Non-A Privacy Policy

(Updated on 28/03/2026)

Introduction

Non-a

You are entering into this Contract with Non Architecture s.r.l. (also referred to as “we” and “us”), established in Via Delle Coppelle 3, 00186 Roma RM, Italy, VAT IT16621271002.

Introduction

We are a design platform for architectural competitions and social network. Individuals use our Services to enter design competitions and be discovered for business opportunities, to connect with others, and to gather information. Our Privacy Policy is applicable to any Member or Visitor on our platform.

Services

This Privacy Policy, inclusive of our Cookie Policy, applies to your use of our Services.

This Privacy Policy applies to Non-a.com, Non-a-branded apps, and other Non-a-related sites, apps, communications, and services (“Services”), but excluding services that have a separate privacy policy.

Data Controllers and Contracting Parties

Non Architecture s.r.l. will be the controller of your personal data provided to, or collected by or for, or processed in connection with our Services.

For any data protection enquiries, please contact us at info@nonarchitecture.eu or by post at Non Architecture s.r.l., Via Delle Coppelle 3, 00186 Roma RM, Roma, Italy, marked “FAO: Data Protection.”

Change

Changes to the Privacy Policy are applicable to your use of our Services after the “effective date.”

Non-a (“we” or “us”) can amend this Privacy Policy, and if we make material alterations to it, we will provide notice through our Services, or by other means, to provide you the opportunity to review the changes before they become effective. Where material changes affect the legal basis on which we process your personal data – in particular where we intend to process your data for a new purpose based on consent – we will seek your renewed and specific consent before doing so, and will not rely solely on a notification.

1. Data We Collect

1.1 Data You Provide To Us

You provide data to create an account with us.

Registration

To create an account, you need to provide data including your name, email address and/or mobile number, and a password. If you register for a premium Service, you will need to provide payment (e.g., credit card) and billing information. Premium Service payments are processed via PayPal, either as a one-time payment or a recurring membership. Non-a does not directly collect or store your card details. However, we may download transaction records from PayPal, which may include your name, email address, billing address, and – where you register as a business – your company name and VAT number, solely for the purposes of invoicing and financial record-keeping. Please refer to Section 2.5 and Section 3.4 for further details.

Profile

You have choices about the information on your profile, such as your education, work experience, skills, photo, city or area, and endorsements.

Please note: certain information you voluntarily include in your profile – such as information that may reveal political opinions, religious or philosophical beliefs, health data, or trade union membership – constitutes special category data within the meaning of Art. 9 GDPR. Where you choose to include such information on your profile, we process it solely to display it to other Members in accordance with your settings, on the basis that you have manifestly made it public (Art. 9(2)(e) GDPR). We do not use such data for any other purpose. You are not obliged to provide this information, and you may remove it at any time. We will never require you to provide special category data as a condition of using our Services.

Posting and Uploading

We collect personal data from you when you provide, post, or upload it to our Services, such as when you fill out a form.

Newsletter

If you subscribe to our newsletter, we collect your name, email address, and country of residence for the sole purpose of sending you our newsletter. You may subscribe by ticking the relevant box when creating a platform account, registering for a competition, or registering for the Premium Service. Subscription is based on your consent (Art. 6(1)(a) GDPR). You may unsubscribe at any time by clicking the unsubscribe link included in every newsletter email, or by contacting us at info@nonarchitecture.eu. Withdrawal of consent does not affect the lawfulness of processing carried out before withdrawal. Your newsletter subscription data is processed by our email marketing provider, Mailchimp (The Rocket Science Group LLC). Please refer to Section 3.4 for further details.

Competition – Stage 1: Downloading the Competition Brief

To download a competition brief, you need to provide your name, email address, and country of residence. At this stage, you may also choose to subscribe to our newsletter by ticking the relevant box. Provision of your name, email address, and country is required to access the brief. Newsletter subscription is optional.

Competition – Stage 2: Full Competition Registration

If you choose to formally register for a competition, we collect a fuller set of personal data, including your name, date of birth, and country of residence. We will only collect your postal address if it becomes necessary to issue an invoice to you (for example, if a fee becomes payable or a prize is awarded that requires invoicing). Where you register as a business, we will also collect your company name and VAT number for invoicing purposes.

