Effective date: May 22, 2018

Artnovion Lda ("us", "we", or "our") operates the website (the "Service").

This page informs you of our policies regarding the collection, use, and disclosure of personal data when you use our Service and the choices you have associated with that data.

It explains which Personal Data we collect, why we collect it, the legal basis we rely on, who we share it with and what your rights are. Unless otherwise defined in this Privacy Policy, terms used in this Privacy Policy have the same meanings as in our Terms and Conditions.

Definitions

Service

Service means the website operated by Artnovion Lda

Personal Data

Personal Data means data about a living individual who can be identified from those data (or from those and other information either in our possession or likely to come into our possession).

Usage Data

Usage Data is data collected automatically either generated by the use of the Service or from the Service infrastructure itself (for example, the duration of a page visit).

Cookies

Cookies are small pieces of data stored on your device (computer or mobile device).

Data Controller

Data Controller means the natural or legal person who (either alone or jointly or in common with other people) determines the purposes for which and the manner in which any personal information are, or are to be, processed.
For the purpose of this Privacy Policy, we are a Data Controller of your Personal Data, except for the data about partners' customers described under "Partner Portal".

Data Processors (or Service Providers)

Data Processor (or Service Provider) means any natural or legal person who processes the data on behalf of the Data Controller.
We may use the services of various Service Providers in order to process your data more effectively.

Data Subject (or User)

Data Subject is any living individual who is using our Service and is the subject of Personal Data.

Information Collection And Use

We collect several different types of information for various purposes to provide and improve our Service to you.

Types of Data Collected

Personal Data

While using our Service, we may ask you to provide us with certain personally identifiable information that can be used to contact or identify you ("Personal Data"). Personally identifiable information may include, but is not limited to:

• Email address
• First name and last name
• Phone number
• Address, State, Province, ZIP/Postal code, City
• Cookies and Usage Data

We only send you our newsletter if you subscribe to it. You can unsubscribe at any time through the link in every newsletter or by contacting us. See "Newsletter" below.

Usage Data

We may also collect information that your browser sends whenever you visit our Service or when you access the Service by or through a mobile device ("Usage Data").

This Usage Data may include information such as your computer's Internet Protocol address (e.g. IP address), browser type, browser version, the pages of our Service that you visit, the time and date of your visit, the time spent on those pages, unique device identifiers and other diagnostic data.

When you access the Service by or through a mobile device, this Usage Data may include information such as the type of mobile device you use, your mobile device unique ID, the IP address of your mobile device, your mobile operating system, the type of mobile Internet browser you use, unique device identifiers and other diagnostic data.

Cookies and Similar Technologies

Cookies are small files stored on your device. We use cookies and similar technologies, and we group them in four categories.

Only the necessary category is active when you first visit our Service. The performance, analytics and marketing categories stay off until you give your consent in the cookie banner, and you can change or withdraw your consent at any time through the "Cookie settings" link at the bottom of every page. Withdrawing consent is as easy as giving it and does not affect your use of the Service.

• Necessary. Required for the Service to work: they keep you signed in, keep the forms you submit secure and remember the choice you made in the cookie banner. They do not need your consent and cannot be turned off. Most are deleted when you close your browser. If you ask us to remember you when signing in, you stay signed in for up to 2 weeks, and your cookie choice is remembered for 6 months.
• Performance. Only with your consent. Lets us see how the Service performs for you, such as how long pages take to load and which errors occur, so that we can find and fix problems. See "Performance Monitoring" below.
• Analytics. Only with your consent. Helps us understand how visitors use the Service, such as which pages are visited and how people find us, so that we can improve it. These cookies are kept for up to 13 months. See "Analytics" below.
• Marketing. Only with your consent. Lets us measure how well our advertising works and lets our advertising partners show you relevant ads on other websites and social networks. These cookies are kept for up to 3 months. See "Behavioral Remarketing" below.

You can also instruct your browser to refuse all cookies or to indicate when a cookie is being sent. However, if you do not accept the necessary cookies, you may not be able to use some portions of our Service.

Partner Portal

Our partners, the distributors and dealers who sell our products, use a portal on the Service to work with us.

