Privacy

Data controller

The data controller is Noema Design S.r.l., Via Circonvallazione Sud 29, 41049 Sassuolo (MO), Italy. For any request regarding your data: info@noemadesign.it.

What data we process

Contact form: first name, surname, email, request category and message. The data you send goes into our internal management system, for the sole purpose of answering your request.

Reserved Area: the email address, used to send a one-time sign-in link, and the authenticated session that keeps you signed in while browsing.

Guest access: anyone entering the workspace as a guest, without an account, does so in a temporary session that does not use cookies and is not retained at the end of the visit. Conversations are recorded anonymously solely to improve the quality of responses; we do not extract or use any personal data the user may write in their messages. If a guest voluntarily leaves an email address to be contacted, it is entered in the internal management system as an access request, solely to follow up on that request.

Server technical logs: IP address, browser type, date and time of the request, recorded automatically for security and diagnostics.

The Studio tools

The photograph uploaded to Lay your space and the written requests made to the tools are processed for the sole purpose of generating the requested proposal. Processing is carried out through technology providers acting on the controller's instructions; any transfer to countries outside the EU is covered by the safeguards required by the regulation. The images and requests are not used for any other purpose.

Studio usage reports

After a Studio tool is used, a report is sent to info@noemadesign.it. It includes the tool, catalogue and colour choices, interpreted requirement categories, and results or suggestions. User choices are distinguished from system suggestions.

The report does not include photographs, generated images, free text, AI explanations, names, contact details, IP addresses, browser data, or session or visitor identifiers. No cookies, trackers or links to a visitor profile are added.

The purpose is to understand tool usage and choices, without individual profiling or sales follow-up. For any residual personal data, the basis is the controller's legitimate interest in assessing and improving the service, with these minimisation safeguards. You may object by contacting the controller.

The technical queue keeps the content only until successful sending, or for a maximum of 7 days if errors occur. Only technical references needed to prevent duplicates remain for the same period. Copies delivered to the internal mailbox are separate from the queue and remain available as long as needed to assess usage, subject to periodic review; they are not automatically deleted after 7 days.

Why we process it and on what basis

To answer requests sent through the contact form: performance of pre-contractual steps and legitimate interest in replying.

To provide access to the Reserved Area: performance of the relationship with the authorised user.

For the security and correct operation of the site: legitimate interest.

To provide guest access to the workspace and improve the quality of responses: the controller’s legitimate interest.

To contact someone who voluntarily leaves an email address through guest access: taking pre-contractual steps at the data subject’s request.

How long we keep it

Contact form data is kept for as long as needed to handle the request and any resulting obligations, then archived or deleted.

The authenticated access session lasts a maximum of eight hours. The guest session is temporary and expires within a few hours, without being retained. Anonymous guest conversations are retained for 30 days and then automatically deleted. Technical logs are retained for a limited period solely for security purposes.

Who the data may be shared with

The data may be processed, on the controller's behalf, by technical service providers: the server infrastructure, located within the European Union, and the technology providers of the site's tools.

Your rights

You may at any time request access to your data, its rectification or erasure, the restriction of or objection to processing, and portability.

You may also lodge a complaint with the supervisory authority (in Italy, the Garante per la protezione dei dati personali). To exercise your rights, write to info@noemadesign.it.

What we do not do

We do not use browsing data for personalised advertising, remarketing or automated decisions about individuals. Optional statistics are described below. Fonts are served from our own infrastructure.

Optional website statistics

Only after consent do we use Google Analytics 4 to measure visits, public pages viewed, language, referring domains and interactions such as downloads, colour selection, sample requests and successful contact form submissions. The legal basis is consent under Article 6(1)(a) GDPR. Before acceptance and after refusal, the tag is blocked and no measurement data is sent to Google.

Google receives pseudonymous browser and session identifiers and technical browsing data. The IP address is processed during connection and, according to Google, is not logged or stored in GA4. We do not describe this data as anonymous. Google Signals, granular location and device data, advertising personalisation and automated enhanced measurement are disabled.

We do not send names, emails, messages, photographs, tool prompts, credentials or management-system identifiers. Query parameters and URL fragments are removed from page data. The private area and sign-in panel are excluded. Statistics are not linked to contacts in Ermene or internal Studio reports.

The service provider is Google Ireland Limited. Processing is governed by the Google Analytics terms and data processing terms. Google may process data outside the European Economic Area, including the United States, under the transfer mechanisms and safeguards set out in those terms. Google's documentation and applicable terms are linked below.

The property retains user and event data for 2 months, without resetting retention on new activity. This limit does not apply to most standard aggregated reports. Analytics cookies have a maximum lifetime of 180 days, without renewal on each visit. Acceptance or refusal is stored for 180 days in this browser.

You can withdraw consent at any time through Cookie preferences: collection stops and this site's Analytics cookies are removed. Withdrawal does not affect the lawfulness of prior processing and does not automatically delete data already collected. To exercise your rights or ask questions, contact info@noemadesign.it.

Updates

This notice may be updated; the date of the last change is shown at the top of the page.

Data safeguards in Google Analytics ↗Google data processing terms ↗