Competition – Stage 3: Project Submission

When you submit a project for a competition, we collect additional information relevant to the assessment of your entry. This may include your professional status (for example, whether you are a student, graduate, or professional), educational background (including institutions attended and qualifications obtained), work experience, and portfolio or project references. We collect only the information that is necessary for the specific competition. The full list of data fields required for each competition will be set out in the relevant competition brief. We process this information on the basis of our competition contract with you (Art. 6(1)(b) GDPR), as it is necessary for the assessment of your entry.

If your project involves third-party contributors (for example, where you are required to grant or confirm copyright on behalf of collaborators), we may collect limited personal data about those contributors – typically their name and contact details – solely for the purpose of documenting copyright ownership and obtaining the necessary rights. You are responsible for ensuring that any third-party contributors whose personal data you provide to us have been informed that their data will be shared with Non-a for the purpose of documenting copyright ownership in connection with your competition entry. We will process such data on the basis of our legitimate interest in documenting intellectual property rights (Art. 6(1)(f) GDPR). Where it is not reasonably practicable for us to contact those contributors directly, we rely on you to have informed them, in accordance with Art. 14(5)(b) GDPR. We will only use this data for copyright documentation purposes and will not process it for any other purpose.

1.2 Data From Others

Others may post or write about you on our platform. We do not control the content that Members post. We only display such content as posted by the Member on the platform and do not process it for any other purpose.

Partners

We receive personal data about you when you use the services of our customers and partners.

1.3 Service Use

Visitors

When you visit our platform, we register your IP address and whether you have visited before. We use this information solely for platform security and to understand general traffic to our platform. We process this data on the basis of our legitimate interest (Art. 6(1)(f) GDPR).

Members

For registered members, we log account activity – such as whether you have logged in, updated your profile, performed social actions (such as likes, follows, and comments), or interacted with other members. We use this information to operate and improve the platform, including to identify active members so that active profiles can be displayed more prominently. This information is not shared with third parties. We process this data on the basis of our legitimate interest (Art. 6(1)(f) GDPR). You have the right to object to this processing at any time by contacting us at info@nonarchitecture.eu.

1.4 Cookies and Similar Technologies

We collect data through cookies and similar technologies as further described in our Cookie Policy.

1.5 Your Device and Location

We collect basic technical data about your visit, including your IP address and device type (for example, whether you are using a mobile device or desktop). We use this for platform security and to ensure the platform displays correctly on your device. We do not use GPS or any other tool to identify your precise location. We process this data on the basis of our legitimate interest (Art. 6(1)(f) GDPR).

1.6 Other

As we enhance our Services, we may collect new data and create new ways to utilize data.

Our Services are dynamic, introducing new features which may require the collection of new information. If we collect materially different personal data or materially change how we collect, use or share your data, we will notify you and may also modify this Privacy Policy. Where required, we will seek your renewed consent before doing so.

2. How We Use Your Data

We utilize your data to deliver and sustain our Services, including operating our platform, providing access to educational content through our Premium Service, sending our newsletter, administering competitions, and communicating with you where necessary.

The table below sets out, for each processing purpose, the categories of data used and the specific legal basis relied upon under Art. 6 GDPR:

