Privacy Policy

PRIVACY NOTICE
PURSUANT TO REGULATION (EU) 2016/679 (GDPR)

PROCESSING OF PERSONAL DATA

This notice aims to inform users navigating our Website about how Artattack Group S.r.l. processes their personal data. It is essential that users read this notice before providing their personal data during registration on the Website.

The information is provided in compliance with EU Regulation No. 679/2016 and subsequent national implementation regulations.

Browsing the Website and/or accessing specific sections of the Website and/or submitting requests for information or services from users may involve the processing of personal data by Artattack Group S.r.l. (hereinafter referred to as the “Data Controller”), as the Data Controller, in compliance with Legislative Decree 196/2003 “Code regarding the protection of personal data” (hereinafter the “Code”) and Regulation (EU) 2016/679.

Below are the terms and conditions under which users can consent to the transfer of rights over images, comments, catchy phrases associated with the content of the Website, materials, content, and any other information created by users and published on the Website, as well as provide consent for the use of any image that the user may have provided to Artattack Group S.r.l.

PURPOSES OF DATA PROCESSING

According to the needs expressed by the user accessing various sections of the Website, the following are the purposes for processing personal data, which includes data directly provided by users through the completion of online forms, or via the use of social networks (see the following section “Nature and methods of providing Users’ Personal Data”), or automatically collected through navigation (see the following section “Categories of Personal Data Subject to Processing”) (hereinafter, “Personal Data”):

1. To provide and manage the various services offered; as well as to allow registration on the Website, which is necessary to access specific sections of the Website and to deliver and manage the various services offered;
2. To allow users to publish Contributions directly on the Website, or on websites managed independently by third parties with which Artattack Group S.r.l. may have agreements in this regard, such as, for example and not limited to, social networks like Facebook, Twitter, etc. (hereinafter referred to as “Social Networks”); the publication of Contributions may also occur together with a pseudonym (“nickname”) chosen by the user during registration on the Website and possibly with the image associated by the user to their nickname, for which: 

i) the user will be solely responsible for any choice that could harm the interests of third parties; 

ii) the user is not required to use personal data that would allow third parties other than Artattack Group S.r.l. to identify them, but the user, through Artattack Group S.r.l., may also disclose their personal data if included in their nickname, as well as any photo they have associated with their profile;

3. With the user’s consent and until its revocation, to carry out marketing activities such as sending promotional and advertising material from Artattack Group S.r.l., including via email, MMS, and SMS;
4. In compliance with legal requirements and in order to personalize the user experience on the Website and improve the services and products offered by Artattack Group S.r.l. to its clientele, or to deliver targeted advertising (via email, banners, and dynamic content on the Website) based on the users’ preferences and browsing behavior, with the user’s consent and until its revocation, to perform analysis of users’ consumption habits or choices and define the profiles of the interested parties using the information provided during registration, in questionnaires, or based on actions taken or information provided during navigation on the Website. These purposes will be carried out using cookies, which should be understood as the collection and processing of user data to categorize them into groups based on their behavior. If the user gives specific consent, their personal data may be used to track the user’s “history.”
5. To respond to users’ requests regarding Artattack Group S.r.l. products, advertising, or the Website (section “Contact Us” on the Website);
6. With the user’s consent, and until its revocation, to compare and combine, for profiling purposes, personal data of the user available in various databases owned by or used by Artattack Group S.r.l.
7. http://arkage.it/cookie-policy.php User registration on the Website is not required to provide certain services offered by Artattack Group S.r.l. (e.g., those mentioned in the previous paragraph). However, in order to process any requests from users regarding such services, users will be invited to provide personal data, which will be processed solely for the relevant purposes and for the time strictly necessary.

PROCESSING METHODS

Personal Data will be processed by means of the operations of collection, recording, organisation, storage, consultation, processing, modification, selection, extraction, comparison, use, interconnection, blocking, communication, cancellation and destruction of data.

