Privacy and cookies

Original version: March 2025 · technical adaptation for the new website: 25 August 2026

Under Regulation (EU) 2016/679 (“GDPR”) and Italian Legislative Decree 196/2003, as amended by Legislative Decree 101/2018, this notice explains how personal data is processed when people browse and use Network Caffè.

Data controller

The data controller is Network Caffè, represented by its private operator and also referred to as the “Network Caffè Management”. For questions about personal data or to exercise GDPR rights, write to privacy@netcaffe.biz.

Types of data collected

Browsing data

The systems that operate the website receive information whose transmission is inherent in internet protocols, including IP address, request time, requested URL, HTTP method, response code, and device or software environment parameters. This data is used for security, technical statistics and service operation. It is normally retained for a few days unless it is needed to investigate unlawful activity.

Data provided voluntarily

Messages sent to published email addresses involve the collection of the data contained in the message, such as the sender address and message text. Providing this data is optional, but without the necessary information it may not be possible to respond. The website has no contact form and does not store these communications in its own database.

Cookies and local storage

The website uses browser local storage to remember the selected theme and, only when analytics is configured, the related preference. It does not use advertising cookies or a PHP session for ordinary browsing. StatCounter loads only after explicit consent and only when its project credentials have been configured.

Purposes and legal bases

• Access to the website and content: performance of the requested service and legitimate interests in operation and security under Article 6(1)(b) and (f) GDPR.
• Responses to communications: pre-contractual steps or a service requested by the data subject, and legitimate interests in managing enquiries.
• Legal obligations: compliance with legal duties under Article 6(1)(c) GDPR.
• Security and abuse prevention: legitimate interests in protecting systems, content and users.
• Non-essential analytics: consent under Article 6(1)(a) GDPR, which may be withdrawn at any time.

Processing and security

Data is processed mainly with digital and telematic tools using safeguards designed to protect security and confidentiality. The website uses HTTPS and the protections supplied by its hosting infrastructure. Processing follows the data-minimisation principle and does not include automated decision-making that produces legal effects for users.

Retention

Data is kept only for as long as needed for the purpose for which it was collected. Technical logs follow provider retention periods and security requirements. Communications are kept for as long as necessary to manage the enquiry and any follow-up, generally no longer than 12 months from the last exchange unless law or legal claims require otherwise. Data processed on the basis of consent is kept until consent is withdrawn or the stated retention period ends.

Recipients

Personal data is not sold or made public. It may be processed by technical and IT providers required to operate the website, including Hostinger as hosting provider, by professionals bound by confidentiality, or by authorities where required by law. StatCounter receives data only after analytics consent.

Transfers outside the European Economic Area

Some technical providers may process data outside the EEA. Where this occurs, transfers must comply with Articles 44 and following of the GDPR through adequacy decisions, standard contractual clauses or other safeguards recognised by law.

Data subject rights

Users may exercise the rights set out in Articles 15–22 GDPR:

• access to personal data and processing information;
• correction or completion of inaccurate data;
• erasure where the legal conditions apply;
• restriction of processing;
• data portability where applicable;
• objection to processing based on legitimate interests;
• withdrawal of consent without affecting earlier processing;
• a complaint to the Italian Data Protection Authority.

Exercising your rights

Requests may be sent to privacy@netcaffe.biz, stating which right is being exercised. Identity verification may be requested. The controller responds within the time limits established by Article 12 GDPR.

Children

The website does not knowingly collect personal data from children under 14. If data is found to have been collected without the required consent, it will be deleted promptly.

Manage analytics consent

You can update the preference saved in this browser at any time.

Changes to this policy

This policy may be updated when services or legal requirements change. Material updates will be announced on the website. Please check this page periodically.