Privacy Policy
1. Who we are
Nodrius is a technical website publishing articles, references and downloadable Resources. The controller of the personal data described in this policy is:
Davide Lasagni
Privacy contact: [email protected]
The privacy contact is the address to use for any question about this policy, for a request about your personal data, or to exercise any of the rights in section 10.
2. What information we collect
2.1 Information you provide
The only personal data you can give us is your email address, and only if you use the Resource request form. The form asks for nothing else: no account, no password, no name, no payment details.
2.2 Information collected automatically
The infrastructure that delivers the site to your browser keeps standard technical information in its access logs — typically the IP address, the browser or user agent, the page requested and the time of the request. This is a normal part of serving any website and is used to deliver the pages and to protect the service.
The site itself does not collect this information, and it does not build any record of your browsing.
2.3 Resource requests
When you request a Resource, we process your email address and the identifier of the Resource you asked for, so that we can send it to you.
2.4 Marketing information, only if you ask for it
Under the request form there is a separate, optional checkbox. If you tick it, your email address is added to our updates list. If you do not tick it, your address is used only to send you the Resource you requested.
3. How we use your information
| What we do | What we use |
|---|---|
| Delivering the website to your browser and keeping it available and secure | technical data in the access logs of our hosting provider |
| Sending you the Resource you asked for | your email address and the identifier of that Resource |
| Keeping a record of the delivery, so we can follow up if something goes wrong | your email address and the delivery record |
| Sending you updates, only if you asked for them | your email address and your consent |
| Protecting the service against abuse and automated attacks | technical data and request metadata |
We do not use your personal data to measure your behaviour on the site, to build a profile of you, to advertise to you, or for any purpose other than those listed above.
4. Legal bases for processing
Where the General Data Protection Regulation applies, we rely on the following legal bases:
| Processing | Legal basis |
|---|---|
| Delivering the website and keeping it secure | Our legitimate interest in operating and protecting the website (Article 6(1)(f)) |
| Answering your Resource request and delivering the Resource | Our legitimate interest in responding to a request you chose to send us, in the way you asked for (Article 6(1)(f)) |
| Protecting the service against abuse, spam and automated attacks | Our legitimate interest in keeping the service available and safe (Article 6(1)(f)) |
| Adding you to our updates list and sending you updates | Your consent (Article 6(1)(a)), given by ticking the optional checkbox |
You never have to give us your email address to read the site. If you do not send a request, no personal data about you is processed by us.
5. Resource delivery
Nodrius offers downloadable Resources. When you request one:
- you enter your email address in the form;
- the request is sent to our service and passed to our email provider;
- you receive an email with the Resource attached.
The email address is used to deliver the Resource you asked for.This does not depend on the optional marketing checkbox: you receive the Resource either way. Conversely, asking for a Resource never subscribes you to anything.
6. Marketing communications
Marketing is a separate, optional use of your email address, and it happens only if you tick the checkbox under the form yourself. The checkbox is:
- optional — you are not asked to tick it;
- not pre-selected;
- not required to receive any Resource.
You can withdraw your consent at any time. Withdrawing it stops the updates; it does not affect the Resource you already received, nor the lawfulness of what happened before you withdrew. To withdraw, write to [email protected] — the same channel you use for any other request about your data — and we remove your address from the updates list.
7. Service providers and external integrations
We use a small number of providers to run the service. They process personal data on our behalf and only for the purposes described in this policy.
| Provider | What it does | Personal data involved |
|---|---|---|
| Cloudflare | Hosting and delivery of the website; runs the service that handles the Resource request | Technical data in access logs; the request data while it is processed |
| Brevo | Sends the email that delivers the Resource; manages the updates list if you opt in | Your email address, the delivery record, and your subscription if you asked for updates |
We do not sell, rent or share personal data for advertising, and we do not disclose it to anyone else unless the law requires it.
The site contains no third-party scripts, fonts, videos, maps or embedded content. Nothing on a page of nodrius.com contacts another service on its own.
8. International data transfers
Our hosting and email providers operate internationally. This means the personal data described above may be processed outside the European Economic Area: our hosting provider runs a global network, and our email provider uses sub-processors in more than one country.
Where personal data is transferred outside the EEA, we rely on the safeguards established in our providers' data processing terms, which are designed to meet the requirements of the General Data Protection Regulation.
9. How long we retain information
We keep personal data only for as long as it is needed for the purpose it was collected for:
| Data | Retention |
|---|---|
| Email address and the delivery record for a requested Resource | Kept only as long as needed to deliver the Resource and to handle any follow-up about that delivery. We review our records periodically and delete what is no longer needed |
| Email address in the updates list | Kept while you are subscribed, that is until you withdraw your consent or ask us to remove it |
| Technical logs of the hosting provider | Kept for short periods, set by the provider as part of running the service |
| Technical data used to stop abuse and automated attacks | Kept only for the time needed to identify and block the abusive behaviour |
We do not keep personal data longer than necessary, and we do not keep it for possible future purposes.
10. Your rights
Subject to the conditions of the General Data Protection Regulation, you have the right to:
- know whether we hold personal data about you, and to access it;
- have inaccurate data corrected;
- have your data deleted;
- have processing restricted;
- object to processing;
- receive your data in a portable, commonly used format;
- withdraw your consent at any time, where processing is based on your consent;
- lodge a complaint with the supervisory authority of your country.
11. How to exercise your rights
Write to [email protected]. We answer within the time limits set by applicable law. We do not ask you for anything more than we need to identify the data you are asking about.
If you are not satisfied with our answer, you can contact the supervisory authority of your country. In Italy this is the Garante per la protezione dei dati personali.
12. Security
The service is built to collect as little as possible and to handle what it does collect carefully:
- every page and every request travels over HTTPS;
- the email address is sent only to the same site that serves the form, never to a third party from your browser;
- the credentials of our email provider are held server-side and are never sent to your browser or included in the pages you load;
- the request service is restricted to the Resource identifiers we publish, and it refuses anything else;
- requesting a Resource and consenting to updates are handled as two separate operations.
13. Cookies and similar technologies
Nodrius does not use cookies, does not store anything in your browser, does not use analytics and does not track you. What that means in detail — including a distinction between the website and the standalone files you may download from it — is explained in the Cookie Policy, which forms part of this notice.
14. Automated decision-making and profiling
We do not use your personal data for automated decision-making, and we do not build profiles of you.
15. Changes to this Privacy Policy
If this policy changes, we update the date shown at the top of this page, and the new version replaces the previous one. Material changes to the purposes or to the way personal data is handled are reflected here before they take effect.
16. Contact
Davide Lasagni — Privacy contact:[email protected]
See also the Cookie Policy.