Notice under Art. 13 GDPR · Cookie policy
Privacy & Cookies
Last updated:
No accounts, no tracking cookies, no profiles. This site processes only two families of data: the technical minimum needed to run securely, and whatever you choose to send us when you write.
Data controller
The data controller is NOK GROUP S.R.L., Via Cassia 1280, 00189 Roma (RM) — VAT no. 17725341006, REA RM-1737543, PEC nokgroup@legalmail.it, email info@nok.business.
No Data Protection Officer has been appointed: the appointment is not mandatory for the processing described on this page (Art. 37 GDPR). Your point of contact is info@nok.business.
What we process, why, and on which legal basis
- Browsing data — the hosting infrastructure’s technical logs (IP address, request timestamp, user agent), needed to serve the site and keep it secure. Legal basis: legitimate interest (Art. 6(1)(f) GDPR). Retention: for the technical period set by the hosting provider’s plan, limited to what is needed to keep the service secure and running, unless the logs are needed to investigate abuse.
- Contact — if you write to info@nok.business we process your address, what you tell us and what is needed to reply. Legal basis: responding to your request and pre-contractual steps (Art. 6(1)(b) GDPR) or, for requests not related to a contract, our legitimate interest in replying (Art. 6(1)(f) GDPR). Retention: up to 24 months after our last reply; if a contract follows, contractual records are kept for 10 years (Art. 2220 of the Italian Civil Code).
Providing data is optional: the site works without giving us anything. Without an address, we simply cannot reply.
Artificial intelligence: the transparency we practise
Artificial intelligence is our trade, and we use it ourselves first. This website was designed and developed with the aid of AI tools, under human direction, review and responsibility. We state this as a transparency choice, consistent with the principles of Regulation (EU) 2024/1689 (AI Act) and of Italian Law no. 132 of 23 September 2025.
When you contact us, the Company may process your data with the aid of AI systems, including AI agents: for instance to read and organise requests, draft replies, or analyse the needs you describe. Every decision affecting you remains human (Art. 22 GDPR); the providers of these systems act as processors (Art. 28 GDPR), under terms that exclude the use of your data for model training; AI systems receive only what each task requires (Art. 5(1)(c) GDPR).
There are no chatbots on this site, nor any system that interacts with you directly. If one day there are, you will be told there, before you use them, as required by Art. 50 of the AI Act.
Recipients and transfers outside the EU
Data may be processed on the Company’s behalf by technical service providers: the hosting and delivery infrastructure (Vercel), email providers and providers of artificial-intelligence systems. They act as processors under Art. 28 GDPR or, within their own technical remit, as independent controllers; providers of artificial-intelligence systems act only as processors (Art. 28 GDPR), on the terms described above. No dissemination, no sale to third parties for marketing. Some providers are established in the United States: transfers rely on Arts. 44 et seq. GDPR — the adequacy decision of 10 July 2023 (EU-U.S. Data Privacy Framework) for certified providers, or standard contractual clauses under Art. 46 GDPR. Vercel Inc. participates in the EU-U.S. Data Privacy Framework. Where standard contractual clauses apply, you can request a copy by writing to info@nok.business.
Your rights
You may at any time exercise the rights under Arts. 15-21 GDPR: access, rectification, erasure, restriction, portability, objection. Write to info@nok.business: we reply within one month (Art. 12(3) GDPR). You may lodge a complaint with the Garante per la protezione dei dati personali (www.garanteprivacy.it) under Art. 77 GDPR, or apply to the courts.
Cookie policy
This site sets no cookies: no analytics, profiling or third-party cookies. A technical security cookie, exempt from consent, may be set only if the hosting provider activates protection against cyber attacks. That is why there is no banner: the Italian supervisory authority’s guidelines (decision of 10 June 2021, no. 231) require one only where cookies or other non-technical tracking tools are used.
Beyond that, the site writes nothing to your device: no localStorage, no sessionStorage, no IndexedDB. Your choices (for example sound on or off) live in the page’s memory and vanish when you close the tab.
Fonts and the three-dimensional graphics are served from our own domain: no request leaves for third-party services. Should the site ever adopt cookies or tools requiring consent, this page and the banner will arrive first.
Updates to this notice
Any substantial change will be published on this page, with the update date at the top. The version you are reading is the one in force.