Privacy notice

Version 6 — 27 October 2026

This is the English version. Versione italiana — the two are equivalent; in relationships governed by Italian law the Italian text prevails.

This page explains what happens to the email address you leave in order to open the preview of the map of authorized BESS projects, and to the email address you use to sign in as a subscriber. This notice is provided under Articles 13 and 14 GDPR. Your authorized email address, name and business contact details, where provided, may be supplied to us by your organization in connection with its subscription.

Who processes your data

The data controller is PLUTEO S.r.l., Via A. De Gasperi 82, 62010 Mogliano (MC), Italy, tax code and VAT no. 02109050431. MACSE.IT is a Pluteo brand. To exercise your rights, or for any request, write to privacy@pluteo.io. We have not appointed a Data Protection Officer.

How the preview works

The preview opens once only per email address and stays accessible for 30 minutes. It is there to show what the data looks like. Once the window closes, the preview does not reopen with the same address.

Some people reach the map instead through a direct invitation link we send them. In that case the opening mechanism involves no email address, even if the link reached you by email: the link itself carries the authorization, and we ask you for nothing.

How subscribers sign in

If your organization holds a subscription, the email addresses of its authorized users are on our access list, up to the number of users set in the subscription. To sign in you enter your address on the subscriber page. If the address is on the list we send it a personal sign-in link by email. The link works once and expires after 15 minutes; using it signs you in on that browser for 12 hours. If the address is not on the list we send nothing, and the page shows the same message in both cases.

The sign-in email is sent from an address on the macse.it domain, through our email delivery provider (see “Who we share the data with”).

What data we process

For the preview, we process your email address and the choice you make on the updates checkbox. We do not ask for your name, company or anything else, and we use no analytics or profiling tools on the site.

For subscribers we process the email address on the access list, the organization it belongs to and the sign-in requests made with that address.

To administer the subscription, we also process the names and business contact details of contacts and users, where supplied in the order or in subsequent communications with the subscribing organization. The sign-in system uses the authorized email address and the user's organization.

We use Brevo to send your sign-in link. Brevo processes your email address and the message content, including the personal link. Brevo records whether the email is opened, through a tracking image, and whether the link is clicked: the link passes through a Brevo redirect address before it reaches the site. We use technical sending, delivery and error data to send these emails. For these emails, in the logs available to us any open and click events are not associated with your email address. Sending and delivery remain associated with the address. We do not use opens and clicks for profiling or marketing.

Our hosting and email delivery providers may process the technical connection data strictly necessary to deliver and protect the service — including the IP address — according to their respective configurations.

We check whether the domain of the address entered is configured to receive email. For this purpose, the DNS resolution service receives only the domain, not the full email address.

If sending fails, we record technical logs to diagnose problems and protect the service. Email addresses in error messages are masked before the @ sign; the domain may remain visible.

To keep the preview and the sign-in links from being abused we also keep, on our own infrastructure, a cryptographic fingerprint of the IP address the request comes from, together with the hour in which it was made. In these counters we do not keep the IP address itself in clear. The fingerprint is computed one-way with a secret key kept on the server and is used for one thing only: capping how many previews can be opened, and how many sign-in links can be requested, from the same connection within one hour. It is a pseudonymised identifier, not an anonymous one — within the retention window it lets us recognise the same connection, and nothing else. You can object to this processing at any time by writing to privacy@pluteo.io; we will stop unless there are compelling legitimate grounds, which is the case for requests that are themselves abusive.

For the same reason, and for the same time, we keep a cryptographic fingerprint of the address entered on the subscriber page, so as to cap sign-in requests at five per address per hour. This applies to any address entered, whether or not it is on the access list.

For what purposes, and on what legal basis

To open the preview for you. Legal basis: the performance of measures taken at your request (art. 6.1.b GDPR). Providing the address is mandatory: without it we cannot open the preview.
To enforce the limit of one preview per address. Legal basis: our legitimate interest in distributing in a controlled way content we offer as a trial (art. 6.1.f GDPR). How we do this is explained below.
To give subscribers access to the map and to the data reserved for them. This covers keeping the access list, sending the sign-in link and keeping you signed in. For individual subscribers who are parties to the subscription agreement, we process the data necessary to perform that agreement under Article 6(1)(b) GDPR. For users designated by a subscribing organization, processing is based on our legitimate interest in providing and protecting the service requested by that organization under Article 6(1)(f) GDPR. You may object by writing to privacy@pluteo.io. Without an authorized email address, we cannot provide personal access.
To prevent automated abuse and protect fair availability of the preview and of the service. In practice: stopping a single connection from using up other people’s addresses in bulk, or from requesting sign-in links in bulk. Legal basis: our legitimate interest (art. 6.1.f GDPR). You may object at any time.
To send you updates and communications about our services. Legal basis: your consent (arts. 6.1.a and 7 GDPR; art. 130 of the Italian Privacy Code). Providing it is optional: if you do not tick the box the preview opens anyway and your address is not recorded in the newsletter list.

