Cookie Policy

1. Introduction

This Cookie Policy describes the types of cookies and similar technologies used on the website of NexStudio S.r.l. (hereinafter “NexStudio”, “we”), with registered office in Italy, [INDIRIZZO_COMPLETO], and explains how to manage preferences. For personal data processing and data subject rights, please refer to the Privacy notice .

For the cookie policies of the LexAura and MediAura SaaS products, please consult the dedicated pages on the respective portals.

2. Definitions

• Cookie: a small text file sent by the site to the browser and stored on the device, then sent back to the site on subsequent visits.
• First-party cookie: set by the domain of the site the user is visiting.
• Third-party cookie: set by different domains (external providers, embeds, CDNs, measurement tools).
• Similar technologies: web beacons, pixels, local storage, and client-side identifiers in general.

3. Cookie purposes and categories

3.1 Strictly necessary (essential) cookies

Purpose: navigation, security, session management, storage of consent preferences. Legal basis: legitimate interest of the controller (Art. 6.1.f GDPR) in ensuring the operation of the service requested by the user.

3.2 Preference / functional cookies

Purpose: language, region, theme, or other interface settings. Legal basis: consent (Art. 6.1.a GDPR).

3.3 Performance / analytics cookies

Purpose: aggregate statistics on visits and journeys to improve the site. Legal basis: consent (Art. 6.1.a GDPR).

3.4 Advertising and targeting cookies

Purpose: targeted advertising, remarketing, campaign measurement. Legal basis: explicit consent.

3.5 Third-party cookies and social integrations

Purpose: embedded videos, social buttons, maps, third-party chat. Processing by third parties is governed by their respective policies.

4. List of cookies used

Technical appendix list (to be kept up to date with periodic scanning).

5. Legal basis

• Essential technical cookies: legitimate interest of the controller (Art. 6.1.f GDPR).
• Analytics and marketing cookies: free, informed, and revocable consent (Art. 6.1.a GDPR).

6. Consent collection method and record

The site uses a first-party CMP. On first visit a banner is shown with:

• Reject non-essential
• Customize (opens category panel)
• Accept all

Proof of the choice is stored in the browser in local storage.

7. Managing and withdrawing consent

• Via the banner or the Customize panel on first visit.
• At any time via Cookie settings in the site footer.
• By clearing the site’s local data from browser settings.

8. Browser disabling and impact

You can block or delete cookies from browser settings (Chrome, Firefox, Safari, Edge, and others).

9. Third-party cookies and responsibility

The site may integrate third-party tools (analytics, CDN, social). Third parties may set their own cookies and process data under their policies.

10. Retention and retention criteria

Individual cookie durations follow the published tables and provider policies. Consent cookies: 365 days, renewable. Security logs: maximum 30 days.

11. International transfers

Some providers may process data in third countries (e.g. the United States). Where applicable, safeguards such as standard contractual clauses, adequacy decisions, or other bases provided by law are adopted.

12. Minors

The site is not directed at the intentional collection of minors’ data.

13. Security measures

Appropriate technical and organisational measures apply: TLS transmission, limited log access, minimisation principle.

14. Consent for advertising and profiling

Profiling and advertising require explicit consent and traceability of the choice.

15. Effects of refusal or acceptance

Accepting optional categories enables advanced preferences, analytics, and marketing features. Rejecting non-essential cookies keeps the site navigable.

16. Changes to the Cookie Policy

The Policy may be updated when cookies, providers, or rules change. The revision date will be indicated.

17. Data subject rights and contacts

Rights: access, rectification, erasure, restriction, portability, objection, and withdrawal of consent. To exercise them: privacy@nexstudio.com and via the form on nexstudio.ai. Supervisory authority: Garante per la protezione dei dati personali ( www.garanteprivacy.it ).