Privacy Policy of www.arethusa.it

This Application collects some Personal Data from its Users.

This document can be printed using the print command available in the settings of any browser.

Data Controller

Arethusa Srl – Via G. Boccaccio, 45 – 20123 Milan

Email address of the Controller: consulenza@arethusa.it


Types of Data collected

Among the Personal Data collected by this Application, either autonomously or through third parties, are: Usage Data; Tracking Tools; name; email; answers to questions; clicks; keypress events; motion sensor events; mouse movements; scrolling position; touch events.

Complete details on each type of Personal Data collected are provided in the dedicated sections of this privacy policy or by means of specific information texts displayed before the Data is collected.

Personal Data may be freely provided by the User or, in the case of Usage Data, collected automatically during the use of this Application.

Unless otherwise specified, all Data requested by this Application is mandatory. If the User refuses to provide it, it may be impossible for this Application to provide the Service. In cases where this Application indicates certain Data as optional, Users are free to refrain from communicating such Data without consequences on the availability or operation of the Service.

Users who have doubts about which Data is mandatory are encouraged to contact the Controller.

Any use of Cookies — or other tracking tools — by this Application or by third-party service providers used by this Application is intended to provide the Service requested by the User, as well as the additional purposes described in this document and in the Cookie Policy.

The User is responsible for any third-party Personal Data obtained, published, or shared through this Application.


Methods and place of processing the collected Data

Methods of processing

The Controller adopts appropriate security measures to prevent unauthorized access, disclosure, modification, or destruction of Personal Data.

Processing is carried out using IT and/or telematic tools, following organizational procedures and logics strictly related to the purposes indicated. In addition to the Controller, in some cases, other subjects involved in the organization of this Application (administrative, commercial, marketing, legal staff, system administrators) or external subjects (such as third-party technical service providers, postal couriers, hosting providers, IT companies, communication agencies) may have access to the Data and may also be appointed, if necessary, as Data Processors by the Controller. The updated list of Processors can always be requested from the Controller.

Place

Data is processed at the Controller’s operating offices and in any other place where the parties involved in the processing are located. For further information, contact the Controller.

The User’s Personal Data may be transferred to a country other than the one where the User is located. For more information about the location of processing, the User may refer to the section containing details on the processing of Personal Data.

Retention period

Unless otherwise specified in this document, Personal Data is processed and stored for the time required to fulfill the purpose for which it was collected and may be stored for a longer period due to legal obligations or based on the Users’ consent.


Purposes of the processing of collected Data

User Data is collected to allow the Controller to provide the Service, fulfill legal obligations, respond to requests or enforcement actions, protect its own rights and interests (or those of Users or third parties), identify malicious or fraudulent activities, and for the following purposes: Displaying content from external platforms, Tag management, Contacting the User, Statistics, and Protection from spam and bots.

For detailed information on the purposes of processing and on the Personal Data processed for each purpose, the User may refer to the section “Details on the processing of Personal Data”.


Details on the processing of Personal Data

Personal Data is collected for the following purposes and using the following services:


Contacting the User

Contact form

By filling in the contact form with their Data, the User consents to its use for replying to requests for information, quotes, or any other request indicated by the form’s header.

Personal Data processed: email; name.


Tag management

This type of service helps the Controller manage tags or scripts needed on this Application in a centralized manner. As a result, User Data may be processed by these services, with the possibility that it may be stored.

Google Tag Manager (Google Ireland Limited)

Google Tag Manager is a tag management service provided by Google Ireland Limited.

Personal Data processed: Tracking Tools.

Place of processing: Ireland – Privacy Policy.


Protection from spam and bots

These services analyze the traffic of this Application, potentially containing Users’ Personal Data, with the purpose of filtering it from unwanted traffic, messages, and content recognized as SPAM or protecting it from malicious bot activity.

Google reCAPTCHA (Google Ireland Limited)

Google reCAPTCHA is a SPAM protection service provided by Google Ireland Limited.

Use of reCAPTCHA is subject to Google’s privacy policy and terms of use.

To understand Google’s use of data, please consult Google’s Partner Policies.

Personal Data processed: clicks; Usage Data; keypress events; motion sensor events; touch events; mouse movements; scrolling position; answers to questions; Tracking Tools.

Place of processing: Ireland – Privacy Policy.


Statistics

The services contained in this section allow the Controller to monitor and analyze traffic data and serve to track User behavior.

Google Analytics 4 (Google Ireland Limited)

Google Analytics is a statistics service provided by Google Ireland Limited (“Google”). Google uses the Personal Data collected to track and examine the use of this Application, compile reports, and share them with other services developed by Google.

Google may use Personal Data to contextualize and personalize ads within its advertising network.

In Google Analytics 4, IP addresses are used at the time of collection and then deleted before data is recorded in any data center or server. For more information, consult Google’s official documentation.

To understand Google’s use of data, please consult Google’s Partner Policies.

Personal Data processed: Tracking Tools.

Place of processing: Ireland – Privacy Policy – Opt out.


