Privacy Policy.

1. Data controller

arimas S.r.l., registered and operational office at Via Antonelliana, snc — Z.I. Marsica, 67051 Avezzano (AQ), Italy. VAT no. IT01716160667. Email: privacy@arimas.com.

2. Data collected

We only collect data strictly necessary to respond to your commercial inquiries: first and last name, organisation, role, business email, phone, description of the technical need. No sensitive data, no profiling cookies.

3. Purpose of processing

Data is processed exclusively to: (a) respond to information and quotation requests; (b) manage the contractual relationship if concluded; (c) comply with legal, regulatory and accounting obligations; (d) send technical communications related to active services.

4. Legal basis

Article 6.1.b GDPR (execution of pre-contractual measures) and art. 6.1.c GDPR (legal obligations). No marketing consent is required or activated by default.

5. Retention

Data collected via web forms is retained for 24 months from the last contact. Contractual data is retained for the time required by civil and tax law (10 years).

6. Recipients

Data is not transferred to commercial third parties. It may be communicated to: accounting and legal consultants, competent authorities, IT suppliers acting as data processors. No transfer outside the EU.

7. Data subject rights

You have the right to access, rectify, delete, restrict, port and object (arts. 15–22 GDPR), as well as the right to lodge a complaint with the Supervisory Authority. To exercise your rights: privacy@arimas.com.

8. Security

arimas applies technical and organisational measures appropriate to the nature of the data: at-rest and in-transit encryption, role-based access, audit trail, sovereign Italian site, ISO 9001 certified processes and ISO 27001 on the roadmap.