Privacy Policy

Introduction

This Privacy and Security Statement explains how Arti Analytics collects, uses, stores, protects and discloses personal data obtained through our website, electronic communication channels, recruitment processes, and regular business activities.

We are committed to safeguarding the confidentiality, integrity and availability of personal data, and we process such data exclusively in accordance with applicable data protection legislation, including the General Data Protection Regulation (GDPR).

This Statement applies to all personal data that we collect directly from you or receive through our business interactions. It does not apply to information collected by third-party websites, applications or services that may be accessible through hyperlinks on our website. We have no control over the privacy practices of those third parties and encourage you to review the privacy policies of each external service you choose to use.

By accessing or using our website or by communicating with us, you acknowledge and agree to the practices described in this Statement. We may update or amend this Statement from time to time, and any such change will apply from the date of publication on our website.

Personal Data We Collect

Arti Analytics gathers personal data only to the extent necessary to achieve clearly defined business purposes and to deliver our services effectively.

We may collect personal data directly from you when you contact us, request information, submit documents, apply for employment, participate in a project, visit our offices, or otherwise interact with our staff. Such data may include your name, surname, contact details, employer or organisation, role or position, and any information contained in correspondence, inquiries or documents you voluntarily provide.

In addition, certain technical information is collected automatically when you visit our website. This may include your IP address, general geographic location, browser type, device identifiers, cookies and similar technologies, as well as information about your interactions with the website. These technologies allow us to understand user behaviour, enhance performance, improve functionality, ensure security and maintain technical integrity.

We may also process personal data obtained in the ordinary course of our business relationships with clients, vendors and professional partners. This can include business contact information, details regarding contract execution, and data relevant to communication, compliance obligations, or the performance of services.

Email communication may include technical markers (such as tracking pixels) used exclusively to understand whether messages have been opened, in order to improve the relevance of our content. We do not track precise locations, movements or any sensitive information through these technologies.

Purposes of Processing

Personal data is processed for purposes that are legitimate, proportionate and directly connected with our business operations. These purposes include:

• managing and improving our website and online services;
• responding to your inquiries, requests or correspondence;
• providing information relating to our services, activities or events;
• ensuring the stability, security and performance of our IT systems;
• fulfilling contractual obligations towards clients, vendors or partners;
• recruiting, evaluating and selecting job candidates;
• maintaining operational, administrative, HR and compliance processes;
• complying with legal obligations and regulatory requirements.

We do not process personal data for purposes incompatible with those outlined in this Statement.

Legal Basis for Processing

We process personal data only where a valid legal basis exists under GDPR or relevant local legislation. Depending on the context, the applicable basis may be:

• the necessity of processing for the performance of a contract or to take steps at your request before entering a contract;
• compliance with legal or regulatory obligations, including tax, accounting, employment or audit obligations;
• the pursuit of our legitimate business interests, provided such interests are compatible with your rights and freedoms and do not override them;
• your freely given, specific and informed consent, where required;
• the protection of vital interests or actions performed in the public interest, where applicable.

Special categories of personal data (if ever processed) are handled strictly in accordance with legal requirements and only under circumstances permitted by law, such as explicit consent, necessity for the establishment or defence of legal claims, or other grounds recognised by GDPR.

Disclosure of Personal Data

Arti Analytics does not sell, rent or trade personal data. However, personal data may be disclosed or made accessible in limited circumstances, including:

• to service providers, contractors or consultants who support our operations (IT, cloud hosting, HR systems, analytics, audit, security), under strict confidentiality obligations;
• to professional advisors such as lawyers, accountants or auditors when required;
• to regulators, courts, law enforcement or other authorities when legally mandated;
• to affiliated entities or business partners where necessary for cooperation or project delivery;
• to a purchaser or successor entity in the event of merger, acquisition, restructuring or transfer of assets, subject to appropriate safeguards.

All third parties that process personal data on our behalf are bound by contractual obligations ensuring data protection consistent with GDPR standards.

International Transfers

As part of our technical infrastructure, we may use cloud services provided by companies operating inside and outside the European Economic Area (such as Microsoft 365, AWS, Google Workspace). Where personal data is transferred outside the EU/EEA, we ensure that one of the following safeguards is in place:

• European Commission adequacy decision;
• Standard Contractual Clauses (SCCs);
• contractual or organisational measures ensuring equivalent protection;
• other mechanisms permitted by GDPR.

You may obtain additional information about these safeguards by contacting us at privacy@artianalytics.com

Your Rights

Individuals whose personal data we process have rights guaranteed by GDPR, including the right to:

• request access to their personal data;
• request rectification of inaccurate or incomplete data;
• request deletion where conditions are met;
• request restriction of processing;
• object to processing based on legitimate interest;
• obtain a copy of their data in a structured, commonly used format (data portability);
• withdraw consent at any time, without affecting prior lawful processing.

To exercise these rights, you may contact us at privacy@artianalytics.com. For security reasons, we may request proof of identity before acting upon your request.

Data Security

We apply appropriate technical and organisational measures to protect personal data against loss, misuse, unauthorised access, disclosure or alteration. These measures include:

• strict access control policies and multi-factor authentication;
• encryption of data in transit and at rest;
• secure cloud environments with continuous monitoring;
• antivirus and firewall solutions;
• regular security updates, backups and recovery mechanisms;
• mandatory confidentiality obligations for all staff;
• secure destruction of data upon expiry of retention periods.

While we take all reasonable precautions, no system can guarantee absolute security. Transmission of information over the Internet is never entirely risk-free, and individuals should exercise caution when sharing personal data online.

Data Retention

Personal data is retained only for as long as necessary to fulfil the purpose for which it was collected, or to meet statutory, regulatory or contractual requirements. Retention periods are defined internally in our Data Retention Schedule. Upon expiry of the relevant period, data is securely deleted, anonymised, or archived in accordance with applicable standards.

Children's Data

Our website and services are not directed at children under the age of 13, and we do not knowingly collect personal data from minors. If such data is collected inadvertently, we will take appropriate steps to delete it promptly.

Data Protection Officer

Arti Analytics has appointed a Data Protection Officer responsible for ensuring compliance with privacy and data protection obligations. You may contact our DPO at: privacy@artianalytics.com

Contact Information

For any questions, concerns or requests relating to this Privacy and Security Statement, please contact us at: privacy@artianalytics.com