your conversations with the assistant, as well as any contact information you choose to provide during the conversation in order to be contacted by one of our representatives.

The website uses technical cookies that are necessary for its operation, as well as Google Analytics cookies for statistical purposes related to website usage.

For complete details regarding the cookies used, their purposes, and how consent is managed, please refer to our Cookie Policy.

3. Purposes and legal basis for processing

Purpose

Respond to inquiries sent via the contact form

Provide assistance via the MYBOT chatbot.

To comply with legal obligations (e.g., tax or accounting obligations in the event of a business relationship)

Aggregated browsing statistics and site improvement

Non-technical cookies, if present

Legal basis

Implementation of pre-contractual measures requested by the data subject (Art. 6.1.b GDPR)

Performance of pre-contractual measures / legitimate interest in providing support to visitors (Art. 6.1(b) and 6.1(f) GDPR)

Legal obligation (Art. 6(1)(c) GDPR)

Legitimate interest of the Data Controller (Art. 6(1)(f) GDPR)

Consent of the data subject (Art. 6(1)(a) GDPR)

Providing data via the contact form and MYBOT is optional but necessary to respond to your request; without this data, we will be unable to process it.

4. Information on the use of artificial intelligence

MYBOT is an artificial intelligence-based virtual assistant. In accordance with Article 50 of Regulation (EU) 2024/1689 (“AI Act”), we inform you that you are interacting with an artificial intelligence system and not with a human operator, unless explicitly stated otherwise during the conversation. MYBOT operates on PCDUE’s internal infrastructure: conversations are not transmitted to external artificial intelligence providers, nor are they processed outside our systems.

5. Data recipients

Your personal data may be disclosed to:

Authorized PCDUE personnel, within the scope of their respective duties; Our hosting provider, located within the European Economic Area, acting as a Data Processor (Art. 28 GDPR); Google Ireland Limited, for the Google Analytics service, acting as a Data Processor; Public authorities, where required by law. We do not sell or disclose your personal data to third parties for their own commercial purposes. The website, hosting infrastructure, and MYBOT chatbot operate entirely on infrastructure located within the European Economic Area.

Data Transfers Outside the EU:
Google Analytics may involve the transfer of data to the United States, as Google LLC (the parent company of Google Ireland Limited) is subject to U.S. jurisdiction. Such transfers take place on the basis of the European Commission's Standard Contractual Clauses adopted by Google. Google Analytics 4, even with IP anonymization enabled, has been the subject of decisions by the Italian Data Protection Authority regarding non-compliant data transfers to the United States. We recommend carefully evaluating whether to continue using GA4 as currently configured or migrate to an analytics solution hosted within the EU (such as Matomo or Plausible) to eliminate this risk entirely.]

6. Data retention period

Personal data submitted through the contact form will be retained for the time necessary to process your request and for a maximum of 12 months after the last contact, unless a longer retention period is required by law (for example, in the event of a subsequent contractual relationship). MYBOT conversations will be retained for a maximum of 12 months. Browsing data collected through Google Analytics will be retained according to the retention settings configured within PCDUE’s Google Analytics account. Once these retention periods have expired, the data will be permanently deleted or irreversibly anonymized.

7. Your rights

As a data subject, you have the right to: Access your personal data (Art. 15 GDPR); Request the correction of inaccurate personal data (Art. 16 GDPR); Request the deletion of your personal data where permitted by law (Art. 17 GDPR); Request the restriction of processing (Art. 18 GDPR); Object to processing based on legitimate interest (Art. 21 GDPR); Receive your personal data in a structured, commonly used, and machine-readable format and transmit it to another controller, where applicable (Art. 20 GDPR); Withdraw any consent you have given at any time, without affecting the lawfulness of processing carried out before the withdrawal. To exercise these rights, you may contact us at info@pcdue.com.

You also have the right to lodge a complaint with the Italian Data Protection Authority (Garante per la Protezione dei Dati Personali) at www.garanteprivacy.it, if you believe that the processing of your personal data violates applicable data protection legislation.

8. Security measures

PCDUE implements appropriate technical and organizational measures to ensure a level of security proportionate to the risks involved, including encrypted communications, access control, system monitoring, and regular backups, in accordance with the privacy by design principles set out in Article 25 GDPR.

9. Changes to this privacy policy

This Privacy Policy may be updated periodically to reflect changes in applicable legislation or in our data processing activities. The date of the latest update is indicated at the top of this document. We encourage you to review this Privacy Policy regularly.

10. Contact information

If you have any questions regarding this Privacy Policy or the processing of your personal data, please contact:

PCDUE S.r.l. Viale Sondrio 7 20124 Milan, Italy