Privacy Policy

Last updated: 24 October 2026

This Privacy Policy explains how personal data is processed when you visit nakamates.com, contact us through it, or request a demo through one of our ad forms on Facebook or Instagram, in accordance with Regulation (EU) 2016/679 (General Data Protection Regulation, "GDPR") and the Italian Personal Data Protection Code (Legislative Decree 196/2003, as amended). The Nakamates app has its own privacy notice, provided to guests inside the app.

1. Data controller

Nakamates – Matteo Ferretti
Via Frascati 50, 00178 Rome (RM), Italy
Email: matteo@nakamates.com

2. What data we collect

• Contact form data: name, role, business name, type of business, country, capacity, email address and the content of your message.
• Demo request forms on Facebook and Instagram (Meta lead ads): full name, email address, WhatsApp number (optional), the name of your property and its guest capacity. Some fields may be pre-filled by Meta with information from your profile; you can review and change them before you submit. We only receive the data when you tap Submit.
• Email correspondence: the data you share when you write to us directly.
• Technical data: when you visit the site, our hosting provider automatically processes data such as IP address, browser type, date and time of the request. This is needed to deliver the pages and keep the site secure.

We do not use analytics, profiling or advertising tools on this website.

3. Purposes and legal bases

• Replying to your request and organising a demo or your start with Nakamates (including contacting you by email, phone or WhatsApp if you gave us your number): processing is necessary to take steps at your request before entering into a contract (Art. 6(1)(b) GDPR).
• Operating and securing the website: our legitimate interest in providing a working, secure site (Art. 6(1)(f) GDPR).
• Complying with legal obligations, for example tax and accounting rules if a contract follows (Art. 6(1)(c) GDPR).

Providing the data marked as required in the form is necessary to answer your request. Without it we cannot contact you.

4. Who processes the data

Your data is processed by the controller and by the following service providers, acting as data processors or independent controllers:

• Netlify, Inc. (USA): website hosting and handling of contact form submissions.
• Google Ireland Ltd / Google LLC: delivery of the fonts used on this site (Google Fonts). Your browser connects to Google servers, which receive your IP address.
• Our email provider, to receive and answer your messages.
• Meta Platforms Ireland Ltd (Facebook and Instagram): hosts our demo request forms and delivers the data you submit to us. Meta acts as an independent controller for the data it processes on its platforms; see the Meta Privacy Policy.
• WhatsApp Ireland Ltd: only if you gave us your WhatsApp number and we contact you there; see the WhatsApp Privacy Policy.

We never sell your data or share it for marketing purposes.

5. Transfers outside the EU

Some providers are based in the United States. Transfers take place on the basis of the EU–US Data Privacy Framework, where the provider is certified, or of the Standard Contractual Clauses approved by the European Commission (Art. 46 GDPR).

6. How long we keep the data

• Contact and demo requests (website or Facebook/Instagram forms): for as long as needed to handle the request and in any case no longer than 24 months after our last contact, unless a contract follows.
• Data related to a contract: for the period required by law (usually 10 years for accounting records in Italy).
• Technical logs: for the limited period set by the hosting provider for security purposes.

7. Your rights

Under Articles 15–22 GDPR you have the right to access your data, have it corrected or erased, restrict or object to its processing, and receive it in a portable format. To exercise these rights, write to matteo@nakamates.com. We will answer within one month.

You also have the right to lodge a complaint with the Italian supervisory authority, the Garante per la protezione dei dati personali (www.garanteprivacy.it), or with the authority of the EU country where you live or work.

8. Automated decisions

We do not make decisions based solely on automated processing, including profiling.

9. Cookies

For information on cookies and similar technologies, see our Cookie Policy.

10. Changes to this policy

We may update this Privacy Policy. The current version is always available on this page, with the date of the last update at the top.