Privacy policy
Privacy Policy
Last updated: 8 October 2026
1. Data Controller
The data controller of the personal data collected through the website nuovaartemareaets.org is:
Nuova Artemarea ETS
Third Sector Entity registered with the Italian National Single Register of the Third Sector (RUNTS), no. 164211
Tax Code: 91460090375
Registered Office (main office): Strada Maggiore 36, 40125 Bologna, Italy
Operational Office in Rome: Via Titta Scarpetta 32, 00153 Rome, Italy
International Desk in Beijing: c/o Fondazione Italia Cina Art Center, Raffles City Beijing, No. 1 Dongzhimen South Street, Dongcheng District, Beijing 100007, China
Telephone: +39 327 553 7465
Email: nuovaartemarea@gmail.com
Certified Email (PEC): nuovaartemarea@pec.libero.it
This Privacy Policy describes how we collect, use and disclose the personal data of individuals who visit the website or contact us, pursuant to Regulation (EU) 2016/679 (“GDPR”) and Italian Legislative Decree no. 196/2003, as amended by Legislative Decree no. 101/2018.
2. Purpose of the Website
The purpose of the website is to present the Association and document its institutional activities, including exhibitions, conferences, publications, research projects and international cultural cooperation initiatives. The website does not sell products or services.
3. Personal Data We Collect
We may collect the following categories of personal data:
- Contact details and communications: name, email address, telephone number and any other information you choose to provide when you contact us, for example in connection with requests for information, collaboration proposals or press enquiries.
- Browsing and device data: IP address, browser and device type, pages visited, date and time of access and other technical identifiers automatically collected while using the website.
We do not collect payment data and we do not request data belonging to special categories of personal data, such as health data or data concerning political or religious opinions.
4. How We Collect Personal Data
We collect personal data:
- directly from you, when you contact us by email, telephone or certified email (PEC);
- automatically, through the website, cookies and similar technologies, when you browse the website;
- from our service providers, in particular Shopify, which manages the website’s technical infrastructure.
5. Why We Use Personal Data and the Legal Basis for Processing
We process personal data for the following purposes:
- To respond to your requests and manage relationships with institutions, partners, artists and the press. Legal basis: taking steps at your request prior to entering into a contract or performance of a contract, or our legitimate interest in managing the Association’s correspondence (Article 6(1)(b) and (f) GDPR).
- To operate the website, ensure its security and prevent unlawful use. Legal basis: legitimate interest (Article 6(1)(f) GDPR).
- To analyse website usage in aggregate form in order to improve its content. Legal basis: consent, where required, expressed through the cookie banner (Article 6(1)(a) GDPR).
- To comply with legal obligations or respond to requests from public authorities. Legal basis: compliance with a legal obligation (Article 6(1)(c) GDPR).
Your personal data is not sold or used to send you advertising without your consent.
6. Who We Share Personal Data With
Personal data may be disclosed, solely for the purposes described above, to:
- Shopify and other technical service providers that help us manage the website, including hosting, storage, security and statistical analysis providers, acting as data processors or, in the cases described in Section 7, as independent data controllers;
- institutions, museums and partner organisations involved in projects, only where this is necessary to respond to your request and with your knowledge;
- public authorities, where required by law.
Personal data is processed by authorised personnel and collaborators of the Association who are bound by confidentiality obligations.
7. Relationship with Shopify
The website is built on the Shopify platform, which collects and processes certain data relating to access to and use of the website in order to provide and improve its services. Personal data may be transferred to Shopify and to service providers located in countries other than your own. In certain cases, Shopify processes personal data as an independent data controller and is also responsible for responding to requests relating to such processing. For further information, you may consult Shopify’s Consumer Privacy Policy and Shopify’s Privacy Portal at https://privacy.shopify.com/.
8. Cookies
The website uses technical cookies that are necessary for its operation and, subject to consent, analytics cookies. You can manage your preferences through the banner displayed on your first visit and modify them at any time through your browser settings.
9. Links to Third-Party Websites
The website contains links to third-party websites, including museums, institutions, news organisations and social networks such as Instagram and LinkedIn. We do not control these websites and are not responsible for the way in which they process personal data. We encourage you to read their respective privacy policies.
10. Transfers Outside the European Union
Certain service providers, including Shopify, may process personal data outside the European Economic Area. In such cases, transfers are made to countries recognised by the European Commission as providing an adequate level of protection, or on the basis of Standard Contractual Clauses approved by the European Commission.
11. Data Retention
We retain personal data for as long as necessary for the purposes for which it was collected:
- correspondence is retained for the time necessary to manage the request and any resulting relationship, and in any event for no longer than 10 years, unless a longer period is required by law;
- browsing data is retained for the periods indicated in the settings of the cookies and technical services used.
We adopt appropriate security measures, but no system is completely secure. We therefore recommend that you do not send confidential information through unsecured channels.
12. Minors
The website is not intended for children under the age of 14 and we do not knowingly collect their personal data. If you are a parent or legal guardian and believe that a minor has provided us with personal data, please contact us and we will take steps to delete it.
13. Your Rights
At any time, you may request:
- access to your personal data;
- rectification of inaccurate personal data;
- erasure of your personal data;
- restriction of processing;
- data portability;
- objection to processing based on legitimate interests;
- withdrawal of consent previously given, without affecting the lawfulness of processing carried out before the withdrawal.
To exercise your rights, please contact us at nuovaartemarea@gmail.com or nuovaartemarea@pec.libero.it. We will respond within one month of receiving your request, as required by the GDPR. We may ask you to verify your identity before processing your request.
14. Complaints
If you believe that the processing of your personal data infringes applicable data protection law, you may lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali) at www.garanteprivacy.it, or with the supervisory authority of the European country in which you reside.
15. Changes to this Privacy Policy
We may update this Privacy Policy to reflect changes in our activities or in applicable law. The updated version will be published on this page together with the new “Last updated” date.
16. Contact Details
For any questions regarding this Privacy Policy, you may contact us at:
Nuova Artemarea ETS
Strada Maggiore 36, 40125 Bologna, Italy
Telephone: +39 327 553 7465
Email: nuovaartemarea@gmail.com
Certified Email (PEC): nuovaartemarea@pec.libero.it