- Disclosure
The ARTQUICK SRO organization understands the importance of ensuring the security of private information, in accordance with applicable Italian and European legislation, and below describes the methods of processing of personal data of those (“User”, “Users”) who connect to this Site, directly, or even through a link from another site.
This Policy applies only to personal data processed through this Site and does not cover the processing of data through other methods of contact such as telephone, mail.
The Policy is updated to the revision level and date that appears in in the bottom of the form, the ARTQUICK SRO organization reserves the right, at any time, to modify and update it.
The statements of the ARTQUICK SRO organization set forth supplement the Legal Notices with respect to the Terms and Conditions of Use of the Site but are not contractual in nature, therefore they create neither contractual obligations to the User nor User’s rights.
Connection to Third Party Web Pages
For the user’s convenience, on its own site, the ARTQUICK SRO organization offers links referring to other websites. By using certain hyperlinks, the user leaves the page they are on to access external sites belonging to “third parties”. The ARTQUICK SRO organization does not exercise any control over such sites and therefore disclaims any responsibility for the correctness, completeness and legality of the contents and any offers or services contained therein.
- Owner of the processing of personal data
The Data Controller of personal data is: ARTQUICK SRO IČ 21260796, with registered office in Korunnì 810/104 Prague 10, 10100 incorporated under the laws of Italy.
- Place of processing of personal data
The processing of personal data related to the consultation of the Site takes place at the registered office of the organization ARTQUICK SRO indicated above, and are stored at the data center of the service provider appointed External Data Processor in accordance with Article 28 GDPR.
- Type of data processed
Traffic and navigation data provided by the user’s computer are recorded by the server in the access log.
The server through the software responsible for the operation of the Website acquires some personal data whose transmission is implicit in the use of Internet communication protocols, such as: IP addresses or domain names of computers used by Users who connect to the site, time stamp (time) of requests, URL addresses of requested resources, methodology used for the request to the server, the size of the file obtained in response, and other parameters related to the operating system and the User’s computer environment.
The Website acquires and stores time stamps (time) with data-sequence URLs identifying the resources visited or searched by the User and their content.
The Website also acquires data and information from the User’s computer through the use of cookies: permanent and/or “session” cookies (in the specific information published on the Website their meaning is made explicit).
Normally the website acquires and stores – and sometimes communicates to third parties (e.g. the Provider provider of the web services) – all the navigation data described above exclusively in anonymous and aggregated form. The processing of such data allows the Data Controller to manage and control the proper functioning of the website and to perform statistics and sampling for promotional or scientific purposes.
Data that is provided voluntarily by the User.
The Website may require the User to provide certain personal information such as, for example, first and last name, address, a telephone number, e-mail address, and other information. Such provision is bound only by the will of the User and is therefore absolutely optional.
- Purposes of processing
Personal data provided will be processed for the following purposes:
- Activities closely related and functional to the operation of the services: for example, allowing the User access to the services offered and viewing the contents of the Website; enabling the User to receive the requested products or services, executing the express requests received, responding to the User’s questions and requests.
- Technical management of the Site and its information system with respect to acquisition, matching and management of account information, checking the proper functioning of the website and monitoring its activity.
- Anonymous profiling (aggregate form) therefore without any prejudice to the privacy and confidentiality of the data of each registered owner), of Users and their accesses to reserved specialized pages, for market purposes, analysis, and for the elaboration of reports, performed directly by the ARTQUICK SRO organization or through specialized third party companies.
- Communication with the User according to changes or updates of the Website and its services; advertising communications, communications of special offers and promotions; requests for market surveys to which the User can freely choose whether to join, or not.
- Methods of processing
6.1 The processing of personal data is carried out by means of computer, telematic and manual tools by the ARTQUICK SRO organization.
6.2 Data processing is carried out in compliance with the GDPR and the prescriptions defined within the ARTQUICK SRO organization described in the document Privacy Management System that the Company has prepared and updated according to the requirements of the European Regulation.
