/ privacy policy
PRIVACY POLICY
Last updated: 27/10/2025
1. Data Controller
Pursuant to Article 13 of EU Regulation 2016/679 (hereinafter the “GDPR”), we inform you that the Data Controller is:
Archivio Antonio Scordìa
Email: archivioantonioscordia@gmail.com
Website: www.archivioantonioscordia.it
2. Personal Data Collected
The website collects only the data strictly necessary to enable communication with users and to improve navigation.
a) Data voluntarily provided by the user
Through the contact form available on the website, the following data may be collected:
- First and last name
- Email address
- Any message or free-text content
Providing this information is optional but necessary to receive a reply from the Controller.
b) Browsing data
While browsing the site, certain information may be automatically collected, such as:
- IP address
- Type of browser and operating system used
- Pages visited and time spent on them
These data are collected in an anonymous and aggregated form for statistical or security purposes related to the website.
c) Cookies
The website uses only technical and anonymized analytical cookies, necessary for the proper functioning of the site and for improving user experience.
For further details, please refer to the dedicated Cookie Policy.
3. Purpose of Processing
The collected data are processed for the following purposes:
- Managing contact requests sent by users through the form;
- Responding to inquiries or requests for information about the artist or their works;
- Improving website usability and ensuring IT security;
- Complying with legal obligations concerning data protection or requests from competent authorities.
The data will not be used for marketing, profiling, or promotional communications.
4. Legal Basis for Processing
Processing is based on the following legal grounds:
- Consent of the data subject (Art. 6, para. 1, letter a of the GDPR), expressed by submitting the contact form;
- Legitimate interest of the Controller (Art. 6, para. 1, letter f of the GDPR) to ensure the proper functioning and security of the website.
5. Methods and Data Retention Period
Personal data are processed using electronic and telematic tools, adopting appropriate security measures to protect them against unauthorized access, loss, or destruction.
Data collected through the contact form are retained for the time necessary to handle the request and, in any case, no longer than 12 months from the last contact.
Technical or statistical browsing data are retained for a maximum period of 12 months in anonymous form.
6. Rights of the Data Subject
At any time, users may exercise the rights provided for by Articles 15–22 of the GDPR, including in particular the right to:
- Access their personal data;
- Rectify or erase data (“right to be forgotten”);
- Restrict or object to processing;
- Data portability;
- Withdraw consent, without affecting the lawfulness of processing based on consent before its withdrawal;
- Lodge a complaint with the Italian Data Protection Authority (www.garanteprivacy.it).
To exercise these rights, users may write to: archivioantonioscordia@gmail.com.
7. Data Communication and Disclosure
Personal data will not be disclosed.
They may be communicated only to third parties providing services strictly necessary for the technical operation of the website (e.g., hosting provider or technical administrator), who act as Data Processors pursuant to Article 28 of the GDPR.
8. Data Transfer Outside the EU
Data are not transferred to countries outside the European Union.
If it becomes necessary to use services located outside the EU, the Controller will ensure that the transfer complies with Articles 44 and following of the GDPR.
9. Data Protection Officer (DPO)
The Controller is not required to appoint a Data Protection Officer (DPO), as the processing activities do not fall within the cases that make such appointment mandatory under Article 37 of the GDPR.
10. Consent Collection
In the contact form, a non-preselected checkbox is provided, through which the user declares that they have read this privacy notice and consent to the processing of their personal data for the purpose of managing their submitted request.
Consent is:
- Freely given and optional, but necessary to receive a reply;
- Specific and informed, as it follows the reading of this notice;
- Unambiguous, as it is expressed through a positive action (voluntary checkbox selection).
11. Updates
This privacy notice may be subject to modifications or updates to comply with legal changes or updates to the website.
The most recent version will always be available on this page.