This Privacy Policy is provided pursuant to art. 13 of European Regulation no. 679/2016 and applies exclusively to all Data collected through the Website https://www.kappafuturfestival.it/ and all its subdomains. This Privacy Policy is subject to updates that will be published promptly on the Website. This Privacy Policy, together with Terms and Conditions, any other documents referred to in it and the Cookie Policy, establish the basis on which the Personal Data of the Data Subject will be processed.

‍

Data Controller

The Data Controller for the Data collected from this Website is Movement Entertainment SRL - Largo Maurizio Vitale, 1, 10152 Torino (TO) IT11044940010 Email: privacy@movement.it

‍

Data processing related to ticket sales and CRM management

To manage ticket sales and registration activities of participants in the Kappa Future Festival, the Data Controller uses the Howler platform, managed by the South African company Howler (Howler Events Pty Ltd), which also provides the CRM system for communication with users. Howler acts as Data Processor pursuant to art. 28 of EU Regulation 2016/679 (GDPR), processing personal data exclusively on behalf of the Data Controller and based on documented instructions.

Since Howler is a company based outside the European Economic Area, user personal data may be transferred to South Africa. In such cases, the Data Controller ensures that the transfer takes place in compliance with Chapter V of the GDPR, ensuring an adequate level of protection through standard contractual clauses and appropriate security measures. For more information on the ways in which Howler processes personal data, please consult their Privacy Policy available at the following link: https://www.howler.co.za/privacy

‍

Web platform

The website is created using a technological platform that allows the operation and optimization of its key components, such as the management of content, registered users, contact forms and statistical data. These platforms, in order to offer their services, may also process personal data through servers located outside the European Union. This means that user data may be transferred and stored in third countries, in accordance with the guarantees provided for by EU Regulation 2016/679 (GDPR). The platform used by the Data Controller is Webflow, managed by the company Webflow, Inc., based in the United States. Webflow acts as a technical supplier and may process personal data as a data controller, limited to the technical activities necessary for the proper functioning of the site. For more information on how Webflow processes data, please consult the relevant Privacy Policy:

https://webflow.com/legal/privacy

‍

Personal Data Processed

Personal Data means any information relating to an identified or identifiable natural person (Data Subject). An identifiable natural person is considered to be a natural person who can be identified, directly or indirectly, with particular reference to an identifier such as a name, an identification number, location data, an on-line identifier, one or more elements characteristic of his physical identity.

‍

Category of Personal Data processed
Among the Personal Data processed by this Website, independently or through third parties, there are Common Data such as:

• Personal data (such as name, surname, date of birth, age, gender, etc.)
• Contact details (e-mail, address, telephone number)
• Internet browsing data (including data deriving from the use of social icons and social login buttons - for example Facebook, Instagram, Twitter, LinkedIn, etc. -) collected through cookies installed on the computer or mobile device (for more information see the Cookie Policy)
• Photographic images and/or video footage, collected on the occasion of participation in events, concerts and musical events and installations in general.
• Data relating to your interactions with the websites of the data controller, such as, by way of example but not limited to, data relating to participation in questionnaires, initiatives, contests, promotions, events (including through our social channels);

• If a request is sent through the “Contacts” section of the Site, the provision of some Personal Data is necessary for the Data Controller to satisfy the requests, so the related fields of the registration form are marked as mandatory.
• Login and account information, including username, password, and unique user ID;
• Personal data including gender, hometown, date of birth and purchase history;
• Information on payment methods or credit card;

‍

Methods of Processing Personal Data

The Personal Data provided or acquired will be subject to Processing based on principles of correctness, lawfulness, transparency and protection of confidentiality in accordance with current regulations. The Data Controller processes Users' Personal Data by adopting appropriate security measures to prevent unauthorized access, disclosure, modification or destruction of Personal Data. The processing is carried out using IT and/or telematic tools, with organizational methods and with logic strictly related to the purposes indicated.