Partner users

If you have an account on the partner portal, we process your name, email address, role, the company you work for and the information you enter in the portal, such as projects, quotes, orders and support requests. We also record the time and IP address of your sign-ins to protect your account. We use this data to provide the portal and to work with your company under our agreement with it. We keep it for as long as you have an account, and keep records of orders and quotes for as long as the law requires us to.

Partners' customers

Partners can enter details about their own customers in the portal, such as name, company, profession, email address, phone number, postal address and project details, so that we can help them design and supply acoustic solutions. For this data the partner is the Data Controller: it decides why the data is collected and how it is used. We process it on the partner's behalf and on its instructions, to provide the portal and the project support the partner asks us for.

If you are a customer of one of our partners, please contact that partner about your Personal Data and to exercise your rights. If you contact us instead, we will pass your request on to the partner.

Use of Data

Artnovion Lda uses the collected data for various purposes:

• To provide and maintain our Service
• To notify you about changes to our Service
• To allow you to participate in interactive features of our Service when you choose to do so
• To provide customer support
• To gather analysis or valuable information so that we can improve our Service
• To monitor the usage of our Service
• To detect, prevent and address technical issues
• To send you our newsletter, if you have subscribed to it

Legal Basis for Processing Personal Data Under the General Data Protection Regulation (GDPR)

We only process your Personal Data when the GDPR gives us a legal basis to do so. The basis depends on why we process it:

• Performance of a contract (Article 6(1)(b) GDPR). To create and manage partner accounts and to provide the partner portal, including projects, quotes, orders, deliveries and project support. Also to take steps you ask for before entering into a contract, such as answering a request for a quote.
• Consent (Article 6(1)(a) GDPR). To send you our newsletter, and for the performance, analytics and marketing categories of cookies and similar technologies. You can withdraw your consent at any time; this does not affect the processing that took place before you withdrew it.
• Legitimate interests (Article 6(1)(f) GDPR). To answer the enquiries you send us, and to keep the Service secure and working: protecting our forms against spam and abuse, keeping server logs, and monitoring the performance and errors of our servers. You have the right to object to this processing; see "Your Data Protection Rights" below.
• Legal obligation (Article 6(1)(c) GDPR). To keep the records that tax and accounting law requires, and to respond to lawful requests from public authorities.

Retention of Data

Artnovion Lda will retain your Personal Data only for as long as is necessary for the purposes set out in this Privacy Policy. We will retain and use your Personal Data to the extent necessary to comply with our legal obligations (for example, if we are required to retain your data to comply with applicable laws), resolve disputes, and enforce our legal agreements and policies.

Artnovion Lda will also retain Usage Data for internal analysis purposes. Usage Data is generally retained for a shorter period of time, except when this data is used to strengthen the security or to improve the functionality of our Service, or we are legally obligated to retain this data for longer time periods.

Transfer Of Data

We are based in Portugal, and we store your Personal Data in the European Union: our servers, database and files are hosted in the Netherlands and Ireland, and our emails are sent from Italy. If you are located outside the European Union and provide information to us, it is transferred to and processed in the European Union.

Some of the providers named in this Privacy Policy are located in the United States, or belong to groups based there, so some of your data may be transferred outside the European Economic Area (EEA):

• Mailchimp (newsletter): stored in the United States by The Rocket Science Group LLC, part of Intuit Inc.
• Google (Google Analytics, reCAPTCHA and YouTube): may be transferred to Google LLC in the United States.
• Meta and LinkedIn (marketing, only with your consent): may be transferred to their parent companies Meta Platforms, Inc. and LinkedIn Corporation in the United States.
• New Relic (performance monitoring): stored in the European Union, but may be accessed by New Relic, Inc. in the United States to provide and support its service.

Each of these companies is certified under the EU-US Data Privacy Framework, which the European Commission recognised on 10 July 2023 as providing an adequate level of protection for Personal Data. Where a transfer is not covered by that certification, it is protected by the Standard Contractual Clauses approved by the European Commission. You can contact us for more information about these safeguards.

When a partner connects an AI assistant to their account, the data it receives is sent to the provider the partner chose, under that provider's terms; see "Connected AI Assistants" below.

Disclosure Of Data

Disclosure for Law Enforcement

Under certain circumstances, Artnovion Lda may be required to disclose your Personal Data if required to do so by law or in response to valid requests by public authorities (e.g. a court or a government agency).

