Privacy Policy for visitors to the website

The purpose of this Privacy Policy is to describe how this site is managed, with reference to the processing of personal data of users/visitors who consult it.

This is a disclosure made pursuant to Art. 13 of EU Regulation 679/16, General Data Protection Regulation (GDPR) to those who connect to the website.

The site ( is owned by the company Arlo Investimenti S.r.l. a socio unico (C.F. and P. IVA: 02661850301), current in Udine 33100 (UD), Via Marco Volpe no. 43, in the person of the pro-tempore legal representative, e-mail:, PEC:, owner of the trademark “Palazzo Talenti 1907™” (hereinafter“Owner“), which, as the Controller of the processing of users’ personal data, guarantees compliance with the GDPR and other applicable privacy regulations.

Users should read this Privacy Policy carefully before submitting any type of personal information and/or filling out any electronic form on this site. The validity of the information contained on this page is limited to this site and does not extend to other websites that may be accessed through hyperlinks.

Type of data processed and purpose of processing

  1. Navigation data

The computer systems and software procedures responsible for the operation of this site acquire some personal data that are then implicitly transmitted with the use of Internet communication protocols. This category of data includes IP addresses or domain names of the computers used by users connecting to the site, the URI (Uniform Resource Identifier) notation addresses of the requested resources, the time of the request, the method used in submitting the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response given by the server (successful, error, etc.) and other parameters related to the user’s operating system and computer environment. This data is used for the sole purpose of obtaining anonymous statistical information about the use of the site and to check its correct operation and is deleted immediately after processing. In the event of intervention by the authority, such data could be used to ascertain liability for possible computer crimes.

  1. Data voluntarily provided by users

If users, by connecting to this site, send their personal data to request certain services, or to make requests via e-mail or contact form, this will result in the acquisition by the Data Controller of the sender’s address and/or any other personal data that will be processed to respond to the request, possibly for the provision of the service, or for the forwarding of a newsletter containing promotional information if there is express consent from the user.

  1. Data provided by third parties

In order to expand the audience of its marketing campaigns, the owner may acquire contact data of individuals who have early consent to receive commercial and promotional information. This data comes from our verified partners, who are themselves committed to complying with the GDPR and other applicable privacy regulations.

  1. Cookies

This site makes use of cookies, including persistent and also used for marketing and user profiling purposes, in order to provide a personalized and interesting shopping experience. For more details about our use of cookies, please refer to our Cookies Policy.

Purpose of processing

Personal data provided by users will be processed for the following purposes until you object:

  • Fulfillment of a contract: If the user makes use of the online shop made available on the pages of the site, or, in general, provides his or her data in the context of a commercial transaction with the Owner, the Owner may make use of it in order to contract with the user and fulfill the obligations arising from the contract.
  • Protection of the legitimate interest of the owner: browsing data on this website is analyzed to prevent fraud, cyber attacks or other illegal use of the site; any contact request from the user contains personal data that is processed in order to respond to it by sending the requested information. To the extent that they may be relevant, your personal data may be processed for the purpose of exercising the holder’s legal defense.
  • Obligations arising from laws, regulations or authoritative measures: the user’s personal data are also processed when relevant for administrative-accounting activities functional to the fulfillment of contractual and pre-contractual obligations, or necessary for the fulfillment of legal obligations or arising from regulations or authoritative measures issued to the Owner.
  • Only with your consent and until you revoke it, sending commercial or promotional communications: possible subscription to mailing list/newsletter; market research; profiling of purchasing preferences also for statistical purposes. For any profiling activities carried out through cookies, the user’s consent may be granted or revoked with regard to the specific cookie.

Method of treatment

All personal data provided through this site will be processed in accordance with the principles of lawfulness, fairness and transparency and will be kept for a period of time not exceeding that necessary to achieve the purposes for which they are collected and processed in accordance with Art. 5 GDPR.

As stated in Art. 32 GDPR the Data Controller shall take appropriate and adequate preventive security measures in order to avoid the risks of destruction or loss of data, unauthorized access, or processing that is not permitted or not in accordance with the purpose of collection.

Except as specified with reference to navigation data, the provision of data through the forms (contact forms, newsletter subscription, user account creation and information entered in the profile, any purchases, comments and reviews, cookies) on this site is always optional. Users/visitors are free to provide their personal data and failure to do so will only result in the inability to forward or process certain user requests.