‍

Purposes of Personal Data Processing and Legal Basis

Personal Data may be collected independently by the Data Controller or through third parties. In this case, the computer systems and software procedures used to operate this Website acquire some Personal Data from Users, of a technical-IT nature (for example, the IP address, the type of browser used, the operating system, the domain name and the addresses of websites from which access or exit was made, etc.), the transmission of which is inherent to the normal functioning of the Internet. These Data may be processed for the sole purpose of obtaining anonymous statistical information on the use of the site and/or to check its correct functioning and will be deleted immediately after processing.

The Data that the interested party chooses to provide spontaneously will be processed in compliance with the conditions of lawfulness. former art. 6 GDPR and will be processed to allow the Website to provide its services, as well as for the Purposes indicated below and will be kept for the time necessary to fulfill the above-mentioned Purposes. Specifically, the Purposes of the processing are:

‍

1) Respond to requests and provide Information

The Data will be processed in order to be contacted or to respond to specific requests addressed to the Data Controller by the interested party for communications of a nature relating to the Services and/or Contents of the same Data Controller, through e-mail messages or other communication tools such as telephone.

Legal basis: this treatment is optional and based on the consent of the interested party, however, the provision of data is necessary for the pursuit of the indicated purpose.

Data retention period: up to the revocation of consent by the interested party.

‍

2) Registration on the website

The registration procedure, through the creation of an account, is aimed at allowing the use of the website as a “registered user”.

Registering on the website by creating an account allows the registered user to:

- Make purchases faster, saving billing and shipping data.

- Store previous purchases and recover the cart in case of disconnection.

- Access your order history and manage your shopping preferences.

Legal basis: The legal basis for the processing is:

the execution of a contract or pre-contractual measures (art. 6.1 letter b GDPR) because account registration and cart management are necessary to allow the user to purchase and use the services offered by the site.

User consent (art. 6.1 letter a GDPR) for the possible prolonged storage of access data and purchase preferences. The user can revoke consent at any time by contacting the Data Controller.

Data retention period: Account data will be kept until

- Revocation of consent by the User for the storage of preferences.

- Delete the account at the request of the User.

- 10 years for information related to purchases, in compliance with tax and accounting obligations.

‍

3) Pre-contractual information and obligations

The data will be processed to contact the interested party and respond to his specific requests for information, such as informational communications on the products and services offered by the Data Controller, request for quotes and/or pre-contractual assistance for the purchase of products. The contact may take place by e-mail, telephone or by filling out the contact form on the site.

Legal basis for the processing:

Execution of pre-contractual measures at the request of the interested party (art. 6.1 letter b GDPR) When processing is necessary to respond to requests for information or quotes.

Consent of the interested party (art. 6.1 letter a GDPR) When data is collected for subsequent commercial contacts and/or promotional offers.

Data retention period:

The data provided for requests for information or quotes will be kept for a maximum of 12 months, unless a contractual relationship occurs.

If the interested party has provided consent to be contacted for future offers, the data will be kept until consent is revoked.

‍

4) Necessary processing within the framework of a contract

The Data will be processed for the following purposes:

- Execution of the contract concluded between the Interested Party and the Data Controller for the sale of the Products/Services on the Website.

- Management of the contractual relationship, including communications relating to orders, billing and shipping.

- After-sales assistance, including requests for legal guarantees, withdrawal and termination of the contract.

Fulfilment of legal, administrative and tax obligations deriving from the sale of products/services.

Legal basis of the processing: the legal basis of the processing is:

Execution of the contract (art. 6.1 letter b GDPR) The processing is necessary to provide the product/service purchased by the interested party.

Legal obligation (art. 6.1 letter c GDPR) Processing is necessary to comply with fiscal, administrative and accounting obligations.

Data related to payments

Data retention period

Personal data processed for contractual and administrative purposes will be kept for the time necessary for the execution of the contract and, subsequently, for a maximum period of 10 years, in accordance with legal obligations in tax and accounting matters. Online payments are processed by external payment service providers (e.g. PayPal, Stripe, Shopify Payments). The Data Controller does not directly store the interested party's credit or payment card details, but only receives a confirmation of payment from the service provider.

‍

5) Fulfilment of any obligations under current laws

The Data will be processed to fulfill any type of obligation contemplated and provided for by current laws, regulations, related regulations, commercial uses and tax/tax matters, including also for the purposes set out in the anti-money laundering legislation Legislative Decree 231/2007 and subsequent amendments.

