This Cookie Policy has been prepared in accordance with applicable personal data protection legislation (Regulation (EU) 2016/679, or the GDPR; Italian Legislative Decree No. 196/2003, or the Italian Data Protection Code; and the relevant guidelines issued by the Italian Data Protection Authority and the European Data Protection Board (EDPB)) and supplements the information provided in the Privacy Policy. Its purpose is to describe the types of cookies and any other tracking technologies used on the website.

CONTROLLER AND CONTACT DETAILS

The Controller is HonBoard Srl, with registered office at Viale S. Michele del Carso 10, 20144 Milan, Italy, and operational headquarters at BASE, Via Bergognone 34, 20144 Milan, Italy. For any further information, please email privacy@honboard.com

GENERAL INFORMATION ABOUT COOKIES

Cookies are small text files consisting of letters and/or numbers that enable a web server to store on the client device (the user’s Internet browser) information required for browsing the website or for subsequent use during future visits. Cookies are stored by the browser on the specific device used (computer, tablet or smartphone), in accordance with the preferences expressed by the user.

Preference

Consent Preferences

Types of cookies

Cookies may be classified according to their duration:

• session cookies – these expire at the end of a browser session, usually when the browser is closed, and are used to keep the browsing session and the website’s features active;
• persistent cookies – these are stored for a longer period (and therefore remain in place even after the session is closed) and are useful, for example, for remembering browsing preferences (language, device, browser, etc.) or presenting personalised content.

Cookies may also be classified according to their source. They may be:

• first-party cookies – installed by the website itself;
• third-party cookies – installed by a different domain, for example when the website includes external services, multimedia content or analytics tools.

Lastly, cookies may be distinguished according to their purpose:

• technical or strictly necessary cookies;
• functionality or preference cookies;
• analytics, statistical and performance cookies;
• marketing or profiling cookies.

Technical cookies may be used without the user’s consent because they are necessary to perform certain operations or to ensure the proper functioning and security of the website. This category may also include first- and third-party analytics cookies, but only where they are used to produce aggregate statistics and are configured to reduce their potential to identify individuals, in accordance with the conditions laid down by applicable law.

Functionality or preference cookies enable users to browse the website according to selected criteria (for example, language, geographical area, device used, browser type or products selected for purchase), thereby improving the service provided. Where these cookies are not strictly necessary for the operation of the website, the user’s prior consent is required before they may be installed.

Analytics or statistical cookies are used to improve website navigation by analysing user activity, either anonymously or by tracking visitors (e.g. the number of users on a page, the number of times a user has visited the page, or the length of time spent on the page). They are also referred to as performance cookies and, as noted above, may be treated in the same way as technical cookies only if configured to have limited potential to identify individuals. In such cases, prior consent is not required and they may remain active at all times.

Marketing or profiling cookies make it possible to analyse users’ browsing activity and behaviour in order to create profiles or assign users to groups with similar characteristics, personalise services or deliver targeted advertising. These cookies are not necessary for the operation of the website and their installation requires specific consent.

The website may also contain links to, or content from, social media platforms. A simple link to an external platform does not necessarily result in cookies being installed through the website. However, where a page contains plugins or embedded content, a direct connection may be established with the selected platform, such as Facebook, Instagram, TikTok, LinkedIn or YouTube.

Rules governing consent to cookies

Where the website uses cookies other than technical cookies, an appropriately sized banner must appear immediately and contain:

• a brief notice concerning the use of cookies on the website;
• a link to the full Cookie Policy;
• a control allowing users to reject non-essential cookies or close the banner without giving consent;
• a control allowing users to accept all cookies;
• a control allowing users to select the specific categories of cookies they wish to accept.

Cookies may also be disabled entirely through the browser settings, using the relevant function available in most browsers. Users should be aware, however, that disabling cookies may make certain website features unavailable, particularly services provided by third parties, such as YouTube videos (or videos from other video-sharing services), social media buttons or Google Maps.

For further information on managing cookies through a browser, users may consult the official guides for Google Chrome, Microsoft Edge, Mozilla Firefox and Apple Safari. For browsers other than those listed, users should refer to the relevant documentation or online help guide.

