Privacy Policy

This notice explains what personal data we process when you visit this website, write to us or book a demo, under art. 13 of Regulation (EU) 2016/679 (“GDPR”). Ordinary browsing uses no cookies; the site has no forms, does not profile you and measures visits only in aggregate. YouTube videos are optional and load only when you choose to play them, as described in their dedicated section.

Data controller

ARBoard S.r.l., registered office: Corso Castelfidardo 30/A, 10129 Turin (TO), Italy. VAT & tax code IT13345510013, REA TO-1356678, certified email (PEC): arboard@postecertifica.it. For any request concerning personal data: info@arboard.eu.

Browsing the website

When you open a page, your browser sends some technical data to the server that hosts the site: IP address, date and time, the page requested, the referring page, browser type and operating system. The server records this data in technical logs, as with any website.

Purpose: to run the site, protect it from abuse and attacks, fix technical problems and monitor traffic through the technical access statistics that the hosting control panel generates automatically.
Legal basis: our legitimate interest in keeping the site secure and working properly (art. 6.1.f GDPR).
Who processes it: Namecheap, Inc. (USA), our hosting provider, as our processor (art. 28 GDPR).
Retention: in our hosting space, the logs are deleted automatically within 2 months and the access statistics, which also contain IP addresses, within 6 months; longer only if they are needed to establish abuse or an offense. Namecheap also backs up the server every 3–7 days and keeps its own security logs, which it uses only to restore and protect the service; their retention is set by Namecheap, and you can ask us for it at info@arboard.eu.

During ordinary browsing, the site uses no cookies, neither our own nor third-party ones, and no profiling, advertising or fingerprinting tools. YouTube videos, loaded only at your request, are described separately below. Here is how we classify ARBoard’s tools:

Technical: the browser storage used by the interactive presentations, which serves only to make them work.
Analytics treated as technical: Cloudflare Web Analytics, which produces only aggregate statistics for this site, with no cookies or persistent identifiers.
Profiling: none.

Technical tools do not require your consent (art. 122 of the Italian Privacy Code, Legislative Decree 196/2003), but they must be described in the privacy notice, as we do here. In our assessment, Cloudflare Web Analytics is one of the analytics tools that the Italian Data Protection Authority’s Guidelines on cookies and other tracking tools of June 10, 2021 treat as technical. We do not ask for consent or show a banner for these tools. YouTube remains disabled until you choose to load a video.

Browser storage in the interactive presentations

The interactive presentations (pages under /presentazioni/) save some information in your browser’s storage (localStorage and sessionStorage), under names starting with “arboard-”. ARBoard’s code on other pages does not save browser data. For the optional YouTube player, see its dedicated section.

What it remembers	Storage	Duration
Where you got to and the state of the presentation, so you can resume where you left off	localStorage	Until you clear the site’s data
Interface preferences, such as captions shown or hidden	localStorage	Until you clear the site’s data
Information that applies only to the open tab, such as whether you have already closed the hint to turn your phone sideways	sessionStorage	Until you close the tab

This data stays on your device: it is never sent to us or to anyone else, and it contains no identifiers. You can delete it at any time in your browser settings by clearing the data for arboard.eu. If you block browser storage, the presentations still work: you only lose the resume point and your preferences.

Visit statistics (Cloudflare Web Analytics)

To know how many people visit the site and how fast its pages load, we use Cloudflare Web Analytics. Pages load a small script from static.cloudflareinsights.com, which sends Cloudflare the page address (without any parameters), the referring page, loading times and other performance measures, and the type of browser, operating system and device. Because of the connection, Cloudflare also receives your IP address, from which it derives your country.

According to Cloudflare, the tool uses no cookies or other browser storage, does no fingerprinting and does not track individual visitors across its customers’ websites. The script also assigns no persistent identifiers: it only uses a random code that is different for every page view. We only see aggregate statistics, such as visits per page or per country, never individual visits.

Purpose: to measure visits and site performance in aggregate, so we can improve the site.
Legal basis: our legitimate interest in understanding how the site is used and whether it works well (art. 6.1.f GDPR).
Who processes it: Cloudflare, Inc. (USA), as our processor (art. 28 GDPR). Under its contract, Cloudflare may not use this data for marketing or advertising.
Retention: Cloudflare keeps unsampled data for 7 days, then only an aggregated sample (about 10%); the statistics can be viewed for 6 months.

To leave your visits out of the statistics, you can block the script in your browser settings or with a content-blocking extension: the site works just the same.

