Privacy Policy

Last updated: December 8, 2025

1. Data Controller

ARTIS-Project is the data controller responsible for your personal data. You can contact us at:

Email: [Contact Email]
Address: [Your Address]

2. What Data We Collect

We collect and process the following types of personal data:

2.1 Account Information

• Name and email address
• Password (securely hashed)
• Account creation and last login dates

2.2 Billing Information (Optional)

• Company name and VAT number
• Billing address and contact details
• Tax codes and electronic invoicing details

2.3 Service Data

• Video files you upload for processing
• Accessibility tracks (audio descriptions, subtitles, sign language)
• Project quotations and communications

2.4 Technical Data

• IP addresses and browser information
• Session data and login activity
• Cookie preferences and consent records

3. Legal Basis for Processing

We process your personal data based on:

• Contract: To provide our accessibility services
• Consent: For marketing communications and optional features
• Legitimate Interest: For service improvement and security
• Legal Obligation: For invoicing and tax compliance

4. How We Use Your Data

We use your personal data to:

• Provide video accessibility services
• Create and manage quotations
• Process payments and issue invoices
• Communicate about your projects
• Improve our services and platform
• Ensure security and prevent fraud
• Send marketing communications (with consent)

5. Data Sharing

We may share your data with:

• Service Providers: Cloud storage (AWS), email services, payment processors
• Legal Requirements: When required by law or to protect our rights
• Business Transfers: In case of merger, acquisition, or sale

We never sell your personal data to third parties.

6. International Transfers

Your data may be processed in countries outside the EU/EEA. We ensure adequate protection through:

• EU adequacy decisions
• Standard contractual clauses
• Certified privacy frameworks

7. Data Retention

We retain your personal data for:

• Account data: Until account deletion + 30 days
• Project data: 2 years after completion or as agreed
• Financial records: 7 years for tax compliance
• Marketing data: Until consent withdrawal
• Security logs: 30 days

8. Your Rights Under GDPR

You have the right to:

• Access: Request a copy of your personal data
• Rectification: Correct inaccurate data
• Erasure: Request deletion of your data
• Restriction: Limit how we process your data
• Portability: Receive your data in a machine-readable format
• Object: Opt-out of processing based on legitimate interest
• Withdraw consent: For consent-based processing

To exercise these rights, contact us at [Contact Email]. We will respond within 30 days.

9. Cookies and Tracking

We use cookies to:

• Essential: Authentication, security, basic functionality
• Functional: Remember your preferences and settings
• Analytics: Understand usage patterns (with consent)

You can manage cookie preferences through our cookie banner or browser settings.

10. Children's Privacy

Our service is not intended for children under 16. We do not knowingly collect personal data from children. If you become aware that a child has provided us with personal data, please contact us.

11. Data Security

We implement appropriate technical and organizational measures to protect your data:

• Encryption in transit and at rest
• Access controls and authentication
• Regular security audits and updates
• Staff training on data protection

12. Data Breach Notification

In case of a data breach that poses a risk to your rights and freedoms, we will notify you within 72 hours of becoming aware of the breach.

13. Changes to This Policy

We may update this privacy policy to reflect changes in our practices or legal requirements. We will notify you of significant changes via email or through our platform.

14. Contact and Complaints

For privacy-related questions or to file a complaint:

• Email: [Privacy Contact]
• Data Protection Authority: You can also lodge a complaint with your local supervisory authority

15. Third-Party Services

Our platform integrates with:

• Bunny Fonts: For web fonts (privacy-focused CDN)
• AWS: For secure cloud storage and processing

These services have their own privacy policies that govern their data handling practices.