Privacy Policy – NORGIN SRL

Browsing/technical data: IP address, timestamps, URLs visited, user agent, error/security logs.
Cookies and similar technologies: see the Cookie Policy (strictly necessary, analytics, marketing, etc.).
Data you provide voluntarily:
- Contact/quote forms: name, surname, email, phone, company, message, any attachments.
- Newsletter : email address and preferences.
- Job applications: data contained in CVs/messages.

Responding to enquiries and requests sent via the website (contact/quotes)
- Legal basis: performance of pre-contractual/contractual measures (Art. 6(1)(b) GDPR).
Customer support and follow-up on similar requests
- Legal basis: legitimate interest (Art. 6(1)(f)), balanced against user expectations.
Newsletter/marketing communications
- Legal basis: consent (Art. 6(1)(a)). You may withdraw consent at any time.
Website security and abuse prevention
- Legal basis: legitimate interest (Art. 6(1)(f)).
Compliance with legal obligations (e.g., tax, accounting, authorities’ requests)
- Legal basis: legal obligation (Art. 6(1)(c)).
Non-essential traffic statistics/analytics
- Legal basis: consent (Art. 6(1)(a)) via the CookieYes banner. If analytics are truly anonymised and self-hosted, the legal basis may be legitimate interest.

Required fields in forms are necessary to handle your request; failure to provide them may prevent us from responding.
Marketing consent is optional; declining it does not affect the requested service.

Website hosting and IT maintenance provider: Keliweb, ITALY.
Third-party services integrated on the site: e.g., Google (Maps/YouTube/Analytics), Meta (Pixel), live chat, newsletter tools, anti-spam/reCAPTCHA, analytics/heatmaps.
Consent management platform: CookieYes (Mozilor Limited). Used to collect/manage cookie consent on your device. If the “consent log” feature is enabled, minimal consent metadata may be processed on the provider’s servers. Privacy: https://www.cookieyes.com/privacy-policy/

Some providers may be located outside the EEA (e.g., USA/UK). Where required, we rely on appropriate safeguards such as Standard Contractual Clauses (SCCs) and additional security measures. Third-party cookies are blocked until consent is given via CookieYes.

Technical/security logs: 7 days (extendable in case of investigations/incidents).
Data sent via forms: up to 24 months from the last meaningful contact.
Contract/billing data (if you are a client): 10 years (legal obligations).
Newsletter data: until withdrawal of consent/unsubscription.
Cookie consent records: 6–12 months (CookieYes setting).
Job applications/CVs: 12 months.

Processing is carried out using electronic and paper tools with appropriate technical and organisational measures (encryption in transit, access control, backups, minimisation).

Access, rectification, erasure, restriction, objection, data portability, withdrawal of consent (where applicable).
You also have the right to lodge a complaint with the Italian Data Protection Authority (Garante per la Protezione dei Dati Personali): www.gpdp.it – pec: protocollo@pec.gpdp.it
To exercise your rights, contact the Controller using the details above.

Our online services are not directed to children under 14. If we learn that data from minors have been provided, we will delete them within a reasonable timeframe.

We may update this Privacy Policy. The current version is published on this page with the latest update date.

For details about cookies and similar technologies, categories, legal bases and consent management, please see our Cookie Policy: https://norgin.eu/cookie-policy/.