Legal Requirements

Artnovion Lda may disclose your Personal Data in the good faith belief that such action is necessary to:

• To comply with a legal obligation
• To protect and defend the rights or property of Artnovion Lda
• To prevent or investigate possible wrongdoing in connection with the Service
• To protect the personal safety of users of the Service or the public
• To protect against legal liability

Security Of Data

The security of your data is important to us, but remember that no method of transmission over the Internet, or method of electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your Personal Data, we cannot guarantee its absolute security.

Your Data Protection Rights Under General Data Protection Regulation (GDPR)

If you are a resident of the European Economic Area (EEA), you have certain data protection rights. Artnovion Lda aims to take reasonable steps to allow you to correct, amend, delete, or limit the use of your Personal Data.

If you wish to be informed what Personal Data we hold about you and if you want it to be removed from our systems, please contact us.

In certain circumstances, you have the following data protection rights:

• The right to access, update or to delete the information we have on you. Whenever made possible, you can access, update or request deletion of your Personal Data directly within your account settings section. If you are unable to perform these actions yourself, please contact us to assist you.
• The right of rectification. You have the right to have your information rectified if that information is inaccurate or incomplete.
• The right to object. You have the right to object to our processing of your Personal Data.
• The right of restriction. You have the right to request that we restrict the processing of your personal information.
• The right to data portability. You have the right to be provided with a copy of the information we have on you in a structured, machine-readable and commonly used format.
• The right to withdraw consent. You also have the right to withdraw your consent at any time where Artnovion Lda relied on your consent to process your personal information.

Please note that we may ask you to verify your identity before responding to such requests.

You have the right to complain to a Data Protection Authority about our collection and use of your Personal Data. For more information, please contact your local data protection authority in the European Economic Area (EEA).

Service Providers

We may employ third party companies and individuals to facilitate our Service ("Service Providers"), to provide the Service on our behalf, to perform Service-related services or to assist us in analyzing how our Service is used.

These third parties have access to your Personal Data only to perform these tasks on our behalf and are obligated not to disclose or use it for any other purpose.

Hosting and Infrastructure

We use the following Service Providers to run the Service, store its data and send its emails. They process your Personal Data only on our instructions.

Microsoft Azure

Cloud services provided by Microsoft Ireland Operations Limited. Our servers, our database, the files uploaded to the Service and our server logs are hosted on Microsoft Azure in data centres in the Netherlands. This includes your account details and anything you submit through the Service.
For more information on the privacy practices of Microsoft, please visit the Microsoft Privacy Statement: https://privacy.microsoft.com/privacystatement

Amazon Web Services

Cloud storage provided by Amazon Web Services EMEA SARL. We use it to store some of the files uploaded to the Service, in a data centre in Ireland.
For more information on the privacy practices of Amazon Web Services, please visit the AWS Privacy Notice: https://aws.amazon.com/privacy/

Register.it

Email delivery provided by Register.it S.p.A., in Italy. The emails the Service sends you, such as account, order and quote notifications, are sent through its servers, which receive your name, your email address and the content of the email.
For more information on the privacy practices of Register.it, please visit: https://www.register.it/company/legal/privacy-policy/

Newsletter

If you subscribe to our newsletter, we use your email address, first name and last name to send it to you. We do this only with your consent, which you give by subscribing, and you can withdraw it at any time through the unsubscribe link in every newsletter or by contacting us. We keep your subscription for as long as you stay subscribed.

Mailchimp

Our newsletter is sent with Mailchimp, an email marketing service provided by The Rocket Science Group LLC, a company of Intuit Inc. When you subscribe, your email address, first name and last name are stored in Mailchimp. Mailchimp may record whether you open our newsletters and which links you click in them, which tells us what our readers find interesting. The data is stored in the United States; Intuit is certified under the EU-US Data Privacy Framework.
For more information on the privacy practices of Mailchimp, please visit the Intuit Privacy Statement: https://www.intuit.com/privacy/statement/

Connected AI Assistants

Partners with an account on the Service can connect an AI assistant of their choice, such as Claude or ChatGPT, to their account. A connected assistant can only do what the partner who connected it is allowed to do, and only through a limited set of actions: listing the partner's projects and project support tickets, and adding comments to support tickets. When it does, the data returned is sent to the provider of that assistant. This can include project titles, customer names and the names of the people who created a project or ticket.

