Information notice on the processing of personal data pursuant to Articles 13 and 14 of EU Regulation 2016/679 (General Data Protection Regulation – GDPR)
This information notice describes how Arakne S.r.l. processes the personal data of users who visit the website www.arakne.it, use the contact form, send requests by email, or submit unsolicited applications.
This information notice relates exclusively to the website www.arakne.it and does not apply to third-party websites, platforms or services that may be reached via links on the website.
1. Data Controller
The data controller is:
Arakne S.r.l.
Registered office: Via Edoardo D’Onofrio, 304 – 00155 Rome, Italy
VAT no.: 04977261009
Email: info@arakne.it
Telephone: +39 06 888 166 28
Certified email (PEC): arakne@legalmail.it
For requests relating to the protection of personal data, you may write to: info@arakne.it.
Data Protection Officer — DPO:
NOT APPOINTED, as the conditions set out in Article 37 of the GDPR are not met.
2. Categories of data processed
Arakne S.r.l. may process the following categories of personal data.
2.1 Browsing data
The IT systems and software procedures used to operate this website acquire, in the course of their normal operation, certain data whose transmission is implicit in the use of Internet communication protocols.
This category includes, by way of example: IP addresses, domain names of the devices used, URI addresses of the requested resources, time of the request, method used to submit the request to the server, size of the file obtained in response, numerical code indicating the status of the response, and data relating to the user’s browser, operating system and IT environment.
2.2 Data provided via the contact form or email
When the user fills in the contact form or sends communications to the email addresses published on the website, Arakne S.r.l. processes the data communicated by the user, such as email address, content of the message, and any name, surname, company affiliation, contact details and any further data voluntarily included in the communication.
2.3 Data contained in job applications
When the user sends an application, a curriculum vitae or other professional information to the addresses indicated in the “Work with us” section, Arakne S.r.l. processes the data contained in the application, such as identifying data, contact details, information on educational and professional background, skills, work experience and any other information voluntarily provided by the candidate.
Candidates are invited not to include in their CV or application data that is not relevant to the selection process, in particular data belonging to the special categories referred to in Article 9 of the GDPR, unless strictly necessary in relation to the position sought or to specific legal obligations.
2.4 Cookies and similar tools
The website may use technical cookies, analytics cookies and other similar tools as set out in the “Cookies” section of this notice.
3. Purposes and legal bases of processing
Personal data is processed for the following purposes.
3.1 Technical operation and security of the website
Browsing data is processed in order to enable the operation of the website, ensure the security of the systems, prevent abuse, diagnose technical anomalies and ascertain any liability in the event of computer crimes.
Legal basis: the legitimate interest of the controller in the security and proper operation of the website, Article 6(1)(f) GDPR; where applicable, legal obligation, Article 6(1)(c) GDPR.
3.2 Responding to requests submitted via the form or email
Data provided by the user via the contact form or email is processed in order to respond to the requests received, provide information about Arakne S.r.l.’s services, manage pre-contractual communications or follow up on requests from the data subject.
Legal basis: performance of pre-contractual or contractual measures taken at the request of the data subject, Article 6(1)(b) GDPR; in the case of generic requests, the legitimate interest of the controller in managing the communications received, Article 6(1)(f) GDPR.
3.3 Management of job applications
Data submitted through unsolicited applications or in response to open positions is processed in order to evaluate the candidate’s profile, manage the personnel selection process, organise any interviews and comply with the obligations connected with the selection procedure.
Legal basis: performance of pre-contractual measures taken at the request of the data subject, Article 6(1)(b) GDPR; legal obligations, Article 6(1)(c) GDPR; where necessary for special category data that may be relevant to the selection, Article 9(2)(b) GDPR or any other applicable basis under current legislation.
3.4 Statistics on website use
The website may use analytics tools to obtain statistical information on page usage and to improve the content, performance and usability of the website.
If the analytics tools are configured to collect aggregated and minimised data, with no reasonable possibility of identifying the user and without combination with other information by third parties, such tools may be treated as equivalent to technical cookies.
If, on the other hand, the analytics tools allow identification, profiling, combination with other data or transfer to third parties for their own purposes, processing will take place only with the user’s prior consent.
