Privacy Policy

1. Data Controller

NHAZCA S.r.l., Via Vittorio Bachelet, 12, 00185 Rome, Italy. VAT/Tax ID 10711191006.
Recipient code (Italy): W7YVJK9.
Email: info@nhazca.com | PEC: nahzcasrl@pec.it | Phone: (+39) 06 95 065 8202. Categories of personal data

We may process:

  • contact details (name, email, phone, company, job title);

  • request details submitted via forms (use case/asset, location, timeline, technology interests, message, attachments);

  • technical data (IP, device identifiers, access logs);

  • usage statistics (analytics), subject to consent settings where required.

3. Purposes and legal bases

  1. Handling contact requests and support. Legal basis: Art. 6(1)(b) and/or Art. 6(1)(f) GDPR.

  2. Preliminary technical assessment. Legal basis: Art. 6(1)(b) and/or Art. 6(1)(f).

  3. Legal obligations. Legal basis: Art. 6(1)(c).

  4. Website security and spam prevention (captcha/logs). Legal basis: Art. 6(1)(f).

  5. Analytics (GA4) where applicable. Legal basis: consent (Art. 6(1)(a)) where required.

4. Processing and security

We process data with appropriate technical and organizational measures, limiting access to authorized personnel only.

5. Data provision

Mandatory form fields are required to handle your request.

6. Recipients / processors

Data may be shared with authorized staff and service providers acting as processors, including:

  • hosting/infrastructure (website hosted on Aruba),

  • email services (if applicable),

  • IT maintenance,

  • security/anti-spam tools (e.g., reCAPTCHA if enabled),

  • analytics/tag tools (Google Analytics 4 and Google Tag Manager via Site Kit).

7. International transfers

Some providers (e.g., Google services) may involve transfers outside the EEA, safeguarded by appropriate mechanisms (e.g., SCCs) and additional measures where needed.

8. Retention

  • contact requests: up to 24 months after closure/last meaningful interaction;

  • security logs: up to 12 months;

  • analytics: according to GA4 retention settings and consent configuration.

9. Your rights

You may exercise GDPR rights (Arts. 15–22) by contacting [privacy email]. You can withdraw consent at any time where applicable.

10. Complaints

You may lodge a complaint with your local supervisory authority (Italy: Garante per la protezione dei dati personali).

11. Updates

We may update this notice from time to time. The published version is the current one.