LEGAL
Privacy Policy.
Last Updated: October 2026
This Privacy Notice for PragmaTech S.r.l. ("PragmaTech", "we", "us", or "our") describes how and why we may access, collect, store, use, and/or share ("process") your personal information when you use our services ("Services"), including when you:
- Visit our website at https://pragmatech.it or any website of ours that links to this Privacy Notice.
- Use our software products, including The Lean Platform (TLP) and our Warehouse Management System (WMS) and Manufacturing Execution System (MES) modules.
- Engage with us in other related ways, including sales inquiries, support requests, or events.
Reading this Privacy Notice will help you understand your privacy rights and choices. If you do not agree with our policies and practices, please do not use our Services. If you have any questions or concerns, please contact us at info@pragmatech.it.
1. Data Controller
The data controller responsible for your personal information is:
PragmaTech S.r.l.
Piazza Gianfranco Ferrè 6, Legnano (MI), 20025, Italy
Email: info@pragmatech.it
Where we provide our Services to a business customer (for example, hosting a customer's warehouse or manufacturing data within TLP, WMS, or MES), that customer is generally the data controller of the personal information processed within its account, and PragmaTech acts as a data processor on its behalf under a data processing agreement. This Privacy Notice does not apply to information we process as a processor; questions about such processing should be directed to the relevant customer.
2. What Information Do We Collect?
Information you provide to us. We collect personal information you voluntarily provide when you fill out a contact or demo request form, register for our Services, or otherwise communicate with us, including:
- Name and contact information (email address, phone number).
- Company name and job title.
- Account credentials, where applicable.
- Any information provided in the "Message" field or in support requests.
- Billing information necessary to process payment for our Services, such as invoicing and payment instrument details. Payment data is handled by our third-party payment processors and is not stored on our own systems.
We do not intentionally collect sensitive personal information (such as racial or ethnic origin, health data, or religious beliefs), and we ask that you do not submit such information to us.
Information collected automatically. When you visit or use our website and Services, we automatically collect certain technical information, such as your IP address, browser and device characteristics, operating system, language preferences, referring URLs, and information about how you interact with our website and Services (log and usage data). This information is used to maintain the security and operation of our Services and, only where you have consented to analytics cookies, to produce aggregated statistics about the use of our website through Google Analytics (see section 6).
3. How Do We Process Your Information?
We process your personal information for the following purposes:
- To provide, operate, and administer our Services (including TLP, WMS, and MES), and to create and manage user accounts.
- To respond to inquiries and provide customer and technical support.
- To provide information about our software solutions and, where you have agreed to receive them, marketing communications.
- To fulfill and manage contracts, orders, invoicing, and payments.
- To maintain the security of our Services and prevent fraud or misuse.
- To comply with legal obligations, including tax, accounting, and, where applicable, Pharma/FDA 21 CFR Part 11 requirements.
4. Legal Bases for Processing (GDPR)
Where the General Data Protection Regulation (GDPR) applies, we rely on the following legal bases to process your personal information:
- Consent — where you have given us permission to use your personal information for a specific purpose, such as marketing communications or the use of analytics cookies on our website. You may withdraw your consent at any time, without affecting the lawfulness of processing carried out before its withdrawal.
- Performance of a contract — where processing is necessary to provide our Services or to take steps at your request prior to entering into a contract.
- Legal obligation — where processing is necessary to comply with applicable law, such as tax and accounting rules.
- Legitimate interests — where processing is necessary for our legitimate business interests, such as maintaining the security of our Services, and such interests are not overridden by your rights.
5. When and With Whom Do We Share Your Information?
We do not sell your personal information. We may share your personal information in the following situations:
- With service providers who perform services on our behalf, such as hosting, email delivery, analytics, and payment processing, under appropriate contractual safeguards.
- With Google Ireland Limited, as provider of Google Analytics, only where you have consented to analytics cookies (see section 6).
- To comply with applicable law, respond to lawful requests from public authorities, or protect our rights, property, or safety, or that of our users.
- In connection with a merger, acquisition, financing, or sale of all or a portion of our business or assets, subject to appropriate confidentiality safeguards.
6. Cookies and Similar Technologies
Cookies are small text files that a website stores on your device. Our website uses the following categories of cookies and similar technologies.
Technical (strictly necessary). These are required for the website to work and do not require your consent. We store your cookie choice in your browser's local storage (key cookie-consent-v2) so that we do not ask you again on every page. This record contains only your choice and the date it was made, and is kept for 6 months, after which we ask you again.