Purpose	Categories of Data	Legal Basis (Art. 6 GDPR)
Account creation and authentication	Name, email, password	Art. 6(1)(b) — contract
Operating and displaying the platform	Profile data	Art. 6(1)(b) — contract
Sending the newsletter	Name, email, country	Art. 6(1)(a) — consent
Premium Service registration and access to educational content	Name, email, payment and billing data	Art. 6(1)(b) — contract
Processing Premium Service payments via PayPal	Name, email, billing address, company data (if applicable)	Art. 6(1)(b) — contract
Invoicing for Premium Service or competition (where applicable)	Name, address, company data, VAT number	Art. 6(1)(b) — contract; Art. 6(1)(c) — legal obligation (Italian tax law)
Competition Stage 1: brief download	Name, email, country	Art. 6(1)(b) — contract
Competition Stage 2: full registration	Name, DOB, country; address and company data only if invoicing required	Art. 6(1)(b) — contract; Art. 6(1)(c) — legal obligation (Italian tax law, where invoicing applies)
Competition Stage 3: project submission and assessment (entrant data)	Professional status, educational background, work experience, portfolio references	Art. 6(1)(b) — contract
Competition Stage 3: third-party contributor copyright data	Name and contact details of contributors	Art. 6(1)(f) — legitimate interest: documenting intellectual property rights
Platform activity logging — Members	Login activity, profile changes, member interactions	Art. 6(1)(f) — legitimate interest: operating and improving the platform
Platform traffic — Visitors	IP address, return visit data	Art. 6(1)(f) — legitimate interest: understanding platform traffic
Device and location data	IP address, device type	Art. 6(1)(f) — legitimate interest: ensuring correct platform display
Advertising retargeting via third parties such as Meta, Google	Fact of visit to platform (e.g. via Meta Pixel and Google Ads token)	Art. 6(1)(a) — consent (via cookie banner)
Direct communication with users (support, issue resolution)	Name, email, content of enquiry	Art. 6(1)(b) — contract (where related to account or services); Art. 6(1)(f) — legitimate interest: resolving issues
Marketing own Services to existing Members	Name, email, membership status	Art. 6(1)(a) — consent
Security and integrity of the platform	Account data, access logs	Art. 6(1)(f) — legitimate interest: platform integrity and user safety
Legal compliance and regulatory obligations	As required	Art. 6(1)(c) — legal obligation
Analytics — understanding platform usage via Google Analytics	Pages visited, time on site, traffic source, device type, approximate location (via IP address)	Art. 6(1)(a) — consent
Analytics — marketing attribution via Sourcebuster JS	Traffic source data, UTM parameters, referral data	Art. 6(1)(a) — consent

Where we rely on legitimate interests as our legal basis, we have assessed that our legitimate interests are not overridden by your interests or fundamental rights. You may request further information about this assessment by contacting us at info@nonarchitecture.eu.

2.1 Services and operating the platform

We use your account and profile data to authorise access to our Services and to display your profile to other Members in accordance with your settings. 

2.2 Premium Services – Educational content

We use your registration and payment data to manage your Premium Service account and provide access to educational content. Please refer to Section 1.1 for details of the data collected.

2.3 Communications and Customer Support

We may contact you directly if there is an issue with your account, if you have contacted us with a question, or if we need to communicate something relevant to your use of our Services or your participation in a competition. We only use your data to the extent necessary to respond to your enquiry. 

2.4 Advertising

Where you have consented via our cookie banner, we use third-party advertising technologies, including the Meta Pixel and Google Ads token, to show advertisements for our own Services to visitors of our platform on other platforms such as Facebook, Instagram, and Google. Please refer to Section 1.4 and our Cookie Policy below for further details, including information on how to manage or withdraw your consent. We do not serve advertising on behalf of third parties and do not sell advertising space.

2.5 Marketing Our Own Services

We may promote our own Services, competitions, and Premium Service to registered Members via the platform or newsletter. We do not promote third-party products or services. 

2.6 Developing Services and Research

We use data for the development of our Services and for research purposes to provide you and others with a better, more intuitive, and personalized experience.

2.7 Competitions

We use competition registration and submission data to administer our competitions. Please refer to Section 1.1 for details of the data collected at each stage.

2.8 Insights That Do Not Identify You

We utilize data to generate insights that do not identify you, for example, to generate statistics about our members, their profession or industry.

2.9 Security

We use accounts and access data to maintain the security and integrity of our platform. 

2.10 Legal Compliance

We may process your data where necessary to comply with a legal obligation, including responding to a request from the Garante or a court order.

3. How We Share Information

3.1 Our Services

Any information you incorporate on your profile and any content you post or social actions (e.g., likes, follows, comments, shares) you perform on our Services will be visible to others.

Profile

Your profile is accessible to other Members using our Services. Depending on your settings, it could also be accessible to Visitors who are not logged in. Search engines may also index publicly visible profile information. 

