Privacy Policy

**1. Data Controller**
Paola Moro, headquartered in … (Italy) (the “Company” or the “Controller”), ensures compliance with personal data protection regulations pursuant to Article 13 of EU Regulation 2016/679 (hereinafter, “GDPR”), by providing the following information regarding the processing of data communicated or otherwise collected while browsing this website.

**2. Processed Data, Purposes, and Legal Basis for Processing**

**Data Generated by Accessing the Website**
The IT systems and software procedures used to operate this website acquire, during their normal operation, some personal data whose transmission is implicit in the use of Internet communication protocols.
These data (e.g., domain names, IP addresses, the operating system used, the type of device and browser used for the connection) are not accompanied by any additional personal information and are used to:
i) obtain anonymous statistical information on the use of the website;
ii) monitor the proper functioning of the website;
iii) ascertain responsibility in case of hypothetical IT crimes.

The legal basis for processing these data is the necessity to enable the functionalities of the website following user access.

**Data Voluntarily Provided by the User**
The personal data provided by the user via forms are collected and processed for the following purposes:
a) to manage customer relations based on contractual agreements;
b) for administrative purposes and to fulfill legal obligations, such as accounting or tax requirements, or to comply with judicial authority requests;
c) with specific consent, to send periodic newsletters and advertising materials via email;
d) with specific consent, to provide updates on our activities and blog post notifications;
e) with specific consent, to send promotional communications and invitations to events, training courses, webinars, special promotions, or to participate in surveys and market research;
f) in the case of sending resumes, exclusively for selection purposes;
g) in the presence of an online shop/sales area, to fulfill sales and contractual activities, including the shipment of products or services, gifts, catalogs, or reports.

The legal basis for processing is the execution of a contract to which the data subject is a party or the execution of pre-contractual measures requested by the data subject. In expressly indicated cases, the legal basis is the freely given consent of the data subject.

**3. Nature of Data Provision**
Except for browsing data and data collected through the website, the provision of data:
A) For purposes related to the contact form is mandatory; without acceptance of the privacy policy, it will not be possible to submit the request form.
B) For newsletter subscription is optional. Without consent, it will not be possible to receive newsletters, advertising materials, or invitations to events and initiatives of the Controller.

**4. Processing Methods and Data Retention Period**
Collected data will be processed using electronic, automated, IT, and telematic tools, or manually, in a manner strictly related to the purposes for which the personal data were collected, and in any case ensuring their security. Data will be retained for the time strictly necessary to manage the purposes for which they were collected, in compliance with current regulations and legal obligations.

The Controller adopts rules to prevent the indefinite retention of data, limiting retention time according to the principle of data minimization.

**5. Authorized Personnel, Processors, and Data Disclosure**
Data processing is carried out by internal personnel of the company specifically identified and authorized for processing in compliance with applicable regulations.

If necessary or instrumental to achieving the indicated purposes, data may be processed by third parties appointed as external processors or, depending on the case, communicated to them as independent controllers, specifically:
– individuals, companies, associations, or professional firms providing assistance and consultancy to the Company;
– companies, entities, or associations performing services related to the purposes mentioned above (market analysis and research services, credit card payment management, IT system maintenance).

In any case, personal data will never be sold or disclosed.

**6. Data Subject Rights**
At any time, you can access your data, object to processing, or request the deletion, modification, or updating of all personal information collected by the Controller, exercising the right to restrict processing and the right to data portability by sending an email to contact@3dartist.tech.

The data subject has the rights under Article 7 of the Privacy Code and Article 15 of the GDPR, specifically the rights to:
A) Obtain confirmation of the existence or non-existence of personal data concerning them;
B) Obtain information on:
– the origin of personal data;
– the purposes and methods of processing;
– the logic applied if processing is carried out with the aid of electronic tools;
– the identification details of the Controller, processors, and designated representative pursuant to Article 5(2) of the Privacy Code and Article 3(1) of the GDPR; and the entities or categories of entities to whom personal data may be communicated or who may learn about them as designated representatives in the State’s territory, processors, or appointees.
C) Obtain:
– updates, corrections, or, where interested, data integration;
– deletion, anonymization, or blocking of data processed unlawfully, including data unnecessary for the purposes for which they were collected or subsequently processed;
– certification that the operations referred to in points A) and B) have been notified to the entities to whom the data were communicated or disclosed unless this proves impossible or involves a disproportionate effort.
D) Object, in whole or in part:
– for legitimate reasons, to the processing of personal data concerning them, even if pertinent to the purpose of collection;
– to the processing of personal data concerning them for sending advertising or direct sales materials, market research, or commercial communications via automated calling systems without an operator, email, or traditional marketing methods using telephone or paper mail.

Where applicable, the data subject also has the rights referred to in Articles 16-21 of the GDPR (right to rectification, right to erasure, right to restrict processing, right to data portability, right to object) and the right to lodge a complaint with the Supervisory Authority.

**7. Exercising Rights**
You can exercise your rights by sending a written letter to the address indicated in point 1), an email to contact@3dartist.tech, or a certified email to moro.3d@pec.it.