Cookie Policy
This notice (hereinafter, "Cookie Policy") governs the processing of your personal data through the use of cookies, carried out by NUR S.r.l., with registered office in San Giorgio Bigarello (MN), Via del Commercio 1/N, VAT number 01902640208, email gdpr@nur.it ("Data Controller"), in compliance with personal data protection regulations, in particular, EU Regulation 2016/679 ("GDPR"), through the website you are browsing (hereinafter, the "Site").
1. Identity and contact details of the data controller
The Data Controller is NUR. NUR is a company established in Italian territory, therefore no representative has been appointed.
The Data Controller has appointed a Data Protection Officer ("DPO") pursuant to art. 37 GDPR. The DPO can be contacted at: gdpr@nur.it.
2. Processing methods
Cookies
Cookies are small text strings that the Site you visit sends to your browser, which stores them to retransmit them to the Site when you visit again.
Cookies allow the collection of information about browsing activity.
Cookies can be stored permanently on your computer and have a variable duration (persistent cookies), or they may not be stored persistently on your device and be automatically deleted when the browser is closed (session cookies).
Cookies can be installed by the site you are visiting or they can be installed by other websites that provide various services to that site (third-party cookies).
2.1 Technical cookies
Technical cookies
Cookies in this category allow the Site to function correctly.
Statistical cookies
The Site also uses statistical cookies created directly by NUR, or provided by third parties.
With statistical cookies created directly by NUR, NUR will carry out statistical analysis relating to various domains, websites or apps attributable to NUR itself, proceeding with its own statistical processing, without such analysis being aimed at making commercial decisions.
With third-party statistical cookies, tools have been adopted to reduce their identification power, for example by masking significant portions of processed IP addresses. In the case of third-party statistical cookies, the third party has contractually committed to NUR to use them exclusively for the provision of the service, to store them separately and not to "enrich" or "cross-reference" them with other information they hold.
Navigation data and environmental variables
The Site automatically acquires some personal data related to your browsing. This category of data includes, for example:
- IP addresses of the computer you use;
- number of accesses;
- pages used;
- date and time of access;
- the URL where the browser was before viewing the Site;
- type of browser;
- operating system used.
2.2 Profiling cookies
Profiling cookies are non-technical cookies that allow NUR to provide you with personalized services based on your needs.
2.3 List of cookies used
Below is the list of cookies used on the Site:
| Cookie | Type | Provider | Duration | Description |
|---|---|---|---|---|
| cookieConsent | Technical | Verbalist® | 12 months | Stores user's cookie preferences |
| _ga | Analytics | Google Analytics | 2 years | Used to distinguish users |
| _ga_* | Analytics | Google Analytics | 2 years | Used to maintain session state |
| _cs_* | Analytics | Contentsquare | 13 months | User behavior analysis and UX optimization |
| __hstc | Profiling | HubSpot | 13 months | Main tracking cookie: identifies the visitor, traffic source, session and interactions with the site |
| __hssc | Profiling | HubSpot | 30 minutes | Tracks the current visitor session and determines whether the __hstc cookie needs to be updated |
| __hssrc | Technical | HubSpot | Session | Checks whether the visitor has restarted their browser to determine the start of a new session |
| hubspotutk | Profiling | HubSpot | 13 months | Uniquely identifies the visitor and links them to the corresponding contact in HubSpot CRM upon form submission |
| __hs_opt_out | Technical | HubSpot | 13 months | Stores the opt-out preference expressed by the visitor through the cookie banner |
Note: The analytics and marketing services listed above are managed through Google Tag Manager (GTM), a tag management platform that does not install its own cookies but enables the controlled loading of third-party scripts in accordance with the preferences expressed by the user through the cookie banner (Consent Mode v2).
Note: Vercel Analytics and Speed Insights are privacy-friendly services that do not use cookies and do not require consent as they do not track personally identifiable data.
