ENITES← Back to the site

Privacy Policy

Last updated: 10 September 2026

This notice, provided pursuant to Articles 13-14 of Regulation (EU) 2016/679 (GDPR), describes how the personal data of users who visit meetwinston.co and request a Winston demo is processed. The site is an informational and demo-request page: it does not allow purchases, subscriptions, account creation or access to the platform.

The site is not the platform. Winston, the platform itself, is available at portale-evento.com and has its own privacy notice, addressed to the organisers who access it and to the attendees of their events. When an organiser uses Winston to collect registrations, the controller of the attendees' data is the organiser, and Plesh Tech S.r.l. acts as processor.

1. Data controller

The data controller is Plesh Tech S.r.l., the company that develops and provides Winston.

Registered office
Via Agostino da Montefeltro 2, 10134 Turin (TO), Italy
VAT and tax code
IT12380050018
Privacy email
hello@plesh.co

No Data Protection Officer (DPO) has been appointed and announced through this site; any such appointment will be stated in this section.

2. Data processed

a) Browsing data and technical data

The IT systems and software procedures that run the site acquire, in the course of their normal operation, certain technical data whose transmission is implicit in the use of internet communication protocols, for example IP address, browser and device type, pages visited, date and time of the request. This data is used to deliver the site correctly and to keep it secure.

b) Data provided through the demo request or contact form

The form on the site collects the data you enter voluntarily: first name, last name and work email. If you write to us by email, we process your address and the content of your message.

c) Data collected through cookies and similar technologies

The site uses technical cookies and, only with your consent, analytics and marketing cookies. For full details see the Cookie Policy.

d) Booking the demo

The appointment can be booked through an external calendar embedded in the site's pages, which collects the data needed to arrange the meeting: name, email, and the chosen date and time.

3. Purposes and legal bases

  • Delivery and security of the site (technical data and necessary cookies): the controller's legitimate interest in providing a working, secure site, Art. 6.1.f GDPR. No consent is required for technical cookies.
  • Handling the demo or contact request: replying to the request, follow-up by a Plesh Tech S.r.l. sales contact, sending the emails needed to manage the request such as confirmation, reminders and demo scheduling: pre-contractual measures taken at the request of the data subject, Art. 6.1.b GDPR.
  • Analytics, that is, measuring use of the site: consent, Art. 6.1.a GDPR.
  • Marketing and advertising campaign measurement, including retargeting and conversion tracking: consent, Art. 6.1.a GDPR.
  • Legal defence and statutory obligations: legal obligation and legitimate interest, Art. 6.1.c and 6.1.f GDPR.

Providing the form data is optional but necessary in order to handle the demo request: without it we cannot get back to you.

Any promotional communications unrelated to the demo request are sent only on the basis of specific, separate consent that can be withdrawn at any time.

4. Recipients and categories of recipients

Data may be processed by the controller's authorised staff and by suppliers acting as processors or as independent controllers, in particular:

  • the site's hosting and delivery provider;
  • the provider of the form and the contact database, for handling the request and the related emails;
  • Google (Google Tag Manager and Google Analytics): tag management and usage statistics, subject to consent;
  • Meta Platforms (Meta Pixel): campaign measurement and optimisation, subject to consent;
  • the appointment booking tool used for the demo calendar;
  • consultants and professionals, and the competent authorities in the cases provided for by law.

The data is not disseminated or sold to third parties.

5. Transfers outside the EEA

Some of the suppliers listed, in particular Google and Meta, may also process data outside the European Economic Area, especially in the United States. In such cases the transfer takes place on the basis of the safeguards set out in Chapter V of the GDPR: adequacy decisions, including the EU-US Data Privacy Framework, and Standard Contractual Clauses adopted by the European Commission. You can request information about the safeguards applied by writing to the contacts given in section 1.

6. Retention periods

  • Demo or contact request data: kept for as long as needed to handle the request and the related commercial follow-up, and thereafter for the applicable statutory periods.
  • Data processed on the basis of consent, that is, analytics and marketing: until consent is withdrawn or until the cookies expire as stated in the Cookie Policy.
  • Technical logs: for as long as needed for the security and diagnostics of the site.

The specific retention periods set by the controller for each category of data will be stated in this section.

7. Rights of the data subject

You may exercise at any time the rights set out in Articles 15-22 GDPR: access, rectification, erasure, restriction, portability, objection to processing based on legitimate interest, and withdrawal of consent, which does not affect the lawfulness of processing carried out before withdrawal.

To exercise your rights write to hello@plesh.co. You also have the right to lodge a complaint with the Italian Data Protection Authority (garanteprivacy.it).

To change or withdraw your cookie consent you can use the panel indicated in the Cookie Policy.

8. Changes to this notice

The controller may update this notice to reflect changes in the law or in how the site works. The version in force is always published on this page with the date it was last updated.