This document describes how we use and manage your personal data, as well as all information regarding the collection of personally identifiable information during the use of our website. Personally identifiable information means any data that can be related to you personally, such as your first name, last name, address, email addresses, or user behavior. The protection of your personally identifiable information is very important to us. If you have any questions or would like more information about the protection of data collected or processed by Ateliers Veneti SPA, please contact us at info@ateliersveneti.it.

Ongoing technological developments, possible changes to our services or the legal framework, and other reasons may require amendments to our data protection notice. Therefore, we reserve the right to modify this Privacy Policy at any time and ask you to stay informed about any updates.

1. Data Controller

The Data Controller is Ateliers Veneti SPA, Via Alessandro Manzoni 38, 20121 Milan – VAT No.: 12487350964 – E-mail: info@ateliersveneti.it

2. Collection of Personally Identifiable Information When Visiting Our Website

If you use the website for informational purposes only, meaning without registering or otherwise providing us with information, we will only collect the personally identifiable information that your browser transmits to our server. If you wish to browse our website, we collect the following data, which is technically necessary to display our website and ensure its stability and security: IP address, date and time of the request, time zone difference from Greenwich Mean Time (GMT), content of the request (specific page), access status/HTTP status code, amount of data transferred in each case, website from which the request originates, browser, operating system and its interface, browser language and software version, display data, browsing data, and user behavior.

The following will also be collected:

• Data relating to the PC, telephone, tablet, or other device used for browsing;

• Personal data collected from third parties, such as data the customer agrees to share with us on publicly accessible social networks (e.g., Facebook, Instagram, LinkedIn) and/or that we may collect from other publicly accessible databases.

This Policy aims to inform users about how their personal data is processed. Ateliers Veneti SPA, in compliance with Legislative Decree 196/2003 (the “Privacy Code”) and Regulation (EU) 2016/679 (the “GDPR”), intends to guarantee the privacy and security of each visitor’s personal data in accordance with the provisions of this Policy. This Policy is to be considered as information provided pursuant to Article 13 of the Privacy Code and Articles 13 and 14 of the GDPR.

3. Contact by Email or Contact Form

When you contact us by email or via any contact form, you will be asked to provide the following data:

• Email address;

• First and last name;

• Company name/business name;

• Registered office;

• Telephone number;

• Role within the company

This information is used to provide the following services:

• Customer support;

• Marketing and sales activities;

• Communications to improve service management;

• Market research;

• Legal purposes;

• Administrative obligations

We will delete the data collected in this context once storage is no longer necessary, or, if legal retention obligations exist, we will restrict its processing.

4. Use of Social Plugins

This website uses social plugins provided by INSTAGRAM and LINKEDIN. These plugins generally collect your data and transmit it to the respective provider’s server. We have adopted technical measures to ensure the protection of your privacy, whereby your data cannot be collected by the providers of the respective plugins without your consent. These will initially be deactivated when you visit a site connected to the plugins. The plugins will not be activated until you click on the respective symbol and thereby consent to the transmission of your data to the respective provider.

Once activated, the plugins also collect personally identifiable information, such as your IP address, and send it to the respective provider’s server, where it is stored. Activated social plugins also set a cookie with a unique identifier when you visit the respective website. This enables the provider to create a profile based on your behavior as a user. This occurs even if you are not registered with the respective social network provider. If you are registered with the provider’s social network and are logged in during your visit to the website, the data and information about your visit may be linked to your profile on the social network. We have no influence over the exact extent of data collected by the respective provider. For more information, including the nature and purpose of data processing and your rights and settings options for privacy protection, please consult the data protection information of the respective social network provider at the following addresses:

• Instagram
• Linkedin

5. Analytics

For the purpose of analyzing and optimizing our websites, we use the services described below. This allows us to analyze, for example, how many users visit our site, which information is most requested, and how users find the website. The data we collect includes the websites from which the user accessed another website (“referrer”), which subpages of the website are accessed and how often, and the duration of time a subpage is viewed. This helps us develop and improve our website to make it more user-friendly. The collected data is not used to personally identify individual users. Anonymous or pseudonymized data is collected.

