Privacy and Cookie Policy

08 Feb 2022

Nibol Srl, with registered office in Via A. Campanini 4, Milan, Italy - VAT number: IT10683870967, as Data Controller (hereinafter, "Nibol", "our", "we" or "us"), considers the privacy and the protection of personal data one of the main objectives of its business.

This information on the processing of personal data ("Information") is intended for the website www.nibol.com ("Site") and the Nibol platform, including the web and mobile application, including the Marketplace sections, among others. and Business ("Platform"), under Regulation (EU) 2016/679 ("GDPR"), Legislative Decree 196/2003 and subsequent amendments, and Directive 2002/58 / EC ("e-Privacy Directive") And other applicable provisions and provisions ("Laws regarding the protection of personal data"). Before communicating any personal data to us, we, therefore, invite you to carefully read this Notice because it contains important information on the protection of your personal data.

This Notice does not apply to the processing of personal data carried out by customers through or concerning the Business section of the Platform as independent owners, which is governed by the respective information on the processing of personal data.


1. Data controller

The data controller is Nibol Srl, as defined above. For any request relating to the processing of your personal data, you can contact us by sending an email to privacy@nibol.com.

2. The personal data being processed

When you use the Site and the Platform, you may communicate or we may collect some of your personal data which, depending on the case, may consist of an identifier such as your name, an online identifier, or characteristic elements of your physical, physiological, psychological, economic, cultural or social identity suitable to make you identified or identifiable ("Personal Data").

Your Personal Data may be collected both because you voluntarily provide it (for example when you request information through the Site) and by analyzing your behavior while interacting with our services.

The Personal Data processed through the Site and the Platform are the following: 

a. Common Personal Data

Contact information (such as, for example, name and e-mail address), identifiers, and information on Internet and network activity (such as, for example, IP address, device model, device type, OS version, device language, device name, country set in device settings, information about user interactions with the app and unique identifier data, including IDFA or AAID ) and other information necessary to allow you to use the Site and the Platform.

Registration data on the Platform (such for example, name and surname, email address, and credentials to access your account). If you create an account or log in with your Facebook, Google, or Apple account, we will receive the following information: name, surname, and e-mail address.

Data relating to your bookings within the Platform (such for example, username, booking date, booking cost, and payment method).

Information relating to your profile within the Platform (such as, for example, name, surname, and profile photo )will be visible to other users of the Platform and, if you decide to make your profile public, also externally. of the same.

If you use the services of the paid Platform, payment data is necessary to purchase the services offered by Nibol (such for example, name and surname, e-mail address, shipping address, billing address, telephone, and payment data ).

In some sections of the Site, for example, that relate to the request for information, you will be asked to enter information such as your name, telephone number, e-mail address, and the company you work for. Furthermore, when you communicate with us through the e-mail addresses you find on the Site, we will be able to process any additional information you decide to provide.

b. Special categories of personal data

In the use of some sections of the Site (for example the section of the website "We are hiring"), you may send us some special categories of Personal Data, such as data suitable for revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, trade union membership, genetic data, biometric data intended to uniquely identify a natural person, data relating to the health or sexual life or sexual orientation of the person.

We invite you not to send such Personal Data unless strictly necessary. Indeed, these special categories of Personal Data can only be processed with your explicit consent. If you decide to share such information, we, therefore, ask you to give your explicit consent to the processing of the same in compliance with the legislation on the protection of personal data.

c. Data provided voluntarily by the interested party

In some sections of the Site and the Platform, you are allowed to insert text messages, visible to Nibol and other users, which may contain Personal Data of other people. In these cases, you place yourself as an independent data controller, assuming all obligations and responsibilities of applicable law. On this point, you grant the widest indemnity concerning any dispute, claim, request for compensation for damage from processing that should reach Nibol from third parties whose Personal Data have been processed through your use of the Site and Platform functions in violation. of the rules on the protection of personal data applicable. In any case, if you provide or otherwise process Personal Data of third parties in the use of the Platform, you guarantee from now on, assuming all related responsibility, that this particular hypothesis of treatment is based on the consent of such interested third party or on another suitable legal basis that legitimizes the processing of the information in question.

