Privacy Policy

PRIVACY NOTICE (Art. 13-14 EU Reg. 2016/679)

1. DATA CONTROLLER

The Data Controller is Arcadia Company, with its registered office at Piazza Don Mapelli 60, 20099 Sesto San Giovanni (MI), VAT number 09758380969.

• Email: [email protected]
• Certified Email: [email protected]

(It is specified that there is no Data Protection Officer - DPO).

2. TYPES OF DATA COLLECTED AND PURPOSES

The Data Controller collects and processes the following data:

• Contact Information: Name, surname, email address, phone/mobile number, provided voluntarily through the contact form to request information or quotes for investigative and security services.
• Navigation and Geolocation Data: Collected via Google Analytics for statistical and site optimization purposes.
• Chatbot Conversation Content: Texts and inputs entered by the user in the AI-based virtual assistance interface.

3. LEGAL BASIS FOR PROCESSING

1. Carrying out pre-contractual measures: To respond to requests sent via the form (Art. 6.1.b GDPR).
2. Legitimate Interest: For the monitoring of site security and the technical improvement of the responses provided by AI (Art. 6.1.f GDPR).
3. Consent of the data subject: For the collection of geolocation data and analytical cookies (Art. 6.1.a GDPR).

4. SECTION AI: ON-PREMISE DATA PROCESSING AND ANONYMISATION

In accordance with the EU AI Act, please note that the site uses an Artificial Intelligence system based on LLM (Large Language Model) models.

• Data Sovereignty: The LLM model is entirely hosted on Arcadia Company's own servers at its premises. No data entered into the chat is transmitted to third parties or used to train external models.
• Native Anonymisation: The system saves only the textual content of the conversation. No technical association (IP or session ID) is maintained between the user and the written text.
• Processing logic: The AI processes requests to provide immediate assistance, but it does not make automated decisions that have legal effects (as per Art. 22 GDPR).

5. DATA TRANSFER OUTSIDE THE EU

Except for AI (managed internally), the use of Google Analytics may involve the transfer of browsing metadata to servers located in the United States. This transfer is governed by the Data Privacy Framework or the Standard Contractual Clauses (SCC) to ensure an adequate level of protection according to European standards.

6. RETENTION PERIOD AND RIGHTS (Art. 11 GDPR)

• Form Data: Retained for the time necessary to manage the request and any legal obligations.
• Chatbot Data: Content is retained for a maximum of 24 months for technical analysis.
• Exercise of Rights: The data subject may request access, rectification or deletion of the data by sending a communication to [email protected].

Important Note (Art. 11 GDPR): Since conversations with the Chatbot are saved anonymously and the Owner cannot identify the author of a specific text, the rights to delete or access such content cannot be exercised, unless the user provides unique elements that allow for certain identification.

7. COOKIE LIST

Click here to change your Cookie consent