Last updated:
Controller and contact details
The controller is NAZCA Italia s.r.l., Santa Croce 396, 34151 Trieste, Italy, VAT and tax number 01386450322. This notice covers browsing the website and enquiries sent through the contact form.
For information and to exercise personal data rights, email info@nazcaitalia.it. Certified email (PEC): official@pec.nazcaitalia.it. Gianluca Finetti coordinates personal data requests.
Data provided through the form
We collect your name, email, enquiry reason and the information you provide to describe it. Phone number is optional. A message is required for general enquiries and collaboration and optional for the other enquiry types. The form does not accept attachments.
For land proposals we request municipality, province, approximate area, your relationship with the land and current use. For BESS projects we request organisation, location and project stage; grid connection information is optional. For investment enquiries we request organisation, investor profile and indicative range; focus is optional. For collaboration we request organisation and collaboration type. Required fields are indicated in the form.
Provide only relevant information. Avoid health information or other special categories of personal data, identity documents and unnecessary information about other people. Without the required fields you cannot submit the form; you may still contact us by email.
Purposes and legal bases
We use the data to assess your enquiry, reply and follow up any resulting relationships. Where an individual requests steps towards a possible contract, necessary processing is based on those requested precontractual steps, under Article 6(1)(b) GDPR.
For general enquiries and correspondence with company representatives, processing is based on Nazca’s legitimate interest in handling enquiries and professional relationships, Article 6(1)(f) GDPR. Website operation and protection rely on the legitimate interest in providing the service, preventing abuse and protecting system security.
The form checkbox acknowledges that you have read this notice; it is not general consent to processing. Consent to website statistics and performance measurement is separate and optional. Sending an enquiry does not subscribe you to newsletters or promotional lists.
Browsing and security
Vercel infrastructure processes technical data needed to deliver pages and prevent abuse, including IP addresses and request metadata such as date and time, requested path and technical browser or device information. The form uses spam and abusive submission controls.
The website does not create an application database of enquiries. The server forwards form data through Resend to info@nazcaitalia.it, hosted with Register. Application endpoint logs use fixed error codes without submitted field values; Resend also retains message content and delivery records. Not all provider records are therefore free of form data.
Optional statistics and performance measurement
Vercel Web Analytics measures page visits. Vercel Speed Insights measures loading, stability and other technical performance. Page paths, referrals, browser, device, operating system and country information may be processed. Where these purposes involve personal data, the legal basis is consent, Article 6(1)(a) GDPR; prior consent is required for optional tools under Article 122 of the Italian Privacy Code.
Each tool loads only after a positive choice for its purpose. Refusal does not prevent browsing or contact. Form values are not sent as statistical events; query parameters and fragments are removed from measurement URLs, project paths are aggregated and referrer headers are limited to the origin. Web Analytics excludes views with detailed external referrals.
People and services receiving data
Enquiries are accessible to authorised internal Nazca staff and may only be forwarded internally to handle them. Nazca states that enquiry copies are kept only in the mailbox and internal forwarded messages. Contacting us does not publish your data on the website.
Technical services are Vercel Inc. for infrastructure, security and measurement; Plus Five Five, Inc., trading as Resend, for server-side email delivery; and Register S.p.A. for the mailbox. The technical operator may access services for management and maintenance; documentation of these assignments and the contractual chain is being completed.
The Vercel DPA applicable to the services used distinguishes customer data processed by Vercel as processor from contact data and service-generated data for which Vercel acts as controller where they are personal data. Resend’s DPA also distinguishes data entrusted to the service on behalf of its customer from account and usage data processed as controller. Documentation of the relationship with the technical operator and verification of agreements for the Register product in use remain incomplete.
Transfers outside the European Economic Area
Resend states that service data, including messages and records, is stored in the United States. The European sending region does not determine the storage location. The acquired DPA incorporates European Standard Contractual Clauses, using the module relevant to the customer–provider relationship.
The Vercel DPA applicable to the services used provides for processing in the United States and other countries where Vercel and its subprocessors operate, with Standard Contractual Clauses for transfers requiring this mechanism. Using Vercel does not guarantee that all data stays within the European Economic Area. Verification of the actual contractual chain and the terms for the Register product in use is still ongoing. You may request information and copies of available safeguards from info@nazcaitalia.it.
Retention of enquiries
Nazca has set a maximum period of six months after the last reply for website enquiry data and related correspondence kept in the mailbox and internal forwarded messages. This is a retention rule, rather than a six-monthly review.
For enquiries that receive no reply, the maximum period is six months from receipt. Gianluca Finetti coordinates deletion from the mailbox and internal forwarded messages. These periods cover enquiry data and related correspondence; they do not automatically determine retention for separate contract or project records or provider backup cycles.
Retention by technical services
For the service in use, Resend states 30 days for emails and logs, seven days for backups and deletion of remaining customer data within 90 days of account termination. These periods do not delete copies in Nazca’s mailbox.
Optional tool choices are stored in the browser for six months. Vercel states that Web Analytics sessions are discarded after 24 hours; this is not retention for all statistics. Complete retention periods or criteria for hosting, security, statistics, performance and related backups, and the terms applicable to Register mailbox backups, are still under verification. Dashboard access windows do not establish deletion of all copies.
Rights and complaints
Where Articles 15–22 GDPR apply, you may request access, rectification, erasure, restriction of processing and data portability. You may object to processing based on legitimate interests on grounds relating to your particular situation. You may withdraw consent at any time; withdrawal does not affect the lawfulness of previous processing.
Email info@nazcaitalia.it. We normally respond within one month of receipt; where the law allows, this may be extended by up to two further months, with the reasons communicated within the first month. If necessary, only proportionate additional information will be requested to verify your identity.
You may lodge a complaint with the Italian Garante per la protezione dei dati personali or the competent supervisory authority under Article 77 GDPR, and seek a judicial remedy.
Further uses and automated checks
Nazca confirms that contacts are used only to assess enquiries, reply and follow up any resulting relationships. It does not use this data for promotions, list enrichment, scoring or AI, or share it with partners for those purposes. The website flow does not use solely automated decisions producing legal or similarly significant effects on individuals.
Provider checks are separate from Nazca’s uses: Resend states that a small sample of emails is analysed through RunPod for security, without model training; normal API sending is not shared with Anthropic.
Updating this information
This version makes available the information documented as of 22 October 2026. It will be supplemented after retention details are defined and the provider agreements identified above are verified. Missing information is not replaced with assumed safeguards or retention periods. For clarification, email info@nazcaitalia.it.