Legal basis: this processing is necessary to fulfill a legal obligation to which the Data Controller is subject.

Data retention period: period indicated by law and in any case for a maximum period of 10 years for the purpose of fulfilling the related administrative and fiscal obligations.

‍

6) Soft spam

The Data Controller may send commercial and promotional communications to the interested party via e-mail relating to Products/Services similar to those already purchased by the interested party, without the need for prior consent, pursuant to art. 130, paragraph 4, of the Privacy Code, as amended by Legislative Decree 101/2018. The interested party has the right to object at any time to such communications, using the unsubscribe link in every email received or by contacting the Data Controller at his e-mail address.

Legal basis of the processing: The processing is based on the legitimate interest of the Data Controller (art. 6, letter f GDPR) to promote products or services similar to those already purchased by users. This legitimate interest is balanced with the right of the interested party to object at any time, as provided for in Recital no. 47 of the GDPR.

Data retention period: The data of the interested party will be processed for this purpose until the interested party exercises the right to object.

‍

7) Newsletter

The personal data provided by the interested party will be processed for sending newsletters containing promotional, commercial and advertising communications, as well as updates on initiatives and events of the Data Controller. To send the newsletter, the Data Controller may process your name and surname (if provided by the user) and email address. The Data Controller may also interact with the emails sent (e.g. opening the newsletter, clicking on links), where provided for by the tracking systems used by the Data Controller.

Legal basis of the processing: the processing is based on the explicit and free consent of the interested party, pursuant to art. 6, par. 1, letter a GDPR. Subscribing to the newsletter is optional and failure to provide data does not affect the use of other services on the site.

Data retention period: The data will be processed until the consent is revoked by the interested party, who may exercise the right to unsubscribe at any time:

Through the cancellation link at the bottom of each newsletter received.

By direct request to the Data Controller, by sending a communication to the email address.

‍

8) Marketing

The Data will be processed for direct sale of Products/Services, market research, sending communications and promotional, commercial and advertising material or related to initiatives and events, via e-mail, SMS, Whatsapp, Chat, Direct Messaging from social media, social networks or through phone calls, paper mail and other information material.

Legal basis: this processing is based on the consent freely expressed by the interested party pursuant to art. 6, par. 1, letter A of the GDPR.

Data retention period: up to the revocation of consent by the interested party.

‍

9) Statistics

The data will be processed to carry out statistical analysis and market research aimed at understanding user preferences and behaviors to improve the products and services offered, analyze user interaction with the website to optimize navigation and user experience. The analyses will be carried out on aggregated and anonymous data, where possible. If the data cannot be made completely anonymous, they will be processed in pseudonymized form and subject to the protections of the GDPR.

Legal basis for the processing:

Consent of the interested party (art. 6, par. 1, letter a GDPR) If the data is collected through analysis tools that track user behavior.

Legitimate interest of the Data Controller (art. 6, par. 1, letter f GDPR) If the analyses are carried out exclusively on anonymous and aggregated data.

The interested party can revoke consent at any time and deactivate tracking by:

The cookie management banner on the site.

Your browser settings, which allow you to block tracking cookies.

Direct request to the Data Controller at the email address [insert email].

Data retention period: The data will be kept until consent is revoked or for the maximum period set in each analysis tool.

‍

10) Profiling for advertising campaigns

The personal data of the interested party will be processed for the analysis and evaluation of interests, habits and consumption choices, in order to create personalized profiles based on the user's preferences, send informative and promotional material on Services/Products offered by the Data Controller, show personalized advertisements on third-party platforms (e.g. Facebook Ads, Google Ads, email marketing).

Legal basis of the processing: The processing is based on the explicit and free consent of the interested party, pursuant to art. 6, par. 1, letter a GDPR.

The interested party has the right to withdraw consent at any time, without affecting the lawfulness of the processing based on the consent given before the revocation.

The interested party may object to profiling and stop processing by:

- The privacy management settings in your account (if available).

- The unsubscribe link in each promotional communication received.

- Direct request to the Data Controller at the email address.

Data retention period: The data of the interested party will be processed until the consent is revoked.

