Privacy Policy

01 Data Controller

The Data Controller for the personal data collected through this website is:

For any request regarding the processing of your personal data, you can contact the Data Controller at the addresses above.

02 Data we collect

In the course of the site's normal operation, Nimbo Srl may collect the following categories of data:

• Identification and contact data you voluntarily provide through the form on the Contact page: full name, company, email address, phone number, message content.
• Navigation data automatically collected by our hosting provider during normal use of the site (server logs): IP address, browser type, operating system, access times and other parameters related to the device used.
• Data arising from the use of third-party services embedded in the site, in particular the interactive Google Maps map on the Contact page (see point 6).

03 Purpose of processing

The data collected is processed for the following purposes:

• to respond to contact requests and requests for commercial information sent via the Contact page form;
• to comply with obligations under national and European laws, regulations or provisions issued by authorities entitled to do so;
• to ensure the technical management, security and correct functioning of the site.

04 Legal basis

Processing of the data provided through the contact form is based on the consent freely given by the data subject when the message is sent (Art. 6(1)(a) GDPR). Processing of navigation data necessary for the technical security of the site is based on the Data Controller's legitimate interest in ensuring the correct functioning and protection of its IT systems (Art. 6(1)(f) GDPR).

05 How data is processed

Personal data is processed using IT and telematic tools, following logic strictly related to the purposes indicated above and in a way that guarantees its security and confidentiality. Nimbo Srl adopts technical and organisational security measures adequate to prevent data loss, unlawful or improper use, and unauthorised access.

06 Disclosure to third parties

The Contact page embeds a map provided by the Google Maps service. Google Maps is a map-display service provided by Google LLC (for users in the European Economic Area, Google Ireland Limited), which acts as an independent Data Controller for the data collected through its own service. Until you give consent to third-party services via the consent banner (see the Cookie Policy), the map is not loaded and no data is sent to Google.

For more information on how Google processes data, please refer to Google's privacy policy: policies.google.com/privacy.

07 Transfers of data outside the EU

To the extent that you give consent to load Google Maps, some data may be transferred to servers located outside the European Economic Area, including in the United States. Google relies on transfer mechanisms recognised under European law (such as the Standard Contractual Clauses adopted by the European Commission) to ensure an adequate level of protection for the data transferred. Outside of what is described here, Nimbo Srl does not transfer data to non-EU countries for its own purposes.

08 Retention period

Data provided through the contact form is retained for as long as necessary to handle and respond to the request, and in any case for no more than 24 months from the last contact, unless a longer period is required by law or to establish, exercise or defend a legal claim. Navigation data collected in the hosting provider's server logs is retained for the time technically necessary and, in any case, no longer than the periods set by the hosting provider.

09 Your rights

As a data subject, you have the right to:

• obtain confirmation of whether processing is taking place and access your personal data (right of access);
• obtain rectification of inaccurate data or completion of incomplete data (right to rectification);
• obtain erasure of your data, in the cases provided for by law (right to erasure);
• obtain restriction of processing, in the cases provided for by law;
• receive the data you provided to us in a structured, commonly used, machine-readable format and, where technically feasible, have it transmitted to another controller (right to data portability);
• object at any time to the processing of your data, unless compelling legitimate grounds exist for the processing to continue (right to object);
• lodge a complaint with a supervisory authority — in Italy, the Garante per la Protezione dei Dati Personali (www.garanteprivacy.it).

To exercise your rights, you can write at any time to info@nimbo-srl.com.

10 Last update

This policy was last updated on 13 August 2026.