Posts, Likes, Follows, Comments, Messages

Our Services facilitate the viewing and sharing of information through posts, likes, follows, and comments.

When you share a post, like or comment publicly on our platform, it can be accessed by other Members and Visitors.

3.2 Related Services

Non Architecture s.r.l. does not currently share your personal data with affiliated entities..

3.3 Service Providers

We use the following third-party service providers who may process your personal data on our behalf:

• PayPal (PayPal Europe S.à r.l. et Cie, S.C.A.) — payment processing for the Premium Service and competitions. PayPal may transfer data to the United States under the EU-U.S. Data Privacy Framework.
• Mailchimp (The Rocket Science Group LLC) — newsletter distribution. Mailchimp may transfer data to the United States under the EU-U.S. Data Privacy Framework and/or Standard Contractual Clauses.
• Fattura24 — invoicing and fiscal compliance. Based in Italy (EEA — no transfer outside the EEA).
• Third-party advertising platforms (currently including Meta Platforms Ireland Ltd. and Google Ireland Ltd.) — advertising retargeting, only where you have consented via our cookie banner. These platforms may act as joint controllers for this processing and may transfer data to the United States under the EU-U.S. Data Privacy Framework.
• Web hosting and IT infrastructure provider — hosts all data collected through the platform.

All processors are bound by written data processing agreements under Art. 28 GDPR. A current list of processors is available upon request at info@nonarchitecture.eu.

3.4 Legal Disclosures

We may share your data when required by law or to help protect the rights and safety of you, us, or others.

3.5 Change in Control or Sale

Your data may be shared in the event of a sale, merger, or change in control, with any succeeding entity having the right to continue to use your data in accordance with this Privacy Policy unless you agree otherwise.

4. Your Choices & Obligations

4.1 Data Retention

We retain your personal data for as long as is necessary for the purposes described in this Privacy Policy, in accordance with the storage limitation principle (Art. 5(1)(e) GDPR). In general:

• Account and profile data is retained for the duration of your account and deleted within a reasonable period following account closure.
• Newsletter subscriber data is retained until you withdraw your consent, after which it is deleted within a reasonable period.
• Competition registration and submission data is retained for the duration of the competition and for a reasonable period thereafter in case of legal claims.
• Payment and billing data is retained for 10 years from the date of the transaction, as required by Italian tax law.
• Activity logs and technical data are retained for a short operational period and then deleted.

Where we are required by law to retain data beyond these periods – for example, to respond to a regulatory request – we will do so only to the extent required. We may retain certain information in depersonalised or aggregated form beyond these periods, as such data no longer constitutes personal data.

4.2 Rights to Access and Control Your Personal Data

Under GDPR, you have the following rights in relation to your personal data:

• Right of access (Art. 15 GDPR)
• Right to rectification (Art. 16 GDPR)
• Right to erasure (Art. 17 GDPR)
• Right to restriction of processing (Art. 18 GDPR)
• Right to data portability (Art. 20 GDPR)
• Right to object (Art. 21 GDPR) – including an unconditional right to object to direct marketing at any time
• Right to withdraw consent at any time, without affecting the lawfulness of prior processing (Art. 7(3) GDPR)

To exercise any of these rights, please contact us at info@nonarchitecture.eu.

We will respond within one month of receipt (Art. 12(3) GDPR).

If you are not satisfied with our response, you have the right to lodge a complaint with the Garante per la protezione dei dati personali (www.garanteprivacy.it) under Art. 77 GDPR, and the right to an effective judicial remedy under Art. 79 GDPR.”

4.3 Account Closure

We retain some of your data even after you decide to close your account.

Should you choose to close your Non-a account, your personal data will typically cease being visible to others on our Services within a reasonable period following account closure, subject to the retention periods set out in Section 4.1.

We retain your personal data even after account closure if reasonably necessary to comply with legal obligations, resolve disputes, maintain security, prevent fraud and abuse, or enforce our User Agreement. We will keep depersonalised information following your account closure.

