Information on the processing of personal data pursuant to Article 13 of EU Regulation 2016/679
Last updated: July 16, 2026
This notice describes how StylArte S.r.l. processes the personal data of users who visit the website www.stylarte.it, hereinafter referred to as the “Site,” or who contact the company through the contact form, email, or other contact details provided on the Site.
1. Data Controller
The Data Controller is:
StylArte S.r.l.
Registered office: Via per Meina 15, 28010 Nebbiuno (NO), Italy
VAT number and Tax code: 03109650154
REA: NO-120807
Phone: +39 0322 58151
Email: stylartesrl@gmail.com
For any request regarding this notice or the processing of personal data, users may contact the Data Controller using the email address indicated above.
2. Personal data processed
During browsing and use of the Site, the following categories of personal data may be processed.
2.1 Browsing data
The IT systems and software procedures used for the operation of the Site automatically acquire certain data whose transmission is implicit in the use of Internet communication protocols.
Such data may include:
- IP address
- date and time of the request
- address of the page visited
- browser type
- operating system
- device used
- technical information relating to the connection
- server response codes
- any data relating to errors or anomalous access attempts
This data is not collected by StylArte for the purpose of directly identifying users, but could allow indirect identification if associated with other information held by third parties.
2.2 Data provided through the contact form
When users complete the contact form on the Site, the data requested in the relevant fields may be collected, such as:
- first and last name
- email address
- phone number, when requested or provided
- company or organization
- information relating to a project or request
- message content
- any other data voluntarily communicated by the user
Fields marked as mandatory are necessary to allow submission and processing of the request.
Users are invited not to include in the message unnecessary personal data, particularly sensitive information, or data belonging to third parties, unless this is strictly necessary and the user is authorized to communicate it.
2.3 Data transmitted by email or other contact methods
The voluntary sending of communications to the email addresses or other contact details published on the Site entails the acquisition of the sender’s contact data and any additional information contained in the communication.
3. Purposes and legal bases of processing
3.1 Operation and security of the Site
Browsing data is processed to:
- enable correct display and operation of the Site
- manage the technical infrastructure
- identify and resolve any malfunctions
- ensure the security of the Site
- prevent unauthorized access, fraud, cyber attacks, or unlawful activities
- protect the rights of the Data Controller, users, and any third parties
The legal basis for processing is the legitimate interest of the Data Controller in ensuring the operation, security, and integrity of its IT systems, pursuant to Article 6, paragraph 1, letter f), of the GDPR.
3.2 Management of contact requests
Data provided through the form, email, or other contact methods is processed to:
- receive and manage the user’s request
- respond to questions received
- provide information about the company, services, and projects
- evaluate collaboration or quotation requests
- contact the user through the contact details provided
- prepare a potential commercial proposal
- adopt pre-contractual measures requested by the user
When the request concerns a potential commercial or contractual relationship, the legal basis is the performance of pre-contractual measures taken at the request of the data subject, pursuant to Article 6, paragraph 1, letter b), of the GDPR.
For general information requests, the legal basis is the legitimate interest of the Data Controller in receiving and managing communications addressed to the company, pursuant to Article 6, paragraph 1, letter f), of the GDPR.
It is therefore not necessary to request separate consent to use the data solely for the purpose of responding to the user’s request.
3.3 Compliance with legal obligations and protection of rights
Personal data may be processed when necessary to:
- comply with obligations provided by law, regulations, or measures of the authorities
- respond to requests from competent authorities
- ascertain, exercise, or defend a right of the Data Controller in judicial or extrajudicial proceedings
The legal basis is compliance with a legal obligation, pursuant to Article 6, paragraph 1, letter c), of the GDPR, or the legitimate interest of the Data Controller in protecting its rights, pursuant to Article 6, paragraph 1, letter f), of the GDPR.
4. Absence of marketing and profiling activities
Data collected through the contact form is not used to send newsletters, periodic promotional communications, or marketing campaigns, unless in the future the user provides specific, free, and separate consent for such purposes.
StylArte does not use data collected through the Site for profiling activities, personalized advertising, or automated decisions that produce legal effects or significant consequences for the user.
5. Nature of data provision
Provision of data indicated as mandatory in the contact form is necessary to enable StylArte to receive, understand, and manage the request.
Failure to provide such data may make it impossible to submit the form or for the company to respond subsequently.
Provision of any optional data is voluntary. Failure to communicate such information does not prevent submission of the request, unless it is concretely necessary to provide an adequate response.
6. Methods of processing
Personal data is processed through IT, telematic, and, when necessary, organizational or paper-based tools.
Processing is carried out according to principles of:
- lawfulness
- fairness
- transparency
- data minimization
- accuracy
- storage limitation
- integrity
- confidentiality
StylArte adopts technical and organizational measures appropriate to the nature of the data processed and the associated risks, in order to reduce the risk of loss, destruction, unauthorized access, disclosure, alteration, or unlawful use of personal data.
