Controller
noworrIT GmbH, Sinichbachstraße 60, 39012 Merano, Italy. Managing director: Hannes Thaler. Privacy enquiries: [email protected]. Certified email: [email protected].
Scope and current status
This notice covers visits to noworrit.eu and enquiries. The website is hosted on Cloudflare Pages. The contact form is configured to send through MailerSend with Cloudflare Turnstile for spam protection. Cloudflare Web Analytics is used for visitor statistics. Details of contracting entities, log retention and international transfers still need to be completed.
Website access
Technical data can include IP address, time, requested URL, browser details and transmission status. Processing supports delivery, troubleshooting and security under Article 6(1)(f) GDPR, based on our legitimate interest in secure operation. Production log retention must be set before publication.
Enquiries
We use information you provide, such as name, business contact details, company and message, to answer your enquiry. Article 6(1)(b) GDPR applies to contractual and precontractual enquiries; Article 6(1)(f) applies to other business correspondence. Required fields are identified; without necessary information we may be unable to respond. Do not send passwords or unnecessary sensitive information.
Recipients and suppliers
Authorised noworrIT staff and necessary contracted IT suppliers may receive data. Business email uses Microsoft 365. Cloudflare provides hosting, spam protection and visitor statistics; MailerSend delivers form messages. The visitor’s email address is used as the reply-to address. Open and click tracking are disabled for these messages. Contracting entities, processing agreements, subprocessors and data locations must be documented according to the actual agreements. The partnership with Hotelfabrik does not automatically result in sharing your enquiry.
Spam protection and transfers
The form uses Cloudflare Turnstile to prevent automated requests. Technical browser and connection data is processed; the Turnstile token and IP address are sent to Cloudflare for server-side verification. This serves our legitimate interest in protecting the form from abuse under Article 6(1)(f) GDPR. A complete assessment of the actual configuration remains outstanding. Transfers outside the EEA require an applicable adequacy decision or appropriate safeguards under Articles 44 onwards GDPR. The final notice must identify the mechanism actually used.
Retention
Enquiry data is deleted when its purpose ends unless legal retention duties or legitimate evidential needs apply. Contract documents follow applicable accounting and tax requirements. Disputes may require longer retention. Operational retention periods and deletion procedures must be set for production.
Cookies and external content
No advertising pixels are embedded. Google Analytics and Cloudflare Web Analytics load only after consent to visitor statistics. Language is stored in the URL; fonts and logos are served locally. According to the provider, Cloudflare Web Analytics does not use analytics cookies or Local Storage to recognise visitors. Spam protection must be considered separately. External article sources open only when clicked. Further services requiring consent will be enabled only after valid consent.
Your rights
Subject to legal conditions, you may request access, correction, erasure, restriction and portability. You may object to legitimate-interest processing based on your particular situation and withdraw consent for the future. You can complain to a competent authority, including the Italian Garante per la protezione dei dati personali.
Automated decisions
The website currently makes no automated decisions, including profiling, with legal or similarly significant effects. Advertising our AI services does not activate an AI service within the form.
Cloudflare Web Analytics
We use Cloudflare Web Analytics to assess page views, visits and loading times statistically and improve this website. A JavaScript beacon transmits technical page and performance data. According to Cloudflare, individual visitors are not tracked across different websites; we do not pass form contents to analytics. The analytics script loads only after express consent under Article 6(1)(a) GDPR. Consent can be withdrawn for the future through “Cookie settings” in the footer; the page reloads to end an already active analytics session. Your choice is stored in the necessary noworrit_consent cookie for up to 180 days on noworrit.eu, including www. Without consent, the analytics script and analytics transmission remain disabled; hosting and the contact form operate independently. Reports are currently available for the previous six months; this does not specify every technical log retention period. More information: Cloudflare Web Analytics.
Google Analytics 4
With consent we use Google Analytics 4 (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland) to analyse page views and website usage. Processing may include page addresses, browser and device details, usage events and technical connection data. Analytics cookies (_ga and _ga_…) distinguish visits; our integration limits their lifespan to 180 days without automatic renewal. Successful form submissions may be recorded as generate_lead; our code does not send names, email addresses, companies or message contents to Google Analytics. The initial page address is sent without query parameters or fragments. Google Signals and advertising personalisation are disabled in our integration. The legal basis is consent under Article 6(1)(a) GDPR. If you reject analytics, the Google script does not load. Consent can be withdrawn in Cookie settings; the page reloads and _ga cookies set by our integration are removed. Processing by Google LLC in the USA is possible. Actual transfer arrangements and the retention configured in the Analytics property must be documented before final release. More information: Google Privacy Policy.