Privacy
The reference version of this notice is the Italian one. This is a courtesy translation: if the two ever differ, the Italian text applies.
This page is about this website: what happens when you visit it and what happens if you write to us from the demo form or the support form. The Nexur applications installed in gelato shops have their own privacy notice, because there the data is not yours but that of the customers and staff of whoever uses them.
Updated on 26 September 2026.
In short
The site does not track you. We use no cookies, there are no analytics, no social buttons, and no resource comes from another server: the typefaces are hosted here precisely so that you don't make a request to Google without having asked to. If you fill in the demo form, what you write reaches us and we keep it for 12 months to get back to you, unless a contract comes out of it. The same goes for the support form: it opens your email program, and sends nothing by itself.
Who the controller is
Nexur Group S.r.l., Via Piave 18, 20039 Canegrate (MI). VAT no. 14821860963.
When you visit the site
The pages are static and no program runs on a server to build them: what reaches you is already written. As a result:
- No cookies of ours. We use none at all — neither technical nor profiling ones — and that is why there is no banner to close. The only one that may appear is a security cookie, set by the provider that delivers the pages (see below) only when it needs to check that there is a person on the other side and not an automated program. If one day we needed one of our own, even a single one, this line would change before that day, not after.
- No statistics. We don't know how many people have read this page, where they come from or what they looked at before.
- No requests to third parties. Typefaces, images, style sheets and scripts all come from this domain. An automated check verifies this on the built site at every change: if someone brought back a call to an external service, the check would fail before publication. The only request that goes to another address is the sending of the demo form, and it goes to a service of ours: it is described below.
- Your browser chooses the language. When you arrive from outside — from a search engine, from a link, by typing the address — a small script in the page reads the first language your browser says it prefers: if it is Italian you see the page in Italian, otherwise the same page in English. If you arrive from another page of this site it does nothing, so the language you picked from the selector at the top stays the same while you browse. It saves nothing — no cookies, nothing in the browser's storage — and sends nothing to anyone: the only request it makes is for the page in the other language, to this same site. That is why the choice is not remembered: if you come back from outside, what your browser declares counts again.
One thing happens anyway, and it is true of any website: the pages are delivered to you by a provider, and ours is Cloudflare, which processes the data on our behalf as a processor. To deliver a page it sees your IP address, the browser you use, the page you ask for and the time; this is needed to run the site and to defend it against abuse, which is a legitimate interest of ours (Article 6(1)(f) GDPR). If a request looks like it comes from an automated program, Cloudflare may show you a check and leave a security cookie, cf_clearance, used only so it doesn't ask you again.
Cloudflare is a US company with a worldwide network, so this data may also be processed outside the European Union: it does so with the safeguards the GDPR provides for, namely its participation in the EU-US Data Privacy Framework and the standard contractual clauses in its data processing agreement. We do not receive logs of individual visits: in the Cloudflare dashboard we see aggregated numbers and, for requests blocked as suspicious, the address and the page. We do not cross-reference them with anything else.
When you write to us from the form
When you press the button, the site sends what you wrote — your name, the name of your business, the contact details you chose to give us, the message and, if you come from the pricing calculator, the configuration you had chosen — to a service of ours, which saves it in our database. We read it from there to call you back. Along with it we save the language of the page and the date of the version of this notice you had in front of you, so we know what you agreed to.
If you left us an email address as your contact, we send you a confirmation that the request has arrived: only one every 24 hours to the same address, with a text that is always the same and nothing that tells us whether you opened it. If you did not send the request, just ignore it.
To defend ourselves against programs that fill in forms automatically, we count how many requests come from the same IP address. To do so we do not save the address but an encrypted fingerprint from which the address cannot be worked out, and we delete it after 30 days.
Why we process it
To call you back, answer your question and — if you are interested — show you the product and give you a quote. Nothing else: we send no advertising and we do not pass your contact details on to anyone. The legal basis is the performance of pre-contractual measures you asked for (Article 6(1)(b) of the GDPR). The address fingerprint protects the form, which is a legitimate interest of ours (point (f)).
How long we keep it
If nothing comes of it, 12 months from the day you wrote to us: then the request deletes itself. If a contract comes out of it, the data that is needed moves into your customer record, and from then on the duration of the contract applies, followed by the periods the law sets for invoices and accounting records — ten years from the last entry, under Article 2220 of the Italian Civil Code. You can ask us to delete the request sooner, and we will. One thing does not delete itself: the notice with the same data that reaches our support mailbox. We remove that by hand, and if you ask us to delete the request we remove it too.
Who else sees it
Two providers, both processors appointed under Article 28 of the GDPR: Amazon Web Services, which hosts the service and the database in Stockholm, Sweden, inside the European Union; and the provider that runs our email, because every request also sends a notice to our support mailbox and, if you left us an email address, the confirmation to you. Nobody else: we don't feed any list, and your data is neither sold nor transferred.
When you ask us for support
For now the form on the support page sends nothing to anyone: like the demo form, it opens your email program with a message already written — the app you are writing about, your name, your email, the store number if you give it, and your message. It reaches us only if you send it.
We use it to answer you and fix the problem you report. If you use the apps for a gelato shop that has a contract with us, this is part of that contract (Article 6(1)(b) GDPR); otherwise it is our legitimate interest in answering people who ask for help with our products (Article 6(1)(f)). We keep the correspondence as long as it is needed to resolve the request and follow it up, and only our email provider sees it.
Your rights
You can ask us to see your data, correct it, delete it, restrict its use, receive it in a machine-readable format, and object to its processing. We reply within one month. Write to support@nexurgroup.com.
If you have a certified email address (PEC) you can also write to ours: nexurgroup@pec.nexurgroup.com. It is not required, and a request sent from the address above counts exactly as much as one sent from a PEC.
If you think we are processing your data improperly, you can complain to the Italian data protection authority, the Garante per la protezione dei dati personali.
If this page changes
The date at the top says when it was last revised. If something that concerns you changes — a new recipient, a new purpose — we don't just change the date: we tell you.