Cookie policy

This cookie policy has been prepared and customised specifically for the website owned by Atlanta S.p.A., with registered office at Via Europa 13 – 40010 Sala Bolognese (BO), VAT no. 02144141203, pec e-mail

This policy has been devised with reference to Italian Data Protection Authority (Garante) decision no. 229 dated 8 May 2014 on “Identification of simplified procedures for providing information about the use of cookies and obtaining the related consent” and decision no. 231 dated 10 June 2021 on “Guidelines for cookies and other tracking tools”. This policy supplements and updates other information already available on the website and/or issued previously by the company, together with which it provides all the information required by art. 13 of Regulation (EU) 2016/679.

Important notice

Any and all third parties that use this information, in whole or in part, in relation to other websites – with reference to which it would certainly not be pertinent and/or would be incorrect and/or inconsistent – are warned that they could face heavy penalties levied by the Italian Data Protection Authority.

What cookies are

In practical and non-technical terms, cookies are a system of tracking that consist of small files stored by the website on the browsing device of the user. Their objectives are to save the preferences expressed while browsing and improve the performance of the website, thus optimising the browsing experience.

In technical terms, cookies are strings of text (generally a combination of letters and numbers) that the websites (so-called first parties) visited by the user or other websites/servers (so-called third parties) place or store, directly and/or indirectly, on the terminal device (PC, tablet, smartphone etc.) of the user. Servers used to browse the web or interface with the device can store the cookies and, later, send them back to the websites that generated them on subsequent visits by the same user. Specifically, these tracking tools enable the website to recognise a given device or browser.

Types of cookies and their purposes

Cookies can be classified as follows:

  • Technical cookies used solely to send a communication over an electronic network, or to the extent strictly needed when a service provider is explicitly requested by a contractual counterparty or user to deliver a service pursuant to art. 122, para. 1, of the Privacy Code. The use of these types of cookie does not require the acquisition of consent from the user, but must be indicated in the cookie policy.
  • Profiling cookies used to associate specific actions or types of behaviour with certain identified or identifiable parties, so the controller can customise provision of the service and send advertising messages that are consistent with the preferences expressed by the user while browsing.
  • • Analytics cookies installed on the device of the user by the administrators of the website visited or third-party websites. Third-party cookies, mostly used for analysis work, generally derive from the functions made available by Google Analytics. Further information about Google Analytics is available at the following link: In all cases, the cookies do not allow identification of the data subject and relate solely to a specific device or application, in order to avoid tracking the browsing data of the user. Analytics cookies may be deemed equivalent to technical cookies and, accordingly, do not require consent from the user if the following conditions are met:
    • • Their use is limited to the production of aggregated statistics regarding the website visited by the user;
    • • With regard to third-party analytics cookies, the fourth part of the tracked IP address must be masked;
    • • Again, with regard to third-party analytics cookies, the third party must be prevented from using them in combination with other processing or from sending them to other third parties.

Applicable regulations

The only requirement placed on the controller when using cookies and other technical tracking tools is to give specific information about them to the data subject.  The use of cookies and other tracking tools for non-technical purposes is only allowed after obtaining informed consent from the user, which must be given in an unambiguous manner pursuant to GDPR Recital 32.

Consent acquisition mechanism

The controller guarantees access to the consent acquisition mechanism via the presentation of a banner on the first visit of the user to the website.

The banner contains:

  • • an X, top right, which is equivalent to denial of consent by the user;
  • • a brief information stating that the website uses technical cookies and, only after obtaining consent from the user, profiling cookies as well;
  • • a link to the privacy policy and the cookie policy;
  • • a command that allows the user to give consent;
  • • a link to an area dedicated to the selection and customisation of cookies, where the user can freely give consent for the specific functions, providers and cookies that are deemed acceptable.

consent for the specific functions, providers and cookies that are deemed acceptable. Should the user deny consent for the use of cookies and other tracking tools, or only give consent for the use of certain cookies, this choice is recorded and no further requests are made in their regard, except in the following cases:

  • • when one or more of the conditions of processing change significantly;
  • • when the website administrator is unable to determine if a cookie has already been stored on the device;
  • • when the banner has not been displayed for at least 6 months.

Browser settings

Users are free, at any time, to configure directly the privacy parameters for the installation and use of cookies by following the related instructions on how to change their browser settings.

In particular, users can enable the so-called “private browsing” setting, as a result of which their browser will cease to store their browsing history, as well as any passwords input, any cookies received and any other information about the webpages visited.

Should users decide to disable all cookies (including those of a technical nature), the quality and speed of the services offered by this website might deteriorate drastically and access to certain sections of the website might be lost.

Rights of data subjects

As the data subject, you are entitled to exercise the following rights:

Right of access pursuant to art. 15 of Regulation (EU) 2016/679: data subjects are entitled to confirmation as to whether or not their personal data is being processed, and, where that is the case, to obtain access to their personal data and information about the purposes of the processing, the categories of personal data concerned, and the recipients or categories of recipient to whom the personal data has been or will be disclosed.

Right to rectification pursuant to art. 16 of the Regulation:

  • • rectification of inaccurate personal data without undue delay;
  • • completion of incomplete personal data.

Right to erasure («right to be forgotten») pursuant to art. 17 of the Regulation: erasure of their personal data without undue delay

Right to restriction of processing pursuant to art. 18 of the Regulation in the following cases:

  • • the accuracy of the personal data is contested by the data subject, for a period enabling the controller to verify the accuracy of that personal data;
  • • the processing is unlawful and the data subject opposes erasure of the personal data and requests the restriction of its use instead;
  • • the controller no longer needs the personal data for the purposes of the processing, but it is required by the data subject for the establishment, exercise or defence of legal claims;
  • • the data subject has objected to processing pursuant to art. 21, para. 1, pending verification of whether the legitimate grounds of the controller override those of the data subject.

Right to data portability pursuant to art. 20 of the Regulation: data subjects can receive their personal data held by us in a structured, commonly used and machine-readable format.

Right to transmit that data to another controller without hindrance from the controller to which it was provided, in the cases envisaged in art. 20 of the Regulation.

Right to object at any time to the processing of their personal data pursuant to art. 6, para. 1, letters e) or f), and art. 21 of the Regulation, including for profiling purposes, on grounds relating to their particular situation.

The above requests may be made to the Controller

The Controller is Atlanta S.p.A., with registered office at Via Europa 13 – 40010 Sala Bolognese (BO), VAT no. 02144141203, pec e-mail

Requests may be sent by:

  • – a registered letter with confirmation of receipt to Atlanta S.p.A., Via Europa 13 – 40010 Sala Bolognese (BO).
  • an e-mail to

In addition, should data subjects believe that processing has infringed the data protection regulations, they are entitled to lodge a complaint with the Italian Data Protection Authority, Piazza Venezia 11 – 00187 – Rome.