Privacy notice

1. Data controller and contact

Artava Systems is the commercial brand of Seyedmohammad Khataeipour, a self-employed professional based in Torino, Italy, VAT number IT13500060010. He is the controller of personal data processed through this website. For privacy questions or to exercise your rights, contact [email protected].

2. Information we process

When you contact us, we process the details you provide: name, email address, company (if supplied), project type, timeline and message, together with submission time, language and the page from which you sent the enquiry. Please do not include sensitive personal data or confidential information about other people unless it is necessary and you are entitled to share it.

The website and its infrastructure also handle technical request information to deliver pages and protect the service. If you accept optional analytics, we record visited page paths, referring website domain, broad browser and device category, language, visible page time, session identifiers and a pseudonymous returning-visitor identifier. Our analytics database does not store your full IP address, name, email, precise location, form contents, URL query strings or URL fragments.

3. Purposes and legal bases

We use enquiry data to answer questions, assess a potential engagement and take steps at your request before a contract (Article 6(1)(b) GDPR). General professional correspondence and service security rely on our legitimate interests in communicating and operating a reliable service (Article 6(1)(f)). Applicable accounting, tax and other legal obligations rely on Article 6(1)(c).

Optional website analytics relies on your consent (Article 6(1)(a)). It helps us understand which content is useful and improve the website. Refusing analytics does not affect access to the site or the contact form. We do not use these analytics for advertising, cross-site profiling or automated decisions with legal or similarly significant effects.

4. Cookies, storage and your choice

Essential storage remembers your privacy decision and a theme you explicitly choose. Optional analytics starts only after you accept it. You can reject analytics on the first banner, choose preferences, or reopen Cookie settings in the footer at any time. Browser Do Not Track and Global Privacy Control signals keep optional analytics off.

Withdrawing consent stops new analytics collection and clears the analytics session stored in your browser. Earlier lawful processing is not affected. Cookie settings also offers Delete my analytics data, which removes the visitor profile and events linked to this browser. If the analytics service is unavailable, collection still stops locally; retry the deletion when the service is available. See the cookie notice for the full storage inventory.

5. Who can access the data

Personal data is accessible to the controller and authorised people who need it for the stated purposes. Technical recipients include website hosting and infrastructure providers, email providers and professional advisers where necessary. The current website delivery uses Vercel; configured email delivery uses Namecheap Private Email. First-party analytics is stored in the dedicated Django service operated for Artava on its VPS infrastructure.

The analytics panel is restricted to authorised staff using individual accounts. We do not sell visitor data or pass it to advertising networks. External links, such as LinkedIn, lead to services with their own privacy notices; those services are not embedded as tracking widgets on this website.

6. Locations and international transfers

Hosting and email providers may operate in more than one country, including outside the European Economic Area. The location of the first-party analytics service depends on the VPS region selected for it. Contact [email protected] for information about the recipients, locations and transfer safeguards applicable to your data. Where a restricted international transfer occurs, an applicable GDPR transfer mechanism is required.

7. Retention

First-party analytics events and inactive visitor profiles are deleted after 90 days. Privacy-choice receipts are kept for up to 180 days and do not create a visitor profile when analytics is refused. Dashboard access/export/deletion audit records are retained for up to one year. Short-lived hashed security rate-limit records are removed after one day.

Unsuccessful enquiries are normally retained for up to 24 months after the last substantive exchange, unless a shorter period is appropriate or retention is needed for a dispute. Information relating to an engagement, invoices or legal obligations is retained for the applicable statutory period. Infrastructure security logs are retained according to operational necessity and the hosting provider's applicable arrangements. Browser storage lifetimes are listed in the cookie notice.

8. Your rights

Subject to the GDPR's conditions, you may request access, correction, erasure, restriction and portability of personal data, and object to processing based on legitimate interests. You can withdraw analytics consent at any time without affecting earlier lawful processing. Send requests to [email protected]. We may ask for proportionate information needed to verify a request, and normally respond within one month.

Analytics identifies a browser pseudonym rather than a named person. To delete that browser's analytics directly, use Cookie settings while its privacy-choice cookie is still present. If that cookie has been removed, we may no longer be able to reliably connect analytics records to you; we do not collect extra identifying data solely to make that connection.

You may lodge a complaint with the Italian Garante per la protezione dei dati personali or the competent supervisory authority where you live or work.

9. Security and updates

We use access controls, password hashing, protected administrator sessions, request validation and retention controls appropriate to the service. Production connections must use HTTPS. No online system can guarantee absolute security. This notice may change when the website or its processing changes; the date above identifies this version.

Contact and controls

[email protected] · Open cookie settings · Garante per la protezione dei dati personali