d. Data is collected automatically when you use the Platform

Identification and information on the Internet and network activity (such as, for example, IP address, model and type of device, version of the operating system, crashes, and errors), information collected or generated to improve the functionalities of the Platform (such as, for example, device language and information about your interactions with the app), information about your location (such as, for example, the IP or GPS address of your mobile device), inferences we generate and other information related to your use of the Platform. 

e. Navigation data

The computer systems and software procedures used to operate the Site and the Platform acquire, during their normal operation, some Personal Data whose transmission is implicit in the use of Internet communication protocols. This information is not collected to be associated with identified interested parties, but which by their very nature could, through processing and association with data held by third parties, allow users to be identified. This category of data includes the IP addresses or domain names of the computers used by users who connect to the Platform, the URI (Uniform Resource Identifier) ​​addresses of the requested resources, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response given by the server (successful, error, etc.) and other parameters relating to the operating system and the user's IT environment. These data are used for the sole purpose of obtaining anonymous statistical information on the use of the Platform and to check its correct functioning, to allow the correct provision of services, for security reasons, and to ascertain responsibility in case of hypothetical computer crimes against the Platform or third party; and are usually canceled after sixty days.

To find out how we process your data through the use of cookies, see section 9 (Cookies and tracking technologies) below.

3. Purpose of the processing

We will use your Personal Data, collected through the Site and the Platform, for the following purposes:

  • to provide the requested services, such as, for example: to register and access the Platform; provide you with support and respond to your requests for assistance; contact you after the request for information and to support you in the process of purchasing our services or to solve any problems you may have encountered; send you the Nibol newsletter that you have requested as a service ("Provision of the Service");
  • send you marketing communications, promotions and advertisements, market research and surveys, by e-mail, SMS, push notification, by phone, by banner, paper mail, instant messaging, through an operator, through the official social media pages of Nibol, as well as for marketing activities in a broad sense, including prize events, games, and competitions, of products and / or services referable to Nibol or third parties ("Marketing");
  • send you marketing communications via e-mail regarding products and services similar to those you have purchased ("Soft Spam");
  • create your profile collecting and analyzing information about your activities within the Site and byPlatform. This profile will be used to provide you with information about products and services that Nibol believes of interest to you, and to advertise our products and services to other potential users similar to you, as well as to reach inactive users with our ads ("Profiling");
  • comply with legal obligations that require Nibol to collect and further process certain types of Personal Data ("Compliance");
  • check how the Platform is used, prevent or identify any abuse or any fraudulent activity to the detriment of Nibol and therefore allow Nibol to protect itself even in court ("Defense");
  • analyze, develop and improve our products and services through the aggregate of usage data and your interactions with the Platform ("Statistical Analysis");
  • analyze your CV, assess the consistency of your profile concerning open job positions at Nibol, manage the personnel selection procedures and contact you if you have sent us your application through the section of the Site: "We are hiring" ("Recruiting").

4. Legal basis and mandatory or optional nature of the processing

  • Service provision: processing for this purpose is necessary to be able to provide you with our services and, therefore, for the execution of pre-contractual or contractual measures requested by you. It is not mandatory to provide Nibol with your Personal Data for this purpose, but otherwise, it will not be possible to provide any service;
  • Marketing: the processing for this purpose is based on your consent. It is not mandatory to give your consent to Nibol for this purpose and you are free to withdraw it at any time without any consequence (except for the fact that you will no longer receive marketing communications from Nibol);
  • Soft Spam: the processing for this purpose is based on Nibol's legitimate interest in sending you marketing communications via e-mail regarding products and services similar to those you have already purchased. You can stop receiving these communications, without any consequences for you (other than the fact that you will no longer receive further communications of this kind from Nibol) by using the link at the bottom of each of these e-mails;
  • Profiling: the processing for this purpose is based on your consent collected through the cookie banner. It is not mandatory to give your consent to Nibol for this purpose and you are free to withdraw it at any time without any consequence;
  • Compliance: processing for this purpose is necessary for Nibol to fulfill any legal obligations. Your Personal Data must be processed according to the applicable legislation, which could involve their conservation and communication to the Authorities for accounting, tax or other obligations;
  • Defense: the processing for this purpose is based on Nibol's legitimate interest in identifying and preventing any fraudulent activities or abuses in the use of the Platform and therefore also protecting itself in court;
  • Statistical Analysis: the processing for this purpose is based on Nibol's legitimate interest in improving the products and services offered. You can exercise your right to object to such processing as explained in section 8 
  • Recruiting: processing for this purpose is necessary for the execution of a contract to which you are a party or for the execution of pre-contractual measures adopted at your request. As part of this purpose, the processing of your Personal Data may also be necessary to fulfill the obligations and exercise the specific rights of Nibol in the field of labor law and social security, and social protection. It is not mandatory to provide Nibol with your Personal Data for this purpose, but otherwise, it will not be possible to evaluate your application.