Personal Data shall be processed mainly by automated means but also on paper, with logics strictly related to the aforesaid purposes, by means of Data Bases, electronic Platforms managed by Artattack Group S.r.l. or by third parties appointed for the purpose in charge of the processing and/or integrated systems of computer nature and/or web sites owned or used by Artattack Group S.r.l.. If the user gives his consent, personal data will be made visible and stored in a computer archive for customer relationship management, so-called Customer Relationship Management (CRM), as well as possibly stored in one or more special archives or databases of the company which other related companies may access. Since, therefore, the CRM is a database for the shared management of the data it contains, the updating, rectification or deletion of any of the data provided will entail the updating of such data with regard to all subjects to whom access is granted.

LOCATION OF PROCESSING

Personal Data is processed primarily at the Data Controller’s office located in Rome, Vicolo della Frusta, 8/9, and at locations where the Data Processors are based. For more information, contact the Data Controller.

Processing Time And Data Retention

The Data Controller will process Personal Data for a period not exceeding that necessary to achieve the purposes for which the data was collected, or for a longer period as permitted by law, and in any case, will delete the data without undue delay after 5 years from the collection, without prejudice to the right of the data subject to modify and/or revoke their consent at any time.

USE OF COOKIES

The user can at any time delete their account or registration on the Website, request the interruption of processing, or revoke their consent, according to the methods indicated in the personal profile section on the Website.

Nature and Methods of Providing Personal Data by Users

Providing personal data is optional, but for certain personal data, providing it is mandatory (i.e., necessary for data fields marked with an asterisk or otherwise marked as mandatory) for Artattack Group S.r.l. to fulfill the user’s needs within the Website’s functionalities. Failure to provide, partially provide, or inaccurately provide the Personal Data marked with an asterisk, which is necessary for the requested service, will prevent such service from being carried out; whereas failure to provide, partially provide, or inaccurately provide optional Personal Data will have no consequences.

The provision of Personal Data may occur: a) by filling out the appropriate fields in the various sections of the Website; b) through navigation on the Website or the use of cookies; or c) through automatic completion, based on the user’s request to a Social Network they are registered with, to provide Artattack Group S.r.l. with some of the data the user has already provided to the Social Network. In the latter case, Artattack Group S.r.l. recommends paying attention to the following:
i) By selecting the link that allows registration through a Social Network, present on the Website or on one of Artattack Group S.r.l.’s pages on the Social Network, a window will appear containing a box to accept the communication of Personal Data from the Social Network to Artattack Group S.r.l. and three links to be selected:
a) to read this notice;
b) to view the list of personal data that is mandatory or optional according to the specific processing purpose;
c) to view the list of data the Social Network is about to provide to Artattack Group S.r.l.;
ii) The user, after reading the notice, selecting the box declaring they are of legal age, and understanding which data is mandatory, may select the link referred to in point c) above to deselect the data they do not wish to provide to Artattack Group S.r.l. through the communication of such data by the Social Network.

CATEGORIES OF PERSONAL DATA SUBJECT TO PROCESSING

In addition to the Personal Data directly provided by users (such as name, surname, postal address, email address, password, age, date of birth, gender, image, profession, marital status, etc.), when connecting to the Site, the computer systems and software procedures responsible for the operation of the Site automatically and indirectly collect some information that could constitute personal data, the transmission of which is implicit in the use of Internet communication protocols (such as, purely by way of example but not limited to, “cookies” (as specified below), “IP” addresses, domain names of computers used by users connecting to the Site, “URL” addresses of requested resources, request time to the server, browsing on the Site).

Cookies are text lines that act as markers sent by a server (in this case, the Site’s server) to a user’s device (usually to the web browser) when the user accesses a specific page of a website; cookies are automatically stored by the user’s browser and retransmitted to the server that generated them every time the user accesses the same webpage. In this way, for example, cookies enable and/or facilitate access to some web pages to improve the user’s browsing experience, or allow the storage of visited pages and other specific information, such as frequently visited pages, connection errors, etc. Therefore, for an easier and complete use of this Site, it would be advisable for the user to configure their browser to accept the receipt of such cookies.

