Privacy Notice — GDPR / Reg. (EU) 2016/679

Privacy Policy

Last updated: 12 June 2026

This privacy notice describes how Artesis Italia Srls processes personal data of users who visit our website or contact us through contact forms, email or other channels, pursuant to Regulation (EU) 2016/679 of the European Parliament and of the Council ("GDPR") and Italian Legislative Decree 196/2003 as amended by Legislative Decree 101/2018.

1.Data Controller

2.Categories of Personal Data Collected

We collect the following categories of personal data:

• Contact data provided directly: when you fill in the "Request a demo" form or contact us by email, we collect your first name, last name, company name, email address, telephone number and any further information you choose to include in your message.
• Browsing data: the IT systems and software procedures that operate the website automatically acquire, during their normal operation, certain personal data whose transmission is implicit in the use of Internet communication protocols (e.g. IP addresses, browser type, operating system, date and time of requests, pages visited). These data are not collected in order to be associated with identified individuals but, by their nature, could permit user identification.
• Cookie data: the website uses technical cookies strictly necessary for its operation. For detailed information please refer to our Cookie Policy.

We do not collect special categories of data under Art. 9 GDPR (health data, ethnic origin, religious beliefs, etc.).

3.Purposes and Legal Bases for Processing

We do not use personal data for automated decision-making processes or profiling within the meaning of Art. 22 GDPR.

4.Recipients of Personal Data

Personal data may be disclosed to:

• IT and hosting service providers acting as Data Processors under Art. 28 GDPR, bound by appropriate data processing agreements that ensure adequate levels of protection.
• Professional advisors (legal, tax, accounting) acting either as independent Controllers or as Processors formally appointed by contract.
• Public authorities where required by law.

Personal data are not disclosed to unrelated third parties or sold to any party for commercial purposes.

5.Transfers to Third Countries

Personal data are processed primarily within the European Economic Area (EEA). Should data need to be transferred to non-EU/EEA countries that do not benefit from an adequacy decision by the European Commission, such transfer will take place exclusively using the appropriate safeguards provided under Chapter V of the GDPR, such as Standard Contractual Clauses (SCCs) adopted by the European Commission or other equivalent legal instruments.

6.Retention Periods

• Contact and demo requests: data are retained for the time strictly necessary to handle the request and, thereafter, for a maximum period of 24 months from the last interaction, unless a contractual relationship has commenced.
• Contractual data: retained for 10 years from the execution of the contract, in compliance with civil and tax law obligations.
• Browsing data (logs): retained for the time strictly necessary for IT security purposes, generally no longer than 12 months.
• Technical cookies: in accordance with the duration indicated in our Cookie Policy.

7.Rights of the Data Subject

As a data subject, under Arts. 15–22 GDPR you have the right to:

• Access (Art. 15): obtain confirmation of whether or not personal data concerning you is being processed and, if so, request a copy.
• Rectification (Art. 16): obtain correction of inaccurate data or completion of incomplete data.
• Erasure ("right to be forgotten", Art. 17): obtain erasure of your personal data where no overriding retention obligation applies.
• Restriction of processing (Art. 18): obtain restriction of the processing of your data in certain circumstances.
• Data portability (Art. 20): receive the data you have provided in a structured, commonly used and machine-readable format, and transmit them to another Controller where technically feasible.
• Objection (Art. 21): object to the processing of your data, in particular for direct marketing purposes or where processing is based on legitimate interest.
• Withdrawal of consent: where processing is based on consent, withdraw it at any time without affecting the lawfulness of processing carried out prior to withdrawal.

You also have the right to lodge a complaint with the competent supervisory authority. In Italy this is the:

8.How to Exercise Your Rights

To exercise the rights listed in the previous section or for any request relating to the processing of your personal data, please contact us at:

• Email: info@artesisitalia.it
• Certified email (PEC): artesisitalia@pec.it

We will respond to your request within 30 days of receipt, as required by Art. 12 GDPR. In the case of particularly complex or numerous requests, this period may be extended by a further 60 days, with prior notification.

9.Changes to This Notice

The Controller reserves the right to make changes to this privacy notice at any time, giving adequate notice on the website. Users are invited to check this page periodically. The date of the most recent update is indicated at the top of this document.

For information on the use of cookies, please see our Cookie Policy.