- Categories of the subjects that process the dataThe processing is carried out by the Data Controller, the Data Processor and its Appointees: third party suppliers.The processing of data by the ARTQUICK SRO organization and its Appointees may take place regardless of the User’s consent in the following cases (provided for by the European Regulation 2016/679):
at the request of the Judicial Authority, or to defend or protect its rights in administrative, judicial or arbitration proceedings;
in the event that data processing is necessary to enable investigations directed against illegal activities, acts in fraud against the law, or to ensure the safety of persons or property; in all cases, in general, where the transmission of data is required by law;
in the event that the ARTQUICK SRO organization is acquired by, transferred to or merged with another company, or in the event that this Site or some of its contents are transferred to third parties.
- Rights of interested parties
The User registered on the Website is solely responsible for the truthfulness of the personal information entered therein. Pursuant to Articles 15 to 21 of the GDPR, the data subject has the right:
obtain confirmation of the existence or otherwise of personal data concerning him/her, even if not yet registered, and their communication in intelligible form;
obtain an indication of:
- of the origin of the personal data;
- of the purposes and methods of processing;
- of the logic applied in case of processing carried out with the aid of electronic instruments;
- of the identification details of the Owner, of the Managers;
of the subjects or categories of subjects to whom the personal data may be communicated or who may come to know them in their capacity as Designated Representative in the territory of the State, managers or appointees;
The User may exercise these rights recognized by law by contacting the ARTQUICK SRO organization at the contacts indicated at the bottom of the information sheet.
The Data Subject may also, pursuant to Articles 15-21 of the GDPR, exercise the following specific rights:
- right of access;
- right to rectification;
- right to erasure (right to be forgotten), except when the processing is necessary for the Data Controller, for the exercise of the rights to freedom of expression and information, for the fulfillment of a legal obligation or for the performance of a task carried out in the public interest, for archiving purposes in the public interest, for scientific or historical research or for statistical purposes, for the establishment, exercise or defense of a right in court;
- right to limitation of processing;
- right to object;
- right to revoke consent at any time, without prejudice to the lawfulness of processing based on consent before revocation;
- right to lodge a complaint with the Data Protection Authority;
The ARTQUICK SRO organization reserves the right to notify the User of changes or updates to the Site whenever necessary.
- Retention of personal data
The ARTQUICK SRO organization retains the personal data collected from the User for as long as such information is deemed relevant for business purposes, and in any case up to a maximum of three years from the last interaction or until the User requests the deletion of his/her data by contacting the ARTQUICK SRO organization at one of the contact details indicated at the bottom of the statement.
- Information Security
The ARTQUICK SRO organization aware of the importance of ensuring the security of sensitive classified information of which it becomes aware and therefore strives to protect the privacy of the Users of its Site. All personal information of each User is sent and stored in servers equipped with firewalls and physically allocated in protected data centers. Usernames and passwords transit over the Internet in encrypted form over SSL protocol. Other personal information transits between data centers over the private MPLS (Multiprotocol Label Switching) line in encrypted form.Leveraging lockout management mechanisms (which provide for the blocking of access in case of repeated erroneous access) allow to increase the level of account protection from intrusion or hacking attempts.The ARTQUICK SRO organization adopts internal security procedures described in the Operational Plan and Risk Analysis Document, where procedures are provided and implemented to control access and data use by its appointees. The ARTQUICK SRO organization cannot, however, take responsibility for any unauthorized access, in case of Data Breach it will implement the measures provided in the Operational Plan, and will require compliance with the European Data Protection Regulation from all third parties involved in order to be able to provide its services, the acquisition of personal data is required.
- Contact
The exercise of the foregoing rights may be exercised by written communication to the data controller of the organization ARTQUICK SRO by email pec: artquick@legalmail.it or at the head office address Korunnì 810/104 Prague 10, 10100.
Date last updated 16/02/2023