How we handle
your data.

This notice covers the NexCo Technologies website and its contact form. Platforms linked from the portfolio have their own notices.

1. Controller and contact details

The data controller is NEXCO S.R.L., with its registered office at Via Piemonte 117, 00187 Rome (RM), Italy, tax and VAT ID 18655631002.

For information or requests about your data, write to amministrazione@nexco-technologies.com or to the certified email address amministrazione@pec.nexco-technologies.net.

2. Contact requests

The form collects your name, email address and message. If you contact us directly, we also process the data you include in the correspondence. Required fields are needed to receive and respond to your request; the form cannot be submitted without them. Submission is optional.

We use these data to read, assess and respond to your request. For quotation or collaboration enquiries, the legal basis is taking pre-contractual steps at your request, under Article 6(1)(b) GDPR. For other messages, it is our legitimate interest in managing correspondence, Article 6(1)(f). The form checkbox confirms that you have read the notice; it does not authorise advertising or newsletters.

Requests that do not lead to a collaboration are retained for up to 24 months from receipt. Subsequent relationships are subject to the relevant contractual, administrative and legal retention periods. Any longer retention is limited to legal obligations or the protection of rights.

3. Browsing, security and analytics

The systems that deliver the website receive technical data, including IP addresses, requests, times and browser information. These are needed for connection, security and abuse prevention. Submission limits are managed in memory; infrastructure logs may record access. These data are retained for the time needed for security and investigation of incidents, with restricted access. The legal basis is our legitimate interest in protecting the service, Article 6(1)(f).

Only if you accept analytics does the website record the page visited, referring domain, device category and a random session identifier transformed by the server. These are pseudonymised, not anonymous, data. Application analytics do not include IP addresses, names, email addresses, message contents or search parameters; we do not use them for advertising or recognition across other websites.

With the same consent, we use Google Analytics 4, provided by Google Ireland Limited, to measure visits, sessions and contact requests accepted by the server. We do not send Google names, email addresses, messages or URL parameters; advertising personalisation and Google Signals are disabled. Analytics identifiers are pseudonymous. Analytics cookies are configured for 60 days and event data retention is 2 months. Tags are not loaded before consent.

The legal basis for analytics is consent, Article 6(1)(a). Internal analytics events are retained for 90 days; Analytics uses the 2-month period stated above. You can refuse or withdraw consent through Cookie preferences: browsing and the form remain available. Withdrawal stops new collection and removes the identifier from the browser; it does not affect earlier processing. You may request deletion to the extent that the data can be linked to your session.

The cookie policy lists the technical tools, how long your choice lasts and the session reserved for administration.

4. Who receives your data

Data are accessed by authorised NexCo staff who manage requests and the website. Supplier categories include hosting and maintenance, notification delivery, email and, after consent, Google Analytics. Where necessary, they act as processors under dedicated agreements. Data may be disclosed to authorities when required by law.

The form saves your request in the website database and sends a notification to the team through Resend, a service provided by Plus Five Five, Inc. The notification contains your name, email address and message. The recipient’s email provider also processes the correspondence. We do not sell your data, and the form does not subscribe you to marketing services.

5. Transfers outside the European Economic Area

The Resend email service may involve processing in the United States and other countries where its subprocessors operate. Its data processing agreement describes the safeguards, including European standard contractual clauses, and the Data Privacy Framework conditions applicable to the service. You can ask NexCo for information or a copy of the safeguards relevant to the processing of your data.

Google Analytics may also involve processing outside the European Economic Area, including the United States. The service terms and safeguards are described in Google’s Data Processing Terms and its safeguards for international transfers.

6. Your rights

Where the GDPR provides, you may request access, rectification, erasure, restriction and portability of your data, object to processing based on legitimate interests and withdraw consent. You may lodge a complaint with the Italian Data Protection Authority.

Use the controller’s contact details above. We normally respond within one month; for complex requests, this period may be extended by a further two months, and we will inform you. If necessary, we ask only for information needed to verify your identity.

7. Security and updates

The website does not make automated decisions producing legal or similarly significant effects on people. For an initial enquiry, send only the necessary information, avoiding credentials, health or other special-category data, confidential documents and unrelated third-party data.

This page shows the date of the latest update. Changes in purposes or tools are described before they are introduced; a new choice is requested where necessary.