 5. Data retention

The Personal Data processed for the purpose of Providing the Services will be kept by Nibol for the time strictly necessary for the aforementioned purpose. In any case, since such Personal Data is processed to provide you with our services, Nibol may keep them for a longer period, in particular as may be necessary to protect Nibol's interests from possible complaints relating to the use of the Platform or the Site.

The Personal Data processed for Marketing and Profiling will be kept by Nibol until you revoke your consent. Once consent has been withdrawn, Nibol will no longer use your Personal Data for these purposes, but may still retain them for other purposes, in particular as may be necessary to protect Nibol's interests from possible complaints based on such processing.

The Personal Data processed for Soft Spam will be kept by Nibol until you object to such processing through the link at the bottom of each of the Soft Spam e-mails.

The Personal Data processed for Compliance will be kept by Nibol for the period required by specific legal obligations or by applicable legislation.

The Personal Data processed for Defense will be kept by Nibol for the time strictly necessary for the aforementioned purpose and therefore until the moment in which Nibol will be required to keep them to protect itself in court to communicate said data to the competent Authorities.

Personal Data processed for Statistical Analysis will be kept by Nibol for the period required by specific legal obligations or by applicable legislation.

Personal Data processed for Recruiting will be kept by Nibol for the time strictly necessary to achieve this purpose. If you are not selected for the job position for which you have applied, we may keep your data for a longer period, to evaluate your application for any other suitable positions that we may open in the future, and in any case for a period not exceeding one year from the date of submission of your initial application. 

To find out how long your data is stored through cookies, you can consult the following Section 9 (Cookies and tracking technologies).

6. Recipients of personal data

Your Personal Data may be shared with the subjects listed below (the "Recipients"):

  • subjects who typically act as data processors, that is: i) people, companies, or professional firms that provide assistance and consultancy to Nibol in accounting, administrative, legal, tax, financial, and credit recovery matters relating to the provision of services; ii) subjects delegated to carry out technical maintenance activities (including maintenance of network equipment and electronic communication networks) or with whom it is necessary to interact for the provision of our services (for example hosting providers);
  • persons authorized by Nibol to process Personal Data necessary to carry out activities strictly related to the provision of services, who are committed to confidentiality or have an adequate legal obligation of confidentiality (for example Nibol employees);
  • public, judicial or police authorities, within the limits established by the applicable legislation.

 7. Transfers of personal data

Some of your Personal Data is shared with Recipients who could be found outside the European Economic Area. Nibol ensures that the processing of your Personal Data by these Recipients takes place in compliance with the applicable legislation. Indeed, transfers are made through adequate guarantees, such as adequacy decisions, standard contractual clauses approved by the European Commission, or other guarantees considered adequate. More information is available by writing to privacy@nibol.com.

8. Your rights

To the extent that these apply to the processing described in this Notice, you have the right to ask Nibol:

  • access to your Personal Data collected as well as further information on the processing in progress;
  • the correction or updating of your Personal Data, where they are incomplete or out of date;
  • where the legal conditions are met, the cancellation of your Personal Data;
  • the limitation of the processing of your Personal Data;
  • to obtain the Personal Data concerning you in a structured, commonly used and machine-readable format;
  • the right to object to the processing of data concerning you for legitimate reasons.

To exercise your rights, you can contact us, in writing, by sending an email to privacy@nibol.com.

You also have the right to complain with the competent Supervisory Authority (Guarantor for the Protection of Personal Data) if you believe that the processing of your Personal Data is contrary to the legislation in force.