PRIVACY NOTICE FOR THE PROCESSING OF PERSONAL DATA (SUBSCRIBER)

Information pursuant to Articles 12, 13 and 14 of European Regulation no. 2016/679
Personal data (last updated on: 29/08/2025)

In accordance with Article 13 of Regulation (EU) 2016/679, we hereby provide you with the following information regarding the processing of your personal data. Specifically, this privacy notice outlines:

1. Identity of the Data Controller
2. Appointment of the Data Protection Officer
3. What data we process and the nature of its provision
4. The purposes for which we process your data and the legal bases that justify such processing
5. Who may have access to your data
6. The geographical scope in which your data may circulate
7. How long we will retain your data
8. Your rights in relation to the personal data we process

1. Identity of the Data Controller
The Data Controller is Artissima S.r.l.
You may contact the company at the following address:
Corso Vittorio Emanuele II, 12, Turin – Email: [email protected] – Phone: +39 011 197 44106

2. Appointment of the Data Protection Officer
The company has appointed the Data Protection Officer, who can be contacted at [email protected].

3. What data do we process and what is the nature of its provision
The data controller collects the data necessary for the identification of the data subjects and to manage access to a reserved area on the Artissima website by the data subject. The data processed includes identification data, contact details and data relating to the category of professional activity carried out, as well as information that over time may be provided by data subjects or may be collected by consulting legitimately available sources. Artissima uses the contact data provided by the data subject to allow access to the reserved area where the data subject can save his/her preferences regarding galleries, works, artists and events for easier consultation.

We may process this data using electronic means.

The requested data are provided voluntarily by the interested parties through the www.artissima.it website. Failure to provide it will make it impossible to adequately manage relations with the interested parties and to provide access to the reserved area. There is no automated decision-making based on the use of the personal data provided.

4. Purposes of the processing and legal bases
The data you provide will be processed for the purposes indicated below:

A) Contractual and management purposes for access to the reserved area on the Artissima website.
Within the scope of these purposes, the data processed are used to allow effective management of the relationships established. The data will be processed for the creation and management of accounts. The data will be used to facilitate, in the event of compilation and selection of the information in the reserved area, the subsequent consultation of the saved contents.

Legal basis of the processing: execution of requests from the data subject for pre-contractual or contractual activities.

5. Who may have access to your data
Your personal data may be communicated to external data processors appointed by us, such as: Suppliers of technical services (for the management of the site, databases, tools for sending communications, access to events), Exhibition Bodies, Labour Consultants, Tax Consultants, Data Processing Centres, Associated Companies, Subsidiaries or Parent Companies, Retailers, Banks and Credit Institutions, Financial and Credit Insurance Companies. In addition, they may be communicated to public and private bodies (Foundations, social security, welfare, insurance institutions), doctors competent in the field of hygiene and safety at work, Chambers of Commerce, Armed Forces and Police, customs and tax offices at national level, by virtue of legal provisions.

6. In which geographical area your data may circulate
Your personal data will be processed only within the national or European Union territory.

7. How long we will keep your data
Your personal data will be stored:
– for the purposes expressed in point 4) letter A for the period of time strictly necessary for the pursuit of the purposes indicated in this policy and to ensure the correct execution of the requested service; The data will be deleted at the end of this period, unless the data subject requests unsubscription from the service

8. Your rights in relation to the personal data we process
You may exercise these specific rights by contacting the Data Controller:

A) Right of access – To obtain confirmation as to whether or not personal data concerning you is being processed and, where that is the case, access to such data and related information (source, purposes, categories, recipients, etc.).

B) Right to rectification – To obtain the correction of inaccurate data and the completion of incomplete data.

C) Right to erasure (“right to be forgotten”) – To have your data erased when:
– It is no longer necessary for the purposes for which it was collected;
– You withdraw consent and there is no other legal basis for processing;
– Processing is unlawful;
– Erasure is required by law.

D) Right to restriction of processing – To obtain restriction when the accuracy of the data is contested, or the processing is unlawful and you oppose erasure.

E) Right to object – To object, at any time, to processing based on legitimate interest or consent, including for direct marketing.

F) Right to data portability – To receive your personal data in a structured, commonly used and machine-readable format and to transmit it to another controller (applies only to consent- or contract-based processing carried out by automated means).

G) Right to withdraw consent – To withdraw previously given consent at any time, without affecting the lawfulness of processing carried out before the withdrawal.

H) Right to lodge a complaint with a supervisory authority – If you believe your data has been processed unlawfully, you may file a complaint with the competent supervisory authority, either in the Member State where you reside or work, or where the alleged violation occurred.

To exercise these rights, you can contact the Data Controller at the address [email protected]. The Data Protection Officer can be contacted at [email protected]. Where applicable, a complaint may also be filed with the Italian Data Protection Authority (Garante per la protezione dei dati personali).