How the one-preview limit works

To know whether an address has already used its preview we do not keep the address: we keep a cryptographic fingerprint of it, that is, a string computed one-way. The fingerprint does not contain the address in clear and is pseudonymized data used to check whether the same address has already used the preview. The fingerprint only serves to answer the question “has this address already been through?”. It cannot be used to write to you, it is not linked to any other data except the date and time of the first access and it is not disclosed to anyone.

We retain the fingerprint while the service applies the one-preview-per-address limit and delete it when the service ends or that limit is removed. We periodically review whether retention remains necessary. You can request erasure or object to processing by writing to privacy@pluteo.io.

Cookies and similar tools

When the preview opens we write a cookie, first-party, called bm. It contains the moment at which access expires and a signature that lets us verify it has not been altered. It contains neither your email address nor a reusable identifier, and it is not used for analytics, profiling or marketing.

It is a technical cookie, necessary to deliver the service you expressly requested: for this reason it is not subject to consent (art. 122 of the Italian Privacy Code) and you will not find a banner. It expires automatically after 30 minutes — or after 8 hours if you reached the map through an invitation link, so that a working session need not be reopened; in that case too it contains no identifiers. You can delete it at any time from your browser settings: you will only lose the session in progress.

When a subscriber signs in we write two more first-party cookies. Both expire automatically after 12 hours:

__Host-ab keeps the subscriber session. It contains a cryptographic fingerprint of the subscriber’s email address, the moment at which access expires and a signature. At every request we check that the fingerprint still matches an address on the access list: access ends when we remove the address from the list, within the times stated under “How long we keep it”. The page’s scripts cannot read it.
abv contains only the value 1 and tells the map page to show the subscriber buttons. It grants no access by itself.

If you press the Theme button, your browser’s local storage keeps your choice (light or dark) under the name macse-theme until you delete it. It contains no identifiers and is never sent to us.

These tools are technical, necessary to deliver the service you requested, and are not used for analytics, profiling or marketing: for this reason they are not subject to consent (art. 122 of the Italian Privacy Code). The Log out link on the map deletes the three access cookies but not the theme preference. We use no other cookies.

Who we share the data with

We do not sell your address and do not disclose it to third parties for their own marketing. It may be processed on our behalf, by processors appointed pursuant to art. 28 GDPR, by parties in the following categories:

the site’s hosting and delivery provider (currently Netlify), which also holds the subscriber access list;
the email delivery platform provider (currently Brevo), to whom your address is disclosed only if you have ticked the updates box, or, if you are a subscriber, when a sign-in link is sent to you, so that the provider can deliver it.

Some providers may process data outside the European Economic Area. In that case the transfer takes place on the basis of the mechanism applicable from time to time — an adequacy decision or the European Commission’s Standard Contractual Clauses, with any supplementary measures. You can ask us for the up-to-date list of providers and a copy of the safeguards applied by writing to privacy@pluteo.io.

How long we keep it

If you did not tick the box: your address is not recorded in the newsletter list. Only the fingerprint described above remains.
If you did tick the box: we keep the address for 24 months from consent. At expiry we delete it, or we ask you for fresh consent before continuing.
Subscriber access list: We keep the address on the operational access list while the user is authorized under an active subscription. We disable access when the subscription expires. For ordinary revocation requests received before expiry, we complete deactivation without undue delay and no later than the next working day after receipt. We act urgently in the event of compromised credentials or unauthorized access. Any contractual records are kept separately for their own purposes and applicable retention periods.
Sign-in emails at the email delivery provider: Technical sending, delivery, open and click logs for sign-in emails are retained by Brevo for one month after the event; automatic deletion may take up to a further 24 hours. Storage of content previews for these emails is disabled.
Technical logs of sending errors: kept by Netlify for 24 hours.
IP fingerprints for the hourly cap: kept in hourly buckets and erased by an hourly clean-up, so two hours at most. They are not linked to your address or to any other data, and are never used for anything but the cap.
Address fingerprints for the sign-in cap, and sign-in links already used: erased by the same hourly clean-up, so two hours at most.
Proof of consent and deletion requests: kept separately and with restricted access for as long as necessary to demonstrate that we acted correctly and not to contact you again; they are not used for marketing purposes.

Your rights

In the cases provided for by arts. 15-22 GDPR you can ask us to access your data, to correct it, to erase it, to restrict its processing, to receive it in a machine-readable format and to object to the processing. Write to privacy@pluteo.io: we reply within one month.

On marketing you always have the last word: you can withdraw your consent at any time, free of charge and without formalities, using the unsubscribe link at the bottom of each of our messages. Withdrawal does not affect the lawfulness of previous sendings.

If you believe the processing of your data infringes the law you can lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali) (garanteprivacy.it), Piazza Venezia 11, 00187 Rome, Italy.

Automated decision-making

We do not take decisions based solely on automated processing that produce legal effects concerning you or similarly significantly affect you, and we do not carry out profiling.

If this notice changes we update the version number and the date at the top of the page. If the change concerns the way we use your address, and we have you on the list, we tell you by email before applying it.