5. Other Important Information

5.1. Security

We strive to prevent security breaches and encourage utilising the security features available through our Services.

We employ security safeguards to protect your data, such as HTTPS encryption and access controls. However, we cannot guarantee absolute security of any information you transmit to us. 

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, we will notify the Garante within 72 hours (Art. 33 GDPR) and, where the risk is high, notify you directly without undue delay (Art. 34 GDPR).

5.2. Cross-Border Data Transfers

We process data primarily within the European Economic Area (EEA). However, some of our processors and joint controllers may transfer data to the United States. The following cross-border transfers take place:

• PayPal (USA) — EU-U.S. Data Privacy Framework (adequacy decision of 10 July 2023)
• Mailchimp (USA) — EU-U.S. Data Privacy Framework and/or Standard Contractual Clauses (Art. 46(2)(c) GDPR)
• Third-party advertising platforms (currently including Meta and Google) (Ireland / USA) — EU-U.S. Data Privacy Framework — only where advertising cookie consent has been given

A copy of the applicable transfer mechanism can be requested by contacting us at info@nonarchitecture.eu.

5.3 Lawful Bases for Processing

We will only collect and process personal data about you where we have a lawful basis to do so. The specific legal basis applicable to each processing activity is identified in Section 2 above. Where we rely on consent, you may withdraw it at any time. Where we rely on legitimate interests, you have the right to object under Art. 21 GDPR. If you have any questions, please contact us at info@nonarchitecture.eu.

5.4. Direct Marketing 

We currently refrain from sharing personal data with third parties for their direct marketing purposes.

The only direct marketing communication we send is our newsletter, which is based on your explicit consent. You have an unconditional right to unsubscribe at any time via the link included in every newsletter or by contacting us at info@nonarchitecture.eu (Art. 7(3) GDPR).

We do not directly track your activity across third-party websites, but third-party advertising platforms may do so when you have consented. We do use advertising retargeting technologies on our own platform – including the Meta Pixel and Google Ads token – which may result in advertisements for our own Services being shown to you on other platforms. These technologies are only activated with your prior consent. Please refer to our Cookie Policy below for full details.

5.5. Contact Information

Should you have questions or complaints regarding this Policy, please contact Non-a at info@nonarchitecture.eu. You can also reach us via physical mail addressing Non Architecture s.r.l., Via delle Coppelle 3, 00186 Roma, Italy.

If you are not satisfied with our response, you have the right to lodge a complaint with the competent supervisory authority under Art. 77 GDPR. The competent authority for Italy is:

Garante per la protezione dei dati personali
Piazza Venezia 11, 00187 Roma, Italy
Tel: +39 06 696771
Email: garante@garanteprivacy.it
Website: www.garanteprivacy.it

You also have the right to an effective judicial remedy under Art. 79 GDPR.

5.6 Children’s Data

Our Services are not directed at children under the age of 14. In accordance with Art. 8 GDPR and Art. 2-quinquies of the Codice della Privacy (as amended by D.Lgs. 101/2018), the minimum age for consent to information society services in Italy is 14 years.

We do not knowingly collect personal data from children under 14. If you are between 14 and 18 years of age, you may use our Services with the consent of a parent or legal guardian. If we become aware that personal data has been collected from a child under 14, we will take steps to delete such data as quickly as possible. If you believe we have inadvertently collected data from a child under 14, please contact us immediately at info@nonarchitecture.eu.

Cookie Policy

This Cookie Policy forms part of our Privacy Policy and explains how Non Architecture s.r.l. uses cookies when you visit our Services. It has been prepared in accordance with the GDPR, the ePrivacy Directive (2002/58/EC) as implemented in Italian law by D.Lgs. 69/2012, and the Garante’s Guidelines on Cookies and Other Tracking Technologies (Provvedimento 10 giugno 2021, no. 231).

We use strictly necessary cookies, functional cookies, and advertising cookies. Strictly necessary cookies are placed automatically. Functional and advertising cookies are placed only with your prior consent, which you can provide or refuse via the cookie banner displayed on your first visit.

This Cookie Policy applies to any Non-a product or service linking to this policy or incorporating it by reference.

