Privacy Policy
How we collect, use and protect your personal data on openframe-play.site.
Last updated: 22 September 2025
1) Who we are
This Privacy Policy applies to openframe-play.site (the “Site”), operated under the brand NestRoad in Italy. We provide expert reviews and guidance about chicken coops with runs.
We act as the data controller for personal data processed through this Site, in accordance with the EU General Data Protection Regulation (GDPR) and Italian privacy law.
2) Data we collect
a) Data you provide
- Name, email address, phone number (when you contact us or request consultation).
- Message content and any preferences you choose to share (e.g., flock size, location).
- Newsletter opt-in choice (if you subscribe).
b) Data collected automatically
For security and performance, basic technical information may be processed: IP address, device/browser info, timestamps, page URLs, and limited request metadata. We do not use analytics or advertising pixels.
3) Why and on what legal basis
- Respond to enquiries & provide services (Art. 6(1)(b) GDPR — contract/steps prior to contract).
- Site security & performance (Art. 6(1)(f) GDPR — legitimate interests in protecting the Site and users).
- Compliance with law (Art. 6(1)(c) GDPR — legal obligations, e.g., records, requests from authorities).
- Optional updates/newsletter (Art. 6(1)(a) GDPR — consent; you can withdraw at any time).
4) Cookies & similar tech
We use essential/technical cookies so the Site works securely and reliably. We do not use advertising cookies. Details are available in our Cookie Policy.
- Consent cookie (
nr_cookie_consent) remembers your choice for 30 days. - Security cookies from Cloudflare (e.g.,
__cf_bm,cf_clearance) help block bots and DDoS. - Session flags to support forms and navigation.
5) Sharing your data
We do not sell or rent your personal data. We may share limited data with:
- Service providers under contracts (e.g., hosting, security/CDN) strictly for operating the Site.
- Authorities when required by applicable law or to defend legal claims.
- With your consent where you ask us to share or publish information.
6) Where we store & how long we keep data
Hosting and security services may operate in the EU and, where necessary, in other jurisdictions with adequate safeguards. We retain personal data only as long as needed for the purposes above or as required by law.
7) Security
We apply reasonable technical and organizational measures (TLS, least-privilege access, security monitoring via Cloudflare). No online method is 100% secure, but we work to minimize risks and respond to incidents.
8) Your rights (EU/Italy)
Under the GDPR you may have the right to:
- Access and obtain a copy of your personal data;
- Request rectification of inaccurate or incomplete data;
- Request erasure (“right to be forgotten”) in applicable cases;
- Restrict or object to certain processing;
- Data portability (receive your data in a structured, commonly used format);
- Withdraw consent at any time (when processing is based on consent);
- Lodge a complaint with a supervisory authority.
In Italy, the supervisory authority is the Garante per la protezione dei dati personali. Website: garanteprivacy.it
9) International transfers
If personal data is transferred outside the EEA/UK, we rely on appropriate safeguards (e.g., adequacy decisions, standard contractual clauses) to protect your information.
10) Children & third-party links
The Site is not intended for children under 13 and we do not knowingly collect their data. Our pages may link to third-party websites we do not control; please review their privacy policies.
11) Changes to this policy
We may update this Privacy Policy. Material changes will be reflected here with a new “Last updated” date.