Privacy policy
ATELIERS DEL VENETO S.R.L.
PRIVACY POLICY
Website www.ateliersdelveneto.com
pursuant to Article 13 of Regulation (EU) 2016/679
Last updated: 2 November 2026
1. Data Controller
This policy explains how Ateliers del Veneto S.r.l. (the "Company" or the "Controller") processes the personal data of visitors to www.ateliersdelveneto.com (the "Website") and of anyone who contacts the Company through the forms on the Website, by e-mail, by telephone or via WhatsApp, or who subscribes to the newsletter. The Website is for information purposes only and does not allow the purchase of products.
This policy is provided under Article 13 of Regulation (EU) 2016/679 ("GDPR") and Italian Legislative Decree 196/2003, as amended by Legislative Decree 101/2018 ("Italian Privacy Code"). It does not cover third-party websites that may be reached through links.
| Item | Details |
|---|---|
| Company name | Ateliers del Veneto S.r.l. (ADV S.r.l.) |
| Registered office | Via del Lavoro 18/20, Saletto, 35010 Vigodarzere (PD), Italy |
| Tax code and VAT number | IT 04004060283 |
| Companies Register | Padova Companies Register no. 04004060283, REA PD-354261 |
| info@ateliersdelveneto.com | |
| Certified e-mail (PEC) | andreadelvecchiosrl4@legalmail.it |
| Telephone | +39 049 609299 |
The Company is not required to appoint a Data Protection Officer (Article 37 GDPR). Any request concerning personal data may be sent to the addresses above.
2. Data processed
- Browsing data: IP address, browser and device type, date and time of access, pages requested. These are collected automatically by the systems that deliver the Website, are not used to identify or profile users, and serve the operation and security of the Website.
- Data provided through the contact form: name and surname, e-mail address, message content and, if given, company and telephone number.
- Data provided through the "Start a Project" questionnaire: name and surname, e-mail address, telephone or WhatsApp number, role, company, industry and country; project information (object, purpose, quantity, timing, preferences, any investment range and any occasion or story behind the project) and any attached files.
- Data provided to receive the catalogue: name and e-mail address.
- Data provided to subscribe to the newsletter: e-mail address.
- Data provided by e-mail, telephone or WhatsApp: contact details and any information the data subject chooses to share.
The Company does not request special categories of data (Article 9 GDPR). Users are asked not to include such data in free-text fields or attached files.
3. Purposes, legal bases and retention periods
| Purpose | Legal basis | Retention |
|---|---|---|
| a) Making the Website available and keeping it secure | Legitimate interest in the operation and security of the Website (Art. 6(1)(f)) | For the time technically required, unless needed to investigate unlawful acts |
| b) Replying to information requests and project enquiries sent by the data subject | Pre-contractual measures at the data subject's request (Art. 6(1)(b)); for company representatives, legitimate interest in managing business contacts (Art. 6(1)(f)) | 12 months from the last contact, if no contract follows |
| c) Managing the subsequent business relationship, if any | Performance of a contract (Art. 6(1)(b)) and legitimate interest for company representatives (Art. 6(1)(f)) | Term of the relationship plus 10 years (Art. 2220 Italian Civil Code) |
| d) Complying with legal obligations | Legal obligation (Art. 6(1)(c)) | For the periods required by applicable law |
| e) Establishing, exercising or defending legal claims | Legitimate interest (Art. 6(1)(f)) | For the duration of the dispute and until appeal periods expire |
| f) Sending the requested catalogue | Pre-contractual measures at the data subject's request (Art. 6(1)(b)); for company representatives, legitimate interest in managing business contacts (Art. 6(1)(f)) | 12 months from the last contact |
| g) Sending the newsletter to those who subscribe | The data subject's consent (Art. 6(1)(a)), which may be withdrawn at any time | Until consent is withdrawn |
Data collected through the contact form, the questionnaire and the catalogue request are not used to send promotional communications. The newsletter is sent only to those who subscribe, who may unsubscribe at any time through the link in each message. Data are not used for profiling. The Company does not take decisions based solely on automated processing (Article 22 GDPR). Once the periods above expire, data are deleted or anonymised.
4. Provision of data and processing methods
Providing the data requested in the Website's forms is optional, but without it the Company cannot act on the request. Data are processed electronically by authorised and trained staff, with appropriate technical and organisational measures under Article 32 GDPR, including HTTPS encryption and access controls.
5. Recipients and transfers outside the European Economic Area
Data are not disclosed to the public. Where strictly necessary, they may be shared with:
- Shopify International Limited (The Sidings, 4th Floor, Grand Canal Quay, Dublin D02 E7K8, Ireland), provider of the platform that hosts the Website, transmits messages sent through the contact form and stores the data of those who request the catalogue or subscribe to the newsletter, acting as processor (Article 28 GDPR);
- content delivery network providers, which receive the browsing data needed to deliver the pages;
- the Company's IT and e-mail service providers, acting as processors;
- advisers and professionals engaged by the Company, such as accountants, lawyers and the statutory auditor, acting as independent controllers or processors;
- public and judicial authorities, where required by law.
Shopify International Limited is based in Ireland, and data may be processed outside the European Economic Area, in particular by its Canadian parent Shopify Inc. and other group companies. Transfers to Canada rely on an adequacy decision of the European Commission; transfers to other countries rely on the Standard Contractual Clauses adopted by the European Commission or on the Shopify group's Binding Corporate Rules (Articles 46 and 47 GDPR). A copy of the safeguards may be requested from the Controller.
The Website contains links to WhatsApp. Those who choose to use them communicate with the Company through the service of WhatsApp Ireland Limited, which processes data as an independent controller under its own privacy policy.
6. Data subject rights
Data subjects may at any time exercise their rights of access, rectification, erasure, restriction, portability and objection under Articles 15 to 22 GDPR by writing to info@ateliersdelveneto.com or andreadelvecchiosrl4@legalmail.it. The Controller will reply without undue delay and in any event within one month, extendable by two months for complex requests (Article 12 GDPR).
Data subjects also have the right to lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali, Piazza Venezia 11, 00187 Rome, www.garanteprivacy.it) or with the supervisory authority of the Member State where they habitually reside or work.
7. Cookies
The Website uses technical cookies and tools needed for it to work, which do not require consent (Article 122 Italian Privacy Code). Only with consent given through the banner, under the Garante's Guidelines of 10 June 2021, the Shopify platform also uses one analytics cookie (_shopify_analytics) and one marketing cookie (_shopify_marketing), each lasting one year. Users may change their choices at any time through the "Cookie preferences" link. Should other tools be introduced, this policy will be updated.
8. Changes to this policy
The Company may update this policy following changes in the law or in its processing activities. The current version is always published on the Website with its last update date.