Privacy & Cookies

Data controller

The data controller is the company below. For anything concerning your data, write to info@nok.business or via certified email (PEC).

No Data Protection Officer has been appointed: the appointment is not mandatory for the processing described on this page (Art. 37 GDPR). Your point of contact is info@nok.business.

What we process, why, and on which legal basis

• Browsing data — the hosting infrastructure's technical logs (IP address, request timestamp, user agent), needed to serve the site and keep it secure. Legal basis: legitimate interest (Art. 6(1)(f) GDPR). Retention: the hosting provider's technical windows.
• Usage statistics, without cookies — we measure traffic in aggregate form only (page views, country, referrer): no persistent identifiers, IP addresses not stored, and your browser's "Do Not Track" signal is honoured. These numbers describe no individual. Legal basis: legitimate interest (Art. 6(1)(f) GDPR).
• Contact — if you write to info@nok.business we process your address, what you tell us and what is needed to reply. Legal basis: responding to your request and pre-contractual steps (Art. 6(1)(b) GDPR). Retention: up to 24 months after our last reply; if a contract follows, contractual records are kept for 10 years (Art. 2220 of the Italian Civil Code).

Providing data is optional: the site works without giving us anything. Without an address, we simply cannot reply.

Artificial intelligence: the transparency we practise

Artificial intelligence is our trade, and we use it ourselves first. This website was designed and developed with the aid of AI tools, under human direction, review and responsibility. We state this as a transparency choice, consistent with the principles of Regulation (EU) 2024/1689 (AI Act) and of Italian Law no. 132 of 23 September 2025.

When you contact us, the Company may process your data with the aid of AI systems, including AI agents: for instance to read and organise requests, draft replies, or analyse the needs you describe.

• Every decision affecting you remains human: no decision based solely on automated processing produces legal effects or similarly significant effects on you (Art. 22 GDPR).
• AI providers process data as processors (Art. 28 GDPR) or under contractual terms that exclude the use of your data for model training.
• AI systems receive only what each task requires (data minimisation, Art. 5(1)(c) GDPR).

There are no chatbots on this site, nor any system that interacts with you directly. If one day there are, you will be told there, before you use them, as required by Art. 50 of the AI Act.

Recipients and transfers outside the EU

Data may be processed on the Company's behalf by technical service providers: the hosting and delivery infrastructure (Vercel), the aggregate statistics service (Umami), email providers and providers of artificial-intelligence systems. They act as processors under Art. 28 GDPR or, within their own technical remit, as independent controllers. No dissemination, no sale to third parties for marketing.

Some providers are established in third countries, notably the United States: transfers rely on Arts. 44 et seq. GDPR — the European Commission adequacy decision of 10 July 2023 (EU-U.S. Data Privacy Framework) for certified providers, or standard contractual clauses under Art. 46 GDPR.

Your rights

You may at any time exercise the rights under Arts. 15-21 GDPR: access, rectification, erasure, restriction, portability, objection. Write to info@nok.business: we reply within one month (Art. 12(3) GDPR).

If you believe a processing operation infringes the law, you may lodge a complaint with the Italian supervisory authority, the Garante per la protezione dei dati personali (www.garanteprivacy.it), under Art. 77 GDPR, or apply to the courts.

Cookie policy

This site sets no cookies. None: no technical, analytics, profiling or third-party cookies. That is why there is no banner: the Italian supervisory authority's guidelines (decision of 10 June 2021, no. 231) require one only where cookies or other non-technical tracking tools are used. Showing you one would be telling you something false.

• The only item stored on your device is the "nok-musica-spenta" entry in your browser's sessionStorage, which remembers — for the duration of the tab only — whether you switched the site's audio off. It is strictly functional to your own choice, does not identify you, never leaves your device and disappears when the tab closes: it is exempt from consent under Art. 122 of the Italian Privacy Code.
• Traffic statistics (Umami) use no cookies and no persistent identifiers: they measure in aggregate, store no IP addresses and honour the "Do Not Track" signal.
• Fonts are served from our own domain: no request leaves for third-party font services.

Should the site ever adopt cookies or tools requiring consent, this page and the banner will arrive first.

Updates to this notice

Any substantial change will be published on this page, with the update date at the top. The version you are reading is the one in force.