Privacy Policy
This Privacy Policy aims to describe the methods and warnings regarding the management of this website, for the purpose of protecting the personal data of users/visitors who consult it.
This is an informational notice provided pursuant to Art. 13 of Legislative Decree 196/03 - Personal Data Protection Code and Art. 13 of GDPR 679/2016 - European Regulation on Privacy, as well as pursuant to the Provision on Cookies No. 229 of May 8, 2014, to those who connect to the institutional website of Artess at the address thehumantouch.art-ess.org.
The information is also inspired by Recommendation No. 2/2001, adopted on May 17, 2001, by the European data protection authorities within the Group established by Art. 29 of Directive No. 95/46/EC, to define minimum requirements for the online collection of personal data, particularly regarding the methods, timing, and nature of the information that data controllers must provide users when they connect to web pages, regardless of the purposes of the connection.
The site thehumantouch.art-ess.org is owned and managed by Artess, which ensures compliance with the regulations on personal data protection (Legislative Decree 196/03 and GDPR 679/2016).
Users/visitors must carefully read this Privacy Policy before submitting any type of personal information and/or completing any electronic form on the site.
Data Controller and Data Processors
As a result of consulting this site, data relating to identified or identifiable individuals may be processed. The data controller is Artess, represented by its pro tempore legal representative, headquartered at Via Trento, 45 - 33100 Udine (UD) - Italy.
Data Processors
Please contact us at info@art-ess.org if you wish to request a list of data processors and other entities to whom we communicate data.
Location of Data Processing
Data processing related to the web services of this site takes place at the Artess headquarters.
Types of Data Processed, Purpose of Processing, and Data Communication
Browsing Data
The computer systems and software procedures used to operate this website acquire, during their normal operation, some personal data whose transmission is implicit in the use of Internet communication protocols.
These data are not collected to be associated with identified subjects but, by their nature, could, through processing and association with data held by third parties, allow the identification of users/visitors. This category of data includes IP addresses or domain names of the computers used by users connecting to the site, URI (Uniform Resource Identifier) addresses of the requested resources, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numerical code indicating the status of the server response (success, error, etc.), and other parameters related to the user's operating system and IT environment. These data are used only to obtain anonymous statistical information on the site's use and to check its correct functioning, and they are deleted immediately after processing. Web contact data are not retained for more than seven days, except for cases of investigation of computer crimes against the site and are not communicated or disclosed outside unless required by law.
Data Provided Voluntarily by the User
When users/visitors, connecting to this site, voluntarily provide their personal data to access certain services or send requests via email, this involves the acquisition of the sender's address and/or any other personal data provided. These data will be processed exclusively to respond to the request or provide the service. Personal data provided by users/visitors are not communicated or disclosed externally unless required by law. For optional treatments or specific types of data, the site provides summary information and explicit, voluntary consent requests.
Optional Nature of Data Provision
Apart from browsing data, users are free to provide personal data in the request forms. Failure to provide such data may result in the inability to fulfill the request.
Data Processing Methods and Security Measures
Data processing is carried out using automated systems (e.g., IT procedures or electronic media) and/or manually (e.g., on paper) for the time strictly necessary to achieve the purposes for which they were collected, and in compliance with current regulations. Specific security measures are observed to prevent data loss, illegal or improper use, and unauthorized access.
Data Recipients
No data derived from the web service is communicated or disseminated (except for communication to judicial or law enforcement authorities if necessary). Data is processed by personnel expressly authorized in writing for data processing (administrative staff, public relations personnel, IT system managers who may also act as system administrators, in which case they are formally appointed, marketing personnel, interns, data processors and their collaborators, personnel responsible for the specific sector to which a request is directed, site management personnel), only if processing is necessary for the performance of their duties, performing only the necessary operations for such duties. At the data controller's company, the list of individuals authorized to process data is indicated in the relevant document available at the company's headquarters.
Data Retention
The acquired data is retained for the time necessary to provide the service requested by the user or required by the purposes described in this document. Users can always request the cessation of processing, deletion, and/or restriction of their data.
Data Transfer
The data controller does not transfer personal data to third countries or international organizations.
Withdrawal of Consent
Pursuant to Art. 23 of Legislative Decree 196/2003 and Art. 6 of GDPR 679/16, users can withdraw their consent at any time.
Requests should be addressed to Artess, Via Trento, 45 - 33100 Udine (UD) - Italy, by registered mail, fax, or email.
Data Subject Rights
Data subjects have the right to exercise the following rights at any time:
- Right of Access (Art. 15 GDPR 679/2016)
- Right to Erasure (Art. 17 GDPR 679/2016)
- Right to Restriction of Processing (Art. 18 GDPR 679/2016)
- Right to Data Portability (Art. 20 GDPR 679/2016)
Requests should be addressed to Artess, Via Trento, 45 - 33100 Udine (UD) - Italy, by registered mail, fax, or email.
Filing a Complaint
Data subjects have the right to file a complaint with the supervisory authority of their country of residence.
Automated Decision-Making Processes
The data controller does not perform processing involving automated decision-making processes, except as explicitly stated within the Cookie Policy.
Minors’ Privacy
Our website is directed at a general audience and does not offer services specifically aimed at children. If we discover that a minor has provided us with personal data without parental or guardian consent, we will delete such information immediately.
Legal Defense
The user's personal data may be used for defense purposes by the controller in legal proceedings or in the stages leading to possible litigation, against abuse in the use of the same or related services by the user.
The user declares to be aware that the controller may be required to disclose the data upon request from public authorities.
Links
This website allows linking to third-party websites. It is understood that Artess has no control over these sites and assumes no responsibility for these external websites, their content, or accessibility. This privacy policy applies solely to this website and not to third-party websites linked to it.
Changes to This Privacy Policy
The data controller reserves the right to make changes to this privacy policy at any time, notifying users on this page. Users are encouraged to consult this page frequently, referring to the date of the last modification at the bottom. If users do not accept the changes made to this privacy policy, they must cease using this website and may request the data controller to delete their personal data unless otherwise specified.
Information About This Privacy Policy
The data controller is responsible for this privacy policy.
Last updated: January 24, 2025