Optional YouTube videos

Video covers are hosted on our website. Until you press Play, the page does not load the player or send requests to YouTube or Google for the video. You can read the entire site and use the interactive presentation without activating it.

Pressing Play requests the YouTube player in Privacy Enhanced Mode, through youtube-nocookie.com. Google then receives connection data, such as your IP address, browser information and referring site, and may use cookies or browser storage under its own privacy policy. Privacy Enhanced Mode does not mean the player processes no data. Google’s privacy policy: https://policies.google.com/privacy?hl=en.

You can remove the player from the page with Close video; watching again requires you to activate it again. We do not save your choice for future visits. Watch on YouTube opens the external website, where YouTube’s settings and privacy policy apply.

Email and demo booking

If you write to us by email or book a demo, we process the data you share with us: usually name, email address, company and the content of your request.

Purpose: to reply to you, arrange the demo and handle your request.
Legal basis: pre-contractual steps taken at your request (art. 6.1.b GDPR), when your request concerns our products or services; otherwise our legitimate interest in replying to people who contact us (art. 6.1.f GDPR).
Who processes it: emails to @arboard.eu addresses reach the servers of Namecheap, Inc. (USA), which runs our email; bookings go through Calendly LLC (USA). Both act as our processors (art. 28 GDPR). Messages to our certified email (PEC) address are handled by Poste Italiane S.p.A., which provides that service.
Retention: as long as needed to handle the request and any relationship that follows; if no relationship follows, at most 24 months from the last contact. Longer only where the law requires it, for example for accounting or tax records.
Do you have to provide it? No: writing to us or booking a demo is up to you; without an email address and the content of your request, however, we cannot reply or set up the demo. You do not need to give us any data to browse the site, other than the technical data your browser sends automatically (sections 2 and 3).

We do not use this data to send you marketing communications without your consent.

Booking opens on Calendly’s website. For booking data, Calendly works on our behalf; for the cookies and other tools on its own website, it is an independent controller and applies its own privacy notice.

The demo takes place as a Google Meet video call, using the link in your confirmation email. To create it, your booking (name and email address) is saved in our Google calendar; if you join, Google also processes your connection data (such as IP address and device), audio, video and any chat messages. The service is provided by a European Google company, and data may be transferred to Google LLC in the United States, which is certified under the EU-U.S. Data Privacy Framework (art. 45 GDPR).

Links to other websites

The site links to our LinkedIn page and, for demos, to Calendly. Until you open them, no data from our site reaches LinkedIn or Calendly. On LinkedIn, your data is processed by LinkedIn Ireland Unlimited Company as an independent controller, under its own privacy policy. For Calendly, see the previous section.

Providers and transfers outside the EU

We rely on these providers, which process data on our behalf under a contract that limits its use (art. 28 GDPR). They are based in the United States, so data may be transferred outside the European Union, always with the safeguards required by arts. 44 et seq. GDPR:

Namecheap, Inc. – hosting of the site and email for the arboard.eu domain, on servers in the United States. Safeguard: standard contractual clauses approved by the European Commission (Decision (EU) 2021/914), included in its data processing agreement.
Cloudflare, Inc. – visit statistics; data processed in the United States and other countries. Safeguard: certification under the EU-U.S. Data Privacy Framework (European Commission adequacy decision of July 10, 2023, art. 45 GDPR); failing that, standard contractual clauses.
Calendly LLC – demo booking, on servers in the United States. Safeguard: certification under the EU-U.S. Data Privacy Framework (art. 45 GDPR); failing that, standard contractual clauses.

You can ask us for a copy of these safeguards by writing to info@arboard.eu. We do not sell or pass on your data to others; we disclose it to authorities only where the law requires it.

Your rights

You can ask us at any time to access, rectify or erase your data, restrict its processing or receive it in a portable format (arts. 15–20 GDPR) by writing to info@arboard.eu.

Right to object. You can object at any time, on grounds relating to your particular situation, to processing based on our legitimate interest, such as server logs and visit statistics (art. 21 GDPR). For the statistics, you can also simply block the script, as explained above.

We do not receive the data saved in your browser’s storage: you control it and can delete it yourself.

We make no automated decisions and do no profiling (art. 22 GDPR).

You also have the right to lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali, www.garanteprivacy.it) or with the supervisory authority of the country where you live or work.

Any updates to this notice will be published on this page with a new “last updated” date.