‍

11) Business affiliation and redirection to partner sites

 The site may contain links to third-party commercial activities (e.g. partner accommodation facilities) with which the Data Controller has entered into affiliation agreements or commercial collaboration with Hotels, reception facilities, etc. When the user clicks on these links and visits partner sites, the Data Controller may receive financial compensation based on the reservations made or other actions taken by the user on the partner's site. These operations do not involve a direct transfer of personal data to partners, but may involve the use of cookies or tracking tools by third-party sites, which act as independent data controllers. The user is therefore invited to consult the privacy policy of third party sites before continuing browsing or making purchases.

‍

12) Staff selection

The personal data provided by the interested party will be processed by the Data Controller for the sole purpose of evaluating the application, following up on the contact request and, if appropriate, contacting the interested party for any interviews or subsequent job opportunities, both in relation to open positions and in the case of spontaneous applications.

Legal basis for the processing:

The processing is based on the express consent of the interested party, pursuant to art. 6, par. 1, letter a) of EU Regulation 2016/679. The provision of data is optional but necessary to follow up on the application.

Data retention period:

The data will be kept for a maximum period of 12 months from the receipt of the curriculum, unless consent is revoked in advance by the interested party.

At the end of the period, the data will be deleted or anonymized, unless an employment relationship is established.

Communication of Data

In addition to the Data Controller, in some cases, they may have access to the Data:

a) categories of specially trained persons in charge of this purpose involved in the organization of the Website (administrative, commercial, marketing, legal personnel, system administrators);

b) external parties (such as third-party technical service providers, hosting providers, IT companies, communication agencies) also appointed as Data Processors by the Data Controller pursuant to art. 28 GDPR. The updated list of Managers, if appointed, can always be requested from the Data Controller;

c) public or private entities that can access the Data in compliance with legal obligations;

d) subjects who perform ancillary and instrumental tasks with respect to the activity of the Data Controller.

‍

Treatment Times

As expressly provided for by art. 5, paragraph 1, letter e) of the GDPR, the Data are kept for the time necessary for the processing of the same in relation to the performance of the service requested by the interested party, or required by the Purposes described above in this document. At the end of the storage period, Personal Data will be deleted and therefore, the rights of access, cancellation, rectification and portability of the Data can no longer be exercised.

‍

Cookie

This Website uses cookies. Cookies are small text files that can be used by websites to make the experience more efficient for the interested party and to personalize content and ads, provide social network functions and analyze traffic. Cookie Policy

‍

Place of processing and transfer of data abroad

The Data are processed at the operational headquarters of the Data Controller. For more information, you can contact the Data Controller. The Data may be processed by individuals and/or legal entities operating on behalf of the Data Controller and under specific contractual obligations and based in EU or non-EU member countries. In the event that the Data is transferred outside the EEA, the Data Controller will take any appropriate contractual measure to ensure adequate data protection.

‍

Exercise of the rights of the interested party

The interested party has the right to exercise the powers provided for in articles 7, 15-22 of Reg. European 679/2016. In particular, you have the right to withdraw your consent at any time and, upon a simple request to the Data Controller, you can request access to Personal Data, receive the Personal Data provided to the Data Controller and, where possible, transmit them to another Data Controller without hindrance (so-called portability), obtain the updating, the limitation of processing, the correction of the Data and the cancellation of those processed in accordance with current legislation. You have the right, for legitimate reasons, to object to the Processing of Personal Data concerning you and to the Processing for the purpose of sending advertising material, direct sales and for carrying out market research. You also have the right to lodge a complaint with the Privacy Guarantor as the supervisory authority for the protection of personal data or to go to the appropriate courts. The interested party may exercise their rights by contacting the Data Controller by e-mail at: privacy@movement.it

‍

Tools used for the Processing of Personal Data

‍

CONTACT FORM

The interested party, by filling out the contact form with their data, consents to their use to respond to requests for information, or for any other purpose indicated by the header of the form. Personal Data collected through contact form: Email, Name and Surname, telephone

‍

EMAIL ADDRESS MANAGEMENT

These services allow you to manage a database of email contacts, telephone contacts or contacts of any other type, used to communicate with the interested party. These services may also make it possible to collect Data relating to the date and time of viewing the messages by the interested party, as well as the interaction of the interested party with them, such as information on clicks on the links inserted in the messages.

