NEOSS corporate

Privacy policy

Information on personal-data processing under Articles 13 and 14 of Regulation (EU) 2016/679 (GDPR). Last updated: 31 August 2026.

Data controller

NEOSS S.r.l.
Via Giovanni Battista Pergolesi, 29
20124 Milano, MI · Italy
VAT and tax code IT 09233620963

info@neoss.it · neoss@pec.it · +39 02 22198910

Scope

This notice applies to www.neoss.it and to NEOSS service and product websites that link to it. The websites retain independent domains and content while sharing the same controller and corporate functions. Third-party services reached through links apply their own notices.

Data processed

  • technical browsing data, IP address, device identifiers, HTTP requests, security and diagnostic logs;
  • data voluntarily provided by email, telephone, certified email, support portal or other channels;
  • cookie and similar-technology preferences;
  • statistics, performance or campaign data only when optional tools are enabled and, where required, after consent.

Users are not asked to submit special categories of personal data through the website’s public channels.

Purposes and legal bases

  • service delivery, continuity, security and abuse prevention: controller’s legitimate interests (Art. 6(1)(f) GDPR);
  • responses to enquiries and pre-contractual or contractual activities: requested steps or contract performance (Art. 6(1)(b));
  • administrative, tax and legal obligations: compliance with law (Art. 6(1)(c));
  • non-essential analytics, marketing or profiling: consent (Art. 6(1)(a)), withdrawable at any time.

Provision and processing methods

Necessary technical data is processed automatically to provide and protect the website. Providing data in messages is optional, but withholding it may prevent a response. Processing uses organisational and technical measures proportionate to risk, with access limited to authorised personnel.

Recipients and providers

Data may be processed by authorised personnel and providers appointed as processors where required: hosting and infrastructure, DNS/CDN and security, email and collaboration, support, maintenance, analytics or search-visibility tools. Google Search Console supplies data to the site owner and does not, by itself, constitute a visitor cookie. An up-to-date list of processors can be requested from the controller.

Data is not published. It may be disclosed to authorities or other parties when required by law.

Transfers outside the EEA

Where a provider processes data outside the European Economic Area, NEOSS uses GDPR transfer mechanisms such as adequacy decisions, Standard Contractual Clauses and supplementary measures where necessary.

Retention

Data is kept only as long as needed: technical and security logs for provider-configured periods and longer only for incidents or legal duties; non-contractual enquiries normally for up to 24 months; contractual, administrative and tax records for statutory periods, normally 10 years. Consent preferences are stored for 180 days unless changed or withdrawn earlier.

Your rights

Where applicable, individuals may request access, rectification, erasure, restriction or portability, object to processing and withdraw consent without affecting prior lawful processing. Requests may be sent to info@neoss.it or neoss@pec.it. Individuals may also lodge a complaint with the Italian Data Protection Authority.

Garante per la protezione dei dati personali ↗

Automated decisions and updates

The website does not make solely automated decisions producing legal or similarly significant effects. This notice may be updated when services or laws change; the date above identifies the applicable version.