3. Deleting and disabling cookies
You can configure your browser to prevent cookie processing, or delete them immediately after browsing. Below we list the methods for disabling and deleting cookies with the main browsers:
- Delete/disable cookies with Firefox: Mozilla Support
- Delete/disable cookies with Edge: Microsoft Support
- Delete/disable cookies with Chrome: Google Support
4. Data you voluntarily provide
You have the faculty and freedom to provide data by sending email to the addresses indicated on the Site, which NUR may acquire for the purposes indicated from time to time. In addition to the email address necessary to respond to you, any other personal data contained in the relevant communication will be processed. The data thus collected will be stored and processed exclusively to maintain correspondence, without using it for other purposes.
5. Purpose, legal basis of processing, optional nature of consent and consequences of non-consent
- Personal data processed with technical cookies: The communication of personal data is a contractual obligation, without which the website could not be made available and fully functional in accordance with the terms and conditions of use.
- Personal data processed with profiling cookies: The communication of personal data is purely optional. If you do not communicate the data, it will be impossible for NUR to provide you with personalized services through profiling. The legal basis of processing is your consent, expressed in compliance with applicable regulations.
- Personal data voluntarily provided via email: The communication of personal data is purely optional. If you do not communicate the data, NUR will not be able to respond to your requests. The legal basis of processing is the legitimate interest of NUR, as Data Controller, to respond to requests.
You may express your consent to the processing of personal data with non-technical cookies by clicking on a specific checkbox presented within a banner.
6. Automated decision-making and profiling
If you consent to the processing with profiling cookies to receive personalized services, your personal data may be subject to an automated decision-making process, with a specific algorithm that will decide which communications are most suitable for your profile or which may be of interest to you. The expected consequences of this processing are the sending of highly profiled commercial communications, discounts, and invitations to events deemed of interest.
In accordance with Article 22 GDPR, you have the right to:
- obtain human intervention in the decision-making process by NUR;
- express your opinion;
- obtain an explanation of the decision reached by NUR;
- challenge the decision itself.
7. Source of personal data and data categories
NUR will only process personal data provided by you in accordance with the Cookie Policy, collected through the Site or by you sending an email. NUR will not process data from publicly accessible sources. NUR will not process the special categories of personal data referred to in Article 9 of the GDPR.
8. Recipients and possible categories of recipients of personal data
Your personal data may be received by:
- companies offering hosting services;
- communication companies that carry out commercial communication and profiling activities on behalf of the Data Controller, which hold the status of data processors.
9. Data transfer
NUR intends to transfer your personal data to entities established in a third country outside the European Union or to an international organization. Such entities may include, by way of example:
- communication companies that carry out communication activities on behalf of NUR;
- companies offering information society services;
- companies offering hosting services;
- communication service providers.
The transfer of personal data to such entities, where established in a third country, or to an international organization, is carried out in the presence of an adequacy decision by the European Commission, which has verified that the third country, the territory or one or more specific sectors within that third country, or the international organization in question ensure an adequate level of protection of your rights. In the absence of such decisions, if deemed appropriate, NUR reserves the right to conclude specific and separate agreements obliging such entities to adopt adequate security measures, including organizational measures, to offer appropriate guarantees regarding your rights.
Google Inc., in particular, has contractually committed to ensuring adequate protection of the data subject's rights. Data may therefore be transferred to the following countries: United States of America.
To obtain a copy of such data or the place where it has been made available, simply send the relevant request to: gdpr@nur.it.
10. Data retention period
- NUR will retain your personal data processed with technical cookies to allow you correct use of the Site for a period not exceeding 12 (twelve) months from the date of individual collection, in accordance with section 2.1 of the Cookie Policy;
- NUR will retain your personal data processed to provide personalized services through non-technical cookies and profiling cookies for a period not exceeding 12 (twelve) months from the date of individual collection, in accordance with section 2.2 of the Cookie Policy;
- NUR will retain your personal data voluntarily provided and processed to respond to your requests for the time strictly necessary to achieve this purpose and, in any case, not exceeding 12 (twelve) months from the date of individual collection.
NUR reserves the right, in any case, to request you to renew your consent to processing and/or to verify the consents you have already expressed.
