Privacy and cookies

Data controller and contact details

Neroni Mameli s.r.l., Via F. P. Michetti 40, 00155 Roma, Italia, tax code and VAT number 10473211000, is the controller of the personal data collected for enquiries and orders. You can contact us at info@neronimameli.com, with “Privacy” in the subject line, or on 06 2275 4671.

Data we process

We process your name, contact details, delivery and billing details, selected products, text and logos, floor plans and other uploaded files, saved drafts, quote requests, orders, withdrawal declarations and customer support communications. Payment references and outcomes, the version of the accepted terms, and the date and time of acceptance are also recorded.

Session identifiers and technical data are used for the operation and security of the website, including IP addresses where made available by the infrastructure, and data needed to limit abusive requests. Card numbers and security codes are entered through the payment provider’s service, rather than on the Neroni Mameli website.

Only upload information needed for production. Before sending logos, third-party names or floor plans, ensure that you have the right to use them and have provided the required information to the people concerned.

Purposes and legal bases

We use the data needed to prepare quotes, retain the requested design, conclude and fulfil orders, issue invoices directly, arrange delivery, and manage support and withdrawal requests. The legal basis is the performance of a contract or pre-contractual measures requested by the data subject (Art. 6(1)(b), GDPR).

Tax, accounting and other applicable legal obligations are based on Art. 6(1)(c), GDPR. Protecting the website against abuse and safeguarding rights in disputes are based, where applicable and subject to the balancing of rights, on the legitimate interest in security and the protection of legal positions (Art. 6(1)(f)).

Required fields are needed to handle the enquiry or order; without them, we may be unable to proceed. Optional fields are marked. Marketing consent is not required to make a purchase, and submitting a form does not subscribe you to a newsletter. No commercial profiling is carried out.

Who may receive the data

Data is used by authorised company staff and, to the extent necessary, by providers that enable the website to operate, the selected payment providers, couriers, and professionals assisting the company with its obligations. It may be disclosed to authorities when required by law.

Logos, floor plans, drafts and production files are used internally by authorised Neroni Mameli staff to prepare and make the requested products. We do not entrust them to external suppliers for processing or production.

We use Poste Italiane S.p.A. for deliveries and provide it with the recipient’s name, delivery address and any contact details needed to manage delivery. Poste Italiane processes data for postal services as an independent controller, in accordance with its own privacy notice.

The current configuration uses Sites and Cloudflare infrastructure for the application and storage. PayPal payment is configured; Nexi is used when actually enabled and selected. Resend is set up for automated communications and will be used once sending is activated. External services operate in accordance with their respective roles and applicable agreements.

Invoicing is managed directly by Neroni Mameli using Danea Easyfatt installed on a PC. The billing data collected with the order is used by the company to issue the invoice. The software provider may process data as part of support and any related services actually used.

If you choose email or WhatsApp, the external service you use also opens, with processing governed by its terms. For an email prepared by the website, you must complete sending it yourself from your application. Uploading your designs does not cause them to be published in the catalogue.

Poste Italiane privacy notice for postal service users (PDF)

Retention of orders and designs

For orders, invoices and related documents, retention criteria depend on fulfilment of the supply, tax and accounting obligations, and the periods needed to manage rights and any disputes. Documents subject to retention obligations cannot be deleted early simply on request.

Company copies of drafts, logos, floor plans and production files are kept on the company PC. These are in addition to the data saved on the website in the ways described in this notice.

For drafts, logos, floor plans and production files relating to a paid order, the company retention period is one year from payment confirmation, including copies on the company PC, also to facilitate any repeat orders requested by the customer. You can request information or deletion of files no longer needed by writing to info@neronimameli.com; requests are assessed in light of applicable obligations.

