Pursuant to Regulation (EU) 2016/679 on the protection of personal data (GDPR)

On this page, HonBoard Srl provides all the information required regarding the processing of personal data collected while browsing the website, following registration on the website or when contacting the Company in its capacity as Data Controller.

HonBoard Srl, as Controller within the meaning of Regulation (EU) 2016/679 (the “GDPR”), operates in full compliance with national and European legislation on the protection of personal data. It attaches the utmost importance to the confidentiality of its users’ personal data and implements appropriate security measures to safeguard the information collected.

CONTROLLER

The Controller is HonBoard Srl, with registered office at Viale S. Michele del Carso 10, 20144 Milan, Italy, and operational headquarters at BASE, Via Bergognone 34, 20144 Milan, Italy.

The Data Controller may also be contacted at the following email address: privacy@honboard.com

CATEGORIES OF DATA PROCESSED

1) Browsing data and cookies

As a general rule, users may browse the website without directly providing any personal data. The website is divided into separate sections, some of which require users to enter data, while others do not.

The IT systems and software procedures used to operate the website, which is built on the WordPress platform, acquire certain personal data during their normal operation. The transmission of such data is inherent in the use of Internet communication protocols.

Such data may include the type of device and browser used, geographical area, access times, pages visited and other parameters relating to the user’s operating system and IT environment. In accordance with the default settings of Google Analytics 4, the user’s IP address is read solely to derive location data and is not stored.

These data are processed to enable browsing, ensure the proper operation and security of the website, prevent misuse or unlawful activities, and obtain statistical information on the use of the services. Wherever possible, data used for statistical purposes are processed in aggregate form or by means designed to reduce their potential to identify individuals.

The website may use technical cookies set by WordPress, the hosting provider and essential plugins, as well as, subject to consent where required, analytics tools and third-party content such as Google Analytics 4 and YouTube. For further details, please refer to the dedicated Cookie Policy.

2) Data voluntarily provided by users/visitors

When users or visitors provide personal data in order to access specific services or submit requests through the contact form or by email, HonBoard collects and processes those data solely to identify and respond to the user and to provide the requested service.

Registration on the website, where available, or requests for information and services submitted by users may entail the collection and subsequent processing of personal data such as, by way of example, first name, surname, email address, telephone number, organisation or occupation, and any other information voluntarily included in the message.

The optional, explicit and voluntary sending of messages to the addresses provided on the website entails the collection of the sender’s contact details and any other personal data contained in the communication, that are necessary to respond to the request.

PURPOSES AND LEGAL BASIS OF PROCESSING

Personal data are processed for the purposes set out below and on the corresponding legal bases.

• Managing registration on the website and access to restricted areas, where applicable, and sending transactional communications connected with the creation and maintenance of the account (legal basis: performance of a contract and steps taken prior to entering into a contract – ensuring operation of the service).
• Ensuring the operation, security and technical improvement of the website, as well as personalising the user experience to the extent permitted (legal basis: performance of a contract and steps taken prior to entering into a contract – ensuring operation of the service; Controller’s legitimate interests; user’s explicit consent for non-essential tools, where required).
• Carrying out activities arising from services contracted by clients and responding to requests for information about the services and the Company (legal basis: performance of a contract or steps taken prior to entering into a contract; Controller’s legitimate interests).
• Managing accounting, administrative, tax and other obligations imposed by Italian, European or international law (legal basis: compliance with a legal obligation).
• Complying with contractual requirements, obligations and terms, as well as managing debt recovery, any disputes and the enforcement of Controller’s rights (legal basis: performance of a contract, compliance with a legal obligation and Controller’s legitimate interests).
• Sending appropriate communications concerning the Company’s products, services and initiatives; sending periodic newsletters; and assessing customer satisfaction, including by email, SMS, instant messaging systems or telephone (legal basis: Controller’s legitimate interests and, where necessary, specific consent).

Controller does not currently carry out profiling activities or processing involving automated decision-making. Any use of cookies or profiling tools is described in the dedicated Cookie Policy and is subject to consent where required by law.

Should the Controller introduce any processing purposes other than those described above, it will update this Privacy Policy and, where necessary, request consent to the processing by the most appropriate means.