What technologies are used?

Cookies

Cookies are small files placed on your device enabling Non-a features and functionality. We use session, functional, and advertising cookies. Advertising cookies are placed only with your prior consent.

Pixels and Advertising Technologies

We use third-party advertising technologies, including the Meta Pixel and Google Ads token, which allow us to show our own advertisements to people who have visited our platform when they use platforms such as Facebook, Instagram, and Google. These technologies are only activated where you have given your prior consent via our cookie banner. 

Local storage

Local storage allows a website or application to store information on your device(s), used solely to remember your functional preferences (e.g., language settings).

Cookie Table

The table below sets out all cookies and similar technologies currently used on our Services. This table is kept up to date and reflects all advertising technologies currently in use:

Cookie / Technology	Category	Purpose	Duration	First / Third Party	Consent Required?
[session_id]	Strictly necessary	Authentication and session management	Session	First party	No
[csrf_token]	Strictly necessary	Security / CSRF protection	Session	First party	No
[lang_pref]	Functional	Storing language preferences	1 year	First party	Yes
_fbp / Meta Pixel	Advertising	Retargeting visitors on Facebook and Instagram	90 days	Third party (Meta Platforms Ireland Ltd.)	Yes
_gcl_au / Google Ads token	Advertising	Retargeting visitors on Google	90 days	Third party (Google Ireland Ltd.)	Yes
_ga / ga[ID]	Analytics	Google Analytics — measuring platform traffic and usage	2 years / 1 year	Third party (Google Ireland Ltd.)	Yes
[sourcebuster]	Analytics	Marketing attribution — tracking traffic sources and campaign performance	1 year	First party	Yes
woocommerce_cart_hash	Strictly necessary	WooCommerce — tracking cart status	Session	First party	No
woocommerce_items_in_cart	Strictly necessary	WooCommerce — tracking whether cart contains items	Session	First party	No
wp_woocommerce_session_	Strictly necessary	WooCommerce — session identifier	2 days	First party	No
[YouTube]	Third-party functional	Enabling embedded YouTube video content	[per Google policy]	Third party (Google Ireland Ltd.)	Yes
[Vimeo]	Third-party functional	Enabling embedded Vimeo video content	[per Vimeo policy]	Third party (Vimeo Inc.)	Yes

Note: This table will be updated before any new advertising technology is activated on our platform. Advertising cookies are only placed where you have given prior consent.

What are these technologies used for?

Authentication

Recognising you when you log in and keeping your session secure.

Security

Protecting your account and preventing unauthorised access.

Preferences

Remembering your language and display preferences (only where you have consented).

Advertising

Where you have consented, we use third-party advertising technologies – including the Meta Pixel and Google Ads token – to show advertisements for our own Services to visitors of our platform on other platforms such as Facebook, Instagram, and Google. We may from time to time use similar technologies provided by other advertising platforms. We do not use these technologies to advertise on behalf of third parties.

Analytics

Where you have consented, we use Google Analytics and Sourcebuster JS to understand how visitors use our platform – such as which pages are visited, how long visitors stay, and where visitors come from. This helps us operate and improve our Services. We do not use this data to track your activity on other websites.

Embedded third-party content 

Where we embed video content from platforms such as YouTube or Vimeo, those platforms may place cookies on your device when the content loads. This occurs only where you have given your prior consent via our cookie banner. Please refer to the respective platform’s privacy policy for further information.

Your Consent and Cookie choices

Strictly necessary cookies are placed automatically as they are essential for the operation of our Services and do not require your consent. Functional, advertising, and analytics cookies are placed only with your prior consent, which you can provide or refuse via the cookie banner displayed on your first visit to our platform. Continued browsing or scrolling does not constitute valid consent under Art. 7 GDPR and the Garante’s Cookie Guidelines of 10 June 2021.

You can review, change, or withdraw your cookie consent at any time by clicking the link in the footer of our website.

Most browsers also allow you to control cookies through their settings. Please note that disabling cookies through your browser does not constitute withdrawal of consent under GDPR – please use the link in the footer of our website for this purpose.