PRIVACY MATTER

ART-EN ME STUDIO , with registered office in netherlands (hereinafter referred to as “ART-EN ME STUDIO ” and/or the “Data Controller” for brevity) is the autonomous data controller of the processing of personal data of users who browse the Site, including browsing data, marketing and profiling data, as well as data connected and related to sales made through the Site and to the related pre- and post-sales support activities. ART-EN ME STUDIO has entrusted some of the services of the Site - related, in particular, to the processing of payments, to the to customer service, hosting and delivery logistics . You may always contact the Data Controller to receive information on the processing and/or to exercise your rights, by writing to the e-mail address artenmestudio.com .

Through the Site, different types of personal data are processed and collected for various purposes and in different ways. Specifically: a. Personal data related to browsing is processed to enable the proper functioning of the Site and for marketing purposes. More detailed information is available in the cookie policy on the Site. b. Personal data provided voluntarily by the user (such as personal details, email address, telephone number, and password provided in the registration form) is collected during interactions on the Site or through customer care to respond to user requests and offer services and assistance. c. Personal data provided during the purchasing process is used for concluding transactions and for any necessary pre- and post-sales assistance. d. Personal and contact data may be processed, with express consent, for marketing purposes, such as sending communications and updates on products, sales, promotional campaigns, events, and other initiatives. e. Personal data related to purchases and user preferences may be processed, with express consent, to study consumption habits and make products and proposals more responsive to customer needs. f. Personal and contact data may be communicated, with express consent, to affiliated companies so they can directly present products and services. Except for browsing data, which is governed by the cookie policy, data processing is based on: i) the legitimate interest in providing Site services and responding to user requests; ii) the fulfillment of contractual obligations and legal requirements related to the purchasing process; iii) any consent provided by the user for marketing, profiling, and sharing data with third parties for their own purposes.

The personal data collected are provided directly by the user (through registration on the Site or as part of the sales process), with the exception of the browsing data referred to in point 2 a).

As indicated in point 2 e) above, with your express consent, personal data may be processed to study your consumption habits and choices, making products and initiatives more responsive to your tastes and needs. Using automated tools, data related to the date, value, and frequency of purchases, as well as the type of products purchased over a specific period, may be processed. Data regarding consumption and preferences can be collected by tracking purchases made on the Site and in physical shops, as well as through user interactions and any voluntarily provided information. The sole objective of this analysis is to propose products, services, and initiatives aligned with customer tastes and needs, and it will be conducted in a non-invasive manner. You may request clarification of the logic applied to this processing and modification of the results obtained by reaching out using the provided contact details. Additionally, with your express consent, personal data may also be processed using automated tools to analyze cookies and verify browsing on the Site, allowing for the proposal of products and services that align with browsing activity.

Personal data collected through the Site are processed primarily using computerized and telematic methods, with necessary security measures in place to minimize risks of accidental destruction, loss, unauthorized access, or processing that does not comply with the stated purposes of this Privacy Policy. However, due to the nature of online transmission, it is impossible to completely eliminate risks of unauthorized access or data leakage. Therefore, it is advisable to periodically ensure that your computer is equipped with appropriate protective software for network data transmission, both incoming and outgoing (such as up-to-date antivirus systems), and that your Internet service provider has implemented suitable security measures (such as firewalls and spam filters).

With the exception of browsing data (which is regulated by the cookie policy), providing personal data collected through the Site for responding to queries, marketing purposes, studying consumer habits and preferences, or communicating with affiliated companies is free and optional. Not providing this data does not restrict your use of the Site, but it may prevent responses to requests for information or assistance, as well as updates and communications about products, sales, and promotional initiatives. However, providing certain personal data, such as email address, postal address, telephone number, and bank details (in the case of credit card payments) is necessary to finalize purchases through the Site. Failure to provide such data may prevent the completion of a purchase. Additionally, some personal data may be required for providing other services on the Site or to comply with legal obligations (e.g., anti-money laundering regulations). Not providing this data could be a legitimate reason for not fulfilling the purchase contract or providing related services. When necessary, the mandatory or optional nature of data provision will be indicated with an asterisk (*) next to the required information for services and purchases. Not providing optional personal data will not result in any restrictions or disadvantages to the user.

Personal data may be accessed and processed by: Providers of technical, technological, mailing, logistics, and transport services, as well as those offering services related to sales. The parent company and affiliated entities. Providers of marketing and analysis services (including list management, support and hosting, and communication delivery services). Employees and consultants acting as data processors appointed by the Data Controller, or as authorized persons instructed accordingly. Third parties such as banks, public authorities, and payment service management companies, which will operate as autonomous data controllers. Data will not be disclosed in any way and may be transferred abroad, including to non-European countries, due to the transnational nature of the affiliated group. Any data transfer will occur with adequate protections and safeguards in place, utilizing secure tools and channels and implementing Standard Contractual Clauses, in accordance with applicable laws. You can always contact the data controller to find out the exact location of your data and to request a copy.

You have the right to obtain confirmation about whether personal data concerning you exists, even if not yet recorded, and to receive this information in an intelligible form. You can also request details about the source of your personal data, the purposes and methods of processing, the logic applied in any electronic processing, the identification details of the data controller and data processors, and the names or categories of persons to whom your data may be communicated. Additionally, you have the right to request updates, corrections, or integration of your personal data, as well as the erasure, transformation into anonymous form, or blocking of data processed in violation of the law, including data that no longer needs to be retained for the purposes for which it was collected. You can also request certification that these actions have been communicated to those to whom your data has been shared, unless this is impossible or involves a disproportionate effort. You have the right to data portability, as well as the right to object to the processing of your personal data on legitimate grounds, even if relevant to the purpose of collection. This includes the right to object to the processing of your data for advertising, direct marketing, market research, or commercial communication, and to request restrictions on the processing of your data. To exercise these rights, you can contact the Data Controller at privacy@newguardsgroup.com. Lastly, you have the right to lodge a complaint with the competent Supervisory Authority (Data Protection Authority) at any time.