Privacy Notice on the Processing of Personal Data

Privacy Notice on the Processing of Personal Data

Privacy Notice on the Processing of Personal Data

Last updated on: 5 June 2025

In compliance with EU Regulation 2016/679 (hereinafter referred to as GDPR – General Data Protection Regulation), concerning the “protection of natural persons with regard to the processing of personal data and the free movement of such data,” this notice informs users (also referred to as data subjects) of this website about how personal data is collected, shared, and used, and how they can exercise their rights regarding privacy.


The data will be processed based on principles of fairness, lawfulness, transparency, and protection of the data subject’s rights.

Data Controller

Nuraxi Holding S.r.l.

Address: Via Cavour, 9, Alghero (SS), 07041

Certified Mail (PEC): nuraxiholding@pec.it

Email: hi@nuraxi.ai

Data Protection Officer (RDP o DPO)

You may contact the DPO for any privacy-related matters:

Phone:
+39 049 0998416
Email: dpo@robyone.net
PEC :dpo.robyone@ronepec.it,

Types of Data Processed

Personal data may be provided by the user or collected automatically while browsing the website.

For users who fill out the “Request Early Access” form or other registration forms, the site processes personal and contact data, such as email addresses.


Users are responsible for any third-party personal data they provide and guarantee they have the right to share it, releasing the Data Controller from any third-party liability.

Navigation Data

IT systems and software procedures used for this website’s operation collect some personal data (e.g., IP addresses, URI addresses, request time, browser info) automatically. These are kept for a maximum of 780 days.

Data Voluntarily Provided by the User

Data provided through registration forms, emails, or phone calls is used to provide requested services. Sending emails to listed addresses results in the collection of the sender’s address and any included personal information.

External Links

The Controller is not responsible for external websites linked from this site. Links do not imply endorsement, and external sites are subject to their own privacy regulations.

Cookies

Cookies are small text files used to store visitor information.


Types include:


  • Technical cookies (necessary for navigation or services – no consent required).

  • Functional cookies (may enhance functionality – consent requested).

  • Analytics cookies (used to gather aggregated usage data – treated like technical cookies under specific conditions).

  • Profiling/marketing cookies (track user behavior for personalized ads – require consent).

Name

Name

Plaftorm

Platform

Type

Type

Duration

Duration

Domain

Domain

Purpose

Purpose

_ga

Name

Name

Google Analytics

Platform

Name

Type

Analytics

Duration

Platform

Domain

2 years

Purpose

Type

nuraxi.ai

Duration

Distinguishes users

Domain

Purpose

_ga_<container>

Google Analytics 4

Analytics

2 years

nuraxi.ai

Maintains session state

_gid

Google Analytics

Platform

Analytics

Type

24 hours

Duration

nuraxi.ai

Domain

Distinguishes users

Purpose

_gat

Google Analytics

Analytics

1 minute

nuraxi.ai

Throttles request rate

gtm

Google Tag Manager

Technical

Session

nuraxi.ai

Manages tags/scripts

Disabling cookies: Cookies can be disabled via browser settings, but doing so may limit functionality. Each browser (Firefox, Chrome, Edge, Safari) has its own process.


Consent Management: Google Analytics is used to manage cookie preferences. Users can modify cookie preferences via the pop-up window at any time.

Purpose and Legal Basis of Data Processing


  • Navigation Data: Collected to ensure proper website operation and used for stats. Legal basis: User consent (Art. 6.1.a GDPR).

  • Voluntarily Provided Data: Used to access content, respond to requests, or participate in services. Legal basis: User consent via form submission or email (Art. 6.1.a GDPR).


Data Processing Location

Processing is carried out at the Data Controller’s operational offices or other involved parties’ locations. If data is processed outside the EEA, appropriate contractual measures will be adopted to protect it.

Nature of Data Provision and Consequences of Refusal

Except for navigation data and required registration data (e.g., for “Request Early Access”), users may freely choose to provide personal data. Failure to provide mandatory data marked with an asterisk may prevent access to certain services.

Processing and Data Retention Methods

The Controller adopts appropriate security measures to prevent unauthorized access, disclosure, or alteration of personal data. Data is processed by authorized personnel or service providers (e.g., IT, hosting, tech services).


Data will be kept only as long as necessary for the intended purposes, unless retention is required by law or a competent authority.


Users may revoke consent at any time.

User Rights

Under Articles 15+ of the GDPR, data subjects have the right to:


  • Withdraw consent

  • Be informed about collected and processed data

  • Access their data

  • Rectify inaccuracies or complete incomplete data

  • Restrict processing under certain conditions

  • Erase their data after consent is withdrawn

  • Receive and transfer their data (data portability)

  • Object to processing based on legitimate interests or for marketing purposes

How to Exercise Your Rights

Requests can be made to the Data Controller or the DPO using the contact details above. Requests are free of charge and will be fulfilled within one month (extensions possible by law).


Users can also file a complaint with a supervisory authority if they believe their rights are not being respected.

Changes to This Privacy Policy

The Data Controller reserves the right to modify this policy to reflect legal, organizational, or technological changes. Any updates will be published on this website page. Users are encouraged to check this notice periodically.