Legal basis: for analytics that can be treated as technical, the legitimate interest of the controller in improving the website, Article 6(1)(f) GDPR; for non-technical analytics or profiling tools, the user’s consent, Article 6(1)(a) GDPR.
3.5 Compliance with legal obligations and protection of rights
Data may be processed in order to comply with obligations laid down by law, regulations or orders of the authorities, as well as to ascertain, exercise or defend a right in judicial or extrajudicial proceedings.
Legal basis: legal obligation, Article 6(1)(c) GDPR; legitimate interest in the protection of rights, Article 6(1)(f) GDPR.
4. Nature of the provision of data
The provision of browsing data is necessary in order to consult the website.
The provision of data via the contact form or email is optional, but failure to provide the necessary data may prevent Arakne S.r.l. from responding to the request.
The provision of data contained in job applications is optional, but failure to provide the information necessary to evaluate the profile may prevent the application from being processed.
5. Methods of processing
Personal data is processed by electronic means and, where necessary, by manual means, in accordance with the principles of lawfulness, fairness, transparency, minimisation, accuracy, integrity and confidentiality.
Arakne S.r.l. adopts technical and organisational measures appropriate to protect personal data from loss, destruction, unauthorised access, disclosure, modification or unlawful processing.
6. Retention periods
Personal data is retained for the time strictly necessary to achieve the purposes for which it was collected.
In particular:
- technical browsing logs are retained for a maximum period of 7 days, save for any need to retain them further in order to ascertain liability in the event of computer crimes;
- data sent via the contact form or email is retained for the time necessary to handle the request and, as a rule, no longer than 24 months from the last contact, save for legal obligations or the need to protect rights;
- data relating to job applications is retained for 24 months from the receipt or last update of the application, unless an employment relationship is established or further retention is required by law;
- data processed for administrative, accounting or tax obligations is retained for the periods provided for by the applicable legislation;
- cookies are retained for the periods indicated in the cookie table contained in this notice or in the preferences management panel.
7. Recipients of personal data
Personal data may be processed by authorised personnel of Arakne S.r.l. and by external parties that provide services necessary for the operation of the website or for the management of requests, such as hosting providers, technical maintenance, email services, consultants, IT providers and other parties acting, where necessary, as data processors pursuant to Article 28 of the GDPR.
Data may also be communicated to public authorities, bodies or parties entitled to receive it in the cases provided for by law.
Personal data is not disseminated.
8. Transfers to third countries
Personal data is not transferred to countries located outside the European Economic Area.
9. Cookies and tracking tools
The website uses cookies and similar technologies to ensure the technical operation of the pages, improve the browsing experience and, if so configured, collect statistics on the use of the website.
9.1 Technical cookies
Technical cookies are necessary for the operation of the website or to provide services requested by the user. They do not require the user’s consent, but must be indicated in the information notice.
9.2 Analytics cookies
The website does not use analytics cookies.
9.3 Profiling or marketing cookies
The website does not use profiling or marketing cookies.
9.4 Cookie table
|
Cookie name |
Provider |
Category |
Purpose |
Duration |
Third party |
Base giuridica |
|
cookieconsent_dismissed |
Arakne |
Technical |
The cookie serves to remember that the user has read the cookie banner, allowing the website not to display the information notice again during subsequent visits. |
13 months |
NO |
Consent |
9.5 Managing cookie preferences
The user may configure their browser to block or delete cookies. Disabling technical cookies may compromise the proper operation of the website.
10. Rights of the data subject
In the cases provided for by the GDPR, the data subject may exercise the following rights:
- right of access to personal data;
- right to rectification of inaccurate data;
- right to erasure;
- right to restriction of processing;
- right to data portability, where applicable;
- right to object to processing;
- right to withdraw consent at any time, without prejudice to the lawfulness of processing based on consent prior to its withdrawal;
- right not to be subject to decisions based solely on automated processing, including profiling, where applicable.
Requests may be sent to: info@arakne.it.
The controller responds to requests within the time limits provided for by the GDPR.
11. Complaint to the supervisory authority
A data subject who considers that the processing of their personal data takes place in breach of the applicable legislation has the right to lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali), in accordance with the procedures indicated on the Authority’s website, or to bring the matter before the competent judicial bodies.
12. Updates
This information notice may be updated from time to time. The version published on the website is the one currently in force.
Last updated: 24/04/2026.