Privacy Policy

Dear data subject, we inform you that Regulation (EU) 2016/679 ("GDPR") considers the protection of personal data a fundamental right. Pursuant to Article 13 of the GDPR, we therefore provide you with the following information regarding the processing of personal data collected through the website https://nanofaber.com.

1. Data controller

Nanofaber S.r.l.
Via Anguillarese 301, 00123 Roma (RM)
Email: info@nanofaber.com
PEC: administrator@pec.nanofaber.com
Telefono: +39 06 3048 3393

2. Categories of personal data processed and source

Nanofaber processes personal data provided directly by the data subject and technical data collected automatically during browsing:

• Data provided voluntarily. Name, email address and message content entered by the user in the website contact form, used exclusively to respond to the request received.
• Data collected automatically. The IT systems that manage the site's operation detect, during their normal operation, certain data whose transmission is implicit in the use of Internet communication protocols: IP address, domain names of the computers used by users, URI addresses of the resources requested, time of the request, method used, size of the response, server status code and other parameters relating to the operating system and browser. The IP address is also processed temporarily and non-persistently for security purposes (prevention of automated/spam submissions through the contact form). These data are processed for the strictly necessary time to ensure the proper functioning and security of the site and to obtain aggregate statistical information about its use; their provision is implicit in normal web browsing.

3. Purposes of processing and legal basis

Data are processed for the following purposes:

• allow the user to contact Nanofaber staff and receive a response to their requests;
• create an internal consultation archive accessible only to authorized personnel of Nanofaber S.r.l.;
• ensure the proper technical operation and security of the site.

The legal basis for processing is the data subject's free, spontaneous and informed choice to provide their data through the communication channels published on the site (Art. 6(1)(a) and (b) GDPR), in addition to the controller's legitimate interest in ensuring the security and proper functioning of the site (Art. 6(1)(f) GDPR).

4. Methods of processing

Data are processed using IT tools and, where necessary, on paper support, in compliance with appropriate security measures provided for by Art. 5(1)(f) GDPR and the confidentiality obligations that inspire the controller's activities. Suitable measures are adopted to prevent loss, unauthorized access, improper or unlawful use of the data.

5. Recipients and transfer of data

Data are not subject to dissemination or sale to third parties. Within the limits relevant to the purposes indicated, data are disclosed exclusively to the technical service providers listed below, appointed as processors pursuant to Art. 28 GDPR, or to third parties in cases provided for by law:

• Vercel Inc. (United States) — provider of the site hosting infrastructure.
• Resend (United States) — service used to forward by email the messages sent through the contact form (name, email, message) to the controller's mailbox. Data are not retained by Resend beyond the technical time necessary for delivery of the message.

The transfer of data to such providers, based in the United States, is governed by the Standard Contractual Clauses approved by the European Commission pursuant to Art. 46 GDPR, adopted by the respective providers, to ensure an adequate level of protection of personal data in line with the GDPR.

6. Retention period

Data sent through the contact form (name, email, message) are stored in the controller's mailbox for the strictly necessary time to handle the request and in any case no longer than 24 months from the last contact, unless other legal obligations apply (storage limitation principle, Art. 5 GDPR). The IP address processed for anti-spam security purposes is kept in memory for a maximum of 60 seconds and is not persisted to disk or database. The obsolescence of stored data is checked periodically.

7. Data subject rights

Pursuant to Articles 15-22 GDPR, the data subject has the right to:

• Access their personal data and obtain confirmation of their existence;
• Rectify them if inaccurate or incomplete;
• Erase them (right to be forgotten);
• Restrict their processing;
• Object to processing;
• Request portability of the data;
• Revoke consent at any time, without affecting the lawfulness of processing carried out before the revocation.

To exercise these rights, you may write to info@nanofaber.com o via PEC a administrator@pec.nanofaber.com. In the event of a violation, you may lodge a complaint with the Italian Data Protection Authority (www.garanteprivacy.it).

Providing the data is not mandatory for simple browsing of the site, but it is necessary to obtain a response to information or contact requests.

8. Cookie Policy

Cookies are small text strings that websites send to the user's terminal, where they are stored and then retransmitted to the same sites on the next visit. The site nanofaber.com uses only essential technical cookies, necessary to ensure the basic functionality and security of browsing in an anonymous way.

The site does not install profiling, analytical or advertising cookies from third parties. Accordingly, no services such as Google Analytics, remarketing tools or third-party widgets that collect browsing data for statistical or commercial purposes are active. If such tools are activated in the future, this notice will be updated accordingly and consent will be requested in advance through the relevant banner.

You can manage or disable cookies directly from your browser settings. Disabling technical cookies may limit some site functionality. Guides for managing cookies in the main browsers: Chrome, Safari, Firefox.

9. Definizioni

• Utente: l'individuo che utilizza il sito, salvo diversa specificazione coincidente con l'Interessato.
• Interessato: la persona fisica cui si riferiscono i dati personali.
• Data controller: the natural or legal person who determines the purposes and means of processing personal data; in the case of the website https://nanofaber.com this is Nanofaber S.r.l.
• Processor: the natural or legal person or other body that processes personal data on behalf of the controller.
• European Union (EU): unless otherwise stated, any reference extends to the member states of the European Union and the European Economic Area.

10. Riferimenti legali e modifiche

This notice is drafted in accordance with Articles 13 and 14 of Regulation (EU) 2016/679. Nanofaber reserves the right to update it at any time; changes will be published on this page with an updated date at the top of the document. We recommend consulting it periodically.