METHODS AND DATA RETENTION PERIODS

Personal data are processed using electronic procedures and media and, where necessary, manually (for example, on paper), for no longer than is strictly necessary to fulfil the purposes for which they were collected and in accordance with applicable law.

Data processed to respond to contact requests are retained for as long as necessary to handle the request and any resulting relationship. For marketing purposes, data are retained until consent is withdrawn or the right to object is exercised, without prejudice to periodic checks as to whether data remain current and relevant. Data relating to any account are retained for the duration of the relationship and thereafter for the period necessary to protect the Controller’s rights.

HonBoard is also required to retain certain information in order to comply with legal obligations and for a period reasonably necessary to meet legal requirements, resolve disputes, prevent fraud and misuse, and enforce its terms and conditions. Personal data processed for administrative, contractual and legal purposes are therefore generally retained for at least ten years, unless a different period is prescribed by law or is necessary for the establishment, exercise or defence of legal claims.

In relation to all processing activities, the Controller and any Processors undertake to implement appropriate physical, technical and organisational security measures to ensure the integrity, confidentiality and availability of the data.

PROVISION OF DATA

In general, the provision of data processed for compliance with legal obligations, performance of a contract or steps taken prior to entering into a contract is necessary. Any objection to processing, in whole or in part, may make it impossible for HonBoard to enter into or continue the relationship or to provide the requested service.

For other purposes, users/visitors are free to provide their personal data. Failure to provide such data may only result in an inability to fulfil the request or to keep the user fully informed. Any consent given may be withdrawn at any time.

DISCLOSURE AND TRANSFERS OF PERSONAL DATA

Personal data may be disclosed to HonBoard employees or contractors who have been formally appointed and authorised to process such data and have received appropriate operational instructions.

The Controller may also disclose or make the data accessible to:

• third parties engaged to perform activities connected with the provision of the services, such as providers of website hosting, maintenance and security services, plugins, cloud services, email services, consent management, analytics and multimedia content, appointed as Processors pursuant to Article 28 of the GDPR, where applicable;
• third parties where necessary to comply with obligations imposed by law or contract (e.g. public bodies, supervisory authorities, judicial authorities, law enforcement agencies and banks);
• associated companies, partners and/or affiliates, to the extent necessary for the purposes specified above and in compliance with applicable law.

The Controller uses services supplied by certain providers (such as the cloud services supporting Google Analytics or YouTube) that may process data outside the European Union or the European Economic Area. In such cases, transfers are carried out in accordance with Chapter V of the GDPR, on the basis of an adequacy decision, including the EU–US Data Privacy Framework where applicable, Standard Contractual Clauses approved by the European Commission, or other safeguards provided for by law.

Personal data will not be disseminated in any way without the Data Subject’s specific authorisation or another appropriate legal basis.

DATA SUBJECTS’ RIGHTS

Articles 15–22 of the GDPR set out the rights that Data Subjects may exercise against the Controller. In particular, these include:

• the right of access to personal data, including the right to:
• obtain confirmation as to whether or not personal data concerning the Data Subject are being processed and gain access to those data;
• be informed of the safeguards applied where data are transferred to a third country or an international organisation;
• obtain a copy of the personal data undergoing processing (provided that this does not adversely affect the rights and freedoms of others);
• the right to rectification of personal data;
• the right to erasure of all data (the ‘right to be forgotten’), unless the data are required for legal or public-interest reasons or in the other circumstances set out in Article 17(3) of the GDPR;
• the right to restriction of processing;
• the right to data portability;
• the right to object to processing, to withdraw consent previously given, and not to be subject to processing based on automated decision-making.

Data Subjects also have the right to receive prompt notification of any personal data breach likely to prejudice their dignity and freedom.

Lastly, Data Subjects have the right to lodge a complaint with the Italian supervisory authority, the Garante per la protezione dei dati personali, Piazza Venezia 11, 00187 Rome, Italy – urp@gpdp.it

UPDATES

HonBoard may amend this Privacy Policy at any time in compliance with applicable law, including following the introduction of new features, plugins or services on the website.

The version currently in force was last updated in August 2026.