‍

Newsletter

When registering for the newsletter, the interested party's email address is automatically added to a list of contacts to which email messages containing information, including commercial and promotional information, relating to this Website may be transmitted. The interested party's email address may also be added to this list as a result of registering on this Site or after making a purchase. The interested party can choose at any time to unsubscribe from the newsletter by clicking on a specific button that he will find in the emails. After clicking on the delete button, the Data of the interested party will be immediately deleted by the “email marketing” software. Personal Data collected: email and Name. This Website uses the newsletter service provided by:

‍

MailerLite

The Data Controller uses MailerLite, a service provided by the UAB MailerLite company, for the management and sending of newsletters, as well as for the statistical analysis of email campaigns (e.g. opening rate and click). The Personal Data processed through this service are used exclusively for sending informational or promotional communications, following the voluntary subscription of the interested party to the newsletter. Personal data processed: name, email address. Place of processing: Lithuania. Legal basis: consent of the interested party (art. 6, par. 1, letter a) GDPR). Rights and opposition: you can revoke your consent at any time through the unsubscribe link in each newsletter received. For more information, please consult the — Privacy Policy (link to be activated) https://www.mailerlite.com/legal/privacy-policy)

‍

SPAM PROTECTION AND SECURITY MEASURES

This Website, to make it secure when Personal Data is entered, has an SSL certificate and uses the HTTPS protocol. With the use of this protocol, the transactions and data that are transmitted on the websites take place with maximum security and the content of the communication is not read or manipulated in any way by third parties.

This website also uses tools that potentially analyze traffic in order to filter it from parts of traffic, messages and content recognized as SPAM.

‍

reCAPTCHA

This Website uses reCAPTCHA, which is a service subject to the policy on privacy (https://policies.google.com/privacy?hl=it) And ouch terms and conditions (https://policies.google.com/terms?hl=it)

of use of Google.

‍

REGISTRATION ON THE WEBSITE

By registering or authenticating, the interested party allows the website to identify them and access dedicated services, such as order management, purchase history and personalization of the user experience. The interested party registers by filling out the appropriate registration form and providing their personal data. The processing of data for registration on the website is based on the execution of pre-contractual or contractual measures (art. 6, par. 1, letter b GDPR) and to allow the user to access the site's services. The Personal Data collected are first and last name, email address (username and password). The interested party can modify or delete their account at any time by accessing their profile settings or by contacting the Data Controller at the email address

By registering or authenticating, the interested party allows the website to identify him and to give him access to dedicated services.

The interested party can register directly on the site by filling out the Form and providing their Data or even with the help of third parties. In this case, the application will be able to access some Data stored by the third-party service used for registration and identification. Some of the services indicated below may collect Personal Data, also for targeting and profiling purposes.

This website uses:

Access to the Google account (Google Ireland Limited)

This service, offered by Google Ireland Limited, allows this Website to connect with the interested party's Google account. Personal Data collected: Various types of Data as specified by the Privacy Policy of the service. Place of processing: Ireland — Privacy Policy (https://policies.google.com/privacy?hl=it)

‍

STATISTICS

The statistical services allow the Data Controller only to monitor and analyze traffic data and are used to keep track of the behavior of the interested party. This Website uses the following services:

‍

Google Analytics 4

This site uses Google Analytics 4 (GA4), an analysis service provided by Google LLC, to collect anonymous statistical information on the use of the website, in order to improve the services offered. Google uses the Personal Data collected to:

Track and examine the use of this website.

Compile reports on site activities.

Share data with other Google services for analysis and optimization.

Google may also use Personal Data to personalize the ads of its advertising network and may transfer this information to third parties if required by law or if these subjects process the data on behalf of Google. In Google Analytics 4, IP addresses are used only at the time of collection and then deleted before storage.

Legal basis for the processing: the processing of data through Google Analytics 4 is based on:

Consent of the interested party (art. 6, par. 1, letter a GDPR) if the data is collected through non-anonymized tracking cookies.

Legitimate interest of the Data Controller (art. 6, par. 1, letter f GDPR) if the data is collected anonymously and aggregated without identifying the user.

