POLICY

Privacy

PRIVACY INFORMATION NOTICE PURSUANT TO EU REGULATION NO. 679/2016 (GDPR) AND LEGISLATIVE DECREE NO. 196/2003 (PRIVACY CODE)

Any personal data that may be provided (e.g. email address, name and surname, company) will be processed for the purposes established by Stefano L’Altrella, in compliance with EU Regulation No. 679/2016 (GDPR) and Legislative Decree No. 196/2003 (Privacy Code).

DATA CONTROLLER

Stefano L’Altrella, via Astrologhi,1 – 28819 Vignone (VB) – Italy – Tax Code: LLTSFN72A07I690N – e-mail info@stefanolaltrella.it – www.stefanolaltrella.it

RECIPIENTS OF THIS NOTICE

This privacy notice applies to visitors of the Atelier Stefano L’Altrella, users of the website https://www.stefanolaltrella.it, and the Artist’s suppliers.

SOURCE OF DATA COLLECTION

The collection of personal data may occur directly when visiting the Atelier Stefano L’Altrella located at Via Astrologhi 1, 28819 Vignone (VB), during exhibitions, fairs, or events held by Stefano L’Altrella, when browsing the website www.stefanolaltrella.it, or when purchasing one of the Artist’s works at his Atelier.

PURPOSES OF THE PROCESSING

1. 1. Purchase of Works – To enable the purchase, in person or remotely, including on behalf of companies, of artworks at the Atelier Stefano L’Altrella, during fairs, exhibitions, or events.

  • Types of Data: Personal and contact details such as name, surname, tax code, email, telephone number, shipping address, identity document details, and, where applicable, role within the represented company. Purchase data such as payment method, type, and price of the purchased works.
  • Legal Basis: The necessity to fulfil pre-contractual and contractual obligations to which the purchaser or the company represented is a party.
  • Nature of Provision: Mandatory. Should the purchaser refuse to provide their data, the Controller will not be able to process the corresponding purchase order or provide post-sale services related to the works.
  • Data Retention Period: The Controller undertakes to delete from its systems the purchaser’s data collected for the execution of the sale and post-sale services ten (10) years after the date of the last purchase or last interaction with the Controller.

2. Anti-Money Laundering – To carry out anti-money laundering checks related to the sale of artworks.

  • Types of Data: Personal and contact details such as name, surname, tax code, identity document details, and, where applicable, role within the represented company.
  • Legal Basis: Compliance with legal obligations.
  • Nature of Provision: Mandatory. Should the purchaser refuse to provide their data, the Controller will not be able to process the corresponding purchase order.
  • Data Retention Period: The Controller undertakes to delete from its systems the purchaser’s data collected for anti-money laundering purposes ten (10) years after the date of the last purchase.

3. Contact Requests – To manage contact requests made through the contact form on the website www.stefanolaltrella.it or via email sent to the Controller.

  • Types of Data: Personal and contact details such as name, surname, email, telephone number, as well as any personal data included in the email sent to the Controller.
  • Legal Basis: The necessity to fulfil pre-contractual and contractual obligations to which the data subject is a party, and the necessity to comply with legal obligations.
  • Nature of Provision: Mandatory. If such data are not provided, the Controller will not be able to process the submitted requests.
  • Data Retention Period: The Controller undertakes to delete from its systems the data provided in relation to contact requests within one (1) year from the date of provision.

4. Customer Registration – To enable registration as a customer and access to related services (for instance, participation in exhibitions, fairs, or events, or access to the Atelier Stefano L’Altrella). Registration may take place at the Atelier or during exhibitions, fairs, or events.

  • Types of Data: Personal and contact details such as name, surname, email, address, telephone number, type of client (private client or art advisor), and, where applicable, the role within the represented company.
  • Legal Basis: The necessity to fulfil pre-contractual and contractual obligations to which the Client is a party, and the necessity to comply with legal obligations.
  • Nature of Provision: Mandatory. Should the Client refuse to provide their data, they will not be able to register as a client nor access the related services.
  • Data Retention Period: The Controller undertakes to delete from its systems the Client’s data collected for registration purposes ten (10) years after the cancellation of the relevant registration.

5. Newsletter/Marketing – To communicate, also via newsletter, commercial information about exhibitions, fairs, displays, and events for the sale or presentation of artworks, or to invite participation in customer satisfaction surveys and market research. Such communications may be sent by email or telephone, including through automated means (SMS, social media messaging systems).

