Privacy notice
1. Data controller
The data controller is the person responsible for the digitARCH project, contactable at Cortile Lo Re 5, 90028 Polizzi Generosa (PA), Italy.
digitARCH is a non-profit project and is not a business activity: data is processed by the controller acting as a natural person.
For any question concerning personal data you can write to info@diarch.it or call +39 0921 688175.
2. This website does not collect data
The site is entirely static: its pages are HTML, CSS, JavaScript and image files served as they are, with no server-side software, database or admin panel. In practice this means that:
- no cookies are set, neither technical nor profiling ones, and no equivalent technology is used (localStorage, fingerprinting, tracking pixels);
- there are no analytics or statistics tools (no Google Analytics, no advertising pixel, no social plugin loading third-party scripts);
- there are no contact forms or other forms collecting data: the contact details on the page are direct links that open your mail client or your phone, without passing through our systems;
- fonts and graphic assets are hosted locally: while you browse, no request is made to external services (for example Google Fonts), so your IP address is not disclosed to third parties.
For this reason the site needs no cookie consent banner: there is nothing to consent to.
3. Browser language
On the home page the site reads your browser's language setting (navigator.language) for the sole purpose of letting you know that the other language version exists. This reading happens entirely inside your browser: the value is not sent to us or to any third party, is not saved in cookies or any other device storage, and is not used to profile you. No automatic redirect takes place: the choice of language remains yours, through the switch at the top right.
Since it involves neither storing information on, nor accessing information already stored on, your device, this feature does not require the consent set out in Article 5(3) of the ePrivacy Directive.
4. Technical connection data (server logs)
Like any website, the server hosting these pages may automatically record technical connection data — IP address, date and time of the request, the page requested, browser type — for security, diagnostics and the proper functioning of the service.
- Legal basis: the controller's legitimate interest in the security and continuity of the service (Art. 6(1)(f) GDPR).
- Retention: logs are kept only for as long as strictly necessary for those purposes, according to the hosting provider's policies, and are not used to profile or identify visitors.
The hosting provider processes this data as a processor pursuant to Art. 28 GDPR.
5. If you contact us
If you write or call us, we will process the data you voluntarily provide (name, email address or telephone number, content of your message) solely in order to reply to your request.
- Purpose: responding to the communication received and managing any relationship arising from it.
- Legal basis: responding to your request and pre-contractual measures, or legitimate interest in replying (Art. 6(1)(b) and 6(1)(f) GDPR).
- Retention: for as long as needed to handle the request and thereafter for any period required by law.
- Disclosure: data is neither disseminated nor sold to third parties; it may be processed only by the email service provider, acting as a processor.
Providing your data is optional, but without it we are simply unable to reply to you.
6. Transfers outside the EU and automated decision-making
We do not transfer personal data outside the EU other than any transfer implicit in the hosting and email services used, which operate under the safeguards set out in Chapter V of the GDPR. No profiling and no automated decision-making take place.
7. Your rights
At any time you may exercise the rights set out in Articles 15-22 GDPR, and in particular:
- access your personal data and obtain a copy of it;
- request its rectification or erasure;
- request restriction of processing, or object to processing based on legitimate interest;
- request the portability of the data you have provided to us;
- withdraw your consent, where processing is based on consent, without affecting the lawfulness of processing carried out beforehand.
To exercise them, simply write to info@diarch.it. We will reply without undue delay and in any case within one month.
If you believe that the processing of your data infringes the Regulation, you also have the right to lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali, Piazza Venezia 11, 00187 Rome — garanteprivacy.it) or with the supervisory authority of the country where you live.
8. Links to external sites
The individual heritage pages contain an optional link to a 360° virtual tour hosted on a domain outside this site. The link opens only if you click it: until then, no data is sent to that service. Once you leave these pages, the privacy policies of the respective operators apply, over which digitARCH has no control. The same applies to the social profiles linked in the footer.
9. Changes to this notice
Any updates will be published on this page, with the date of the latest revision shown at the top.