11. Your rights
11.1 Right to object
As a "data subject", you have the right to object, at any time, for reasons connected to your particular situation, to the processing of personal data concerning you, pursuant to Article 6, paragraph 1, letters e) or f) of the GDPR, including profiling based on those provisions.
NUR shall refrain from further processing your personal data, unless NUR demonstrates the existence of compelling legitimate grounds for processing that override your interests, rights and freedoms or for the establishment, exercise or defence of legal claims.
Where personal data is processed for direct marketing purposes, you have the right to object at any time to the processing of personal data concerning you for such purposes, including profiling to the extent that it is connected to such direct marketing.
In case of objection to processing for direct marketing purposes, the personal data shall no longer be processed for such purposes.
You may object to the processing of your personal data for direct marketing purposes even partially, for example by objecting only to the sending of promotional communications through automated and/or digital means, or to the sending of paper communications and/or to receiving telephone communications.
Where your personal data is processed for scientific or historical research purposes or for statistical purposes pursuant to Article 89, paragraph 1 of the GDPR, you have the right, for reasons connected to your particular situation, to object to the processing of personal data concerning you, unless the processing is necessary for the performance of a task carried out in the public interest.
11.2 Other rights
NUR also wishes to inform you of the existence of the following rights:
- Right of access: you have the right to obtain from NUR confirmation as to whether or not personal data concerning you is being processed. If so, you have the right to access your personal data and specific information, in accordance with Article 15 of the GDPR;
- Right to rectification: you have the right to obtain from NUR the rectification of inaccurate personal data concerning you without undue delay. Taking into account the purposes of processing, you have the right to have incomplete personal data completed, including by providing a supplementary statement, in accordance with Article 16 of the GDPR;
- Right to erasure: you have the right to obtain from NUR the erasure of personal data concerning you without undue delay. NUR is obliged to erase personal data without undue delay if the grounds listed in Article 17 of the GDPR apply;
- Right to restriction of processing: you have the right to obtain from NUR restriction of processing if the grounds listed in Article 18 of the GDPR apply;
- Right to data portability: you have the right to receive the personal data concerning you provided to NUR in a structured, commonly used and machine-readable format, as well as the right to transmit such data to another controller without hindrance from NUR, in the cases and under the conditions specified in Article 20 of the GDPR;
- Right to object to commercial communications: you have the right to object at any time, free of charge, to receiving commercial communications from NUR;
- Right to lodge a complaint with the Supervisory Authority: you have the right to lodge a complaint with the Italian Data Protection Authority (Garante per la Protezione dei Dati Personali), to report a violation of data protection regulations, in accordance with Article 77 of the GDPR.
12. How to exercise your rights
You can exercise the rights indicated in this Cookie Policy by sending requests directly to NUR at gdpr@nur.it, or by sending the relevant communication by registered letter to Via del Commercio 1/N, San Giorgio Bigarello (MN), Italy.
You may lodge a complaint with the Italian Data Protection Authority according to the procedures provided on the official website, addressing it to the contacts available at https://www.garanteprivacy.it/home/footer/contatti.
13. Accessibility
This Cookie Policy is accessible at https://www.nur.it/cookie-policy and at NUR's offices. If you expressly request it, NUR may provide you with the information orally, provided that your identity is verified, through a telephone request addressed to the Data Controller.
14. Modifications
NUR may modify the Cookie Policy, including to adapt to national and/or European Union regulations or to technological innovations. Any new versions of the Cookie Policy will be reported on the Site. We invite you to periodically check the Cookie Policy. Any modification will be communicated through a pop-up on the Site or other methods and/or digital tools. If NUR substantially modifies the Cookie Policy, providing for new processing purposes and/or categories of personal data processed or changing third parties, NUR will inform you, requesting the necessary consents, through a specific banner. If it is impossible for NUR to verify the storage of cookies on your device, for example in the event of deletion of installed cookies, NUR will inform you, requesting the necessary consents, through a specific banner. If at least 6 (six) months have passed since the previous presentation of the banner on the Site, NUR will inform you, requesting the necessary consents, through a specific banner.