Privacy Policy

Version 2.0 — Last updated: 8 October 2026.

This notice is provided pursuant to Art. 13 of Regulation (EU) 2016/679 (the “Regulation” or “GDPR”) and describes how NCC Fiore di Zambello Fiorenzo (“NCC Fiore” or the “Controller”) processes the personal data of users of the website nccfiore.it.

1. Data controller

The data controller is NCC Fiore di Zambello Fiorenzo, registered office at Vicolo Anna Magnani 9/G – 45030 S. Maria Maddalena (RO), Italy — VAT 01503440297, R.E.A. 162722, CCIAA di Rovigo.

For any question about personal data protection you can write to zambellofiorenzo@gmail.com or the certified email (PEC) zambellofiorenzo@pec.it.

2. What data we process, for what purposes and on what legal basis

We process personal data in accordance with the principles of data minimisation and purpose limitation. The legal bases for processing are as follows:

• Legitimate interest of the Controller (Art. 6(1)(f) of the Regulation): security and correct operation of the site (technical logs) and anonymous statistics.

Processing is not based on consent: the site uses no cookies and does not collect data for marketing or profiling purposes. In detail:

a) Browsing and site security (technical logs)

While you browse, the systems automatically collect technical data necessary to provide and secure the service: IP address (anonymised), date and time, requested page/URL, browser and operating system, response status code. Legal basis: legitimate interest of the Controller in the security and correct operation of the site (Art. 6(1)(f)). Retention: 30 days. IP addresses are truncated/anonymised before any storage.

b) Anonymous statistics (Umami)

The site uses Umami, an open-source privacy-focused analytics service, to collect aggregated statistics about site usage. Umami does not use cookies, does not collect personally identifiable information and does not track users across websites; the data collected (page views, referrer, browser, operating system, device type and country of origin) is anonymous and aggregated. Legal basis: legitimate interest (Art. 6(1)(f)). Because it uses no cookies or personal identifiers, consent is not required and no cookie banner is needed. Retention: the data is aggregated and anonymous. The analytics service is hosted by the technical provider Nicola Zambello (nzambello.dev), VAT 02096560384, established in Italy (EU), acting as a data processor under Art. 28 of the Regulation.

We do not carry out automated decision-making or profiling.

3. Cookies

This site does not use cookies, whether technical, profiling or tracking. The interface language is determined by the browser's Accept-Language header and is not stored. No cookie consent banner is therefore required.

4. Data recipients

Data is processed by personnel authorised by the Controller and may be disclosed to providers acting as data processors, in particular:

• hosting and infrastructure providers for the site;
• email/SMTP providers for the delivery of requests;
• the technical provider Nicola Zambello (nzambello.dev), VAT 02096560384, established in Italy (EU) — hosting of the website, hosting of the analytics service (Umami) and website development/maintenance;
• content delivery networks (CDN) for fonts and software libraries (e.g. jsDelivr, unpkg).

Providers are bound by specific agreements under Art. 28 GDPR. Data is never sold or transferred to third parties for marketing purposes.

5. Transfers to third countries

The technical provider (hosting, website and analytics) is established in Italy and operates within the European Union. Some other providers (in particular CDNs and mapping services) may instead process data outside the European Economic Area; in that case the transfer is based on an adequacy decision of the European Commission or on Standard Contractual Clauses (SCCs) under Art. 46 GDPR.

6. Your rights

You may exercise your rights under Arts. 15-22 of the Regulation at any time: access, rectification, erasure, restriction of processing, data portability and objection to processing based on legitimate interest.

Requests are sent to zambellofiorenzo@gmail.com and are answered within 30 days of receipt.

You also have the right to lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali) — Piazza Venezia 11, 00187 Rome — Email: garante@gpdp.it, PEC: protocollo@pec.gpdp.it — or to seek a judicial remedy (Arts. 77 and 79 of the Regulation).

7. Changes

This notice may be updated over time. The version and last-updated date are shown at the top of the page.