Last updated: 13 October 2026
1. Who is responsible
The Art Newbie (https://theartnewbie.com) is operated by Riccardo Momesso, an individual based in Italy. He is the controller of the personal data described in this notice.
Privacy contact: legal@theartnewbie.com
General contact: hello@theartnewbie.com
Postal address: Via Almorò Albrizi 19, 31046 Oderzo (TV), Italy
We have not appointed a data protection officer, because we are not required to.
2. What this notice covers
This notice explains what personal data we process when you visit the site, send us a message, subscribe to the newsletter, or see advertising. It does not cover other websites we link to. For cookies and similar technologies, see our Cookie Policy.
3. What we do with your data, and why
Running and protecting the site. The site is hosted by WordPress.com (Automattic). When you visit, our host processes technical information such as your IP address, browser and device details, the pages requested and the time of access, in order to deliver and secure the site. Our legitimate interest is operating and protecting the site. Automattic states that it keeps the web server logs that record information about a visitor for approximately thirty days.
Answering your messages. If you use the contact form, we process your name, email address, topic and message, and your IP address, to reply and keep a record of the conversation. The form is provided by Jetpack. Your message is stored in the site's database and sent by email to our Gmail inbox. Our legitimate interest is answering enquiries, and the processing also serves steps you ask us to take. We keep messages for twelve months after the last exchange, then delete them. Please do not include sensitive personal information. Sending a message does not subscribe you to the newsletter.
Protecting the form from spam. Akismet checks contact-form submissions for spam and receives the submitted content together with your IP address and browser user agent. Our legitimate interest is preventing abuse of the form.
Newsletter. If you subscribe, we use MailPoet to manage your subscription and send the weekly recap of new art history and art travel guides. We process your email address, any optional name you give, and records of your subscription and confirmation, including the date and the IP address from which you subscribed. The legal basis is your consent. We use double opt-in: you are added only after you confirm the link we email you. Every newsletter has an unsubscribe link and a link to manage your preferences. We keep subscriber data until you unsubscribe, and then keep a minimal record that proves your consent and prevents unwanted re-subscription for three years. MailPoet states that logs of emails sent through its sending service are erased automatically after three months.
Optional email statistics. Only if you separately agree, we record whether you open the newsletter and which links you click, using a tracking image and tracked links. The legal basis is your consent. Nobody is tracked until they allow it. Declining does not stop you subscribing. You can withdraw this choice at any time on your subscription preferences page, where you can switch off "Allow tracking of email opens and link clicks", using the link to manage your subscription in our newsletters. Withdrawal does not affect processing done before.
Advertising. The site shows advertising through Journey by Mediavine. Advertising technologies that need your consent, including personalised advertising, run only if you consent through the consent banner, as required by Article 122 of the Italian Privacy Code. The legal basis is your consent. If you reject, Mediavine states that you see contextual advertising, which is based on the content of the page rather than on your personal data. As with any resource on a web page, when a page loads your browser may contact our advertising providers' servers, which then receive technical data such as your IP address and browser details. No advertising cookies or similar identifiers are stored in your browser before you accept.
Remembering your choice. The consent banner stores your choice in your browser so that it is not asked again too often and so that we can show that you chose. See the Cookie Policy.
4. The consent banner, Journey and Grow
The consent banner is provided by Journey by Mediavine, using the consentmanager platform. You can accept all, open the settings to choose by purpose and by partner, or reject all. You can change or withdraw your choice at any time using the "Manage Preferences" link in the footer of every page. Mediavine states that its consent platform covers display and video advertising, not newsletters, email marketing or other parts of the site; those are covered by this notice.
Grow for WordPress is installed to support Journey. Its reader-facing features (recommendations, search, subscription forms, account and share widgets) are switched off, and Grow displays nothing on this site. Its script still loads when a page opens, and it may request a typeface from Google Fonts, which reveals your IP address to Google. After you accept advertising, Grow and the Journey advertising partners may store identifiers in your browser's local storage.
We do not use your newsletter email address for advertising.
5. Analytics
With your consent, we use Google Analytics 4, a service of Google, to understand how readers use the site: which pages are viewed, approximate location, and device and browser information. The legal basis is your consent. Google Analytics does not load at all until you accept it in the consent banner. If you reject, or if you later withdraw your consent, it does not run and its cookies are removed. We do not use Google's modelling of visitors who decline, and we do not intentionally send names, email addresses or form contents to Google Analytics. Its cookies last about thirteen months; see the Cookie Policy. Event data in our Google Analytics account is kept for two months.
6. Images, fonts and security
Images on the site may be delivered through Automattic's image network. The site's typefaces are delivered through Automattic's font service, not directly from Google. Jetpack provides security and backup functions for the site.
7. Who receives your data
The recipients, or categories of recipients, are: WordPress.com/Automattic (hosting, Jetpack and Akismet); MailPoet (newsletter management and sending); Google (our email inbox, and Google Analytics if you consent); Mediavine/Journey and the advertising partners listed in the consent settings. Automattic acts as our processor for the site, according to its own documentation. The other providers act on our behalf or on their own account, as described in their own notices.
8. Transfers outside the European Economic Area
Some of these providers process data outside the European Economic Area, including in the United States. MailPoet's documentation lists processing in the United States and Germany. Automattic offers a data processing agreement for WordPress.com sites that includes standard contractual clauses for transfers. For the other providers, the safeguards are those each provider describes in its own data processing documentation. We do not say that all data stays in Europe.
9. How long we keep data
Messages sent through the contact form: twelve months after the last exchange.
Newsletter subscriber data: until you unsubscribe. A minimal record of your consent: three years after you unsubscribe.
Web server logs: approximately thirty days, as stated by Automattic.
Your consent choice on the banner: about six months, after which the banner may ask you again.
Google Analytics event data, if you consent: two months.
Other data: as set by each provider and described in this notice.
10. Your rights
You can ask us for access to your data, to correct it, to delete it, to restrict its processing, or to receive it in a portable format. Where processing is based on legitimate interests, you can object. Where it is based on consent, you can withdraw consent at any time, without affecting the lawfulness of what was done before. Write to legal@theartnewbie.com. We may ask you to prove your identity in proportion to the request.
You also have the right to complain to the Italian data protection authority, the Garante per la protezione dei dati personali (www.garanteprivacy.it), or to the authority of the country where you live or work.
11. Is providing data required?
You are never required to give us data to read the site. An email address is needed to receive the newsletter, and the contact form shows which fields are required. If you do not provide them, we cannot subscribe you or answer you. Optional email statistics are never required.
12. Automated decisions
We do not take decisions about you based solely on automated processing, including profiling, that produce legal effects on you or similarly affect you.
13. Changes
We will update this notice when our activities change and show the date at the top.