5.1 Google Analytics

This website uses Google Analytics, a web analytics service provided by Google Inc. (1600 Amphitheatre Parkway, Mountain View, CA 94043, United States).

This use includes the Universal Analytics operating mode. This makes it possible to assign data, sessions, and interactions across multiple devices to a pseudonymous user ID and thus analyze a user’s activities across devices.

Google Analytics uses cookies that enable analysis of your use of the website. The information generated by the cookie regarding your use of this website is generally transmitted to and stored on a Google server in the United States. However, if IP anonymization is activated on this website, your IP address will be truncated beforehand within Member States of the European Union or other states party to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the United States and truncated there. The IP address transmitted by your browser within the scope of Google Analytics will not be merged with other Google data. Google will use this information on behalf of the website operator to evaluate your use of the website, compile reports on website activity, and provide other services relating to website activity and internet usage for the website operator. Our legitimate interest in data processing is also based on these purposes. The legal basis for the use of Google Analytics is Article 6(1)(f) GDPR. Data sent by us and linked to cookies, user identifiers (such as user ID), and advertising identifiers are deleted after 14 months from the last use of our services. Data whose retention period has expired is automatically deleted once a month. Further information on terms of use and data protection can be found at the relevant Google websites.

You may prevent the storage of cookies by selecting the appropriate settings in your browser; however, please note that if you do so, you may not be able to use all the functions of this website to their full extent. You can also prevent Google from collecting and processing data generated by the cookie and relating to your use of the website (including your IP address) by downloading and installing the browser add-on. Opt-out cookies prevent future collection of your data when visiting this website. To prevent Universal Analytics from collecting data across various devices, you must opt out on all systems in use. You can set the opt-out cookie by clicking here: Disable Google Analytics.

5.2 Google Tag Manager

For transparency purposes, we inform you that we use Google Tag Manager. Google Tag Manager does not itself collect any personally identifiable information. Tag Manager facilitates the integration and management of our tags. Tags are small pieces of code used, for example, to measure traffic and user behavior, record the impact of online advertising and social channels, set up remarketing, target specific groups, and test and optimize websites. If you have deactivated tracking, Google Tag Manager will respect this setting. For more information about Google Tag Manager, please visit this link.

6. Existence of Automated Decision-Making

There is no automated decision-making process in relation to the Data.

7. Data Subject Rights

At any time, the data subject shall have the right to:

• Obtain confirmation from the Company as to whether or not personal data concerning them is being processed and, if so, access the information referred to in Article 15 of the Regulation;

• Obtain rectification of inaccurate data concerning them or, taking into account the purposes of the processing, completion of incomplete personal data;

• Obtain erasure of their personal data where one of the grounds set out in Article 17 of the Regulation applies, where applicable;

• Withdraw consent at any time where it was previously given. Withdrawal of consent shall not affect the lawfulness of processing based on consent before its withdrawal;

• Obtain restriction of processing where one of the cases referred to in Article 18 of the Regulation applies;

• Object to the processing of their personal data, for reasons related to their particular situation, where applicable;

• Receive the personal data concerning them, which they have provided, in a structured, commonly used, and machine-readable format, and transmit those data to another controller, within the limits set out in Article 20 of the Regulation.

The Company may request additional information before fulfilling requests if it needs to verify the identity of the natural person submitting the request.

Pursuant to the GDPR, the Company is not authorized to charge fees for complying with the requests described in this section unless they are manifestly unfounded or excessive, particularly because of their repetitive character. Where a DATA SUBJECT requests more than one copy of their personal data or in cases of excessive or unfounded requests, the Company may (i) charge a reasonable fee taking into account the administrative costs of fulfilling the request or (ii) refuse to act on the request. In such cases, the Company will inform the data subject of the costs before processing the request.

These rights may be exercised by sending an email to: info@ateliersveneti.it

Without prejudice to any other administrative or judicial remedy, the data subject also has the right to lodge a complaint with a Supervisory Authority (for Italy: the Italian Data Protection Authority) if they believe that the processing concerning them violates the General Data Protection Regulation. Further information is available on the official website http://www.garanteprivacy.it.

The Company undertakes to comply with all obligations set out in this Policy. Data subjects who intend to lodge the above-mentioned appeals or complaints are invited to contact us.