Access to data is limited to authorized persons who have actual need to perform their duties.
7. Recipients of personal data
Personal data may be processed or communicated, within strictly necessary limits, to the following categories of recipients:
- staff, directors, and authorized collaborators of StylArte
- hosting service providers
- email service providers
- providers responsible for development, management, maintenance, or security of the Site
- IT, technical, administrative, tax, or legal consultants
- public authorities, judicial authorities, law enforcement agencies, or other entities to whom communication is mandatory by law
Providers who process personal data on behalf of StylArte are appointed, when necessary, as data processors pursuant to Article 28 of the GDPR.
Personal data is not disseminated or made publicly available.
8. Transfer of data outside the European Economic Area
StylArte favors the use of providers that process data within the European Union or the European Economic Area.
Should any of the providers used involve the transfer of or access to data from a country located outside the European Economic Area, the transfer will be carried out in compliance with Articles 44 et seq. of the GDPR, on the basis of:
- an adequacy decision by the European Commission
- standard contractual clauses approved by the European Commission
- any additional safeguards provided by applicable law
Users may request further information on any safeguards applied by contacting the Data Controller.
9. Retention period
Personal data is retained for a period no longer than necessary to achieve the purposes for which it was collected.
In particular:
- data sent through the contact form or by email is retained for the time necessary to manage the request and, as a rule, for a maximum period of 12 months from the last communication
- should a commercial or contractual relationship arise from the request, data is retained for the entire duration of the relationship and subsequently for the periods provided by civil, tax, administrative, and accounting regulations
- data necessary for the protection of a right may be retained until the conclusion of any dispute and the expiry of the relevant limitation periods
- data and technical logs relating to browsing are retained for the period strictly necessary to ensure the operation and security of the systems, according to the technical timeframes applied by the infrastructure provider, unless there is a need to retain them further in the event of security incidents, investigations, or requests from authorities
Upon expiry of the relevant periods, data is deleted, anonymized, or retained exclusively in cases provided by law.
10. Cookies and tracking tools
The Site uses exclusively any technical cookies and tools strictly necessary to:
- enable transmission of communications over the network
- ensure correct operation and security of the pages
- manage the contact form
- maintain any technical settings requested by the user
These tools are not used for advertising, statistical, commercial, or profiling purposes.
The Site does not use:
- Google Analytics
- Google Site Kit for statistics collection
- Meta Pixel
- advertising cookies
- remarketing tools
- user profiling systems
- session recording or heatmap tools
Since only strictly necessary technical tools are used, prior consent is not requested through a cookie banner.
The use of any technical cookies is described directly in this Privacy Policy and therefore a separate Cookie Policy is not present.
Users may nevertheless manage, block, or delete cookies through their browser settings. Disabling technical cookies may compromise the correct operation of some parts of the Site.
11. Links to external sites
The Site may contain links to websites, platforms, or social profiles managed by third parties.
The mere presence of an external link does not, in itself, entail the installation of cookies or tracking tools by the third party on the StylArte Site.
When users select a link and access an external platform, data processing is carried out by the relevant operator according to its own privacy policy.
StylArte does not control and is not responsible for the processing methods applied by sites or services belonging to third parties.
12. Rights of the data subject
In relation to their personal data, users may exercise, when applicable, the rights provided by Articles 15-22 of the GDPR.
In particular, users may request:
- confirmation as to whether or not processing of personal data concerning them is taking place
- access to their personal data
- rectification of inaccurate data
- completion of incomplete data
- erasure of data
- restriction of processing
- objection to processing based on legitimate interest
- data portability, when applicable
- information on the recipients to whom the data has been communicated
When processing is based on consent, users also have the right to withdraw it at any time. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.
To exercise their rights, users may send a request to:
stylartesrl@gmail.com
The Data Controller will respond within the timeframes provided by applicable law and may request information strictly necessary to verify the identity of the requester.
13. Right to lodge a complaint
Users who believe that the processing of their personal data is in violation of applicable law have the right to lodge a complaint with the:
Italian Data Protection Authority (Garante per la protezione dei dati personali)
Piazza Venezia 11
00187 Rome
Italy
The possibility of contacting the competent supervisory authority of the Member State in which the user resides or works, or of taking action before the competent judicial authority, remains unaffected.
14. Data belonging to minors
The Site and the services presented are primarily aimed at companies, professionals, designers, hospitality facilities, and parties interested in StylArte’s services.
StylArte does not intend to knowingly collect personal data of minors through the Site.
Should a parent or guardian believe that a minor has communicated personal data without authorization, they may contact the Data Controller to request its deletion.
15. Changes to this notice
StylArte may modify or update this Privacy Policy as a result of:
- regulatory changes
- changes to the operation of the Site
- introduction of new services
- use of new providers
- introduction of new tools or plugins
- indications from competent authorities
The updated version will be published on this page with indication of the date of the last update.
Should the changes concern processing activities that require user consent, such activities will not be initiated before the necessary information and methods for collecting consent have been prepared.