Place of data processing

The processing operations related to web services take place at the headquarters of the company Arlo Investimenti S.r.l. a socio unico (C.F. and P. IVA: 02661850301), current in Udine 33100 (UD), Via Marco Volpe no. 43, and/or at the premises of the accommodation “Palazzo Talenti 1907”, located in Trieste 34122 (TS), via Saverio Mercadante 1, at the hosting service provider … and of the webmaster …, who are appointed as external data processors by the Data Controller. The sending of the newsletter is managed using Mailchimp software from Intuit Inc. ( Therefore, the contact data of users/visitors requesting the newsletter are entered within the platform. Data are processed only by technical staff of the Office in charge at the Holder or at our partners listed in this paragraph. No data directly derived from the web service is disclosed to other parties or disseminated, except as necessary to inhibit abusive access to the system or to comply with a legal obligation or order of authority.

Personal data provided by users who submit requests are used for the sole purpose of performing the requested service or performance and are disclosed to third parties in cases where this is necessary for this purpose, such as to express couriers in order to make deliveries.

Information Sharing

Data will be processed by data processors in accordance with Art. 30 of Legislative Decree. 196/03 and Art. 29 of the GDPR. Any third parties to whom the data may be communicated in order to carry out processing operations related to the purposes specified in this notice, are designated in advance by the Data Controller as external data processors or persons in charge of processing pursuant to Art. 28 GDPR.

The Owner may share user information, when services are requested or at the user’s request, with its business partners, for commercial, legal or litigation purposes; it may also disclose such data to entities that provide services for the management of the computer system. The Owner may share information other than that described in this policy upon notification and obtaining consent.

The Holder neither sells nor temporarily transfers the personal data it holds. No data will be otherwise disclosed or disseminated in violation of the law. Any third-party services with which the site is equipped may independently acquire user data. In connection with this activity, they are considered autonomous data controllers.

Retention and deletion of information

The Controller retains Your information for a period not exceeding the purposes for which the data was collected and may also delete and anonymize Your information upon request. The Owner may retain data beyond the natural expiration of the contract if this is required as a legal obligation or is appropriate for the purpose of defense in court. After this retention period has expired, the Data will be destroyed and/or deleted.

Data Controller

The Data Controller is the Holder named in the foreword. The Data Controller also employs internal and external data processors appointed for the achievement of the purposes described above (technical purposes related to the provision of the service and commercial purposes); the complete list of the responsible parties or the persons in charge is available upon simple request for consultation at the Data Controller’s office. You can always contact the Holder by sending an e-mail to

Rights of data subjects

Those affected by the processing of personal data have the right at any time to obtain confirmation of the existence or non-existence of such data (as well as to receive a copy) and to know its content and origin, verify its accuracy or request its integration, updating, or rectification. They also have the right to request the deletion, transformation into anonymous form or blocking of data processed in violation of the law or pending a request for rectification (pending such rectification by the Data Controller), as well as to object in any case, for reasons related to their particular situation, to their processing (Articles 15-22 GDPR). Requests should be directed to the Data Controller at: The data subject always has the right to lodge a complaint before a supervisory authority.


The Owner’s website is not intended for use by minors. If it becomes apparent that a minor has provided personal information by accessing the site, the Owner will immediately delete that information.

Business communications

From the moment data is entered with express consent to do so, we may use your contact information to send you commercial communications and notifications regarding new services offered by the Owner that we believe may be of interest to you. If you do not wish to enroll in said service, it will be sufficient not to check the box related to the request for enrollment in the service.

For future reference, if you are no longer interested in the Holder’s communications and would like to unsubscribe from the newsletter, you may do so by clicking on the “unsubscribe” link at the bottom of each email sent or by sending an email to:

Changes to the privacy policy

The Owner reserves the right to change, update, add or remove portions of this privacy policy. The person concerned is required to check periodically for any changes. If substantial changes are made to the Owner’s use of data about you, the Owner will notify you by posting them prominently on its pages.

Manifestation of consent

By submitting the relevant forms (contact form or newsletter subscription) You expressly consent to the processing of your personal data for the relevant purpose (response of contact request or receipt of newsletter and communications related to services offered by the Data Controller). Sending orders for the purchase of products involves the processing of the data subject’s data for the purpose of fulfilling the sales contract and related legal obligations and does not require express consent.

The extended and updated privacy policy is available at … and is provided to you pursuant to and for the purposes of Articles 13-14, EU Regulation No.679/16 (GDPR).

How to contact us

To better understand our Privacy Policy, access information, ask questions, or file a complaint, you can contact us at: