Contact us

Privacy Policy of NIXINN

Last update: October 20, 2026

Welcome to NIXINN. Your privacy is important to us, and we are committed to protecting your personal data. This Privacy Policy describes how we collect, use, and protect the personal information of users of our website [www.nixinn.com].

1. Data Controller

The data controller is NIXINN S.r.l., registered office: Via Lenin 39, Carpi (MO), email: privacy@nixinn.com.

2. Types of Data Collected

When you use our website, we may collect the following categories of data:

  • Browsing data: IP address, device information, access data, and interaction with the website.

  • Data provided voluntarily: first name, last name, email address, phone number, and any other information provided via contact or registration forms.

  • Cookies and tracking technologies: used to improve user experience and analyze website traffic (see our Cookie Policy for more details).

3. Purposes and Legal Bases of Processing

Your personal data are processed for the following purposes:

  • Provision of requested services: handling information requests, customer support, registration and access to services.

  • Marketing and commercial communications (subject to consent): sending newsletters, promotions, and updates on products and services.

  • Legal and regulatory compliance: tax, accounting, and security obligations.

  • Website analysis and improvement: anonymous statistics and enhancement of user experience.

The legal basis for processing depends on the specific purpose and may be the user’s consent, performance of a contract, compliance with a legal obligation, or the controller’s legitimate interest.

The data provided in the stand accreditation form (company, approximate turnover, sector, role) are also processed to assess the profiles of accredited companies and to identify the one to which NIXINN’s management hands over an institutional representation gift. The final choice is made by people and not by a solely automated decision-making process.

For the stand accreditation request and participation in the game, the legal basis is the performance of pre-contractual or contractual measures at the request of the data subject (Art. 6(1)(b) GDPR): processing is necessary to register the request, issue the pass and hand over the gadget through the prize wheel game. To receive the post-show market analysis, promotional communications and tailored commercial proposals based on the role and company data (approximate turnover) provided in the form, the legal basis is the data subject’s consent (Art. 6(1)(a) GDPR), given by ticking the optional box and revocable at any time.

4. Data Retention

Personal data are retained for as long as necessary to fulfill the purposes for which they were collected, in accordance with applicable regulations. In particular:

  • Browsing data are retained for up to 12 months;

  • Data provided voluntarily are retained until consent is withdrawn or for the time necessary to manage the requested service;

  • Stand accreditation form data are retained for the duration of the event and for a maximum of 60 days after its end, after which they are deleted, unless the optional consent described below has been given;

  • Data processed on the basis of the optional consent (post-show market analysis and commercial proposals): 12 months for data used for segmentation (role, company size and turnover) and 24 months for commercial communications and market analysis, unless consent is withdrawn earlier;

  • Data for tax and accounting purposes are retained for 10 years as required by law.

5. Data Sharing

Your data may be shared with:

  • Service providers (hosting, web analytics, mailing list services) that process data on our behalf;

  • Competent authorities where required by legal obligations;

  • Business partners, only with the user’s prior consent.

We do not sell your data to third parties.

6. Data Transfers Outside the EEA

If data are transferred outside the European Economic Area (EEA), we ensure that such transfers comply with the required safeguards under applicable law (e.g., the European Commission’s Standard Contractual Clauses).

HubSpot. The data collected to issue tickets and send commercial communications is processed through the HubSpot CRM, with primary storage on servers located in the European Union (Frankfurt, Germany). For any residual processing that requires a transfer to the United States, HubSpot Inc. participates in the EU-U.S. Data Privacy Framework and operates under the specific Data Processing Agreement (DPA) in place.

WordPress.com. The website is hosted on WordPress.com, a service provided by Automattic Inc., a company based in the United States. Data is transferred to the US on the basis of the standard contractual clauses approved by the European Commission, set out in the Data Processing Agreement signed with the provider. For more information on how Automattic processes data, please see its Privacy Policy.

7. Users’ Rights

You have the right to:

  • Access your data and request a copy;

  • Rectify inaccurate or incomplete data;

  • Erase data when they are no longer necessary;

  • Restrict processing in certain circumstances;

  • Object to processing based on legitimate interests;

  • Withdraw consent at any time for processing based on consent;

  • Lodge a complaint with the Data Protection Authority.

You can exercise your rights by writing to privacy@nixinn.com.

8. Data Security

We implement technical and organizational security measures to protect your data against unauthorized access, loss, destruction, or disclosure.

9. SMAU Milano 2026 Ticket Request

This section describes how we process the data of people who request a ticket for SMAU Milano (3-4 November 2026) through the dedicated page on our website.

Data processed. First name, last name, business email, phone number (optional), role, and your choice on receiving commercial communications.

Purposes and legal basis.

  • Handling your request for the complimentary entry ticket and sharing your data with the SMAU organiser so that the pass can be issued: request of the data subject (Art. 6(1)(b) GDPR).
  • Sending you service communications related to your request and the event: Art. 6(1)(b) GDPR.
  • Sending you updates about Pyxed and NIXINN events: only if you choose so, based on your optional consent (Art. 6(1)(a) GDPR), which you can withdraw at any time.

Recipients. The data needed to issue the pass is shared with the organiser of SMAU Milano, SMAU Servizi S.r.l. (Via Guizza 53, 35125 Padova PD, VAT no. 02796871206), which processes it as an independent controller under its own privacy notice. The providers that support us with the technical services described in section 5 may also process it as processors.

Retention. Your data is stored in the HubSpot CRM, under NIXINN’s subscription, and kept in order to maintain our historical contact base, in full compliance with the GDPR. You can ask to be unsubscribed at any time, with every communication.

Transfers and rights. Sections 6 and 7 apply to transfers of data outside the European Economic Area and to the exercise of your rights.

Nature of the provision. First name, last name, business email and role are necessary to handle the ticket request; the phone number and the commercial consent are optional and do not affect your request.

10. Changes to this Privacy Policy

We reserve the right to update this Privacy Policy at any time. Changes will be published on this page with the corresponding update date.

If you have any questions about our Privacy Policy, please contact us at privacy@nixinn.com.