# Privacy Policy Source: Legal / Privacy Last updated: 2 September 2026 ## 1. Data controller The data controller for personal data is NFW Web Studio (VAT IT05204550239). For any questions about your data you can contact the controller at [info@nfw.run](mailto:info@nfw.run?subject=Personal%20data%20request%3A%20%5BSUBJECT%5D\&body=Dear%20Data%20Controller%2C%0A%0AI%20would%20like%20to%20exercise%20my%20rights%20under%20Regulation%20\(EU\)%202016%2F679%20\(GDPR\)%0Ain%20relation%20to%20my%20personal%20data.%0A%0A-%20Right%20I%20wish%20to%20exercise%3A%20%5Baccess%20%2F%20rectification%20%2F%20erasure%20%2F%20portability%20%2F%20objection%20%2F%20restriction%5D%0A-%20Details%20of%20the%20request%3A%20%5Bdescribe%20your%20request%5D%0A%0AI%20look%20forward%20to%20your%20reply%20within%20the%20statutory%20time%20limits.%0A%0AKind%20regards%2C%0A%5BFull%20name%5D%0A%5BContact%20for%20the%20reply%5D). ## 2. What data we collect - **Contact data** you voluntarily provide via the form or by email: name, email address, message content. - **Browsing data** collected via PostHog in **cookieless mode**: a hash computed on our servers from a daily-rotating value, with no persistent identifier and nothing stored on your device (see point 6). ## 3. Purpose of processing Data you send us via the form or by email is used** exclusively to get back to you**, respond to your request and, if needed, provide you with a quote. We don't use it for marketing, profiling or any other purpose unrelated to your request. Aggregated, cookieless browsing data is processed for statistical and site-improvement purposes. ## 4. Legal basis Processing of contact data is based on the performance of pre-contractual measures you requested and on compliance with legal obligations. Processing of aggregated, cookieless statistical data is based on our **legitimate interest** in understanding and improving how the site is used: because this measurement stores nothing on and reads nothing from your device, it does not require the prior consent that a cookie-based tool would. You can object to this processing at any time (see point 7). ## 5. Data retention We keep data for the time strictly necessary for the purposes stated, in compliance with legal requirements. Contact data relating to requests that don't go ahead is deleted within a reasonable period. ## 6. Providers and sharing For website usage statistics we rely on **PostHog**, appointed as data processor, running in **cookieless mode** and configured to process data on **servers located in the European Union**. We do not use Google Analytics. **We don't sell or share your data with third parties.** No AI service and no other external service has access to the data you provide via the form or by email: it stays confidential and is only used to get back to you. ## 7. Your rights - Access, rectification and erasure of your data. - Restriction of and objection to processing. - Data portability. - Withdrawal of consent at any time. - Complaint to the Data Protection Authority. To exercise your rights write to [info@nfw.run](mailto:info@nfw.run?subject=Personal%20data%20request%3A%20%5BSUBJECT%5D\&body=Dear%20Data%20Controller%2C%0A%0AI%20would%20like%20to%20exercise%20my%20rights%20under%20Regulation%20\(EU\)%202016%2F679%20\(GDPR\)%0Ain%20relation%20to%20my%20personal%20data.%0A%0A-%20Right%20I%20wish%20to%20exercise%3A%20%5Baccess%20%2F%20rectification%20%2F%20erasure%20%2F%20portability%20%2F%20objection%20%2F%20restriction%5D%0A-%20Details%20of%20the%20request%3A%20%5Bdescribe%20your%20request%5D%0A%0AI%20look%20forward%20to%20your%20reply%20within%20the%20statutory%20time%20limits.%0A%0AKind%20regards%2C%0A%5BFull%20name%5D%0A%5BContact%20for%20the%20reply%5D). ## 8. Place of processing Data is processed within the European Union / European Economic Area. Should a transfer outside the EEA become necessary, it would take place in compliance with the safeguards required by the GDPR (e.g. standard contractual clauses). ## 9. Changes to this notice We reserve the right to update this notice. Changes will be published on this page along with the relevant update date.