Privacy information
Privacy Policy
Pursuant to EU Regulation 2016/679 (GDPR)
Last updated: February 2026
1. Data Controller
The Data Controller is NyXaura S.r.l. Benefit Company, with registered office at Via Cassia 699, 00189 Rome (RM), Italy. VAT / Tax Code 18152801009 - REA: RM-1765033
Email: privacy@nyxaura.it PEC: nyxaurasrl@legalmail.it
2. Types of data collected
Among the personal data collected by this website, autonomously or through third parties, are:
- Browsing data: IP address, browser type, operating system, pages visited, access times - Data provided voluntarily: first name, last name, email, phone number, company (via the contact form) - Cookies: technical cookies and, with prior consent, profiling and analytics cookies
3. Purpose of data processing
Personal data is processed for the following purposes:
- Managing contact requests: responding to messages sent via the contact form - Website navigation: ensuring the correct technical functioning of the website - Statistical analysis: in anonymous and aggregate form, to improve the service offered - Legal obligations: fulfillment of obligations required by applicable law
4. Legal basis for processing
The processing of personal data is based on the following legal grounds:
- Consent of the data subject (Art. 6, par. 1, letter a GDPR) for sending commercial communications and using non-technical cookies - Contract execution (Art. 6, par. 1, letter b GDPR) for managing pre-contractual requests - Legitimate interest (Art. 6, par. 1, letter f GDPR) for statistical analysis and service improvement - Legal obligation (Art. 6, par. 1, letter c GDPR) for fulfilling legal obligations
5. Processing methods
Personal data is processed using automated tools for the time strictly necessary to achieve the purposes for which it was collected. Specific security measures are observed to prevent data loss, unlawful or improper use, and unauthorized access.
6. Data retention
Personal data is retained for the time necessary to pursue the purposes for which it was collected:
- Contact data: 24 months from the last interaction - Browsing data: 12 months from collection - Accounting/tax data: 10 years as required by law
7. Data communication and dissemination
Personal data will not be disseminated, but may be communicated to:
- Entities that can access data by virtue of legal or regulatory provisions - Providers of technical and IT services necessary for the website's operation - Consultants and collaborators of the Controller within the scope of their assignments
All entities are appointed as Data Processors pursuant to Art. 28 GDPR.
8. International data transfers
This website uses Google Analytics, a service provided by Google LLC whose data processing may involve the transfer of personal data to the United States.
The transfer is based on the European Commission's adequacy decision regarding the EU-US Data Privacy Framework (DPF) of 10 July 2023, pursuant to Art. 45 GDPR.
For more information about Google's privacy practices, please see: https://policies.google.com/privacy
9. Nature of data provision
The provision of data via the contact form is voluntary. Failure to provide the data marked as required (name, email, message) will make it impossible to process the request.
Browsing data is collected automatically during website consultation and cannot be excluded.
10. Automated decision-making and profiling
The Controller does not employ automated decision-making processes, including profiling, as referred to in Art. 22, paragraphs 1 and 4, of the GDPR, that produce legal effects on the data subject or similarly significantly affect them. Any third-party profiling cookies, if activated with prior consent, are not used by the Controller for automated decisions.
11. Rights of the data subject
Pursuant to Articles 15-22 of the GDPR, the data subject has the right to:
- Access: obtain confirmation of the existence of data concerning them - Rectification: obtain the correction of inaccurate data - Erasure: obtain the deletion of data ("right to be forgotten") - Restriction: obtain the restriction of processing - Portability: receive data in a structured and readable format - Objection: object to processing for legitimate reasons
To exercise their rights, the data subject may send a request to: privacy@nyxaura.it
The data subject also has the right to lodge a complaint with the Italian Data Protection Authority (www.garanteprivacy.it).
12. Changes to the privacy policy
The Controller reserves the right to make changes to this policy at any time, informing users on this page. Please check this page periodically for any updates.