Personal Data collected: Usage Data (information on user interactions with the site) and Cookies (if enabled).

Data retention period: The data collected through Google Analytics are kept for a maximum period of 14 months, unless otherwise set by the Data Controller.

The interested party can deactivate tracking by:

The cookie management banner on the site.

The browser add-on for deactivating Google Analytics, available at the following link: https://tools.google.com/dlpage/gaoptout?hl=it

Place of processing: USA — Ireland Privacy Policy (link to be activated) https://policies.google.com/privacy?hl=it)

‍

TAG MANAGEMENT

The use of tag management systems allows you to install and manage code snippets (called Tags) within the HTML pages of a website. This technology allows you to load tracking and analysis tools without manually modifying the site's source code, managing multiple services simultaneously with a single snippet. The use of these services may involve the transfer of the Data Subject to third-party tools that use these tags.

‍

Google Tag Manager (Google LLC or Google Ireland Limited)

The site uses Google Tag Manager, a service provided by Google LLC that allows you to integrate and manage third-party tags, such as analysis, remarketing and conversion monitoring tools. Google Tag Manager itself does not collect personal data, but it can activate other tracking tools that do so. If these tools involve the collection of personal data, the processing will be subject to the respective privacy regulations and the user's consent.

Google Tag Manager does not directly collect personal data, but it could manage tags that collect:

Cookies and Tracking Tools (if activated).

Site usage data (user interactions with the site).

Legal basis for the processing:

Legitimate interest of the Data Controller (art. 6, par. 1, letter f GDPR) If the Tag Manager is used only for the technical management of the tags without activating non-essential tracking.

Consent of the interested party (art. 6, par. 1, letter a GDPR) If Google Tag Manager is used to activate tracking tools and personalized advertising (e.g. Google Analytics, Facebook Pixel).

Data retention period: Google Tag Manager does not store the user's personal data. However, third-party services activated through it may collect and store data according to their respective policies.

If Google Tag Manager is used to activate tracking tools, the interested party can revoke consent by:

The cookie management banner on the site.

Your browser settings to block third-party cookies.

Place of processing: USA — Ireland — Privacy Policy ( https://policies.google.com/privacy)

‍

INTERACTION WITH SOCIAL NETWORKS

These services allow interactions with social networks directly from the pages of this Website. The interactions and information acquired from this Website are in any case subject to the privacy settings of the interested party relating to each social network. If an interaction service with social networks is installed, it is possible that, even if Users do not use the service, it collects traffic data relating to the pages where it is installed.

‍

Facebook (Meta Platforms, Inc.)

Facebook buttons are services for interacting with the Facebook social network, provided by Meta Platforms, Inc. Personal Data collected: Cookies and Usage Data.

Legal basis for processing The integration of these services may involve the processing of Personal Data, which is based on:

Explicit consent of the interested party (art. 6, par. 1, letter a GDPR) If the site uses tracking cookies for marketing or personalization purposes.

Legitimate interest of the Data Controller (art. 6, par. 1, letter f GDPR) If the data is collected only to allow interaction with social networks without further tracking.

The interested party can revoke consent and limit the tracking of social networks through:

The cookie management banner on the site.

The privacy settings of your account on social networks.

Browser settings, which allow you to block third-party cookies.

Place of processing: Ireland — Privacy Policy (https://www.facebook.com/privacy/explanation)

‍

Instagram (Meta Platforms, Inc.)

Instagram buttons are services for interacting with the Instagram social network, provided by Meta Platforms, Inc. Personal Data collected: Cookies and Usage Data.

Legal basis for processing The integration of these services may involve the processing of Personal Data, which is based on:

Explicit consent of the interested party (art. 6, par. 1, letter a GDPR) If the site uses tracking cookies for marketing or personalization purposes.

Legitimate interest of the Data Controller (art. 6, par. 1, letter f GDPR) If the data is collected only to allow interaction with social networks without further tracking.

The interested party can revoke consent and limit the tracking of social networks through:

The cookie management banner on the site.

The privacy settings of your account on social networks.

Browser settings, which allow you to block third-party cookies.

