Privacy Policy

Privacy Policy

www.artifact-project.eu

Last updated: May 2026

1. Introduction

ARTIFACT (Artificial Intelligence for Artistic Futures and Creative Talents) is a Creative Europe-funded project (Grant Agreement n. 101255817) designed to empower visual artists to navigate and lead the global conversation on Artificial Intelligence.

This Privacy Policy explains how personal data is collected, processed, and stored when you visit www.artifact-project.eu, participate in our surveys, or submit portfolio materials for potential publication on our social media channels and blog.

We are committed to protecting your privacy and processing your personal data in full compliance with the EU General Data Protection Regulation (GDPR) — Regulation (EU) 2016/679.

2. Data Controller

The data controller for this website is:

Mazzini Lab Benefit S.r.l.

Lead partner of the ARTIFACT Project

Website: www.artifact-project.eu

Email: info@mazzinilab.it

The ARTIFACT project consortium involves the following partner organizations:

  • Mazzini Lab Benefit S.r.l. (Italy) — Lead Partner
  • PAG (Project Partner)
  • AIT — Austrian Institute of Technology (Austria)
  • XOP (Project Partner)

For any privacy-related inquiries, please contact us through the website at www.artifact-project.eu.

3. Personal Data We Collect

We collect personal data through the following activities on this website:

3.1 Website Browsing

When you visit our website, we may automatically collect:

  • IP address and browser type
  • Pages visited and time spent on the site
  • Referring URLs
  • Device and operating system information

This data is collected via standard server logs and analytics tools (e.g. Google Analytics via Site Kit) for the purpose of improving website performance and user experience.

3.2 Stakeholder Membership Form

When you apply to become a stakeholder, we collect:

  • Company name and website
  • First and last name
  • Email address
  • Company logo (image file)
  • GDPR consent confirmation

3.3 Artist Survey

When you participate in the ARTIFACT Artist Survey, we may collect:

  • Contact information provided voluntarily (e.g. name, email)
  • Professional information (artistic practice, experience with AI, opinions and perspectives)
  • Up to 5 portfolio images uploaded voluntarily
  • Any additional information you choose to share in open-text fields

3.4 Portfolio Image Upload

Artists who choose to share their work for potential feature on ARTIFACT’s social channels and blog must upload up to 5 portfolio images. By submitting these images, you confirm that:

  • You are the author and/or rights holder of the submitted works
  • You grant ARTIFACT a non-exclusive, royalty-free licence to publish and share the submitted images on ARTIFACT’s official social media channels and blog, with attribution
  • You consent to your name and brief profile being shared alongside the images

4. Legal Basis for Processing

We process your personal data on the following legal bases under Article 6 of the GDPR:

  • Consent (Art. 6(1)(a)): For survey participation, portfolio submission, newsletter subscription, and any processing where we have explicitly asked for your consent.
  • Legitimate interests (Art. 6(1)(f)): For website analytics and improving our services, where our interests do not override your rights and freedoms.
  • Performance of a task in the public interest (Art. 6(1)(e)): ARTIFACT is a publicly funded European project; certain data processing is necessary to carry out our research and capacity-building objectives.
  • Compliance with a legal obligation (Art. 6(1)(c)): Where required by applicable law.

5. Purposes of Processing

We use your personal data for the following purposes:

  • To manage your stakeholder membership request
  • To conduct research and analysis as part of the ARTIFACT project objectives
  • To feature artists and their work on ARTIFACT’s social media channels and blog (with explicit consent)
  • To communicate project updates, events, and news to stakeholders and subscribers
  • To comply with reporting requirements to the European Commission / EACEA
  • To improve our website and user experience

6. Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes described in this policy, or as required by applicable law:

  • Website analytics data: up to 26 months
  • Stakeholder application data: for the duration of the project and up to 5 years thereafter, in line with EU grant obligations
  • Survey responses: for the duration of the project (until 2027) and up to 5 years after project closure for audit purposes, in anonymised/aggregated form where possible
  • Portfolio images and consent: until you withdraw consent or until 2 years after the project ends

You may request deletion of your data at any time (see Section 8 — Your Rights).

7. Data Sharing and Third Parties

We do not sell or rent your personal data to third parties. We may share data with:

  • Project consortium partners (listed in Section 2), for the purposes of project implementation and reporting, under data processing agreements consistent with GDPR
  • European Commission / EACEA, as required under the grant agreement for audit and reporting purposes
  • Service providers and data processors (e.g. hosting providers, survey platforms, email tools) acting on our behalf under GDPR-compliant data processing agreements
  • Social media platforms (e.g. Instagram, Facebook, LinkedIn), when publishing artists’ portfolio images — please note that these platforms have their own privacy policies

All transfers of data outside the European Economic Area (EEA) are carried out with appropriate safeguards in accordance with Chapter V of the GDPR.

8. Your Rights

Under the GDPR, you have the following rights in relation to your personal data:

  • Right of access (Art. 15): You may request a copy of the personal data we hold about you.
  • Right to rectification (Art. 16): You may ask us to correct inaccurate or incomplete data.
  • Right to erasure (Art. 17): You may request deletion of your data, subject to legal obligations.
  • Right to restriction of processing (Art. 18): You may ask us to limit how we use your data.
  • Right to data portability (Art. 20): You may request your data in a structured, machine-readable format.
  • Right to object (Art. 21): You may object to processing based on legitimate interests or for direct marketing.
  • Right to withdraw consent (Art. 7(3)): Where processing is based on consent, you may withdraw it at any time, without affecting the lawfulness of prior processing.

To exercise any of these rights, please contact us via the website at www.artifact-project.eu. We will respond within 30 days.

You also have the right to lodge a complaint with your national data protection authority. In Italy, this is the Garante per la protezione dei dati personali (www.garanteprivacy.it).

9. Cookies

Our website uses cookies to improve functionality and analyse usage. Cookies are small text files stored on your device. We use:

  • Strictly necessary cookies: required for the website to function correctly
  • Analytics cookies: to understand how visitors use our site (e.g. Google Analytics)

You can manage your cookie preferences through your browser settings. Disabling certain cookies may affect website functionality. For more information, please refer to our Cookie Policy or the cookie banner on the website.

10. Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, or disclosure, in accordance with Article 32 of the GDPR. These include encrypted connections (HTTPS), access controls, and regular security reviews.

In the event of a data breach that is likely to result in a high risk to your rights and freedoms, we will notify you in accordance with Articles 33–34 of the GDPR.

11. Minors

Our website and services are not directed at individuals under the age of 16. We do not knowingly collect personal data from minors. If you believe a minor has submitted personal data to us, please contact us so that we can delete it.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. The updated version will be published on this page with the date of the last revision. We encourage you to review this policy periodically.

13. Contact Us

If you have any questions or concerns about this Privacy Policy or the way we handle your personal data, please contact us:

ARTIFACT Project — Mazzini Lab Benefit S.r.l.

Website: www.artifact-project.eu