ERP, Shop, CRM and Document Manager on one declarative domain, with an AI agent operating across every module.
Discover Pwas-One →How Pooel S.r.l., the Data Controller, collects and uses personal data of pwas.it visitors.
This document describes how Pooel S.r.l. collects, uses and protects the personal data of users who visit the website pwas.it, the official website of the Pwas platform, for which Pooel S.r.l. is the Data Controller in every respect, including where the commercial brand used is "Pwas". For any communication regarding the processing of personal data, please write to the email address indicated above.
Computer systems automatically collect certain technical data during browsing: IP addresses, domain names, URI addresses of requested resources, request timestamps, HTTP methods, file sizes, server response codes, and parameters relating to the user's operating system and browser.
Such data is processed to ensure the correct functioning of the website and for IT security purposes, on the basis of the Controller's legitimate interest (Art. 6(1)(f) GDPR).
The website provides contact forms in the Contact, Partner and Demo sections. By filling in one of these forms, users may voluntarily submit the following personal data:
Such data is transmitted to Pooel S.r.l. and processed solely to manage the request, initiate a commercial or technical-advisory conversation, evaluate a partner application, or establish a contractual relationship. Legal basis: consent of the data subject (Art. 6(1)(a) GDPR) and/or pre-contractual measures at the request of the data subject (Art. 6(1)(b) GDPR).
No decision based solely on automated processing is made on the basis of data submitted through these forms: every request is reviewed by Pooel S.r.l. staff.
Cookies are small text files stored by your browser when you visit a website, used to remember preferences or analyse browsing behaviour.
Essential for the website to function. No consent required. They manage the session and cookie preferences.
Activated only upon the user's explicit consent, given through the banner shown on first access. Until that choice is made, they remain blocked in a denied-consent state (Google Consent Mode v2): no analytical cookie is set before the user's decision.
| Name | Duration | Purpose |
|---|---|---|
| _ga | 2 years | Identifies unique users and sessions |
| _ga_<ID> | 2 years | Maintains GA4 session state |
| _gid | 24 hours | Distinguishes users within the same day |
| _gat | 1 minute | Throttles the request rate to the server |
Data collected includes pages visited, session duration, device and browser type, country of origin (aggregated), and traffic source. IP addresses are anonymised before transmission. Legal basis: consent (Art. 6(1)(a) GDPR). Google's Privacy Policy: policies.google.com/privacy.
On first access, a banner is shown allowing users to accept all cookies or continue with strictly necessary cookies only. The choice is remembered in the browser; to change it, simply clear the site's browsing data, which will bring the banner back. Cookies can also be disabled directly in browser settings:
To opt out of Google Analytics tracking across all websites you visit: tools.google.com/dlpage/gaoptout.
A technical setting saved in the device's local storage (localStorage, not a cookie in the strict sense) remembers that the user has closed the promotional banner at the top of the page. This data is never transmitted to Pooel S.r.l.'s servers and does not require consent, being strictly functional.
| Data type | Retention period |
|---|---|
| Data submitted via contact forms | Maximum 24 months from last contact |
| Technical navigation data (logs) | Maximum 30 days |
| Google Analytics 4 (where consented) | Maximum 14 months (GA4 retention setting) |
Once these periods have elapsed, data is deleted or anonymised, unless legal obligations or a separate written agreement with the data subject require otherwise.
Personal data is not disseminated. It may be disclosed exclusively to the following categories of recipients, for the purposes indicated:
Any transfer of data to countries outside the European Economic Area (EEA) takes place exclusively in accordance with the safeguards required by Arts. 44–49 GDPR, in particular through the Standard Contractual Clauses approved by the European Commission.
Under Arts. 15–22 and 7 GDPR, data subjects have the right to:
| Article | Right | Description |
|---|---|---|
| Art. 15 | Access | Obtain confirmation of processing and a copy of the data being processed |
| Art. 16 | Rectification | Request correction of inaccurate or incomplete data |
| Art. 17 | Erasure | Request deletion where the conditions under the regulation are met (right to be forgotten) |
| Art. 18 | Restriction | Request restriction of processing |
| Art. 20 | Portability | Receive data in a structured, commonly used format |
| Art. 21 | Objection | Object to processing on legitimate grounds |
| Art. 7 | Withdraw consent | Withdraw consent at any time, without affecting the lawfulness of processing carried out before withdrawal |
| Art. 77 | Lodge a complaint | File a complaint with the Italian Data Protection Authority (garanteprivacy.it) |
To exercise these rights, write to [email protected]. The Controller will respond within 30 days of receiving the request.
The website pwas.it is intended exclusively for an adult audience (18+) and for businesses. The Controller does not knowingly collect personal data from minors. Should any unintentional processing of data relating to minors be detected, such data will be deleted immediately.
Pooel S.r.l. implements technical and organisational measures appropriate to the risk, in accordance with Art. 32 GDPR:
HTTPS with a TLS certificateThe Controller reserves the right to amend this Privacy & Cookie Policy at any time, particularly following regulatory or technological changes. Material changes will be communicated via a notice on the website.
Users are encouraged to check this page periodically. Last updated: 18 September 2026.