Privacy notice

Who is responsible

This site is operated by SUPALABS s.r.l., which trades as Nucleo. SUPALABS s.r.l. is the data controller for anything you send through it, VAT number IT04596950248. You can reach us at [email protected].

What we collect

Only what you type into the contact form: your name, your work email, your company, your role if you give it, and your message. Nothing else. We do not ask for anything we do not need to reply to you.

Our host records standard server logs, including IP addresses, to serve the site and block abuse. We do not use those logs to build a profile of you.

Cookies and analytics

This site sets no cookies and runs no advertising or profiling trackers. That is why you are not looking at a consent banner.

We do measure how many people visit, using Cloudflare Web Analytics. It is cookieless and does not fingerprint your device or build a profile of you, which is why it needs no consent. It tells us page counts and loading performance, nothing that identifies you.

Why we hold it, and on what basis

We use what you send to answer you and, if it goes further, to discuss working together. The legal basis is Article 6(1)(b) of the GDPR, steps taken at your request before entering a contract, and Article 6(1)(f), our legitimate interest in responding to enquiries about our work. We do not send marketing email off the back of this form.

Who else sees it

Two processors, both under a data processing agreement: Cloudflare, which hosts the site and runs the form endpoint, and Resend, which delivers the message to our mailbox. Neither uses your data for its own purposes. Where a transfer leaves the EEA, it runs on the European Commission's Standard Contractual Clauses.

How long we keep it

The form stores nothing. Your message becomes an email in our mailbox, and we delete it within 24 months of the last exchange unless it has become part of a client relationship with its own retention terms. Server logs are kept short-term by our host for security.

Your rights

You can ask us for a copy of what we hold about you, ask us to correct it, ask us to delete it, ask us to restrict how we use it, object to our use of it, or ask for it in a portable format. Write to [email protected] and we will answer within one month.

If you think we have handled your data badly, you can complain to your local supervisory authority. In Italy that is the Garante per la protezione dei dati personali.

Changes

If this notice changes we update the date at the top. Material changes will be described here rather than made quietly.