GDPR Regulation (EU) 2016/679

Privacy Policy

Information Notice pursuant to Art. 13 of EU Regulation 2016/679 (GDPR) — Last updated: October 2026

This Privacy Policy describes how personal data of users who visit the website www.artheco.it or voluntarily contact our studio are collected, used, and protected.

1. Data Controller

2. Types of Personal Data Processed

• Data voluntarily provided by the user: First and last name, email address, telephone number (optional), and the content of any message sent via the Contact Form or direct email/telephone/WhatsApp inquiries.
• Browsing and technical security data: IP addresses, request timestamps, URI paths, and browser/operating system headers strictly required for website delivery, anti-abuse rate limiting, and cybersecurity diagnostics.

3. Purposes and Legal Basis of Processing

• Responding to inquiries and consultation requests: Personal data submitted via the Contact Form or email are processed exclusively to reply to your requests for information, interior design consultations, or quotes (Legal basis: Art. 6(1)(b) GDPR — execution of pre-contractual measures at the request of the data subject).
• IT security and fraud/abuse prevention: Server security logs are processed to protect the website from unauthorized access or brute-force attempts (Legal basis: Art. 6(1)(f) GDPR — legitimate interest of the Data Controller).
• Compliance with legal obligations: Fulfilling obligations established by national or EU laws and regulations (Legal basis: Art. 6(1)(c) GDPR).

Your personal data will never be used for automated profiling, unsolicited marketing newsletters, or sold/disclosed to third parties for commercial purposes.

4. Processing Methods, Storage Location, and Retention Period

Data processing is carried out using electronic tools with security measures designed to prevent unauthorized access, disclosure, modification, or destruction. Data submitted through the website are stored on secure servers located within the European Union.

• Contact inquiries: Retained for the time strictly necessary to handle and follow up on your request, and in any case no longer than 24 months for non-contractual inquiries.
• Technical security logs: Retained only for the period strictly necessary for security diagnostics and periodic maintenance.

5. Cookieless Analytics and Third-Party Technical Services

This website adopts a Privacy-First Cookieless architecture and does not install profiling or advertising cookies on users' devices:

• Google Analytics 4 (Cookieless Mode): Aggregate traffic statistics are measured with cookie storage disabled (client_storage: 'none', analytics_storage: 'denied', ad_storage: 'denied') and IP anonymization active.
• Interactive Maps (Leaflet / Esri ArcGIS): Used on the footer and Contact page to display our two Gallarate locations without marketing trackers.
• Video & Product Catalogs (Bunny Stream & Daaily): Used to stream showcase videos and display official partner furniture catalogs on the Products page.

For full details on cookies and technical storage, please consult our Cookie Policy.

6. Rights of the Data Subject (Arts. 15–22 GDPR)

At any time, you have the right to request from the Data Controller:

• Access to your personal data and information on how they are processed (Art. 15 GDPR);
• Rectification of inaccurate data or integration of incomplete data (Art. 16 GDPR);
• Erasure of your personal data ("right to be forgotten", Art. 17 GDPR);
• Restriction of or objection to processing (Arts. 18 and 21 GDPR) and data portability (Art. 20 GDPR).

To exercise your rights, simply send an email to info@artheco.it. You also have the right to lodge a complaint with the Italian Data Protection Authority (Garante per la Protezione dei Dati Personali — www.garanteprivacy.it).