Privacy Policy

Last updated: September 27, 2025

1. Data Controller The Data Controller is: Andrea Rizzi

Registered Office: Milan, MI, Italy

2. Types of Data Collected The following personal data is collected through the arvestaglobal.it website:

First and Last Name

Email Address

The data is provided directly by the user through the contact forms on the website or by spontaneously sending an email to the Data Controller.

3. Purpose of Processing The personal data collected is used exclusively to: - respond to requests for information or consultations sent via the website or by email; - maintain any subsequent contact with the user regarding the services requested. The data will not be used for marketing or automated profiling purposes.

4. Processing Methods Data is processed using IT and electronic means, in compliance with the principles of lawfulness, fairness, and transparency set forth in EU Regulation 2016/679 (GDPR). The collected data is stored: - on the Wix platform, which hosts the website and collects data through contact forms; and on Google Drive, in a document managed directly by Andrea Rizzi. Both services adopt GDPR-compliant security measures and may process data as external data processors.

5. Legal Basis for Processing The legal basis for processing is the user's explicit consent, expressed when submitting the contact form or email communication (Article 6, paragraph 1, letter a, GDPR).

6. Data Retention Personal data will be retained for the time strictly necessary to process the request and in any case no longer than 12 months from the last contact, unless legal or accounting requirements require a longer period.

7. Communication and dissemination of data Personal data will not be disclosed, sold, or transferred to third parties. It may be disclosed exclusively to parties providing technical or management support to the Data Controller (e.g., hosting providers, email services), appointed as external data processors.

8. Rights of the data subject Users may at any time exercise the rights set forth in Articles 15 et seq. of the GDPR, including: * obtain confirmation of the existence of their data and access to it; * request rectification, erasure, or restriction of processing; * object to data processing; * withdraw consent at any time; * lodge a complaint with the Italian Data Protection Authority ([www.garanteprivacy.it](http://www.garanteprivacy.it)). To exercise your rights, please write to: andrea@arvastaglobal.com

9. Data Transfer Outside the EU Data collected through Wix and Google Drive may be transferred to countries outside the EU (e.g., the United States). In such cases, the transfer takes place in compliance with the standard contractual clauses approved by the European Commission and the guarantees provided by the GDPR.

10. Cookies The site may use technical or anonymous analytics cookies for proper functioning and to improve the user experience. Profiling or advertising tracking cookies are not used. For more details, please see the [Cookie Policy](#) (to be updated if available).

11. Changes to this Policy The Data Controller reserves the right to update this Privacy Policy at any time. Changes will be posted on this page with the update date.