Website privacy notice

Last updated: 13 October 2026

Nova Forensics — Data Recovery, Digital Forensics, Cyber Security and OSINT
Via dei Gladioli 26, 09045 Quartu Sant’Elena (CA) — Italy
VAT IT 03892050927 · info@veridica.it

This notice is provided under Articles 13 and 14 of Regulation (EU) 2016/679 (“GDPR”) and Italian Legislative Decree 196/2003, to visitors of www.veridica.it and to anyone who contacts us. For the processing carried out by the browser extension, see the extension privacy policy.

In short. The site uses no profiling cookies or analytics, embeds no third-party services (fonts, maps, videos, social widgets) and collects no data through forms: the contact form prepares an e-mail that you send from your own mail program. We process your data only if you write to us, and only to reply.

1. Controller

Nova Forensics, Via dei Gladioli 26, 09045 Quartu Sant’Elena (CA), Italy — VAT IT03892050927 — e-mail info@veridica.it. No Data Protection Officer has been appointed, as not required by Art. 37 GDPR.

2. Data we process

Category	Data	Source
Browsing data	IP address, date and time, requested page, response code, browser user-agent	Logged automatically by the hosting provider’s servers
Contact data	Name, e-mail, organisation, sector, interest, message content and any other data you choose to send	Provided by you when writing to info@veridica.it
Quote and licence data	Identification and tax data of the licensee, licence holder name, contact details	Provided by you when requesting a quote or purchasing
Academy data	Only full name (printed on the certificate) and e-mail; date, score and code of the passed exam	Provided by you at exam enrolment; sent to academy@veridica.it only if you pass

Please do not send special-category data (Art. 9), criminal-offence data (Art. 10) or real case material in a first contact.

3. Purposes and legal bases

Purpose	Legal basis	Retention
Operating and securing the site (technical logs)	Legitimate interest (Art. 6(1)(f))	Per the hosting provider’s policy, normally no longer than 12 months
Answering requests for information, quotes, demos	Pre-contractual steps at your request (Art. 6(1)(b))	24 months from last contact if no contract follows
Licence management, invoicing, support	Contract (Art. 6(1)(b)) and legal obligations (Art. 6(1)(c))	Contract term plus 10 years for accounting records
Issuing, registering and verifying certificates	Requested service (Art. 6(1)(b))	Registration e-mail: deleted within 12 months. Public register: only code, date, score and a hash of the name, for 10 years
Establishing or defending legal claims	Legitimate interest (Art. 6(1)(f))	For the duration of proceedings and limitation periods

We do no marketing or profiling, never sell data, and take no decisions based solely on automated processing.

4. VERIDICA Academy: exam enrolment and certificate

Access by personal code: after purchase you receive a code derived from your e-mail with a secret key. The site keeps no user database and no passwords; it verifies the code by computation. A signed technical cookie (vrd_acc, 180 days) keeps you signed in; it is strictly necessary for the service and exempt from consent.
For the certificate we only ask the name to print; the e-mail is the one you signed in with. No phone, address, date of birth or ID numbers.
Lessons, progress and exam answers stay in your browser’s local storage and are not sent to us.
Only if you pass, the site sends a single e-mail to academy@veridica.it with name, e-mail, date, score and code. The sending script stores no files, database entries or IP addresses.
The public register /academy/registro.json holds only code, date, score and a SHA-256 hash of the name; neither the clear name nor the e-mail is published.
The registration e-mail is deleted within 12 months; the register entry is kept 10 years so the certificate can be verified.

Legal basis: the service you requested (Art. 6(1)(b)). You may ask us to delete your registration at academy@veridica.it; the certificate will then no longer be verifiable online.

4-bis. Recipients

Aruba S.p.A. (Italy), hosting provider, as processor (Art. 28 GDPR);
Aruba S.p.A., also as provider of the info@veridica.it and academy@veridica.it mailboxes, as processor;
accountants, banks and authorities, within legal obligations.

Data is processed within the EEA. Any transfer outside the EEA would take place only under Articles 44-49 GDPR safeguards.

5. Cookies and external resources

The site uses a single technical cookie, for Academy access, exempt from consent. Fonts are self-hosted; no request is made to Google Fonts or other CDNs. Academy pages store your progress in your browser’s local storage, which is never sent to us. See the cookie policy.

6. Your rights

You may exercise your rights of access, rectification, erasure, restriction, portability and objection (Articles 15-22 GDPR) by writing to info@veridica.it. We reply within one month. You may lodge a complaint with the Italian supervisory authority, Garante per la protezione dei dati personali (www.garanteprivacy.it), or with the authority of the EU country where you live or work.

7. Security and changes

The site is served over HTTPS and we apply measures appropriate to the risk (Art. 32 GDPR). This notice may be updated; the current version is always published on this page. In case of discrepancy, the Italian version prevails.