USE OF COOKIES ON THIS WEBSITE

This website is built on the WordPress platform and uses both session and persistent technical and functionality cookies. These cookies are necessary to ensure the proper operation and security of the website, manage the preferences expressed by the user and, where applicable, provide access to restricted areas. Additional technical cookies may be used by the hosting provider and by plugins required for the operation of the website.

The website also uses third-party analytics cookies, particularly the Google Analytics service, which helps the Controller understand how visitors interact with the website’s content, obtain statistical reports on activity and identify the most frequently viewed pages. These tools are activated only after the user has given consent, unless they are configured so that they may be treated in the same way as technical cookies in accordance with the conditions laid down by applicable law. Further information is available in the Google Analytics privacy notice.

Some pages may contain videos embedded from YouTube, a platform owned by Google. Playing these videos may involve the use by Google of cookies and other tracking tools, including for security, measurement, preference storage and content personalisation purposes. For this reason, YouTube content and the associated non-essential tools are loaded only after the user has given consent.

The website may also use a contact form and technical tools designed to prevent spam and misuse. Where these tools involve the installation of non-essential cookies or a connection to third-party services, they will be activated only after consent has been given, where required.

An up-to-date list of the cookies and other tracking tools actually used, including details of the provider, purpose, category and duration, is available in the cookie settings panel accessible through the website. The list is updated periodically and, in particular, whenever plugins, features or external services are introduced or modified.

Checking and managing cookies on this website

When users first access the website, or after clearing their browser cache, a cookie banner will appear, allowing them to:

• accept all categories of cookies by clicking the relevant button;
• activate only the desired categories of cookies (Functionality, Analytics and Marketing) using the relevant preference controls;
• reject the use of cookies by clicking the ‘Reject’ button or the ‘X’ in the upper-right corner; this closes the banner and results in only strictly necessary cookies being installed;
• manage preferences for each category of cookies described in this document by accessing the individual categories.

Users may subsequently amend and/or withdraw the consent they have given at any time by reopening the cookie settings panel through the relevant link or control on the website. Clearing the browser cache will also reset any consent choices previously made.

Provision of data

The provision of data by users through cookies is optional and is based solely on the Data Subjects’ freely given consent, except in the case of strictly necessary technical cookies and anonymous statistical cookies. If users do not accept functionality or marketing cookies, either on first accessing the website or following a subsequent change to their preferences, they may still browse the website, although features linked to the services they have declined may be unavailable.

Disclosure and Transfers of Personal Data

Personal data may be disclosed to Controller’s employees or contractors who have been formally authorised to process such data and have received appropriate operational instructions.

In addition, the data may be processed by external legal or natural persons engaged for organisational purposes, such as the hosting provider and providers of plugins and IT services generally. Where applicable, such persons are appointed as Processors pursuant to Article 28 of the GDPR; alternatively, they operate as independent Controllers.

The Controller may also disclose data to other parties where necessary to comply with legal obligations or for verification and investigation purposes, such as public bodies, judicial authorities and law enforcement agencies.

Where, for technical and/or operational reasons, it is necessary to engage parties located outside the European Union or the European Economic Area, the Controller will manage the transfer in accordance with Chapter V of the GDPR, on the basis of an adequacy decision, the EU–US Data Privacy Framework where applicable, Standard Contractual Clauses or other appropriate safeguards provided for by law.

Data Subjects’ rights

Data Subjects may contact the Controller by emailing privacy@honboard.com in order to exercise the rights granted under Articles 15–22 of the GDPR. These include, in particular, the right to access their personal data, the right to erasure, the right to restriction of processing, the right to obtain a copy of the data and the right to withdraw consent previously given. Lastly, Data Subjects have the right to lodge a complaint with the Italian supervisory authority, the Garante per la protezione dei dati personali, Piazza Venezia 11, 00187 Rome, Italy – urp@gpdp.it

Amendments to this Policy

This Policy was updated in August 2026 and may be amended from time to time following the entry into force of new legal provisions, the introduction of new website features or the activation of new services.

Version dated 28.08.2026