Controller
noworrIT GmbH, Sinichbachstraße 60, 39012 Merano, Italy. Managing director: Hannes Thaler. Privacy enquiries: info@noworrit.eu. Certified email: noworritsolutions@pec.it.
Scope and current status
This notice covers visits to noworrit.eu and enquiries. The website is hosted on Cloudflare Pages. The contact form is configured to send through MailerSend with Cloudflare Turnstile for spam protection. Cloudflare Web Analytics is used for visitor statistics. Details of contracting entities, log retention and international transfers still need to be completed.
Website access
Technical data can include IP address, time, requested URL, browser details and transmission status. Processing supports delivery, troubleshooting and security under Article 6(1)(f) GDPR, based on our legitimate interest in secure operation. Production log retention must be set before publication.
Enquiries
We use information you provide, such as name, business contact details, company and message, to answer your enquiry. Article 6(1)(b) GDPR applies to contractual and precontractual enquiries; Article 6(1)(f) applies to other business correspondence. Required fields are identified; without necessary information we may be unable to respond. Do not send passwords or unnecessary sensitive information.
Recipients and suppliers
Authorised noworrIT staff and necessary contracted IT suppliers may receive data. Business email uses Microsoft 365. Cloudflare provides hosting, spam protection and visitor statistics; MailerSend delivers form messages. The visitor’s email address is used as the reply-to address. Open and click tracking are disabled for these messages. Contracting entities, processing agreements, subprocessors and data locations must be documented according to the actual agreements. The partnership with Hotelfabrik does not automatically result in sharing your enquiry.
Spam protection and transfers
The form uses Cloudflare Turnstile to prevent automated requests. Technical browser and connection data is processed; the Turnstile token and IP address are sent to Cloudflare for server-side verification. This serves our legitimate interest in protecting the form from abuse under Article 6(1)(f) GDPR. A complete assessment of the actual configuration remains outstanding. Transfers outside the EEA require an applicable adequacy decision or appropriate safeguards under Articles 44 onwards GDPR. The final notice must identify the mechanism actually used.
Retention
Enquiry data is deleted when its purpose ends unless legal retention duties or legitimate evidential needs apply. Contract documents follow applicable accounting and tax requirements. Disputes may require longer retention. Operational retention periods and deletion procedures must be set for production.
Cookies and external content
No advertising pixels or Google Analytics are embedded. Language is stored in the URL; fonts and logos are served locally. According to the provider, Cloudflare Web Analytics does not use analytics cookies or Local Storage to recognise visitors. Spam protection must be considered separately. External article sources open only when clicked. Further services requiring consent will be enabled only after valid consent.
Your rights
Subject to legal conditions, you may request access, correction, erasure, restriction and portability. You may object to legitimate-interest processing based on your particular situation and withdraw consent for the future. You can complain to a competent authority, including the Italian Garante per la protezione dei dati personali.
Automated decisions
The website currently makes no automated decisions, including profiling, with legal or similarly significant effects. Advertising our AI services does not activate an AI service within the form.
Cloudflare Web Analytics
We use Cloudflare Web Analytics to assess page views, visits and loading times statistically and improve this website. A JavaScript beacon transmits technical page and performance data. According to Cloudflare, individual visitors are not tracked across different websites; we do not pass form contents to analytics. Processing is based on our legitimate interest in improving our website under Article 6(1)(f) GDPR. Reports are currently available for the previous six months; this does not specify every technical log retention period. More information: Cloudflare Web Analytics.