PRIVACY POLICY – ART4WOMEN S.R.L.

Last updated: October 30, 2025

This document is drafted in compliance with Italian and European regulations on personal data protection, e-commerce, and consumer rights. Art4Women S.r.l. reserves the right to periodically update this document to ensure full legal compliance and transparency toward users.

1. Data controller

The data controller of personal data is Art4Women S.r.l., with registered office at Via Giovanni Durando, 38 – 20158 Milan (MI), VAT 13563910960, REA MI 2730643

PEC: art4women@pec.it,

e-mail: comunicazione@art4women.com

2. Types of data processed

Art4Women processes the following data:

Identifying data (name, surname, email address, phone number)

Billing and shipping data for online purchases

Data regarding browsing preferences and purchases

Any data provided for marketing purposes, newsletter subscription, or event participation

3. Purpose and legal basis of processing

Personal data are processed for:

a) Technical and administrative management of the website and orders (execution of contract)

b) Compliance with legal and fiscal obligations (legal obligation)

c) Sending commercial communications or newsletters (with explicit consent)

d) Anonymous statistical analysis on website performance (legitimate interest)

4. Processing methods

Data are processed using IT and telematic tools, ensuring adequate security measures to prevent loss, unlawful use, or unauthorized access.

5. Data retention

Personal data are retained only as long as necessary for the purposes for which they were collected.

Purchase-related data are kept for 10 years for tax purposes

Marketing data are kept until consent is revoked

6. Communication and disclosure of data

Data may be shared with technical, fiscal, logistics, or marketing service providers, duly appointed as data processors. Data are not disclosed or sold to third parties for commercial purposes without consent.

7. Rights of the data subject

Data subjects can exercise the rights under Articles 15–22 of the GDPR at any time: access, rectification, deletion, restriction, objection, data portability, and withdrawal of consent

Requests can be sent to: comunicazione@art4women.com or art4women@pec.it

8. Data transfer abroad

Any transfers of data to non-EU countries are carried out in compliance with Articles 44 et seq. of the GDPR and only to entities guaranteeing adequate levels of protection.

9. Consent for marketing purposes

Users may provide explicit consent to receive newsletters and promotional communications. This consent is optional and can be revoked at any time by writing to comunicazione@art4women.com

10. Jurisdiction

Any dispute regarding the interpretation or application of this Policy shall be submitted exclusively to the Court of Milan.