The partner chooses which assistant to connect and approves the connection, and that provider's use of the data is governed by its own terms and privacy policy, not by this Privacy Policy. A connection only lasts as long as the partner keeps it; it can be reviewed and removed at any time under "Connected apps" in the account settings. If you are a customer of one of our partners and have questions about how they use AI assistants, please contact that partner.

Performance Monitoring

We use a third-party Service Provider to monitor the performance and availability of our Service.

New Relic

New Relic is a monitoring service provided by New Relic, Inc. It helps us keep the Service fast and reliable by recording how long pages take to load and which errors occur. It only collects this information from your browser if you consent to the performance category. The data is stored in the European Union.
For more information on the privacy practices of New Relic, please visit: https://newrelic.com/termsandconditions/privacy

Analytics

We use a third-party Service Provider to understand how our Service is used. It is only used if you consent to the analytics category.

Google Analytics

Google Analytics is a web analytics service provided by Google Ireland Limited. It tells us which pages are visited, how long visitors stay and how they found our Service, and shows us this as combined statistics. We do not use it for advertising, and Google does not use this data to personalise ads. The data may be transferred to Google LLC in the United States, which is certified under the EU-US Data Privacy Framework.
You can prevent Google Analytics from using your data by installing the Google Analytics opt-out browser add-on: https://tools.google.com/dlpage/gaoptout
For more information on the privacy practices of Google, please visit the Google Privacy Terms web page: https://policies.google.com/privacy

Behavioral Remarketing

Artnovion Lda uses remarketing services to advertise on third party websites to you after you visited our Service. These services are only used if you consent to the marketing category. We and the providers below then use cookies to measure and show ads based on your past visits to our Service.

Meta (Facebook)

Advertising services provided by Meta Platforms Ireland Limited.
You can learn more about interest-based advertising from Facebook by visiting this page: https://www.facebook.com/help/164968693837950
To opt-out from Facebook's interest-based ads follow these instructions from Facebook: https://www.facebook.com/help/568137493302217
For more information on the privacy practices of Meta, please visit Meta's Privacy Policy: https://www.facebook.com/privacy/policy

LinkedIn

Advertising services provided by LinkedIn Ireland Unlimited Company.
You can manage your LinkedIn advertising preferences on this page: https://www.linkedin.com/psettings/guest-controls/retargeting-opt-out
For more information on the privacy practices of LinkedIn, please visit LinkedIn's Privacy Policy: https://www.linkedin.com/legal/privacy-policy

Other Third-Party Services

Some parts of our Service rely on content or functionality provided by third parties.

Google reCAPTCHA

Our contact, newsletter and support request forms use reCAPTCHA, provided by Google, to protect them against spam and abuse. On the pages with these forms, Google receives information about your device and browser to tell people apart from automated programs.
For more information on the privacy practices of Google, please visit the Google Privacy Terms web page: https://policies.google.com/privacy

YouTube

Some pages offer videos hosted by YouTube, a service provided by Google. YouTube receives no information about you until you choose to play a video. When you do, YouTube receives information about your visit and may use cookies.
For more information on the privacy practices of Google, please visit the Google Privacy Terms web page: https://policies.google.com/privacy

Links To Other Sites

Our Service may contain links to other sites that are not operated by us. If you click on a third party link, you will be directed to that third party's site. We strongly advise you to review the Privacy Policy of every site you visit.

We have no control over and assume no responsibility for the content, privacy policies or practices of any third party sites or services.

Children's Privacy

Our Service does not address anyone under the age of 18 ("Children").

We do not knowingly collect personally identifiable information from anyone under the age of 18. If you are a parent or guardian and you are aware that your Children has provided us with Personal Data, please contact us. If we become aware that we have collected Personal Data from children without verification of parental consent, we take steps to remove that information from our servers.

Changes To This Privacy Policy

We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page.

We will let you know via email and/or a prominent notice on our Service, prior to the change becoming effective and update the "effective date" at the top of this Privacy Policy.

You are advised to review this Privacy Policy periodically for any changes. Changes to this Privacy Policy are effective when they are posted on this page.

Contact Us

If you have any questions about this Privacy Policy, please contact us:

• By email: connect@artnovion.pt
• By visiting this page on our website: https://www.artnovion.com/contact
• By phone number: +351 255 134 247 (calls to the national landline network charged according to applicable rates)