Displaying content from external platforms

This type of service allows viewing content hosted on external platforms directly from the pages of this Application and interacting with it. These services are often referred to as widgets.

Even when Users do not use the service, it may still collect traffic data on the pages where it is installed.

Google Fonts (Google Ireland Limited)

Google Fonts is a font style display service managed by Google Ireland Limited that allows this Application to integrate such content into its pages.

Personal Data processed: Usage Data; Tracking Tools.

Place of processing: Ireland – Privacy Policy.

Font Awesome (Fonticons, Inc.)

Font Awesome is a font style display service managed by Fonticons, Inc.

Personal Data processed: Usage Data; Tracking Tools.

Place of processing: United States – Privacy Policy.

YouTube Video Widget (Google Ireland Limited)

YouTube is a video content display service managed by Google Ireland Limited that allows this Application to integrate such content.

Personal Data processed: Usage Data; Tracking Tools.

Place of processing: Ireland – Privacy Policy.


Information on how to opt out of interest-based advertising

In addition to any opt-out features provided by the services listed in this document, Users can read more about how to disable interest-based advertising in the appropriate section of the Cookie Policy.

This Application uses Tracking Tools. For more information, Users may consult the Cookie Policy.


Additional information for Users

Legal basis of processing

The Controller processes Personal Data relating to the User if one of the following conditions applies:

Users may always ask the Controller to clarify the specific legal basis of each processing operation.


Further information on retention time

Unless otherwise indicated in this document, Personal Data is processed and stored for the time required by the purpose for which it was collected and may be stored for a longer period due to legal obligations or based on the Users’ consent.

Therefore:

At the end of the retention period, Personal Data will be deleted. Therefore, after this period expires, the rights of access, erasure, rectification, and data portability cannot be exercised.


User rights under the General Data Protection Regulation (GDPR)

Users may exercise certain rights regarding their Data processed by the Controller.

In particular, within the limits of the law, the User has the right to:

Users also have the right to obtain information on the legal basis for transferring Data abroad, including to international organizations, and on the security measures adopted by the Controller.

Details on the right to object

Users may object to the processing of their Personal Data for reasons related to their particular situation when processing is based on the public interest, the exercise of official authority, or the legitimate interest of the Controller.

Users may object at any time, free of charge and without providing any justification, to the processing of their Data for direct marketing purposes.


How to exercise these rights

Users may direct any requests to exercise their rights to the Controller using the contact details provided in this document. Requests are free of charge and will be processed as soon as possible, and always within one month.


Further information on processing

Legal defense

The User’s Personal Data may be used by the Controller in court or in the stages leading to possible legal action against misuse of this Application or related Services.

The User acknowledges that the Controller may be required to disclose Personal Data upon the order of public authorities.

Specific information

Upon User request, this Application may provide additional and contextual information concerning specific Services or the collection and processing of Personal Data.

System logs and maintenance

For operation and maintenance purposes, this Application and any third-party services may collect system logs, which are files that record interactions and may also contain Personal Data, such as the User’s IP address.

Information not contained in this policy

Further information regarding the processing of Personal Data may be requested from the Controller at any time.


Changes to this privacy policy

The Controller reserves the right to make changes to this privacy policy at any time by notifying Users on this page and, if possible, within this Application and/or by sending a notification using the contact details available. Users are therefore advised to check this page frequently, referring to the last modification date indicated below.

Where changes affect processing whose legal basis is consent, the Controller will collect the User’s consent again, if necessary.


Definitions and legal references

Personal Data (or Data)

Any information that directly or indirectly, including in connection with any other information such as a personal identification number, makes an individual identifiable.

Usage Data

Information collected automatically through this Application (or third-party services integrated into this Application), including: IP addresses or domain names of the computers used by Users, URI addresses, time of the request, method used to submit the request to the server, size of the file obtained in response, numerical code indicating the status of the server’s response, country of origin, characteristics of the browser and operating system used, time details per visit, sequence of pages visited, and parameters regarding the User’s operating system and IT environment.

User

The individual using this Application who, unless otherwise specified, coincides with the Data Subject.

Data Subject

The natural person to whom the Personal Data refers.

Data Processor (or Processor)

The natural or legal person, public authority, agency, or other body that processes Personal Data on behalf of the Controller.

Data Controller (or Controller)

The natural or legal person, public authority, agency, or other body which, alone or jointly with others, determines the purposes and means of processing Personal Data.

This Application

The hardware or software tool by which Users’ Personal Data is collected.

Service

The service provided by this Application as described in this website/application.

European Union (or EU)

Unless otherwise specified, references to the European Union include all current member states of the EU and the European Economic Area.

Cookie

Cookies are Tracking Tools consisting of small sets of data stored in the User’s browser.

Tracking Tool

Any technology — e.g., cookies, unique identifiers, web beacons, embedded scripts, e-tags, or fingerprinting — that enables tracking Users.

Legal references

Unless otherwise specified, this privacy policy concerns only this Application.


Last modification: March 30, 2023