Privacy and Cookie Policy

1. Introduction

This notice is based on Regulation (EU) 2016/679 (GDPR) and describes the processing carried out through the public area of the Intyve.art website, including contact, catalogue request and consultation forms.

The website is not intended to collect special categories of personal data. Users are asked not to include health, judicial or unnecessary information in their messages.

2. Data controller

The data controller is identified in the company details shown below. These references are updated automatically from the website settings.

• Intyve S.r.l.
• Sede: Via Altinate , 128, 35121 Padova (Italia)
• P.IVA / C.F.: IT03866250289
• PEC: intyve@pec.it
• Email: info@intyve.art
• Telefono: Show phone number
• Codice SDI: ABCDEF1

3. Data collected by the website

The website collects technical browsing data such as IP address, user agent, visited URL, referrer page, visit time, duration, language or technical preferences and data required for security.

It also collects data voluntarily submitted through forms to respond to requests, prepare quotes, manage commercial contacts and organize consultations or supplies.

When the user reaches a form from a product page or uses configured selections, the system may save product, variant, quantity, selection summary and reference to the product page.

4. Data collected by public forms

The Contact form may collect first name, last name, email, phone number, company or venue name, project type, message and Privacy Policy acceptance.

The Catalogue Request form may collect name, company, email, role, interest, country, message and privacy acceptance.

The Consultation Request form may collect name, company, email, phone number, interest or project type, timeline, message and privacy acceptance.

If a custom form is active, the website stores submitted values in structured format, together with origin page, requester email and name where available, IP address, user agent and submission date.

5. Purposes and legal bases

Responding to requests submitted through forms: pre-contractual measures or user consent.
Sending catalogues, information and quotes: pre-contractual measures and legitimate commercial interest.
Managing orders, contracts and customer relationships: performance of a contract and legal obligations.
Security, abuse prevention and website protection: legitimate interest of the controller.
Internal browsing statistics: legitimate interest, with data used for technical and commercial analysis.

6. Analytics and technical data

The website uses an internal analytics system that records page views, visit duration, page URL, referrer, page title, a browser-generated session token, IP address and user agent.

The session token is stored in the browser localStorage to recognize the visit session. The IP address may be used server-side to derive approximate geographical information through external technical providers.

For product passport pages, analytics may associate the visit with technical passport identifiers such as token or serial number.

7. Cookies and similar technologies

The website uses cookies and similar technologies (including localStorage) to ensure security and operation, remember the language and, only with the user's consent, enable browsing statistics and external content.

On the first visit, an informational banner appears at the bottom of the page. From there you can:
• accept all non-essential cookies;
• open «Customize» and choose category by category;
• close the banner without accepting optional cookies (only technical cookies remain active).

After your choice the banner disappears. A «Manage cookies» button appears at the bottom left to review or change preferences at any time. A link to this notice is available in the banner and in the preferences panel.

Your choice is stored in the intyve_cookie_consent cookie and, if the browser allows it, also in localStorage under the same key. The value contains the policy version, accepted categories (necessary, statistics, preferences) and the date/time of the choice. Maximum duration: 365 days, path /, SameSite Lax (Secure on HTTPS connections). If the policy version changes, the previous consent is no longer valid and the banner is shown again.

Categories used:

1. Necessary (always active, no consent required)
• PHP session cookies (e.g. PHPSESSID) for security, reserved-area access, CSRF protection on forms and correct submission of requests.
• intyve_lang cookie: stores the selected or detected content language (duration approx. 90 days, HttpOnly, SameSite Lax).
• intyve_cookie_consent cookie/storage: required to remember expressed preferences.

2. Statistics (consent only)
• Internal analytics script, loaded only after acceptance of this category.
• localStorage intyve.analytics.session.public (and on product passport pages, intyve.analytics.session.passport): technical visit session token to record page views, duration, URL, referrer and related technical data (see section 6).
• If you withdraw consent, the script is disabled and analytics data stored in the browser is removed.

3. Preferences / external content (consent only)
• Google Fonts (fonts.googleapis.com and fonts.gstatic.com domains): loading of the Inter font used by the website. The browser may contact Google only after acceptance of this category.

4. Marketing
• Profiling or advertising cookies are not currently active. The category is shown in the preferences panel but remains disabled.

Third-party cookies embedded in pages (videos, maps, social plugins, marketing tools) are not active at present. If added in the future, they will be described in this section and activated only after consent where required by law.

8. Retention

Commercial requests and data entered in forms are retained for the time needed to manage the request, the commercial relationship, any quotes, contracts, orders and administrative or tax obligations. Technical and analytics data are retained for the time needed for statistics, security, diagnostics and website improvement, unless deleted or anonymized earlier.

9. Recipients and providers

Data may be processed by personnel and collaborators authorized by the controller, hosting and web infrastructure providers, email and technical tool providers, tax, administrative, legal or technical consultants, IP geolocation providers for technical analytics, and public authorities where required by law.

Providers that process data on behalf of the controller must be appointed as data processors where required by the GDPR.

10. Artificial intelligence tools

For internal operational activities (triage and qualification of commercial requests, draft replies and emails, content translation, catalogue analysis and CRM support) the controller uses artificial intelligence tools provided by OpenAI (OpenAI, L.L.C., based in the United States).

Commercial request and quote data — including name, company, country, message content and any contact details — may be transmitted to these tools solely to provide the requested operational support. Passwords and access credentials are never transmitted.

This processing involves a transfer of data to a non-EU country (United States), governed by standard contractual clauses and a Data Processing Addendum with the provider, which acts as a data processor. Under the terms of the API used, the data sent is not used to train the provider's models.

Decisions with significant effects (prices, contracts, sending communications, orders) remain subject to human review and approval: the AI provides proposals and support, not final automated decisions.

11. Data subject rights

The data subject may exercise the rights provided by the GDPR, including access, rectification, erasure, restriction, objection, data portability and withdrawal of consent where processing is based on consent.

Requests may be sent to the controller using the contact details shown on this page.

The data subject also has the right to lodge a complaint with the Italian Data Protection Authority: garanteprivacy.it.

12. Reference sources

This policy was drafted using the internal Markdown documents in the gdpr/ folder as a basis: GDPR regulation and privacy/cookie template, adapted to the actual operation of the website. Sources: Regulation (EU) 2016/679 - GDPR, the Italian Privacy Code where applicable, and guidelines and measures of the Italian Data Protection Authority.