Privacy Policy

Effective Date: January 1, 2026 | Last Updated: 2026 Revision

At Festivalvaultvista Antiquities & Design Heritage Ltd. ("Festivalvaultvista", "we", "our", or "us"), we hold the privacy of our visitors, art collectors, antiquarians, and partners in the highest regard. This Privacy Policy sets out the data processing principles and practices regarding the collection, handling, storage, and protection of personal data gathered via our web domain festivalvaultvista.boats.

1. Data Controller Information

For the purposes of the EU General Data Protection Regulation (Regulation (EU) 2016/679 - "GDPR"), the UK Data Protection Act 2018, and California Consumer Privacy Act ("CCPA"), the Data Controller is:

Festivalvaultvista Antiquities & Design Heritage Ltd.
Via Brera 28, 20121 Milano (MI), Italy
Company Registration No: IT-0982415891
Data Protection Officer (DPO) Contact: [email protected]

2. Categories of Information We Collect

We process personal data only when strictly necessary to fulfill our curatorial services, facilitate artisan directory listings, and ensure site functionality:

Directly Provided Data: Name, professional entity, email address, postal inquiries, and aesthetic quiz responses submitted via our Style Finder or Contact Portal.
Technical & Browsing Data: IP addresses, browser user-agent strings, referring URLs, screen resolutions, session timestamps, and device telemetry.
Cookie & Preference Data: User consent state records saved in browser local storage (`localStorage`) ensuring your cookie settings are maintained.

3. Legal Bases for Processing (Under GDPR Art. 6)

We process personal data based on the following legal grounds:

Consent (Art. 6(1)(a)): When you voluntarily subscribe to the Italian Antiquarian Gazette or submit a style curation inquiry.
Contractual Performance (Art. 6(1)(b)): To manage bottega listings, directory submissions, and antique concierge appointments.
Legitimate Interests (Art. 6(1)(f)): To safeguard platform integrity, detect bot activity, analyze regional readership, and optimize 3D WebGL rendering performance.

4. Cookies, Tracking & WebGL Telemetry

Our website uses essential session cookies and optional analytics trackers. 3D WebGL rendering executed on your client device computes real-time shader pipelines locally without collecting biometric or facial tracking data. For an exhaustive description of individual cookie lifespans and providers, consult our Cookie Policy.

5. Third-Party Processors & Data Transfers

We do not sell, rent, or lease your personal information to marketing brokers. We may share bounded data with vetted service providers strictly bound by GDPR Data Processing Agreements (DPAs) and standard contractual clauses (SCCs).

6. Data Subject Rights (GDPR & CCPA Rights)

Under international privacy regulations, you possess enforceable rights:

Right of Access: Obtain confirmation and copies of your personal data held by us.
Right to Rectification: Request correction of inaccurate or incomplete collector data.
Right to Erasure ("Right to be Forgotten"): Request immediate permanent deletion of your profile.
Right to Restriction & Objection: Object to processing grounded in legitimate interests or direct marketing.
Right to Data Portability: Receive your provided data in a structured, machine-readable JSON format.

To exercise any of these rights, transmit a written notice to [email protected]. We verify and respond to all requests within 30 calendar days.

7. Data Retention Policy

We retain inquiry submissions and newsletter records for a maximum duration of 24 months following the last recorded user interaction, or until explicit withdrawal of consent, after which data is scrubbed and purged from all active databases.