Privacy Policy

Last updated: 2 September 2026

1. Who we are (data controller)

We have not appointed a Data Protection Officer, as we are not required to do so. Privacy requests are handled directly by the contact above.

2. The information we collect

2.1 Information you give us

• Contact form: your name, email address, the content of your message, and any other information you choose to include.
• Newsletter: your email address, your first name if provided, and your consent record (date, time, IP address, and the form used).
• Comments (if enabled): your name, email address, comment content, IP address, and browser user agent.
• Purchases: your email address and billing details. Payment card data is entered directly on our payment provider’s systems and never reaches our servers.

2.2 Information collected automatically

• IP address, approximate location (city level), browser type and version, device type, operating system, referring URL, pages viewed, time spent, and clicks.
• Cookies and similar technologies, described in our Cookie Policy.

2.3 Information from third parties

• Aggregated analytics and advertising reports from Google.
• Aggregated conversion reports from affiliate networks, which tell us that a purchase occurred without identifying the individual buyer.

3. How we use your information, and on what legal basis

Purpose	Legal basis under GDPR
Delivering the Site and its content	Legitimate interest in operating our website
Responding to your messages	Legitimate interest, or steps taken at your request prior to a contract
Sending the newsletter and related marketing emails	Your consent, which you may withdraw at any time
Processing and delivering purchases, issuing receipts	Performance of a contract with you
Measuring traffic and understanding how the Site is used	Your consent, given through the cookie banner
Displaying advertising, including personalized advertising	Your consent, given through the cookie banner
Tracking affiliate referrals	Your consent, given through the cookie banner
Preventing spam, abuse, and fraud, and keeping the Site secure	Legitimate interest and legal obligation
Complying with tax, accounting, and other legal obligations	Legal obligation

Under United States and Canadian law we rely on notice and, where required, on your consent or your right to opt out, as described in sections 11 and 12.

4. Advertising

We display advertising through Google AdSense, provided by Google LLC and its affiliates.

• Google and its advertising partners use cookies and similar identifiers to serve, measure, and personalize ads.
• Google’s use of advertising cookies enables it and its partners to serve ads based on your visits to this Site and other sites on the internet.
• You can opt out of personalized advertising by Google at adssettings.google.com, and through optout.aboutads.info and optout.networkadvertising.org.
• For visitors in the European Economic Area, the United Kingdom, and Switzerland, personalized advertising is served only after you consent through our cookie banner, in accordance with Google’s EU User Consent Policy.
• For visitors in California and other United States jurisdictions where the sharing of personal information for cross-context behavioral advertising can be opted out of, see section 11 and our page at Your Privacy Choices.

A list of Google’s advertising partners is available at policies.google.com/technologies/partner-sites.

5. Affiliate links

Some links on the Site are affiliate links. When you click one, the merchant may place a cookie that allows it to attribute a subsequent purchase to us and pay us a commission. We receive only aggregated reports and do not learn what you bought or who you are. Affiliate cookies are set only after you consent through the cookie banner.

We participate in the Amazon Associates Program. As an Amazon Associate, we earn from qualifying purchases. See our Affiliate Disclosure.

6. Newsletter and marketing emails

Our newsletter is sent through Brevo (Sendinblue SAS, France), which acts as our processor.

• We send marketing emails only to people who have given express, opt-in consent. We do not use pre-ticked boxes and we do not add addresses collected elsewhere.
• Every message identifies us clearly, includes a valid postal address, and contains a one-click unsubscribe link, as required by the United States CAN-SPAM Act and Canada’s Anti-Spam Legislation (CASL).
• Unsubscribe requests are honored immediately and in any case within ten business days.
• Brevo may set a tracking cookie to recognize existing subscribers and may record whether an email was opened and which links were clicked. This measurement is described in the Cookie Policy.
• We keep a record of your consent (date, time, IP address, and source form) for as long as you remain subscribed and for three years afterwards, in order to demonstrate compliance with CASL and the GDPR.

7. Purchases and payments

Payments are processed by PayPal (PayPal (Europe) S.à r.l. et Cie, S.C.A., Luxembourg), acting as an independent controller for the payment transaction.

• We receive your email address, the amount, the currency, and the outcome of the transaction. We never receive or store your full card number or your PayPal account credentials.
• PayPal processes your data under its own privacy policy, available at paypal.com/privacy.
• We keep invoices and transaction records for the period required by tax law, currently ten years under Italian law.

