The purpose of this Privacy Policy is to describe how this website is managed with regard to the processing of personal data of users/visitors who consult it. This notice is provided pursuant to Article 13 of EU Regulation 2016/679 (GDPR).

1. DATA CONTROLLER

The Data Controller is Anlaids Onlus – Associazione Nazionale per la Lotta contro l’Aids, with registered address at Via Giovanni Giolitti, 42 – 00185 Rome (RM), VAT No. 01712471000, PEC: anlaids@pec.anlaidsonlus.it.

For any privacy-related requests, you can write to: info@habituslab.it or to the association's certified email address (PEC).

2. TYPES OF DATA PROCESSED AND PURPOSES

A. Navigation Data

The computer systems responsible for the operation of this website acquire certain personal data whose transmission is implicit in the use of Internet communication protocols (e.g., IP addresses, domain names). This data is used solely to obtain anonymous statistical information on the site's usage and to monitor its correct functioning.

B. Newsletter and Contact Forms

Legal basis: The data subject's consent (Article 6(1)(a) GDPR).

• Data collected: First name, surname (if provided), email address.

• Purposes: Sending updates on exhibition stages, events, call for entries, and news related to the HABITUS project.

• Base giuridica: Il consenso dell’interessato (Art. 6 par. 1 lett. a GDPR).

C. Cookies

The website uses technical cookies and, subject to consent, profiling or third-party cookies to improve user experience and analyze traffic. For further details, please refer to the website's specific Cookie Policy.

3. LEGAL BASIS FOR PROCESSING

The processing of data is based on:

• Consent of the data subject: For sending newsletters and handling contacts.

• Legitimate interest: For website security and technical monitoring.

• Legal obligations: Where necessary to comply with applicable statutory regulations.

4. PROCESSING METHODS AND STORAGE

Data processing is carried out through automated and manual tools, using logic strictly related to the purposes indicated above.

• Retention Period: Data for the newsletter will be retained until the user requests unsubscription. Navigation data is deleted immediately after processing (unless required for the investigation of offences).

5. DATA RECIPIENTS

Data may be communicated to:

• Internal ANLAIDS personnel authorized to process data.

• Third-party technical service providers (hosting providers, communication agencies, email platform operators such as Mailchimp or similar) appointed as Data Processors.
  
  Data will not be disclosed, disseminated, or sold to third parties for their own commercial purposes.

6. DATA TRANSFERS OUTSIDE THE EU

Data may be transferred outside the European Economic Area (e.g., if using US-based cloud or newsletter services). In such cases, the Data Controller ensures that the transfer takes place on the basis of Standard Contractual Clauses or European Commission adequacy decisions.

7. RIGHTS OF DATA SUBJECTS

Pursuant to Articles 15 et seq. of the GDPR, the user has the right to:

1. Access their personal data and request a copy.

2. Request rectification or integration of incomplete data.

3. Request erasure ("right to be forgotten").

4. Withdraw consent at any time.

5. Object to processing or request restriction of processing.

6. Lodge a complaint with the Data Protection Authority (Garante per la Protezione dei Dati Personali, www.garanteprivacy.it).

8. AMENDMENTS

The Data Controller reserves the right to modify this policy at any time. The version published on the website is the version currently in force.

Last updated: 17 April 2024