• Data provided voluntarily by the user: the website does not allow the provision of information of any kind; however, it provides email addresses to which users may send emails containing text and attachments at their discretion. Unless otherwise specifically requested, the User (the data subject) must not disclose unnecessary personal information concerning themselves or third parties (e.g. health status, allergies, photos, the identity of others, ideas, tastes and preferences of any kind, etc.)


• Newsletter email: from the website, you can subscribe to the newsletter to stay informed about news and events promoted and/or organised by Film Festival Lessinia APS. The data subject’s consent is required to complete the newsletter subscription.


• Browsing data:
  
  • The IT systems and software procedures used to operate this website acquire, during their normal operation, some personal data whose transmission is implicit in the use of Internet communication protocols. This information is not collected to be associated with identified data subjects, but that by their own nature could, through elaboration and association with data held by third parties, make it possible to identify users. This category of data includes the IP addresses or domain names of the computers used by users connecting to the site, the URI (Uniform Resource Identifier) addresses of the resources requested, and other parameters relating to the user’s operating system and IT environment.
  
  
  • The processing is done automatically by the website.


• Cookies:
  • This website uses technical cookies only. For more details, please see the ‘Cookie Policy’ section.

3.Purposes and Legal Basis for Processing
User Data is collected for the following purposes and on the following legal bases:

Purpose of Processing	Personal Data Processed	Legal Basis
Replying to requests for further information	Name, Surname, email	Execution of pre-contractual measures taken at the request of the data subject (Art. 6 1b of the GDPR).
Newsletter	email	To notify the data subject of events promoted and/or organized as part of the Lessinia Film Festival (Art. 6, para. 1, lett. a of the GDPR)
To ensure the website functions properly	Browsing data, technical cookies

4. Methods and Location of Processing
Processing is carried out using IT and/or telecommunications tools, with organizational methods and procedures strictly related to the purposes indicated. The data is processed at the Data Owner's operational headquarters and at any other location where the parties involved in the processing are situated.
Specific security measures are observed to prevent loss of data, or improper use, and unapproved access, primarily through electronic storage using devices equipped with access credentials that are safeguarded by appropriately trained personnel or at locations where adequate security measures are in place.

5. Retention Period
Data is processed and retained for as long as necessary to meet the purposes for which it was collected.
Therefore:

• Personal Data collected for purposes related to the performance of a contract or pre-contractual measures (contact request) will be retained until the performance of such contract is completed and will be destroyed if, following the request, the requester does not enter a contract with the Data Controller.


• The email address will be retained until the user requests to unsubscribe from the newsletter.


• Browsing data and technical cookies do not persist beyond the duration of the individual browsing session.

6. Disclosure of Data
The personal data collected will not be shared or communicated to third parties without the data subject’s explicit consent. Without the need for the data subject’s consent, the Data Controller may disclose the personal data in its possession: a) to those parties to whom such information must be disclosed in compliance with an obligation laid down by law, a regulation or EU legislation; b) to intermediaries to whom the data may be disclosed in accordance with the provisions of anti-money laundering legislation (see Article 39, paragraphs 3 and 5, of Legislative Decree No. 231/2017), which provides for the possibility of disclosing personal data relating to reports deemed suspicious, further information requested by the Financial Intelligence Unit (UIF), or the existence or possibility of investigations or further inquiries concerning money laundering or terrorist financing;

7. Rights of the Data Subject
According to Articles 15 et seq. of the GDPR, you have the right to:

• Withdraw your consent at any time.
• Access your Data.
• Verify and request the modification of your Data.
• Obtain the restriction of processing.
• Obtain the cancellation or removal of their Personal Data (right to be forgotten).
• Receive the personal Data or have them transferred to another controller (right to data portability).
• Object to the processing of their Data.
• Lodge a complaint with the competent data protection supervisory authority (in Italy, the Garante per la Protezione dei Dati Personali).

To exercise their rights, users may submit a request to the Data Controller’s contact details provided in this document. Requests are submitted free of charge and processed by the Data Controller as soon as possible, and in any event within one month.

8. Cookie Policy
This website uses only technical cookies, which are essential for the website to function properly and to enable you to browse it. We do not use cookies for user profiling, we do not use profiling cookies, your prior consent is not required for their use.

9. Changes to this privacy policy
The Data Controller reserves the right to make changes to this privacy policy at any time by publishing them on this page. Please check this page regularly, referring to the date of the last revision indicated at the bottom.