1. Data Controller
The data controller is Federico Pigato, a sole trader operating under the business name «Nodeon» (Italian VAT no. 04308930132, tax code PGTFRC01L25B639V), with registered office in Cadorago (CO), Italy. For any request relating to the processing of your personal data, write to info@nodeon.it. We will respond within 30 days of receiving your request.
2. Data We Collect
Through this website we collect: (a) data provided directly through the contact form (first name, last name, company name, email address, optional phone number, message text and module of interest); (b) technical navigation data collected in aggregated and anonymised form by Cloudflare Web Analytics (number of visitors, pages viewed, country of origin, device type). We do not collect special category data under Art. 9 GDPR or data relating to minors.
3. Purposes and Legal Basis for Processing
We process this website data to: (a) respond to contact and demo requests — legal basis: pre-contractual measures at the data subject's request (Art. 6.1.b GDPR); (b) comply with legal obligations such as invoicing and tax record-keeping where a business relationship arises — legal basis: legal obligation (Art. 6.1.c GDPR); (c) keep the site secure and prevent abuse or fraud — legal basis: legitimate interest of the controller (Art. 6.1.f GDPR).
4. Data Retention
Contact form data is retained for 24 months from the last interaction. Technical navigation data is permanently aggregated after 6 months. Any invoicing data is retained for the statutory tax period (10 years under Italian tax law). Upon expiry of the applicable retention period, data is permanently and irreversibly deleted or anonymised.
5. Recipients and Data Processors
Your data may be shared with parties acting as data processors under Art. 28 GDPR, with whom we have entered into appropriate data processing agreements: Amazon Web Services EMEA SARL, for hosting and storage in Europe (EU-CENTRAL-1 region, Frankfurt, Germany); Cloudflare Inc., for privacy-preserving aggregate web traffic analysis (no tracking cookies, no personal data transmitted). We do not sell or transfer your data to third parties for commercial or marketing purposes.
6. International Data Transfers
Data is primarily processed within the European Economic Area (EEA). AWS operates in the EU-CENTRAL-1 region (Frankfurt, Germany), fully compliant with GDPR. Cloudflare may process aggregated data in data centres outside the EEA; in such cases, transfers are carried out under appropriate safeguards as required by GDPR, including Standard Contractual Clauses (SCCs) approved by the European Commission.
7. Your Rights
Under Arts. 15–22 GDPR you have the right to: access your personal data (Art. 15); obtain rectification of inaccurate data (Art. 16); obtain erasure ('right to be forgotten', Art. 17); obtain restriction of processing (Art. 18); receive your data in a structured, commonly used, machine-readable and portable format (Art. 20); object to processing based on legitimate interest (Art. 21); withdraw consent at any time without affecting the lawfulness of prior processing (Art. 7.3). To exercise these rights, write to info@nodeon.it. You also have the right to lodge a complaint with the competent supervisory authority: in Italy, the Garante per la protezione dei dati personali at www.garanteprivacy.it.
8. Cookies
We use only technically necessary cookies required for the operation of the site, with no third-party tracking cookies. For detailed information, please refer to our Cookie Policy, accessible from the site footer.
9. Changes to this Policy
We may update this policy to reflect regulatory or operational changes. The 'Last updated' date at the top of the page always indicates the current version. For material changes, we will notify you at least 30 days in advance by email or prominent notice on the site.