Privacy Policy

Last updated: 4 August 2026

1. Data Controller

The Data Controller is ARINDEEP S.R.L., with registered office at Via G. Marconi 66, 95013 Fiumefreddo di Sicilia (CT), Italy, VAT No. 06248870872.

For enquiries concerning the protection of personal data, please contact admin@arindeep.com.

2. Categories of personal data processed

2.1 Browsing data

The IT systems and software procedures used to operate this website may collect certain technical data during normal use, the transmission of which is inherent in the use of Internet communication protocols. Such data may include, by way of example, the IP address, the date and time of the request, the requested page, the method used to submit the request to the server, the response status code, the browser type, the operating system and other parameters relating to the user’s device and IT environment.

2.2 Data provided voluntarily by the user

When a user voluntarily sends a message to the email address published on the website, ARINDEEP S.R.L. processes the data supplied by the user, such as their email address, first and last name, company or organisation, the contents of the communication and any attached documents, solely to the extent necessary to handle and respond to the request.

The contact link available on the website opens the user’s email application. In its current configuration, the website does not contain a contact form that directly stores data entered by the user.

3. Purposes and legal bases of processing

Personal data may be processed for the following purposes:

• to enable access to and ensure the proper operation of the website, as well as to prevent unlawful use, unauthorised access attempts and security incidents; legal basis: the Data Controller’s legitimate interest in ensuring the security and efficiency of its systems, pursuant to Article 6(1)(f) GDPR;
• to respond to requests for information, contact or collaboration submitted by the user; legal basis: taking steps at the request of the data subject prior to entering into a contract, pursuant to Article 6(1)(b) GDPR, or the legitimate interest in managing communications received;
• to comply with legal or regulatory obligations and requests from competent authorities; legal basis: Article 6(1)(c) GDPR;
• to establish, exercise or defend legal claims of the Data Controller in judicial or out-of-court proceedings; legal basis: the Data Controller’s legitimate interest, pursuant to Article 6(1)(f) GDPR.

4. Provision of personal data

The provision of personal data by email is voluntary. Failure to provide the information needed to identify the request or a valid contact address may prevent the Data Controller from responding. Technical browsing data is processed automatically to the extent necessary to transmit and display web pages.

5. Processing methods and security measures

Personal data is processed using electronic systems and, where necessary, by manual means, in accordance with the principles of lawfulness, fairness, transparency, data minimisation, accuracy, storage limitation and integrity. The Data Controller implements technical and organisational measures appropriate to the level of risk in order to protect personal data against loss, destruction, unauthorised access, unlawful disclosure or alteration.

6. Recipients of personal data

Personal data may be processed by authorised personnel of the Data Controller and, within the limits of their respective duties, by service providers supplying technical, IT, hosting, maintenance, security or email services. Where required by law, such providers are appointed as data processors pursuant to Article 28 GDPR.

Personal data may also be disclosed to public authorities, law enforcement agencies, judicial authorities or other parties legally entitled to receive it in the circumstances provided for by law. Personal data is neither publicly disclosed nor sold to third parties.

7. Transfers to third countries

Where the use of a technical service provider involves the transfer of personal data outside the European Economic Area, the transfer will be carried out in compliance with Chapter V of the GDPR, on the basis of an adequacy decision or appropriate safeguards, such as the standard contractual clauses approved by the European Commission, where applicable.

8. Data retention periods

• Technical data and browsing logs are retained only for the time strictly necessary for the operation, maintenance and security of the website, unless longer retention is required to investigate unlawful activity or comply with a request from a competent authority.
• Communications received by email are retained for the time necessary to handle the request and, as a general rule, for no longer than 24 months after the request has been closed, unless longer retention is required by law, contractual relationships or the need to protect the Data Controller’s rights.
• Data relating to contractual relationships is retained for the periods required under applicable civil, tax and accounting legislation.

9. Cookies and tracking technologies

As of the date of the latest update, the website does not use profiling cookies, advertising tools, remarketing systems or analytics services intended to track user behaviour.

The website may use only cookies or other technical tools that are strictly necessary for its operation, security and correct display. These tools are not used for commercial or profiling purposes.

Should analytics services, embedded content, maps, videos, social media plugins or other third-party tools capable of tracking users be introduced in the future, this Privacy Policy will be updated and, where required, a system for obtaining and managing the user’s prior consent will be implemented.

10. Links to external websites

The website may contain links to external pages or services. ARINDEEP S.R.L. does not control how such third parties process personal data. Users are therefore encouraged to review the relevant privacy policies before using external services.

11. Automated decision-making

Personal data collected through this website is not used for automated decision-making or profiling activities within the meaning of Article 22 GDPR.

12. Rights of data subjects

Where provided for by applicable law, data subjects may exercise the rights set out in Articles 15 to 22 GDPR and, in particular, may request:

• confirmation as to whether or not their personal data is being processed and access to such data;
• the rectification of inaccurate data or the completion of incomplete data;
• the erasure of personal data, where the applicable conditions are met;
• the restriction of processing;
• data portability, where applicable;
• the right to object, on grounds relating to their particular situation, to processing based on legitimate interests;
• the right to withdraw any consent at any time, without affecting the lawfulness of processing carried out before consent was withdrawn.

Requests may be submitted to admin@arindeep.com. The Data Controller may request the information necessary to verify the identity of the person making the request.

13. Complaint to the Supervisory Authority

A data subject who believes that their personal data has been processed in breach of applicable data protection legislation may lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali), pursuant to Article 77 GDPR, or seek a judicial remedy before the competent courts.

14. Children

The website and the services described are not specifically intended for children. The Data Controller asks children not to send personal data by email without the assistance of a parent or legal guardian.

15. Updates to this Privacy Policy

The Data Controller may amend this Privacy Policy to reflect legal, technical or organisational changes. The updated version will be published on this page together with the date of its latest revision.