8. Who we share your information with

We share personal information only with the following categories of recipients, each bound by contract to process it on our behalf or acting as an independent controller where indicated:

• Hosting: SiteGround Spain S.L.
• Email marketing: Brevo (Sendinblue SAS).
• Analytics and site management: Google LLC and Google Ireland Ltd (Google Analytics 4, Search Console, Site Kit).
• Advertising: Google LLC and its advertising partners.
• Spam and bot protection: Google reCAPTCHA.
• Payment processing: PayPal.
• Affiliate network: Amazon (Amazon Associates Program).
• Social sharing and embedded content providers, where you interact with them.
• Our professional advisers (accountants, lawyers, IT consultants) where necessary.
• Public authorities and courts, where required by law.

We do not sell your personal information for money. Under California law, the use of advertising and analytics cookies may nonetheless qualify as a “sale” or a “share”. Section 11 explains how to opt out.

9. International transfers

Your information may be transferred to and processed in the United States and other countries whose laws differ from those of your own. Where we transfer personal information out of the European Economic Area, we rely on the European Commission’s Standard Contractual Clauses, on the EU-U.S. Data Privacy Framework where the recipient is certified, or on your explicit consent. You may request a copy of the safeguards in place by writing to info@arteamente.it.

10. How long we keep your information

Data	Retention period
Contact form messages	Two years from the last exchange
Newsletter subscribers	Until you unsubscribe, plus three years for the consent record
Comments	For as long as the comment remains published
Analytics data	Fourteen months for event-level data
Purchase and invoice records	Ten years, as required by tax law

11. Your rights in the United States

If you are a resident of California, Colorado, Connecticut, Virginia, Utah, Texas, Oregon, Montana, or another state with a comprehensive privacy law, you have the right to:

• know what personal information we have collected about you and the categories of sources, purposes, and recipients;
• obtain a copy of that information in a portable format;
• correct inaccurate personal information;
• delete personal information, subject to legal exceptions;
• opt out of the sale or sharing of personal information and of targeted advertising;
• opt out of profiling that produces legal or similarly significant effects (we do not carry out such profiling);
• not be discriminated against for exercising these rights.

Categories of personal information collected in the last twelve months, using the California categories: identifiers (name, email, IP address); internet or network activity (browsing and interaction data); geolocation data at city level; commercial information (purchases); and inferences drawn for advertising purposes. We do not collect sensitive personal information as defined by the CPRA, and we do not knowingly collect personal information from anyone under sixteen.

We honor the Global Privacy Control (GPC) browser signal as a valid opt-out of sale and sharing for visitors in states where this is required.

12. Your rights in Canada

If you are in Canada, you have the right to access the personal information we hold about you, to request its correction, to withdraw consent at any time subject to legal and contractual restrictions, and to complain to the Office of the Privacy Commissioner of Canada. If you are in Quebec, Law 25 also gives you the right to data portability and the right to be informed of automated decision-making; we do not make automated decisions that produce legal effects about you. Write to info@arteamente.it to exercise any of these rights.

13. Your rights in the EEA and the United Kingdom

You have the right of access, rectification, erasure, restriction of processing, data portability, and objection to processing based on legitimate interest, as well as the right to withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal. You may lodge a complaint with your national supervisory authority, or with the Italian Garante per la protezione dei dati personali (garanteprivacy.it).

14. Children

The Site is intended for a general adult audience and is not directed at children. We do not knowingly collect personal information from anyone under the age of sixteen, or under thirteen in the United States as defined by COPPA. If you believe a child has provided us with personal information, contact us and we will delete it.

15. Security

We use HTTPS across the whole Site, keep our software updated, restrict administrative access, and use reputable providers. No method of transmission or storage is completely secure, and we cannot guarantee absolute security. If a breach affects your rights, we will notify you and the relevant authorities as required by law.

16. Third-party websites

The Site links to third-party websites, including merchants and advertisers. We are not responsible for their content or their privacy practices. Read their policies before providing them with personal information.

17. Changes to this policy

We may update this Privacy Policy. The date at the top shows when it was last revised. If the changes are material, we will notify you by a prominent notice on the Site or by email.

18. Contact