Place of processing: Ireland — Privacy Policy (https://help.instagram.com/519522125107875)

‍

YouTube (Google Ireland Limited)

YouTube buttons are services for interacting with the video content visualization service managed by Google. Personal Data collected: Cookies and Usage Data. Legal basis for processing The integration of these services may involve the processing of Personal Data, which is based on:

Explicit consent of the interested party (art. 6, par. 1, letter a GDPR) If the site uses tracking cookies for marketing or personalization purposes.

Legitimate interest of the Data Controller (art. 6, par. 1, letter f GDPR) If the data is collected only to allow interaction with social networks without further tracking.

The interested party can revoke consent and limit the tracking of social networks through:

The cookie management banner on the site.

The privacy settings of your account on social networks.

Browser settings, which allow you to block third-party cookies. Place of processing: Ireland — Privacy Policy ( https://policies.google.com/privacy?hl=it)

‍

X (formerly Twitter)

The X buttons and widgets are services for interacting with the X social network, provided by Twitter International Unlimited Company. The integration of these tools may involve the collection of usage data by the platform, even from users who do not have an X account or are not logged in at the time of browsing.

Personal Data collected: Cookies and Usage Data.

Legal basis for the processing:

Explicit consent of the interested party (art. 6, par. 1, letter a GDPR), if cookies or other tracking tools are activated for profiling or remarketing purposes.

Legitimate interest of the Data Controller (art. 6, par. 1, letter f GDPR), if the integration serves only to show social content or allow interaction, without further tracking purposes.

The interested party can revoke consent or manage their rights through:

The cookie management banner on the site.

The privacy settings of your X account

Browser settings, for blocking third-party cookies.

Place of processing: Ireland Privacy Policy (https://x.com/en/privacy)

‍

TikTok

TikTok buttons and widgets are services for interacting with the TikTok platform, provided by TikTok Technology Limited.

The integration of these tools may involve the automatic collection of Personal Data for analysis or marketing purposes by the platform.

Personal Data collected: Cookies and Usage Data.

Legal basis for the processing:

Explicit consent of the interested party (art. 6, par. 1, letter a GDPR), in case of the use of profiling, marketing or personalization cookies.

Legitimate interest of the Data Controller (art. 6, par. 1, letter f GDPR), only in the case of basic uploading of social content without additional tracking.

The interested party can revoke consent or limit its use through:

The cookie management banner on the site.

The privacy settings of the TikTok account.

Browser settings for blocking third-party cookies.

Place of processing: Ireland - Privacy Policy (https://www.tiktok.com/legal/page/us/privacy-policy/en)

‍

Spotify

Spotify widgets and buttons are integration tools with the Spotify audio streaming service, provided by Spotify AB, that allow the reproduction of multimedia content directly from the website. The integration of these tools may involve the automatic collection of Usage Data and the installation of cookies by Spotify, also for analysis or marketing purposes.

Personal Data collected: Cookies and Usage Data.

Legal basis for the processing:

Explicit consent of the interested party (art. 6, par. 1, letter a GDPR), if profiling or tracking cookies are used.

Legitimate interest of the Data Controller (art. 6, par. 1, letter f GDPR), in the event that Spotify content is integrated without further tracking.

The interested party can always revoke consent or limit the collection of data through:

The cookie management banner on the site.

The privacy settings of your Spotify account.

Browser settings, for blocking third-party cookies.

Place of processing: Sweden Privacy Policy (https://www.spotify.com/it/legal/privacy-policy/

‍

REMARKETING AND RETARGETING

These services allow this Website to communicate, optimize and serve advertisements based on the past use of this Website by the interested party. This activity is carried out through the tracking of Usage Data and the use of Cookies or Tracking Tools. This Website uses the following services:

Usage Data and the use of Cookies. This Website uses the following services:

Facebook Remarketing (Meta Platforms, Inc.)

The site uses the Facebook Remarketing service, provided by Meta Platforms, Inc., which connects user activity on the website with the Facebook and Instagram advertising network. The site uses Facebook Pixel to:

Show personalized advertisements to users who have visited the site.

Create audience groups to which you can target specific ads.

Analyze conversions and measure the effectiveness of advertising campaigns.

Personal Data collected:

Cookies and Tracking Tools.

