Last update: August 25, 2025

1. Data Controller

The Data Controller is:
AR Project
Email: a.ruberto@arproject.it
Registered office: Via Leonardo da Vinci, 21 – Torino (Italia)

2. Types of Data Collected

• Data voluntarily provided: name, surname, email address, and any other personal data included by the user in messages sent via the contact form or direct email.
• Browsing data: IP addresses, access times, and technical logs necessary for the website’s operation.

3. Purposes and Legal Bases of Processing

Data is processed for:

• Responding to information or quotation requests (legal basis: Art. 6, para. 1, lett. b GDPR – performance of pre-contractual measures requested by the data subject).
• Ensuring the correct technical functioning of the website (legal basis: legitimate interest of the controller – Art. 6, para. 1, lett. f GDPR).

Data will not be used for marketing purposes, profiling, or unsolicited commercial communications.

4. Processing Methods

• Data is processed using electronic and telematic tools, with appropriate security measures to protect it from unauthorized access, alteration, loss, or disclosure.
• No automated decision-making or profiling is carried out.

5. Data Retention

• Data sent via the contact form or email is kept for the time strictly necessary to respond to the request and, in any case, for no longer than 12 months after the last contact.
• Technical logs are stored for security and maintenance purposes for a period not exceeding 12 months.

6. Recipients and Disclosure of Data

• Data is not shared with third parties unless strictly necessary for technical or legal reasons.
• Data may be processed by hosting or IT maintenance providers, appointed as Data Processors pursuant to Art. 28 GDPR.

7. Transfers Outside the EU

No personal data is transferred outside the European Economic Area (EEA).

8. Rights of Data Subjects

Users may exercise their rights under Articles 15–22 of the GDPR at any time:

• right of access, rectification, and erasure of data;
• right to restriction of processing;
• right to data portability;
• right to object to processing;
• right to lodge a complaint with the Data Protection Authority.

Requests must be sent to: [insert contact email].

9. Minors

This website is not intended for users under the age of 14. Any personal data provided by minors will be immediately deleted.

10. Updates

The Data Controller reserves the right to modify this Privacy Policy. Updates will be published on this page with the relevant date.