Gresia Crispino / Nextsys LTD

Privacy Policy.

Last updated: 1 October 2026

This policy applies to visitors to gresiacrispino.me and anyone sending an enquiry through the contact form. Gresia Crispino is a brand of Nextsys LTD. Linked external websites and services have their own policies.

Data controller

The data controller is Nextsys LTD, registered at 71–75 Shelton Street, Covent Garden, London, WC2H 9JQ, United Kingdom. ICO registration number: ZC072704. For information and requests about your data, write to [email protected].

Browsing and security

The server receives technical information needed to deliver pages, such as IP addresses, requested URLs and browser information. The hosting provider may record access and security logs. We process this data to operate the website, prevent abuse and resolve issues, based on our legitimate interest in providing a reliable and secure service (GDPR Article 6(1)(f)).

Submission rate limiting temporarily uses the IP address in server memory. Form protection against forged requests and automated submissions does not create advertising profiles.

Contact form and email

We collect your name, email and message, as well as your company, service of interest and estimated budget if provided. We store enquiries through eeCLOUD, Nextsys infrastructure, with an identifier, receipt date, source website and handling status. If you email us, we also receive the data and attachments you choose to send.

We use this data to reply and manage business correspondence, based on legitimate interest (Article 6(1)(f)). If your enquiry concerns a contract with you, processing necessary to prepare a quotation or carry out pre-contractual activities is based on Article 6(1)(b). Any legal obligations are based on Article 6(1)(c).

Your name, email and message are needed to send and handle the enquiry; other fields are optional. Do not include sensitive information that is unnecessary for the enquiry. Submitting the form does not subscribe you to a newsletter.

Recipients and processing locations

Data is accessible to people authorised by Nextsys and to the hosting, email and infrastructure providers needed to deliver services, according to their respective roles and applicable agreements. Enquiries are stored through eeCLOUD. Data may be disclosed to authorities where required by law; it is not made public.

Retention

The same periods or criteria as Nextsys apply; these are still to be confirmed in its policy:

• Website logs: retention period to be confirmed.
• Email correspondence: retention period or criteria to be confirmed.
• Leads stored in eeCLOUD: retention period or criteria to be confirmed.

Cookie duration on your device is separate from data retention on the server.

Cookies and analytics

Only after your consent do we load Microsoft Clarity, which analyses clicks, scrolling and browsing through heatmaps and session recordings. Microsoft may receive browser identifiers, device and browser information, page URLs and interactions. The legal basis is consent (GDPR Article 6(1)(a)). Contact form contents are masked. Advertising storage remains denied in our integration; Google Analytics is not used.

You can change or withdraw your choice using Cookie preferences. Withdrawal stops future collection after the page reloads, without deleting data already received by the provider. Preferences are valid for 180 days; retention of data collected by Clarity is separate from cookie duration, and account settings are still to be confirmed, as for Nextsys.

Microsoft receives data when you authorise Clarity and may process it outside the United Kingdom, including in the United States. For its practices, see theMicrosoft privacy statement. Locations and safeguards applicable to transfers remain to be confirmed in the final policy. The website’s own fonts, images and scripts are hosted locally; the Clarity tag is requested from Microsoft only after consent. See the Cookie Policy for details.

Rights and complaints

Where provided by law, you can request access, rectification, erasure and restriction of processing, and object to processing based on legitimate interest. You can obtain portability of data processed by automated means based on consent or a contract. Where processing is based on consent, you can withdraw it without affecting the lawfulness of prior processing. The website does not make solely automated decisions with legal or similarly significant effects.

Write to [email protected] to exercise your rights. You can lodge a complaint with theInformation Commissioner’s Office and, where applicable, the competent authority in the EU state of your residence, workplace or the alleged infringement, including the Italian Data Protection Authority.

External websites and updates

Project and LinkedIn links do not automatically load their services. If you open them, their own policies apply. This text will be updated when services or processing change; the date above identifies the latest revision.