Privacy Policy
Last updated: 19 August 2026
This notice is provided pursuant to Articles 13 and 14 of Regolamento (UE) 2016/679 (hereinafter «GDPR») and of D.Lgs. 30 giugno 2003 n. 196, as amended by D.Lgs. 101/2018, to those who consult the manuarti.it website.
1. Who processes the data
MANUARTI is the showcase website of two projects co-financed by the Regione Toscana (the Tuscany regional authority) pursuant to L.R. n. 10/2025. The two implementing bodies are joint controllers pursuant to Article 26 of the GDPR:
- UAI Firenze — Unione Artigiani Italiani e delle Piccole e Medie Imprese della provincia di Firenze (Italian Union of Artisans and of Small and Medium Enterprises for the province of Firenze), a representative association. Address: Piazzetta Valdambra 9, 50127 Firenze (FI); secondary office: Via dello Stadio 2/D, 51100 Pistoia (PT). Tax code 94235330480 — VAT number 06854140487. PEC (certified electronic mail) uaifirenze@legamail.it — email servizi@uaifirenze.it — telephone 055 430574. Legal representative: Claudio Nobler. Implementing body of the MANUARTI FI-PO-PT project, application code 369.20250414.998000064.
- UAI Livorno — Unione Artigiani Italiani e delle Piccole e Medie Imprese, provincial office of Livorno, a representative association. Address: Via delle Corallaie 16, 57121 Livorno (LI). Tax code 92146350498. Email segreteria@uailivorno.it — telephone 0586 1973754 — website unioneartigianilivorno.it. Legal representative: Patrizia Grassini. Implementing body of the MANUARTI LI project, application code 369.20250414.998000082.
Both joint controllers are associations representing artisan enterprises and small and medium enterprises, members of the Confederazione UAI Toscana.
The joint controllers have defined in a transparent manner their respective responsibilities as regards compliance with the obligations arising from the GDPR. The single point of contact for data subjects is team@manuarti.it: a request addressed there is valid in respect of both joint controllers.
2. What kind of website this is
MANUARTI is a showcase website. It does not sell, it has neither a cart nor a checkout, it has no reserved area and no user registration, it hosts no contact forms, it manages no newsletter subscriptions. Those who consult it are not required to provide any personal data in order to access any content.
3. Which data are processed
Browsing data. The computer systems and the software procedures responsible for the operation of the website acquire, in the course of their normal functioning, certain data whose transmission is implicit in the use of the communication protocols of the Internet: IP address, browser and device type, operating system, date and time of the request, pages visited, and any referring website. These are data that are not collected in order to be associated with identified data subjects, but which by their nature could allow users to be identified through processing operations and association with data held by third parties.
Cookies. The website uses exclusively technical cookies and first-party analytics cookies. There are no profiling cookies, no third-party tracking tools and no advertising pixels. The details are in the Cookie Policy.
Data contained in voluntary communications. Anyone who chooses to write to the email address indicated on the website thereby provides the sender's address and any other personal data contained in the message. No field is mandatory, because there is no form: what is written is what one decides to write.
Data of the businesses featured in the pages. The profiles dedicated to the participating producers contain data relating to the business activity — company name, address, craft, public contact details, photographs of the workshop and of the work — published on the basis of the participation agreement with the project and with the consent of the business concerned. No personal data of the owners and of the collaborators are published beyond those necessary to identify the enterprise and to allow the public to reach it.
4. Why they are processed, and on what legal basis
| Purpose | Legal basis | Retention |
|---|---|---|
| To allow the website to be consulted and to ensure its security and operation | Legitimate interest of the controller in providing the service requested (Art. 6.1.f) | System logs: for the technically necessary period, and in any case no longer than 12 months |
| To measure in aggregate form the trend of visits in order to improve the content | Legitimate interest in first-party statistics not cross-referenced with other websites (Art. 6.1.f) | Up to 12 months |
| To reply to those who write spontaneously | Response to a request from the data subject (Arts. 6.1.b and 6.1.f) | The time necessary to handle the request, and in any case no longer than 24 months |
| To tell the story of the participating businesses and to valorise their craft | Performance of the participation agreement with the project and consent of the business (Arts. 6.1.b and 6.1.a) | For the duration of the participation; upon withdrawal the profile is removed |
| To comply with the reporting obligations relating to the regional contribution | Legal obligation (Art. 6.1.c) | Within the terms laid down by the legislation on public contributions |
5. To whom they may be disclosed
The data are neither disseminated nor transferred to third parties for commercial purposes. They may be processed, in the capacity of processors designated pursuant to Article 28 of the GDPR, by the parties that provide the technical services necessary for the operation of the website:
- Shopify International Limited and the companies of the Shopify group, which provide the platform and the hosting infrastructure;
- K-Worldwide di Tatiana Frascella, technical and operational partner of the projects, which handles the creation and the maintenance of the website;
- the provider of the email service used for the project address.
The data may furthermore be disclosed to the Regione Toscana and to the supervisory bodies within the limits of the reporting obligations relating to the public contribution, and to the judicial authorities in the cases provided for by law.
6. Transfers outside the European Economic Area
The infrastructure of the platform provider entails the processing of data also outside the European Economic Area. Such transfers take place on the basis of the standard contractual clauses adopted by the European Commission pursuant to Article 46.2.c of the GDPR, supplemented by the additional measures provided for by the provider. A copy of the safeguards adopted may be requested by writing to the point of contact indicated in paragraph 1.
7. The relationship with Tuscany Market Hub
MANUARTI links to the Tuscany Market Hub marketplace (tuscanymarkethub.it), which is a distinct website, with a distinct data controller and a privacy notice of its own. By following that link one leaves MANUARTI: from that moment on the privacy notice of that website applies, and the present one no longer applies.
8. Nature of the provision of data
The provision of browsing data is technically necessary in order to consult the website. Any other provision of data is optional: not providing it entails solely the impossibility of receiving a reply to a communication that has not been sent.
9. Automated decision-making processes
No profiling is carried out, nor any automated decision-making process pursuant to Article 22 of the GDPR.
10. The rights of the data subject
At any time it is possible to exercise the rights provided for by Articles 15 to 22 of the GDPR: access to one's own data, rectification, erasure, restriction of processing, portability, objection to processing based on legitimate interest, and withdrawal of consent — the latter without prejudice to the lawfulness of the processing carried out before the withdrawal.
Requests are to be sent to team@manuarti.it, or by PEC to uaifirenze@legamail.it. The response arrives within one month, extendable by two months in cases of particular complexity.
Anyone who considers that the processing of their data infringes the GDPR has the right to lodge a complaint with the Garante per la protezione dei dati personali (the Italian data protection authority) (Piazza Venezia 11, 00187 Roma — garanteprivacy.it), or to bring proceedings before the judicial authorities.
11. Amendments
This notice may be updated in order to bring it into line with changes to the website or to the applicable legislation. The version in force is always the one published on this page, with the date of last update at the top.