Privacy Policy

This notice describes how the website atiartisticu.com (hereinafter, the “Website”) collects and processes the Personal Data of users who visit it or use the available services. The information is provided in accordance with Regulation (EU) 2016/679 (“GDPR”) and the applicable Italian legislation on the protection of personal data.

 

Data Controller

 

  • Controller: ATIARTISTICU DI LOEWE LEANDER LUKAS
  • Address: VIA REGINA ELENA 18 – 09070 – NARBOLIA (OR) – Italy
  • Workshop location: Località Su Conchili – 09070 Narbolia – OR – Italy
  • VAT number: 01075730950
  • Email: info@atiartisticu.com
  • Phone/WhatsApp: +39 348 477 6610

 

For any request concerning the processing of Personal Data or to exercise the rights provided by the GDPR, you can contact the Controller at the contact details provided above.

 

Types of Data Collected

The Website processes various categories of Personal Data, directly or through third parties.

1) Data voluntarily provided by the User

  • Identification and contact data (name, surname, email, phone) entered in contact forms or communications sent to the Controller.

  • Contents of messages sent by the User.

2) Data automatically collected during use

  • IP addresses, device identifiers, browser and operating system characteristics, URI/URL of requested resources, time of request, referring/exit pages, time spent, interactions (scroll, clicks, touch events).

3) Tracking tools

  • Cookies and similar technologies (pixels, local storage, unique identifiers) used to ensure technical operation, improve user experience, perform statistical measurements and, with prior consent, integrate third-party services.

For more details, see the Cookie Policy.

 

Nature of Data Provision

The provision of data is mandatory when required to allow the Website to provide its functionalities (security, response to requests). In the case of optional data, the User is free not to provide them without consequences for the use of the Website.

 

Purposes and Legal Bases of Processing

  1. Managing contact requests (email, phone, online forms).
    Legal basis: execution of pre-contractual/contractual measures (Art. 6.1.b GDPR).

  2. Technical functioning, security and prevention of abuse/spam/bots.
    Legal basis: legitimate interest of the Controller (Art. 6.1.f).

  3. Statistics and traffic measurement (e.g. Google Analytics 4).
    Legal basis: User consent (Art. 6.1.a), unless configurations reduce identifiability.

  4. Viewing external content (e.g. Google Fonts, Google Maps).
    Legal basis: consent (Art. 6.1.a).

  5. Legal obligations and defense in court.
    Legal basis: legal obligation (Art. 6.1.c) and legitimate interest of the Controller (Art. 6.1.f).

 

Processing Methods and Security Measures

Data is processed using IT/telecommunication tools, with measures in place to ensure confidentiality and integrity. Collaborators and suppliers may access data as Data Processors (Art. 28 GDPR). An updated list is available upon request.

 

Place of Processing and Non-EU Transfers

Processing takes place at the Controller’s offices and third-party data centers. In the event of transfers outside the EU/EEA, safeguards compliant with Arts. 44–49 GDPR will be adopted (adequacy decisions, Standard Contractual Clauses).

 

Data Retention Period

  1. Contact/communication data: stored for the time necessary to handle the request.

  2. Technical/security logs: according to technical times and security needs.

  3. Statistical data: according to tool settings (e.g. GA4, from 2 to 14 months).

  4. Once the retention periods expire, the Data will be deleted or anonymized.

 

Third-Party Services

 
  1. Google reCAPTCHA (Google LLC) → protection against spam/bots.

  2. Google Analytics 4 (Google LLC) → navigation statistics.

  3. Google Fonts (Google LLC) → font display.

  4. Google Maps (Google LLC) → map and route integration. Processing may involve transfer to the USA. For additional information, refer to Google’s privacy policies.

 

Data Subject Rights (Arts. 15–22 GDPR)

Users may:

 

  • withdraw consent;
  • object to processing;
  • access their data and obtain a copy;
  • request correction or updates;
  • request deletion or restriction;
  • exercise portability;
  • lodge a complaint with the Italian Data Protection Authority (www.garanteprivacy.it). How to exercise rights: by writing to info@atiartisticu.com. Requests will be handled within 30 days.

 

System Logs and Maintenance

The Website and third-party services may collect system logs containing IP addresses and navigation data.

 

Legal Defense

Data may be used to protect the Controller against misuse of the Website or to comply with legal requests from authorities.

 

Additional Information

Further information may be requested from the Controller via email or phone.

 

 


Last updated: October 2, 2025