Privacy Policy

https://www.nodo-collective.com and https://nodocollective.it

This policy is drafted pursuant to and for the purposes of Art. 13 of EU General Data Protection Regulation 2016/679 (GDPR)

WHY ARE WE PROVIDING YOU WITH THIS INFORMATION?

Pursuant to Art. 13 of Regulation EU 679/2016 (hereinafter referred to as “Regulation”) this page describes how personal data is processed. This policy is drafted in compliance with the provisions of Art. 13 of EU Regulation 679/2016 - GDPR. This policy is not applicable to other websites of Third Parties that may be accessible via links on this website, for which no liability is accepted.

Processable personal data:

Personal data: means any information relating to an identified or identifiable natural person (‘data subject’); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person;
Data of contracting parties / users.
Browsing data: The computer systems and software procedures used to operate this website acquire, in the course of their normal operation, certain personal data whose transmission is implicit in the use of Internet communication protocols. Such data include IP addresses or user computer and terminal domain names, URI/URL (Uniform Resource Identifier/Locator) addresses of the requested resources, the time of the request, the method used to submit the request to the server, the size of the answering file, the numerical code showing the status of the server answer (successful, error, etc.) and other parameters concerning the user’s operating system and IT environment.
Data submitted on a voluntary basis: The discretionary, explicit and voluntary sending of messages to the contact addresses on this website, as well as the completion of data collection forms involves the collection of the sender’s address, which is necessary to reply to requests, as well as the collection of any other personal data entered.

Information on the processing of personal data carried out through Social Media Platforms

With regard to the processing of personal data carried out by the social media platform managers used by the Data Controller (e.g. YouTube), please refer to information provided by said managers in their Privacy Policies. The Data Controller processes the personal data provided by users through the pages of the dedicated social media platforms, in order to manage interactions with users (comments, public posts, etc.) and in compliance with current legislation.

COOKIES AND OTHER TRACKING TECHNOLOGIES. WHAT ARE THEY? WHAT ARE THEY USED FOR?

For Cookies and other tracking technologies please see the Cookie Policy available in the footer of the website and at the following link.

1.WHO IS THE DATA CONTROLLER? HOW TO CONTACT THE DATA CONTROLLER?

The Data Controller is JP CONCEPT S.r.l. ., with registered office in Via G. Marconi, 14 Seregno (Monza Brianza), Italy, in the person of its pro-tempore legal representative, who can be contacted for any information at the following phone number +39 0362 221961 or by email at the following e-mail address contact@nodocollective.it.

2. PURPOSE OF PROCESSING, LAWFULNESS OF PROCESSING, DATA RETENTION PERIOD AND NATURE OF DATA PROVISION

PURPOSE OF DATA PROCESSING:

Navigation of this website.

Data necessary for the enjoyment of the web services shall be processed, also with the purpose of

* obtaining statistical information on the use of said services (most popular pages, number of visitors per time slot or day, geographical areas of origin, etc.);

* monitoring the correct operation of the services offered.

LAWFULNESS OF PROCESSING:

Data processing is necessary for the purposes of the legitimate interests pursued by the Data Controller or by a third party except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject which require protection of personal data, having considered the reasonable expectations of the data subject and the activities strictly necessary for the website functionality and navigation [Art. 6 (1) (f) and recital 47 GDPR]

DATA RETENTION PERIOD:

Browsing data will be stored for the duration of the browsing session.

NATURE OF DATA PROVISION:

Provision of personal data is necessary for browsing the website.

PURPOSE OF DATA PROCESSING:

Use of cookies and similar technologies.

LAWFULNESS OF PROCESSING:

For cookies and similar technologies that are not technical or necessary, the processing is based on consent to the processing of personal data [Art. 6 (1) (a) and recitals 42 and 43 GDPR].

Consent is given through the consent banner and the Cookie Policy on the website.

DATA RETENTION PERIOD:

Please refer to the Cookie Policy available in the footer of the website.

NATURE OF DATA PROVISION:

Please refer to the Cookie Policy available in the footer of the website.

In addition to enabling navigation on the website, personal data will also be processed for:

PURPOSE OF DATA PROCESSING:

A) CONTACTS, sending contact requests and requests for information.

LAWFULNESS OF PROCESSING:

Processing is necessary for the management of a contract to which the data subject is party or for the management of pre-contractual measures taken at the data subject's request

[Art. 6 (1) (b) and recital 44 GDPR].

DATA RETENTION PERIOD:

12 months maximum

NATURE OF DATA PROVISION:

The provision of personal data is necessary.

Failure to provide the necessary personal data will result in the impossibility of being contacted and of receiving information.

PURPOSE OF DATA PROCESSING:

B) DIRECT MARKETING, for sending advertising or direct sales material or for carrying our market research, commercial and promotional communication, newsletter, by automated electronic means (e-mail, SMS) and traditional means (telephone and paper mail).

