Privacy Policy

1. Data controller

The data controller is GreenArt, owner Franco Valli, VAT no. X. Privacy contact: info@greenart.tech.

GreenArt determines the purposes and means of the processing described in this notice.

2. Data processed when you browse

The website may process technical information necessary to deliver pages securely, such as network and request information, timestamps, requested resources and security logs. The browser may also store strictly necessary preferences, including the selected language and your privacy choice.

Optional analytics/tracking data are processed only after you have actively consented. Depending on the configuration of GreenArt's first-party tracking software, those data may include a pseudonymous consent identifier, page path, event type, date/time, language, referrer, viewport/device information and network information made available in the normal course of a connection. The tracker is designed not to collect form contents or special-category data.

3. B2B request data

When you use the B2B Request form, GreenArt processes the information you provide, including company, contact name, professional email, country/market, business type, indicative volume, message and the metadata proving that the Privacy Policy was acknowledged.

Please do not enter unnecessary personal data, special categories of personal data or confidential information unrelated to the request.

4. Purposes and legal bases

• Website delivery, security, fraud/abuse prevention and technical preference storage: performance of the requested service and, where applicable, GreenArt's legitimate interest in operating and protecting the website (Art. 6(1)(b) and/or (f) GDPR).
• B2B enquiries and requested pre-contractual activities: steps taken at the data subject's request before entering into a contract (Art. 6(1)(b) GDPR).
• Compliance with legal obligations: Art. 6(1)(c) GDPR.
• Optional first-party analytics/tracking: consent (Art. 6(1)(a) and Art. 7 GDPR). Tracking remains disabled unless and until consent is granted.

The privacy-choice panel offers three clear options. “Accept essential only” allows the B2B form without optional tracking and records the Privacy Policy acknowledgement with the form submission. “Accept all” additionally gives consent to optional first-party analytics. “Reject” keeps optional tracking off and disables the B2B form until the user changes the privacy choice. Public website pages remain accessible.

5. Consent and withdrawal

Consent to optional tracking is voluntary, specific and not preselected. Tracking is never required to use the B2B form because “Accept essential only” provides a no-tracking alternative. You may change or withdraw your choice at any time through Privacy Choices. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.

The selected privacy mode is stored locally in the browser so the site can respect it. No separate tracking-consent receipt is sent to Netlify Forms. Essential-only and rejected choices are not sent to the analytics system.

6. Providers and recipients

GreenArt uses Netlify for hosting, website infrastructure, serverless functions and Netlify Forms. Data may also be processed by authorised GreenArt personnel and technical or professional providers only where necessary for the purposes described above.

If GreenArt configures its own analytics endpoint, optional tracking events are sent to that GreenArt-controlled or GreenArt-selected system only after consent.

• Netlify, Inc. — hosting/infrastructure and B2B form processing;
• GreenArt's authorised personnel/collaborators;
• technical and professional advisers where necessary;
• public authorities where disclosure is required by law.

Personal data are not sold to third parties.

7. International transfers

Use of Netlify may involve processing outside the European Economic Area, including in the United States. Transfers must rely on an applicable legal mechanism. Netlify states that it participates in the EU-U.S. Data Privacy Framework for relevant transfers and may also rely on Standard Contractual Clauses where applicable.

8. Retention

Security and infrastructure logs are retained according to operational and security needs and provider settings. Technical browser preferences remain until the user changes them or clears browser storage.

If no contractual or commercial relationship follows a B2B enquiry, GreenArt normally deletes or anonymises the enquiry within 12 months from the last meaningful communication, unless a longer period is required by law or for legal claims.

Optional analytics data should be configured according to data-minimisation principles. GreenArt's intended default is no more than 13 months for identifiable/pseudonymous event-level analytics unless a shorter or longer period is justified and disclosed before deployment.

9. Your rights

Where applicable, you may exercise the rights of access, rectification, erasure, restriction, objection and data portability, and you may withdraw consent at any time. Requests may be sent to info@greenart.tech. You may also lodge a complaint with the competent supervisory authority, including the Italian Data Protection Authority (Garante per la protezione dei dati personali).

10. Automated decisions, minors and marketing

The website does not use the data described here for solely automated decisions producing legal or similarly significant effects. The B2B form does not automatically subscribe users to newsletters or recurring marketing communications. The website and B2B area are intended for professional/business information and are not designed to collect data from children.

11. Changes

GreenArt may update this notice following legal, technical or organisational changes. The current version will remain publicly available. Material changes affecting consent-based tracking may require a new privacy choice.