  • Types of Data: Personal and contact details such as name, surname, email, address, telephone number, date of birth, and, where applicable, role within the company represented by the User.
  • Legal Basis: The User’s explicit consent to the processing of data for this purpose. Consent may be withdrawn at any time by clicking the unsubscribe link contained in received emails or newsletters, or by contacting the Controller via email. The User may also choose to receive communications solely through traditional methods, by selecting their preferred contact channel or later objecting only to automated communications via email to the Controller.
  • Nature of Provision: Optional. If the User refuses to provide their data, the Controller will be unable to keep them informed about client-exclusive initiatives or to use their data for market research, statistical analyses, or customer satisfaction studies.
  • Data Retention Period: The Controller will delete the data processed for the purpose of sending commercial information, including personalised content, after ten (10) years from data collection, or earlier upon objection by the User.

6. Categorisation – To categorise clients based on a series of parameters, allowing for targeted promotional communications aligned with the needs of specific client groups (e.g. private clients or art advisors, purchase channels, or residents of a specific region).

  • Types of Data: Personal and contact details such as name, surname, email, telephone number, country of residence, client type (private client or art advisor acting individually or on behalf of a company), and artwork purchase channels.
  • Legal Basis: The Controller’s legitimate interest in ensuring the highest efficiency of marketing activities, balanced against the client’s interest in receiving communications relevant to their category (e.g. private client or art advisor, past purchases, region of residence). Promotional communications will only be sent if the Client has provided consent, which can be withdrawn at any time without prejudice. Objection may be exercised at any time by clicking the unsubscribe link in received emails or newsletters, or by contacting the Controller via email.
  • Nature of Provision: Optional. If the Client objects to the processing of their data, the Controller will be unable to keep them informed of offers addressed to specific client categories. Should the Client have given consent to receive general promotional information, they may continue to receive generic newsletters only.
  • Data Retention Period: As stated in point 5 above.

7. Profiling – To profile clients in order to assess their preferences, interests, characteristics, and purchasing habits regarding artworks, based on a series of parameters, for the purpose of sending personalised promotional communications or providing a tailored purchasing experience at the Atelier Stefano L’Altrella.

  • Types of Data: Personal and contact details such as name, surname, date of birth, age group, email, telephone number, country of residence, profession, type of client (private client or art advisor acting individually or on behalf of a company), purchase frequency and channels, value and number of artworks purchased over a given period, participation in exhibitions, fairs, and events of interest, viewed artworks, interests in specific artists, and behavioural data collected from the website www.stefanolaltrella.it.
  • Legal Basis: The Client’s explicit consent to the processing of data for this purpose. Consent may be withdrawn at any time by contacting the Controller via email.
    Nature of Provision: Optional. If the Client refuses to provide their data, the Controller will not be able to keep them informed about offers tailored to their preferences, interests, characteristics, or purchasing habits, nor to provide a personalised purchasing experience at the Atelier. Should the Client have consented to receive general promotional information, they may continue to receive generic newsletters only. Data Retention Period: As stated in point 5 above.

8. Supplier Registration – To manage supplier contact and related contractual relationships.

  • Types of Data: Personal and contact details such as company name and/or name, surname, email, address, telephone number, as well as tax and banking details.
  • Legal Basis: The necessity to fulfil pre-contractual and contractual obligations to which the Supplier is a party, and the necessity to comply with legal obligations.
  • Nature of Provision: Contractual and legal obligation.
  • Data Retention Period: The Controller undertakes to delete from its systems the Supplier’s data ten (10) years after the end of the contractual relationship.
COOKIES

The Website uses IT techniques for the direct acquisition of personal identification data from users consisting of code strings known as “cookies”. For complete information regarding the cookies active on the Website and the related processing of personal data, please refer to the “Cookie Policy” section available on the Website. The information contained in this privacy notice does not apply to third-party websites, apps, or content of any kind, even if accessible via links on the Website. In such cases, the data protection policies of those third parties may apply, which may differ from this one. Users are therefore encouraged to consult those policies before communicating any personal data.

METHODS OF PROCESSING AND DATA RETENTION PERIODS

Processing will be carried out by automated and/or manual means, using methods and tools designed to ensure maximum security and confidentiality, by persons specifically authorised in accordance with the provisions of the GDPR.
Data will be stored for no longer than is necessary for the purposes for which they were collected and subsequently processed, in compliance with applicable laws and legal obligations.
In any case, Stefano L’Altrella adopts specific security measures to prevent the loss, unlawful use, or unauthorised access to personal data.

RIGHTS OF THE DATA SUBJECT

The data subject may, at any time, exercise the rights set out in Articles 15 to 22 of the GDPR. In particular, the data subject may withdraw consent at any time, where previously given. They shall also have the right to request the modification, integration, updating, confirmation, or erasure of the stored data, to object to the processing of their personal data, and to exercise the right to data portability. These rights may be exercised by sending an email to info@stefanolaltrella.it; or sending a registered letter with return receipt to: Stefano L’Altrella, Via Astrologhi 1, 28819 Vignone (VB), Italy. The data subject also has the right to lodge a complaint with the supervisory authority: Italian Data Protection Authority (Garante per la Protezione dei Dati Personali) – www.garanteprivacy.it

Instagram YouTube