LAWFULNESS OF PROCESSING:

Processing is based on consent to personal data processing (C42,C43) art. 6 par. 1 lett. a) of GDPR

DATA RETENTION PERIOD:

Until withdrawal of consent (or opt-out)

NATURE OF DATA PROVISION:

The provision is optional. Failure to provide the necessary data will make it impossible to receive direct marketing communications.

PURPOSE OF DATA PROCESSING:

C) HANDLING OF YOUR REQUESTS and of requests from other data subjects, pursuant to of Articles 15 et seq. of the GDPR (data subject’s rights).

LAWFULNESS OF PROCESSING:

Data processing is necessary for compliance with a legal obligation to which the Data Controller is subject [Art. 6 (1) (c) and recital 45 GDPR].

DATA RETENTION PERIOD:

5 years after closing of the request, except in the event of litigation.

NATURE OF DATA PROVISION:

Provision of personal data is mandatory as it is required for the fulfilment of all legal obligations.

3. TO WHICH RECIPIENTS OR CATEGORIES OF RECIPIENTS WILL PERSONAL DATA BE DISCLOSED? DATA RECIPIENTS

The personal data provided may be disclosed to recipients, who shall process them in their capacity as Autonomous Data Controllers or Data Processors (Art. 28 GDPR) and/or as individuals (natural persons) operating under the authority of the Data Controller and Data Processors (Art. 29 GDPR) on the basis of specific instructions given on the purposes and methods of processing. More specifically, data may be transferred to recipients in the following categories:

- entities/parties that provide services for the management of the website and of the communication networks, including e-mail, host and website management;

- entities/parties/companies with which the Data Controller has signed business contracts, only with prior consent, where applicable;

- competent authorities for the fulfilment of legal obligations and/or provisions of public bodies, upon request.

The list of the appointed Data Processors pursuant to Art. 28 GDPR is available upon request to be sent to the email contact@nodocollective.it.

4. WILL PERSONAL DATA BE TRANSFERRED TO COUNTRIES OUTSIDE THE EEA?

Personal data will not be transferred to countries outside the EEA. In case of consent to certain cookie categories, data transfer outside the European Union may be possible. Should this be the case, it will be carried out in compliance with Articles 44 et seq. of EU Regulation 2016/679. For more information on guarantees regarding the transfer of personal data outside the EEA please write to contact@nodocollective.it.

5. IS THERE ANY AUTOMATED DATA PROCESSING?

Personal data will be subject to traditional manual, electronic and automated processing. Please note that no fully automated decision-making processes are carried out.

6. WHAT ARE YOUR RIGHTS? HOW CAN YOU EXERCISE THEM?

Data subjects shall be able to exercise their rights under Articles 15 et seq. GDPR by contacting the Data Controller at the e-mail address: i contact@nodocollective.it at the above-mentioned contact details.

Data subjects have the right to obtain at any moment from the Data Controller: access to their personal data (Art. 15), their rectification (Art. 16) or erasure (Art. 17), as well as the restriction of their processing (Art 18). The Data Controller shall inform (Art. 19) each of the recipients to whom the personal data have been transferred of any rectification or erasure or restriction of processing carried out. The Data Controller shall inform the data subjects of these recipients if the data subjects so request. Data Subjects shall also exercise their right to data portability (Art. 20) and, in case of data portability requests under Art. 20 GDPR, the Data Controller shall provide the data subjects with the Personal Data concerning them in a structured, commonly used and machine-readable format. Moreover, data subjects shall have the right to object at any time (Art. 21) to the processing of their personal data based on the legitimate interest by writing to the contacts listed above with the 'objection to processing’ subject line.

To stop receiving automated direct marketing communications (email, SMS type messages, instant messages) please write an email to contact@nodocollective.it with subject “unsubscribe from automated” or use our automatic cancellation systems provided for only email (opt-out). To stop receiving traditional direct marketing communications (telephone calls with operator and paper mail), please write an email to contact@nodocollective.it with subject “unsubscribe from traditional”.

To no longer receive any marketing communications, please write an email toinfo@nodo-collective.com with the subject “unsubscribe from marketing”.

In the event that data subjects consider that the processing of their personal data carried out by the Data Controller is in breach of the provisions of Regulation (EU) 2016/679, they shall have the right to lodge a complaint with the National Data Protection Authority (*) of the Member State in which they are habitually resident or work or of the place where the alleged violation took place (* the Italian Data Protection Authority is called Garante Privacy and it can be contacted at https://www.garanteprivacy.it/). Moreover, they shall have the right to take appropriate legal action.

7. AMENDMENTS TO THE PRIVACY POLICY

The Data Controller reserves the right to amend, update, add or remove parts of this Privacy Policy. In order to make it easier for you to check for any changes, this Privacy Policy will contain an indication of the date when it was updated.

Updated on: ______19.03.2026_____