Privacy Policy

1. Data Controller

The data controller is Nexa S.r.l., Via Monte Napoleone 8, 20121 Milano, Italia. Contact us at info@nexa.furniture or +39 02 8739 4120.

2. Data We Collect

When you browse our website or place an order, we may collect:

• Identity data: full name, billing and delivery addresses
• Contact data: email address, telephone number
• Transaction data: order history, payment details (processed securely by third-party providers)
• Technical data: IP address, browser type, operating system, referring URLs, pages visited
• Preference data: product wishlist selections, newsletter subscription preferences

3. Purpose of Processing

• Fulfilling and managing your furniture orders, deliveries, and assembly services
• Processing payments and issuing invoices
• Responding to your enquiries and providing customer support
• Sending marketing communications (only with your explicit consent per Art. 130 of Italian Legislative Decree 196/2003)
• Improving our website, product offerings, and user experience
• Complying with Italian and EU legal obligations

4. Legal Basis (GDPR Art. 6)

We process your data on the basis of: (a) contractual necessity to fulfil your order; (b) your consent for marketing; (c) legitimate interests for fraud prevention, analytics, and service improvement; and (d) legal obligations under Italian and EU law. You may withdraw your consent at any time without affecting the lawfulness of prior processing.

5. Data Recipients

We share your data only with third parties necessary for order fulfilment: payment processors (Stripe), logistics and delivery partners, IT hosting providers, and professional advisors. All recipients are bound by data processing agreements in compliance with GDPR. We do not sell or rent your personal data.

6. International Transfers

Your data is primarily stored within the European Economic Area. Where data is transferred outside the EEA, we ensure adequate safeguards are in place, such as EU Standard Contractual Clauses or adequacy decisions by the European Commission.

7. Cookies

We use essential cookies for site functionality and cart management. Analytics cookies help us understand visitor behaviour and improve our services. Marketing cookies are only set with your explicit consent. You can adjust your cookie preferences at any time via the cookie banner or your browser settings.

8. Data Retention

We retain personal data for as long as necessary to fulfil the purposes described above. Order and invoice data is retained for 10 years as required by Italian tax law. Marketing data is retained until you unsubscribe. Account data is deleted upon your request, subject to legal retention requirements.

9. Your Rights

Under the GDPR, you have the right to:

• Access, rectify, or erase your personal data
• Restrict or object to data processing
• Receive your data in a portable format
• Withdraw consent at any time
• Lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali)

To exercise your rights, email info@nexa.furniture.

10. Security

We implement industry-standard security measures including SSL/TLS encryption, firewalls, and access controls to protect your personal data. Payment information is processed through PCI DSS-compliant providers and is never stored on our servers.