Privacy Policy
This notice concerns personal data collected through https://ottart.it/. It is prepared under Regulation (EU) 2016/679 (GDPR) and should be read together with the Cookie Policy and any specific notices displayed in forms.
Data controller and contacts
- Data controller
- OTTART
- Registered address
- via Mutinelli 23/1 – 30173 Mestre VE, Italy
- VAT / tax ID
- 03205370277
- Privacy contact
- info@ott-art.it
- Telephone
- +39 041 5369 837
Types of data collected
The website may process information supplied by users, such as first and last name, email and request contents, and usage data such as browser, device, pages, times, source and navigation events. Identifiers, network information and ecommerce data may constitute personal data even without a name. Required and optional fields are identified when information is collected.
Processing methods and location
Processing uses IT and organizational measures appropriate to the risk to limit unauthorized access, alteration, disclosure or loss. Access is limited to authorized personnel and suppliers involved in delivering services. Data are processed by the controller and the actual service providers under the applicable agreements.
Purposes and legal bases
Contacting users
Form information is used to respond to enquiries and quotation requests. The legal basis is taking steps at the user's request before entering into a contract or performing a contract, according to the request. Sending an enquiry does not automatically constitute marketing consent.
Security, maintenance and protection of rights
Usage data and logs may be processed for the legitimate interest in website security and operation, within necessary limits and after balancing the data subject's rights, or to comply with legal obligations. Data may be used to establish or defend legal claims and disclosed to authorities where required by law.
Analytics, advertising and external content
Non-essential integrations and their cookies follow banner preferences. Where enabled, cookieless technologies require a separate assessment of processing and its legal basis; the absence of cookies alone does not guarantee anonymity or lawfulness.
Google Analytics 4
Google Analytics 4 measures visits, navigation and, where present, ecommerce events such as product views, cart activity and purchases. Analytics cookies are enabled only after Analytics consent. Google states that GA4 does not log or store IP addresses; this does not make all analytics data anonymous.
Google Consent Mode v2
The website uses Advanced Consent Mode. Google tags may load before a choice and send cookieless signals when storage is denied. These signals may include event, device and page information and support aggregated measurement or modeling. Denying cookies therefore does not necessarily stop every request to Google; cookieless does not automatically mean anonymous or exempt from privacy rules.
Google Privacy Policy | Google Analytics Opt-out
Providing your data (first name, surname, address, telephone and/or mobile number) for the purposes indicated above in point 3) is optional, as is consenting to the retention of your email address for a period of 36 months for the purpose of sending a periodic newsletter. The User may therefore choose not to provide such consent, or may withdraw any consent already given—following the procedures set out in point 8—without affecting the lawfulness of the processing based on the consent provided prior to such withdrawal.
Recipients and providers
employees and/or collaborators of the data controller;
The data will not be disseminated and will be processed using organizational methods and logic related to the purposes specified above.
Authorized personnel and suppliers receive only information needed for their activities. Where required they are appointed as processors; some providers may act as independent controllers. Information about agreements and recipients is available from the controller.
Transfers and processing locations
Personal data will be managed and stored on servers located within the EU—belonging to the Data Controller and/or appointed third-party companies—and no such data will be transferred outside the territory of the European Union.
Any transfers outside the European Economic Area must meet Chapter V GDPR requirements. The controller identifies the countries and safeguards actually used and provides information on how to obtain a copy of those safeguards.
Retention periods
The Data Controller will retain the personal data provided for the time necessary to fulfill the purposes described above; specifically:
– the first name, surname, email address, and telephone number entered into the forms in the “Contacts” section will be used solely to respond to any messages sent by the User and will be deleted once the correspondence has concluded;
– subject to specific and separate consent, the first name, surname, and email address provided by the User via the forms in the “Contacts” section will be stored for a maximum period of 36 months, allowing the Data Controller to send the User informative newsletters.
Browser storage lifetimes are distinct from server-side data retention and are listed in the Cookie Policy. Withdrawal stops processing based on that consent, subject to other applicable legal bases or statutory retention obligations.
Providing data
Data necessary to respond to a request or perform a contract must be supplied to obtain that service. Optional data may be withheld. Rejecting non-essential cookies does not prevent ordinary navigation or sending an enquiry.
User rights
In the cases and within the limits provided by the GDPR, you have rights of access, rectification, erasure, restriction, portability and objection. You may withdraw consent at any time without affecting the lawfulness of previous processing. Send requests to the privacy contact above; identity verification may be necessary. You may lodge a complaint with the Italian data protection authority or the competent supervisory authority.
Cookies and preferences
See the Cookie Policy for the register and lifetimes. Manage cookie preferences.
Further information and updates
Specific notices may supplement this document. Updates are published on this page with their date; a new consent choice is requested when necessary.
Definitions and legal references
Personal data means information relating to an identified or identifiable natural person. The controller determines the purposes and means of processing; a processor processes data on the controller's behalf. The data subject is the natural person to whom the data relate. This notice applies only to the stated website and is based on the GDPR, applicable electronic communications rules and relevant national law.
Last updated: 2026-11-09