PRIVACY

Privacy Policy.

DRAFT FOR REVIEW - text not final. Parts highlighted in yellow must be completed or confirmed by the SEC; the text must be reviewed by whoever handles privacy and legal matters.

Information on the processing of personal data pursuant to Art. 13 of Regulation (EU) 2016/679 (GDPR).

Data controller

European Society of Culture (SEC) - International Section, Via B. Pasquinelli 6, 51012 Collodi (PT) Italy. Privacy contact: info@societaeuropeacultura.it.

Data Protection Officer (DPO): [not appointed / indicate name and contact]

What data we process, why and on what legal basis

  • “Write to us” form (Contact page): first name, surname, e-mail, subject and message. Purpose: to answer your request. Legal basis: legitimate interest in answering enquiries received (Art. 6(1)(f)).
  • Membership form: identification data, e-mail, affiliated institution [and any other fields to be defined]. Purpose: to handle the membership request and the membership relationship. Legal basis: pre-contractual/contractual measures (Art. 6(1)(b)) and legal administrative and accounting obligations (point (c)).
  • Sharing your e-mail address with the community of members: optional, and only with your consent (Art. 6(1)(a)), which you may withdraw at any time. You may provide a generic institutional address instead.
  • Information on SEC network initiatives (invitations, programmes): [define: consent for non-members / legitimate interest for members].
  • Fees and donations: data needed for administration and accounting. Legal basis: legal obligations (Art. 6(1)(c)). Membership fees and donations are paid by bank transfer only: the website does not collect payment card data.
  • Browsing data: servers record technical data (IP address, date and time, pages requested) needed for the operation and security of the site. Legal basis: legitimate interest (Art. 6(1)(f)).

Provision of data

Providing the data requested in the forms is optional, but without it we cannot answer your request or process your membership.

Recipients of the data

Data is processed by authorised SEC staff and collaborators. Members’ data is not shared with the SEC National Centres. It may be processed, as data processors, by the providers of hosting, e-mail and website maintenance: Aruba S.p.A. (website hosting) [indicate the other providers, for example e-mail, and check the processing agreements under Art. 28 GDPR].

Data is not disclosed or sold to third parties for commercial purposes.

Transfers outside the EU

The website is hosted on servers in Italy and members’ data is not shared with the SEC National Centres, so it is not transferred outside the European Union. [check the servers of the e-mail service and of any newsletter]

How long we keep data

  • Requests sent through the Contact form: 12 months.
  • Members’ data: for the duration of membership and then for the periods required by law (10 years for accounting records).
  • Consent to share your e-mail with members: until withdrawn.
  • Browsing data: [indicate log retention period].

Your rights

You may at any time request access to your data, rectification, erasure, restriction of processing and portability, and you may object to processing; you may also withdraw any consent given. Write to info@societaeuropeacultura.it.

You have the right to lodge a complaint with the Italian data protection authority (Garante per la protezione dei dati personali, www.garanteprivacy.it) or with the supervisory authority of your country of residence.

Cookies

The website uses technical cookies necessary for its operation and analytics tools to measure visits. It does not use profiling cookies. [Indicate the chosen analytics tool (e.g. Matomo or Plausible without cookies, or Google Analytics 4) and whether data is anonymised. If non-anonymised analytics cookies or third-party content (videos, maps, social media) are used, a consent banner and cookie notice are required.]

Updates

This policy may be updated; the date of the latest revision is shown here: [date].