Usage data (user interactions with the site and with advertisements).

Legal basis for the processing

The use of Facebook Remarketing is based on:

Explicit consent of the interested party (art. 6, par. 1, letter a GDPR) The Facebook Pixel is activated only with the user's consent through the cookie banner.

Legitimate interest of the Data Controller (art. 6, par. 1, letter f GDPR) If the data is collected only anonymously for statistical analysis.

The information collected by the Facebook Pixel is anonymous to the site owner, but Facebook can link it back to the user's profile. Facebook may use this data for its own advertising purposes, including on third-party sites, in accordance with its Privacy Policy (https://www.facebook.com/privacy/policy/). The Data Controller has no direct control over the use of data by Facebook.

Data retention period: The data collected by the Facebook Pixel is kept for a maximum of 180 days, unless otherwise set by Meta.

The interested party can revoke consent and deactivate Remarketing through:

The cookie management banner on the site.

Your Facebook account settings, in the 'Advertising Preferences' section.

Facebook's deactivation tool: Manage advertising preferences (https://www.facebook.com/settings/?tab=ads).

Place of processing: Ireland - Privacy Policy (https://www.facebook.com/about/privacy/)

‍

Instagram Remarketing (Meta Platforms, Inc.)

The site uses the Facebook Remarketing service, provided by Meta Platforms, Inc., which connects user activity on the website with the Facebook and Instagram advertising network. The site uses Instagram Pixel to:

Show personalized advertisements to users who have visited the site.

Create audience groups to which you can target specific ads.

Analyze conversions and measure the effectiveness of advertising campaigns.

Personal Data collected:

Cookies and Tracking Tools.

Usage data (user interactions with the site and with advertisements).

Legal basis for the processing: the use of Instagram Remarketing is based on:

Explicit consent of the interested party (art. 6, par. 1, letter a GDPR) The Meta Pixel is activated only with the user's consent through the cookie banner.

Legitimate interest of the Data Controller (art. 6, par. 1, letter f GDPR) If the data is collected only anonymously for statistical analysis.

The information collected by the Meta Pixel is anonymous to the site owner, but Meta can link it back to the user's profile. Meta may use this data for its own advertising purposes, including on third-party sites, in accordance with its Privacy Policy (https://privacycenter.instagram.com/policy/). The Data Controller has no direct control over the use of data by Instagram.

Data retention period: The data collected by the Meta Pixel is kept for a maximum of 180 days, unless otherwise set by Meta.

The interested party can revoke consent and deactivate Remarketing through:

The cookie management banner on the site.

The settings of your Instagram account, in the 'Advertising Preferences' section.

Facebook's deactivation tool: Manage advertising preferences (https://www.facebook.com/settings/?tab=ads).

Place of processing: Ireland - Privacy Policy (https://help.instagram.com/519522125107875)

‍

CONTENT ON EXTERNAL PLATFORMS

These services allow you to view content hosted on external platforms directly from the pages of this Website and to interact with them.
If a service of this type is installed, it is possible that, even if Users do not use the service, it will collect traffic data relating to the pages where it is installed.

‍

PAYMENT MANAGEMENT

Payment management services allow this Website to process payments by credit card, bank transfer or other tools. The Data used for payment are acquired directly by the manager of the requested payment service without being processed in any way by this Site. Some of these services may also allow the scheduled sending of messages to the interested party, such as emails containing invoices or notifications regarding payment. This Website uses the service offered by Howler.

‍

Changes to this Privacy Policy

The Data Controller reserves the right to make changes to this Privacy Policy at any time by advertising them to Users on this page. Therefore, please consult this page often, taking as a reference the date of the last modification indicated at the bottom. In case of non-acceptance of the changes made to this Privacy Policy, the interested party is required to cease using this Website and may request the Data Controller to remove their Personal Data. Unless otherwise specified, the previous Privacy Policy will continue to apply to Personal Data collected up to that time. The Data Controller is not responsible for updating all the links that can be viewed in this Privacy Policy, so whenever a link is not working and/or updated, Users acknowledge and accept that they must always refer to the document and/or section of the websites referred to by this link.

‍

Privacy Policy updated in March 2025

‍