Privacy policy

Last updated: 24 October 2026

This notice, provided under Articles 13 and 14 of Regulation (EU) 2016/679 (“GDPR”), explains which personal data we process when you visit www.notek.com or write to us, why we do so and what your rights are.

Data controller

NoteK S.r.l., Via Monte Napoleone 9, 20121 Milan, Italy, tax code and VAT no. 12365970966, REA MI-2656670. For any question about your data you can write to info@notek.com.

Our Data Protection Officer (DPO) can be reached at the same address, with “For the attention of the DPO” in the subject.

Which data we process and why

Browsing the website

The website is hosted by Cloudflare. To deliver the pages and protect them from abuse and attacks, Cloudflare’s systems process the technical data that every browser sends: IP address, date and time of the request, page requested, browser type and operating system.

• Legal basis: our legitimate interest in making the website available securely (Art. 6(1)(f) GDPR).
• Retention: only as long as strictly necessary for the security of the service, under Cloudflare’s policies; we do not keep these data.

Visit statistics

We use Cloudflare Web Analytics to know, in aggregate form, how many pages are viewed, which websites visitors come from and from which countries. The tool does not use cookies or any other information stored on your device, does not track you across websites and does not allow us to identify you.

• Legal basis: legitimate interest in understanding how the website is used in order to improve it (Art. 6(1)(f) GDPR).

Contact form and e-mail

If you write to us using the contact form, we process your name, e-mail address, your company if you provide it, and the text of your message. The same applies if you write to us directly by e-mail. The message reaches our info@notek.com mailbox.

To prevent spam, the form uses Cloudflare Turnstile, which automatically checks that a person is writing by analysing some technical data from the browser (including IP address and browser type). Turnstile does not read the content of the form.

• Legal basis: replying to your request, including before a possible contract (Art. 6(1)(b) GDPR), and our legitimate interest in protecting the form from abuse (Art. 6(1)(f) GDPR).
• Mandatory data: name, e-mail and message are needed to reply to you; without them we cannot do so.
• Retention: as long as needed to handle the request and at most 24 months from the last exchange. If a business relationship arises from the request, the data are kept for the duration of the relationship and for the legal obligations that follow it.

We do not use these data to send you newsletters or promotional messages and we do not sell or share them.

Who receives the data

The data are processed by authorised NoteK staff and by the providers we need for the website and for e-mail, appointed as processors (Art. 28 GDPR):

• Cloudflare, Inc., for website hosting, abuse protection (Turnstile) and visit statistics;
• Microsoft Ireland Operations Ltd., for company e-mail (Microsoft 365).

Data may also be disclosed to the authorities where required by law.

Transfers outside the European Union

Cloudflare and Microsoft may also process data in the United States. In these cases the transfer is based on the European Commission’s adequacy decision on the EU-U.S. Data Privacy Framework, to which both companies adhere, and on the standard contractual clauses approved by the Commission.

Your rights

At any time you can ask to access your data, to have them corrected or erased, to restrict their processing, to receive them in a readable format (portability), and you can object to processing based on legitimate interest (Articles 15–22 GDPR). Just write to info@notek.com: we will reply within one month.

If you believe that the processing infringes the GDPR, you can lodge a complaint with the Italian Data Protection Authority, the Garante per la protezione dei dati personali (www.garanteprivacy.it), or with the authority of the country where you live or work.

We do not take decisions based solely on automated processing, including profiling.

Cookies

The website does not use profiling cookies or tracking tools: details are in the cookie policy.

Changes

If we change the way we process data, we will update this page and the date at the top.