Last updated: May 2026
This privacy policy describes the processing methods of personal data of users who consult and use the website novalunaitalia.com in accordance with Art. 13 of EU Regulation 2016/679 (GDPR).
1. Data Controller
The Data Controller is Novaluna S.r.l., with registered and operational headquarters in Italy. For any question or request inherent to the protection of personal data, the user can contact the Controller at the institutional email address available in the contact section of the website.
2. Types of Processed Data and Purposes
A. Technical Browsing Data
The computer systems responsible for the operation of this website automatically acquire, during their normal operation, certain data whose transmission is implicit in the use of Internet communication protocols (e.g., IP addresses, request times, operating system parameters). This data is used solely to monitor the proper functioning of the website, ensure infrastructure security, and store immediate technical preferences (e.g., technical session and graphic theme cookies).
B. Privacy-First Web Analytics (Localized Matomo)
The website uses the Matomo analytics platform, installed and managed directly on the Controller's local servers (/data/). To ensure maximum confidentiality, this implementation is configured in cookieless mode (via the technical instruction disableCookies). Browsing data is processed internally, in a strictly aggregate form and with partial masking of the IP address. This purely statistical analysis occurs without the use of cookies, without individual profiling, and without any transfer of data to external third parties.
C. Advanced Statistical Services and Third-Party Content (Subject to Consent)
Subject to explicit and optional consent granted via the Cookie Banner, the website activates external scripts and multimedia content:
- Google Analytics 4: Used to collect structured information on traffic flows and analyze visitor interactions.
- Embedded Content (YouTube and Google Maps): The website displays YouTube videos and integrates Google Maps. The activation of these components involves sending usage data and cookies to Google Ireland Limited servers, in accordance with their specific privacy policies.
3. Legal Basis for Processing
- Legitimate Interest of the Controller (Art. 6, par. 1, lett. f of the GDPR): The processing of technical browsing data necessary for security, the use of technical cookies, and the anonymous, cookieless statistical analysis via local Matomo are based on the legitimate interest of the Controller to maintain a secure, efficient, and operational corporate web infrastructure.
- Consent of the Data Subject (Art. 6, par. 1, lett. a of the GDPR): The activation of Google Analytics 4 analytical cookies and the loading of external widgets (YouTube and Google Maps) are based exclusively on the free and explicit consent expressed by the user via the banner popup.
4. Data Retention Period
System logs and technical data are kept for the minimum technical times linked to server security. The aggregate data stored by Matomo on the local server does not contain personal identifying elements. Data tracked via third-party cookies (Google Analytics) is retained according to the external platform's specifications (up to a maximum of 2 years) or until manual deletion of the cookies by the user.
5. Recipients of Personal Data
Data is not disclosed or sold to third parties under any circumstances. IT professionals or companies formally appointed as Data Processors pursuant to Art. 28 of the GDPR may have access to the data solely for technical assistance and website maintenance purposes.
6. Rights of the Data Subjects
In accordance with Articles 15 and following of the GDPR, users have the right at any time to access their personal data, verify its accuracy, request its rectification, integration, restriction, portability, or erasure ("right to be forgotten"), as well as to object to its processing.
Requests must be addressed directly to Novaluna S.r.l. through the official contact channels of the website. Data subjects also have the right to lodge a complaint with the competent Data Protection Authority (in Italy: www.garanteprivacy.it).
7. Amendments to this Policy
The Data Controller reserves the right to make changes to this Privacy Policy at any time to adapt it to new legal provisions or technical changes to the website, updating the date indicated at the top of the document.