Analytics (only with your consent). If you click “Accept” on our cookie banner, we use Google Analytics 4, a service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”), to collect aggregated statistics about how visitors use our website, such as pages visited, time spent on pages, referring websites, approximate location (country/city), and device and browser type. We use this information only to understand and improve our website. Google Analytics sets the following cookies:
_ga— distinguishes unique visitors; expires after 2 years._ga_HRM5E1218G— maintains session state; expires after 2 years.
Google Analytics 4 does not log or store IP addresses. We have disabled Google Signals and advertising personalization features, so analytics data is not used for advertising or to build profiles of you. Analytics data is retained in Google Analytics for 14 months and is then deleted automatically. The legal basis for this processing is your consent (Art. 6(1)(a) GDPR and Art. 122 of the Italian Privacy Code). If you decline, or simply close the banner, no analytics cookies are set and Google Analytics is not loaded.
Google may process this data in the United States. Google LLC is certified under the EU-U.S. Data Privacy Framework, and transfers are additionally covered by the European Commission's Standard Contractual Clauses. More information is available in Google's Privacy Policy and on how Google uses information from sites that use its services.
Managing your choice. You can change or withdraw your consent at any time by clicking “Cookie settings” in the footer of any page; when you withdraw consent, we stop Google Analytics and delete its cookies from your browser. You can also block or delete cookies through your browser settings, or install the Google Analytics Opt-out Browser Add-on.
7. Artificial Intelligence Features
Certain features of our Services (including TLP, WMS, and MES) may use artificial intelligence or machine learning to provide functionality such as suggested insights, natural language assistance, or automated recommendations ("AI Features"). AI Features are optional and are not required to access the core functionality of our Services. Data processed by AI Features is handled in accordance with this Privacy Notice and any applicable data processing agreement with our customers, and is not used to train models for the benefit of other customers.
8. International Data Transfers
PragmaTech is based in Italy and primarily processes and stores data within the European Economic Area (EEA). Where we engage service providers located outside the EEA, we ensure appropriate safeguards are in place, such as an adequacy decision (including the EU-U.S. Data Privacy Framework for certified U.S. companies) or the European Commission's Standard Contractual Clauses, to protect your personal information in accordance with applicable data protection law.
9. Data Retention
We retain your personal information only for as long as necessary to fulfill the purposes described in this Privacy Notice, unless a longer retention period is required or permitted by law (for example, tax or accounting obligations). When we no longer have a legitimate business need to process your personal information, we will delete or anonymize it, or, where immediate deletion is not possible, securely isolate it from further processing until deletion can occur.
10. How Do We Keep Your Information Safe?
We have implemented reasonable technical and organizational security measures designed to protect the personal information we process. However, no method of transmission over the internet or electronic storage is 100% secure, and we cannot guarantee absolute security. Transmission of personal information to and from our Services is at your own risk.
11. Children's Privacy
Our Services are intended for business use and are not directed to children. We do not knowingly collect personal information from individuals under 18 years of age. If we become aware that we have inadvertently collected personal information from a child, we will take reasonable steps to delete it. If you believe we may have collected information from a child, please contact us at info@pragmatech.it.
12. Your Privacy Rights (GDPR)
If you are located in the European Economic Area, United Kingdom, or Switzerland, you have the following rights regarding your personal information:
- The right to access and obtain a copy of the personal information we hold about you.
- The right to request rectification of inaccurate personal information.
- The right to request erasure of your personal information.
- The right to restrict or object to our processing of your personal information.
- The right to data portability.
- The right to withdraw your consent at any time, where processing is based on consent.
To exercise these rights, please contact us at info@pragmatech.it. We will respond to your request in accordance with applicable data protection law. If you are not satisfied with our response, you have the right to lodge a complaint with your local data protection authority, or with the Italian Garante per la protezione dei dati personali (www.garanteprivacy.it).
13. Do-Not-Track Signals
Some browsers include a "Do Not Track" (DNT) feature. As there is currently no uniform industry standard for recognizing and responding to DNT signals, our website does not currently respond to them.
14. Changes to This Notice
We may update this Privacy Notice from time to time to reflect changes in our practices or for other operational, legal, or regulatory reasons. The updated version will be indicated by an updated "Last Updated" date above. We encourage you to review this page periodically.
15. Contact Us
If you have questions, comments, or requests regarding this Privacy Notice or how we process your personal information, please contact us at:
PragmaTech S.r.l.
Piazza Gianfranco Ferrè 6, Legnano (MI), 20025, Italy
Email: info@pragmatech.it