Browsers are often set to automatically accept cookies. However, users can change the default configuration to disable or delete cookies (either selectively or once and for all), with the consequence that the optimal use of certain areas of the Site might be hindered. It is also possible to check the methods and types of cookies stored in one’s browser by modifying the cookie settings in the browser.

TYPES AND MANAGEMENT OF COOKIES USED ON OUR SITE

Our Site uses the following categories of cookies:
a) Technical Cookies:
i) Strictly Necessary Cookies: These are essential for navigating a website and using its features, such as allowing correct display or access to restricted areas. Therefore, disabling these cookies will prevent such activities.
ii) Performance Cookies: These collect information on the efficiency of a website’s responses to user requests in an anonymous form, with the sole purpose of improving the website’s functionalities. For example, which pages are most frequently visited by users, and whether there have been errors or slowdowns in delivering web pages. iii) Functionality Cookies: These allow the Site to remember choices made by the user and present them again in future visits to provide better and personalized services. For example, they can be used to offer content similar to that already requested by the user.

b) Targeting Cookies: These are profiling cookies used to offer users advertisements potentially related to their interests, as detected during navigation. They are used, for example, to limit the delivery of a given advertisement, or to assess the effectiveness of a campaign based on the frequency of ad views. These cookies may also be served by third parties, including for advertisers and advertising agencies. Third-party profiling cookies may also allow understanding which Artattack Group S.r.l. websites or third-party sites the user has visited. The user can choose whether to accept these cookies by giving consent (“opt-in”) before they are delivered, by continuing navigation after the notice about cookie use is displayed and closed.

HOW TO ENABLE OR DISABLE COOKIES ON BROWSERS

The user can block the acceptance of cookies by the browsing browser. However, this operation could make certain functions or pages of the Site less efficient or prevent access to them. Below are the methods provided by major browsers to block the acceptance of navigation cookies:

Internet Explorer http://windows.microsoft.com/it-it/internet-explorer/delete-manage-cookies#ie=ie-11

Firefox https://support.mozilla.org/it/kb/Gestione dei cookie

Chrome https://support.google.com/chrome/answer/95647?hl=it

Safari http://support.apple.com/kb/HT1677?viewlocale=it_IT

CATEGORIES OF ENTITIES THAT MAY HAVE ACCESS TO USERS’ PERSONAL DATA

Personal Data may be disclosed to employees or collaborators of the Data Controller who, acting under the direct authority of the Controller, process data and are appointed as internal data controllers or data processors under Articles 29 and 30 of the Code, or system administrators, and who will receive appropriate operational instructions from the Controller; this will also occur – under the responsibility of the data controllers appointed by the Controller – for the employees or collaborators of the data processors.

Personal Data may also be disclosed to external data processors of the Controller, such as third-party companies or other entities (e.g., entities responsible for assistance, communication, marketing, advertising, promotions, product and/or service sales, advertisers, advertising agencies, IT service providers, site managers, electronic platform managers, partners, credit institutions, professional studios) that carry out outsourcing activities on behalf of Artattack Group S.r.l.

SCOPE OF COMMUNICATION OR DISSEMINATION OF USERS’ PERSONAL DATA

Personal Data will not be communicated to third parties, nor disseminated, except in the case where the user has entered personal data in their nickname or has also provided their image.

Minors:

The Sites contain virtually no information directly aimed at minors. Minors should not provide personal data or information to Artattack Group S.r.l. without the consent of their legal guardians. Therefore, Artattack Group S.r.l. invites all those responsible for the guardianship of minors to inform them about the safe and responsible use of the Internet and the Web, and to implement the procedures indicated in relation to initiatives in which Artattack Group S.r.l. intends to process data of minors.

DATA CONTROLLER AND DATA PROCESSORS:

The Data Controller is Artattack Group S.r.l., located at Vicolo della Frusta 8/9, Rome.

