Privacy and personal data

The controller identified in the Novabase privacy notice is Claudio Giovannini, Via Francesco Filos, 25, 38050 Lavis (TN), Italy. For processing enquiries: giovannini@novabase.it. To exercise your rights: info@novabase.it.

Contact and demo forms collect your name, email, phone number, company and enquiry details. The portal also processes registration, authentication, billing, delivery, order and contract data needed for the requested services. The legal bases are pre-contractual steps and contract performance (Art. 6(1)(b) GDPR), and legal and tax obligations (Art. 6(1)(c)). Providing data is voluntary, but mandatory fields are needed for the requested function. There are no automatic newsletter or marketing subscriptions.

Systems process IP addresses, requested resources, timestamps and technical information to deliver and protect the site. Sessions, origin checks, CSRF tokens and rate limits protect accounts and requests; access may be recorded in security logs. The legal basis is the legitimate interest in security and proper operation (Art. 6(1)(f) GDPR). Google Analytics and advertising profiling are not active, and the statistics service does not record visits without consent. There are no automated decisions with legal effects.

The technical cookie smartcold_session manages the session and security checks, with a configured lifetime of seven days. The browser also stores the cart in localStorage and temporary data in sessionStorage, including form fields during language changes (up to ten minutes, restored once; passwords and card details excluded). The interface may create a browsing session identifier; this does not enable statistical recording without consent. Advertising cookies are not active. Fonts are loaded from Google Fonts: the browser sends Google its IP address and technical data, which may be processed outside the EEA. External websites reached through links have their own notices.

The WhatsApp button opens an external service only when you choose “Start chat”. The conversation is also subject to WhatsApp’s privacy policy.

With statistics consent we use Microsoft Clarity (project z7tx5tfuws), a Microsoft service, for heatmaps and session recordings. It collects clicks, scrolling, interactions, visited pages and technical information. Legal basis: consent (GDPR Art. 6.1.a). Forms are masked; account, portal, administration, cart and checkout pages are excluded, as are URLs with query parameters. Advertising consent remains denied.

Clarity uses _clck (up to one year) and _clsk (one day). Clarity is not loaded before consent or after rejection, including without cookies. Your choice is stored for 180 days (smartcold-clarity-consent-v1). Change or withdraw it through Cookie preferences in the footer: withdrawal stops recording and deletes accessible Clarity cookies. Microsoft may process data outside the EEA with applicable safeguards. Retention and transfers: https://privacy.microsoft.com/privacystatement and https://learn.microsoft.com/clarity/.

Enquiries are stored in SmartCold and handled by authorised persons; confirmation emails and service messages are sent to the details provided. Hosting, email, support and providers needed for requested services may process data, including as processors where applicable. Data is not publicly disclosed. Enquiries are retained as needed to handle them and subsequent relationships; account, order and contract data for the relationship and applicable obligations. Accounting and tax documents are retained for statutory periods. Further retention is limited to protecting rights and security.

You may request access, rectification, erasure, restriction and portability where provided by Articles 15–22 GDPR, and object to processing based on legitimate interests. Write to info@novabase.it. You may also lodge a complaint with the Italian Data Protection Authority or the competent supervisory authority. The form checkbox acknowledges that you have read the notice and does not constitute marketing consent.