Privacy policy


This privacy information statement is supplied by Atelier Mitoraj Srl, head office in Pietrasanta (LU), Via del Marmo Bianco no. 3 (hereafter the Controller), the proprietor of the internet site (hereafter the Website) and refers to the processing of the personal data of the people consulting the same.  This information statement is provided in accordance with art. 13 of EU Regulation 2016/679 dated 27.04.2016 (hereafter the GDPR) and the provisions envisaged in the Privacy Code D.L. (Italian Legislative Decree) 196/2003, as amended by D.L. 101/2018.  This information statement can be accessed from the menu of the website.

This information statement is provided solely for the website and not for the other internet websites that may be consulted by users through links that have been inserted in the same and are managed by third party subjects and, therefore, it shall in no way be held responsible for the processing of the data collected through accessing the said third party websites.

The objective of this information statement shall be to provide indications concerning the methods of managing the website and the information supplied by the data controllers in accordance with current legislation and may be modified in the event of any legislative modifications.

This website is reserved, even just for browsing purposes, for subjects that are at least sixteen years old as envisaged by art. 8, paragraph 1 of the GDPR and by art. 2 quinquies of D.L. 196/2003, as amended by D.L. 101/2018.  Subjects under sixteen years but who are over fourteen years of age may consult the website legitimizing consent through the consent of the parents or whosoever takes the place of the same.

The Data Controller shall undertake to provide every type of information regarding this statement and the rights of the user upon receiving a request sent via email to the following address:


The data controller is Atelier Mitoraj Srl, head office in Pietrasanta (LU), Via del Marmo Bianco no. 3, Tax Code: 02349370466, hereafter the Controller, the proprietor of the website.

The processing takes place c/o the registered office of Atelier Mitoraj Srl, in Pietrasanta (LU), Via del Marmo Bianco no. 3, in both a manual and, mainly, a computerized form for the sole purposes of processing and in such a way as to guarantee the integrity, confidentiality and safety of the data collected, as envisaged by current regulations.


The data of the subjects browsing the Website or registering through forms present in the same shall be processed legitimately and utilized exclusively for the purposes indicated in this information statement, pursuant to art. 6 of the GDPR.

The data shall be processed for the following purposes:

  • Browsing the Website, in relation to the possibility of detecting the user information necessary on a technical level and research into the activities of the controllerand the events and initiatives of the controller;
  • Replying to requests for information or further research received by filling in the contact forms or any forms present on the website, also with reference to authentication requests;
  • Complying with legal obligations.

The provision of the user’s personal information for the above purposes shall be optional but necessary since the failure to provide the same shall make it impossible to browse the Website and access the services offered.


The user information collected shall be processed both manually as well as by computer using a logic strictly related to the said purposes and, in any case, in such a way as to guarantee the safety and confidentiality of the data.  All the data shall be processed on paper or electronically and stored in such a way that the identification of the user shall be possible only for the amount of time strictly necessary in order to achieve the purposes for which the data was collected and, in any case, within the limits of the law.  The Controller has adopted specific measures for the purpose of preventing the loss of the data as well as to prevent illicit uses or unauthorized accesses. 

The user information shall be stored exclusively for the amount of time strictly necessary and, in any case, for no more than 10 years.

The optional, explicit and voluntary sending of electronic mail to the addresses indicated on this website shall result in the acquisition of the address of the sender and any personal information included therein.  This data shall be deemed to have been voluntarily supplied by the user, exempting the proprietor of the website from any responsibility for any inaccuracies.

In the event that consent is withdrawn or in the case of opposition to the processing, the users’ data shall be deleted.

In the event of any variation to the users’ data, the same shall be responsible for requesting the updating of the information by sending an email to this address:

The information shall not be transferred or disclosed to third parties.  It shall be stored on a server located c/o the Controller’s head office.  The Controller’s employees and/or aides may gain knowledge of the users’ personal data.  These subjects, who are appointed by the Controller as “authorized processors”, shall process the data exclusively for the purposes indicated in this information statement and in compliance with current regulations.  The users’ personal data may only be communicated to third parties where these have been entrusted with the processing of personal data on behalf of the Controller in the capacity of “external processors”, as suppliers of computer services and consultants entrusted with the operation of the website or similar consultants.

As a website, also uses computer systems and log files which store information collected in an automated way during user visits, the transmission of which is implicit in internet communication protocols.  The information collected can be the IP addresses (internet protocol address), the type of browser and the parameters of the device used to connect to the website, the ISP (internet service provider) name, the date and time of connection by the user, the web page of origin, the number of clicks.  This information is used for merely statistical purposes and in an anonymous as well as an automated form.  The data can be used for the purposes of ascertaining any responsibility in the event of illegal acts or crimes committed to the detriment of the website. 


The user is informed that it is possible to exercise the rights guaranteed by the applicable regulations and expressly recognized by articles 13, paragraph 2, 15, 17, 18, 20, 21 and fol. of the GDPR by contacting the Controller at the email address or the data protection officer at the following PEC address:  In particular, the user has the right: to access the data, to the rectification or erasure of the data, to the limitation of the data, to the withdrawal of consent to processing, to object to processing, to data portability and the lodging of a complaint with a Supervisory Authority (the Italian Supervisory Authority is the Garante della Privacy).