Privacy Policy

1. Data controller

The data controller for personal data is nfw.run (VAT IT05204550239). For any questions about your data you can contact the controller at info@nfw.run.

2. What data we collect

• Contact data you voluntarily provide via the form or by email: name, email address, message content.
• Browsing data collected, only with your consent, in aggregated and pseudonymised form for statistical purposes via PostHog (see point 6).

3. Purpose of processing

Data you send us via the form or by email is used exclusively to get back to you, respond to your request and, if needed, provide you with a quote. We don't use it for marketing, profiling or any other purpose unrelated to your request. Aggregated browsing data is processed, only with consent, for statistical and site-improvement purposes.

4. Legal basis

Processing of contact data is based on the performance of pre-contractual measures you requested and on compliance with legal obligations. Processing of statistical data is based exclusively on your consent, which you can freely withdraw at any time.

5. Data retention

We keep data for the time strictly necessary for the purposes stated, in compliance with legal requirements. Contact data relating to requests that don't go ahead is deleted within a reasonable period.

6. Providers and sharing

For website usage statistics we rely on PostHog, appointed as data processor and configured to process data on servers located in the European Union. We do not use Google Analytics.

We don't sell or share your data with third parties. No AI service and no other external service has access to the data you provide via the form or by email: it stays confidential and is only used to get back to you.

7. Your rights

• Access, rectification and erasure of your data.
• Restriction of and objection to processing.
• Data portability.
• Withdrawal of consent at any time.
• Complaint to the Data Protection Authority.

To exercise your rights write to info@nfw.run.

8. Place of processing

Data is processed within the European Union / European Economic Area. Should a transfer outside the EEA become necessary, it would take place in compliance with the safeguards required by the GDPR (e.g. standard contractual clauses).

9. Changes to this notice

We reserve the right to update this notice. Changes will be published on this page along with the relevant update date.