For orders with a recorded payment date, after one year the website blocks access to files no longer used in other projects and starts automatically removing them during requests to the website. If there are no requests, removal resumes on the next request; errors are retried. A file still linked to another order awaiting fulfilment, an order whose retention period has not expired, or an unexpired basket or draft is retained for that project. Order data and accepted terms remain separate from production files. Earlier orders without a recorded payment date require manual review. Copies downloaded to the company PC, email and backups require the separate company deletion procedure, which has been prepared and must be applied to those systems. Quotes and their attachments are retained for one year from the request or the sending of a new version. The website retains requests submitted through the form and saved quote packages; after one year, it removes its copies during requests to the website. Files still needed for orders or other projects are retained for the relevant period. For intercom panel attachments uploaded separately, the year runs from the upload date. Copies in email and on the PC follow the same period through the company procedure. Drafts and items left in the basket expire 30 days after the last saved change; viewing alone does not extend the period. Files uploaded without an active project expire 30 days after upload or the last saved use. After expiry, they can no longer be retrieved from the website, and removal takes place automatically in batches during requests to the website, resuming on the next request if the website is inactive and retrying in the event of an error. Files needed for orders or quotes retain their respective periods. This rule does not delete orders, accounting documents or accepted terms.

Technical abuse-prevention counters and expired sessions are removed during website maintenance according to their respective technical expiry periods. Infrastructure logs are managed by the providers: their actual retention periods remain to be verified and are not covered by the 30-day period for abandoned projects.

The duration of a session and the expiry of a download link do not coincide with deletion of data retained on the server. Withdrawal declarations are recorded with their content, date and time to document receipt.

Cookies and browser storage

The technical cookie __Host-neroni-cart lets you retrieve your basket and orders in the same browser. It is secure, cannot be accessed by page code and lasts 30 days. If it is deleted or expires, you may need to contact the company to retrieve an order.

Some configurators keep the design in the browser’s local storage for 30 days from the last save; expired copies are removed on the next visit or during use of the website. For older local drafts without a save date, the period starts once, on the first visit after this update. Configurators connected to the saving service retain drafts and files on the server for the periods described above. For quote packages, the random download link is valid for 30 days and can be accessed by anyone who has it: share it only with those who need to receive the design.

Any cookies used by payment providers and external applications are managed by the respective services when you use them. The optional statistics described below are separate from the cookies required for the basket and orders.

Optional statistics

With your consent, we may use Google Analytics 4 to measure the pages and products visited, items added to the basket, checkout starts and confirmed purchases. Statistics may include the contact method chosen, such as email, telephone or WhatsApp, without transmitting the content of the communication.

When measurement is available, choosing “Essential only” lets you continue using the website without loading Analytics. Google code loads only after you choose “Accept analytics”. Personalised advertising features and Google Signals are disabled. You can reopen “Cookie preferences” in the footer and withdraw consent; doing so removes Analytics cookies accessible to the website from your browser and reloads the page without the service.

Google receives technical connection data, Analytics identifiers and data about permitted events. Website events use public product codes, quantities and amounts; for purchases, they include the random transaction reference. The website does not add names, emails, addresses, tax codes, engraving text, logos, attachments or payment tokens to events. Page addresses sent by the website exclude parameters and the personal reference of the order page.

Your choice is stored for six months. Analytics cookies are configured with a maximum duration of 180 days without automatic renewal. Retention of event and user data in Google Analytics is set to two months, without renewal following new activity; this setting does not determine how long aggregate statistical reports are retained. Collection depends on consent and browser settings; statistics may therefore omit some purchases recorded in the order system. The Google service involves processing by Google and possible international transfers in accordance with the terms and safeguards applicable to the service.

Your rights

You can request access, rectification, erasure, restriction of processing and portability where applicable. You can object to processing based on legitimate interests in the cases provided for. Any consent to optional processing can be withdrawn without affecting the lawfulness of processing already carried out.

Write to info@neronimameli.com stating your request. We may ask for information strictly necessary to verify your identity, to avoid giving data or files to unauthorised people. You can lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali) or seek a judicial remedy.

Rights and information from the Italian Data Protection Authority

Configuration before launch

This notice describes the website’s current configuration. Before the final launch, the data retention and deletion procedure, verification of agreements with providers, and identification of any safeguards for transfers outside the European Economic Area must be completed. No claim is made of exclusively European hosting or of contractual safeguards that have not yet been verified.