USER RIGHTS

As data subjects, users have the rights referred to in Article 7 of the Italian Privacy Code and subsequent amendments and additions, as introduced by Regulation EU 2016/679 (GDPR). In particular, users have the right to obtain from the Data Controller confirmation of the existence or non-existence of personal data concerning them and its communication in an intelligible form; they may also request to know the origin of the Personal Data; the purposes and methods of processing; they may also obtain the updating, rectification, or integration of their Personal Data. Additionally, they may, at any time, revoke their consent, delete their account, and/or stop being registered on the Site, requesting the interruption of processing, deletion, anonymization, or blocking of the Personal Data processed. They may also object, in whole or in part, to the processing: a) for legitimate reasons related to the processing of their Personal Data;  b) for marketing, advertising, or market research purposes. They can choose to receive communications via traditional means, automated means, or neither. Users also have the rights under Articles 16-21 of Regulation EU 2016/679 (Right to rectification, right to erasure, right to restrict processing, right to data portability, right to object).

Finally, users may lodge a complaint with the Data Protection Authority if necessary, or contact it for further information on how to exercise their rights under Regulation EU 2016/679.

***

“Article 7 Italian Privacy Code – Right of Access to Personal Data and Other Rights”

1. The data subject has the right to obtain confirmation of the existence or non-existence of personal data concerning them, even if not yet registered, and to receive such data in an intelligible form.
2. The data subject has the right to obtain information:
   a) about the origin of personal data;
   b) about the purposes and methods of processing;
   c) about the logic applied in the case of processing carried out with the aid of electronic tools;
   d) about the identity of the Data Controller, processors, and the designated representative under Article 5, paragraph 2;
   e) about the subjects or categories of subjects to whom personal data may be disclosed or who may become aware of it as the designated representative in the State, or as processors or authorized individuals.
   
3. The data subject has the right to obtain:
   a) the updating, rectification, or, where appropriate, the integration of data;
   b) the erasure, anonymization, or blocking of data processed in violation of the law, including those that do not need to be kept for the purposes for which they were collected or subsequently processed;
   c) confirmation that the actions under points a) and b) have been made known, including with regard to their content, to those to whom the data was communicated or disseminated, unless it is impossible or involves disproportionate effort compared to the right protected.
   
4. The data subject has the right to object, in whole or in part:
   a) for legitimate reasons, to the processing of their personal data, even if relevant to the purpose of the collection;
   b) to the processing of personal data for marketing, direct selling, or market research purposes.
   

HOW TO EXERCISE RIGHTS AND OBTAIN A LIST OF DATA PROCESSORS
The user can, at any time, exercise their rights under Article 7 by sending an email or a letter via regular mail to the Data Controller.
Additionally, if the user has consented, they may object to processing for the purposes referred to in point c) using the email address provided, by clicking a specific “link” in each email.

ASSIGNMENT OF RIGHTS ON CONTRIBUTIONS AND CONSENT TO IMAGE USEBy registering on the Site, the user:
A) declares that:
i) they hold all rights over the Contributions they publish on the Site in the course of participating in the Initiative, and are solely responsible for any damage or action that Artattack Group S.r.l. may face due to the publication of the Contributions;
ii) the Contributions published by the user do not contain material that could prevent their publication, such as obscene, racist, defamatory, blasphemous, child-pornographic material, and are original, meaning they do not violate any third-party intellectual property rights, copyright, trademarks, etc.;
B) authorizes Artattack Group S.r.l. to carry out an admissibility check on the Contributions, in order to exclude those containing material that could be considered offensive to decorum, personal dignity, or that incite hatred, violence, dangerous behaviors, or violate legislative or regulatory provisions;
C) grants Artattack Group S.r.l., free and definitive rights to publish and use the Contributions for commercial or marketing purposes related to Artattack Group S.r.l.’s products, on Artattack Group S.r.l.’s websites, for the time strictly necessary for the requested service and in any case for no longer than 5 years from the submission, after which the data will be deleted;
D) gives consent to Artattack Group S.r.l. to use their image (if provided) in any of the contexts mentioned in point C) above, for the entire duration of the Site, under Article 96 of the Copyright Law.