Privacy Policy
Privacy Policy
Effective Date:09/11/2026
Rosso Arancio Association ("we", "our", or "us") is committed to protecting your personal data in compliance with the European General Data Protection Regulation (GDPR - Regulation EU 2016/679) and applicable national data protection laws.
This Privacy Policy explains how we collect, use, store, and protect your personal data when you visit our website [www.yourwebsite.com] or interact with our services.
1. Data Controller
The Data Controller responsible for processing your personal data is:
-
Entity: Rosso Arancio Association
-
Registered Address: Via Olivella, 40 cap 84016 Pagani (SA)
-
Tax ID / VAT:94040020656
-
Contact Email: progetti@rossoarancio.eu
2. What Personal Data We Collect
We may collect and process the following categories of personal data:
-
Contact Information: Name, surname, email address, phone number, or mailing address when provided voluntarily via contact forms, membership application forms, or newsletter sign-ups.
-
Membership & Event Registration Data: Information provided when applying to become a member or registering for conferences, workshops, and association activities.
-
Technical & Usage Data: IP addresses, browser type, operating system, referring URLs, and pages visited, collected automatically through standard server logs and analytical cookies.
3. Purpose and Legal Basis for Data Processing
We process your personal data for the following specific purposes and under the following legal bases pursuant to Article 6 of the GDPR:
-
Responding to Inquiries: To process and respond to your messages, questions, or requests submitted through our contact forms or email addresses.
-
Legal Basis: Performance of pre-contractual measures or our legitimate interest in providing effective customer support (Art. 6.1.b / Art. 6.1.f GDPR).
-
-
Membership and Event Management: To process membership applications, manage administrative records, and handle registrations for conferences, workshops, roundtables, and association activities.
-
Legal Basis: Performance of a contract to which you are party or compliance with the association's statutory obligations (Art. 6.1.b GDPR).
-
-
Newsletter and Communications: To send you updates, event invitations, cultural announcements, and news regarding Rosso Arancio Association.
-
Legal Basis: Your explicit and freely given consent (Art. 6.1.a GDPR), which you may withdraw at any time.
-
-
Website Security and Technical Operation: To monitor technical performance, prevent fraud or cyber threats, and ensure the proper function and stability of our website.
-
Legal Basis: Our legitimate interest in maintaining a secure and reliable online presence (Art. 6.1.f GDPR).
-
4. How Long We Retain Your Data
-
We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected:
-
Contact Requests: Retained for as long as necessary to resolve your inquiry, up to [e.g., 12 months].
-
Membership & Accounting Data: Retained for the duration of your membership and up to 10 years thereafter to comply with statutory legal and tax obligations.
-
Newsletter Subscriptions: Retained until you withdraw your consent or unsubscribe.
-
5. Data Sharing and Third Parties
-
We do not sell, rent, or trade your personal data to third parties. We may share data only with trusted service providers who assist us in operating our website and association activities (e.g., web hosting providers, newsletter delivery services like Mailchimp, or legal/accounting advisors). All service providers act as Data Processors bound by strict data protection agreements.
-
We may also disclose information if required by law or to respond to valid requests by public authorities.
-
6. International Data Transfers
-
If any personal data is transferred outside the European Economic Area (EEA), we ensure appropriate safeguards are in place, such as Standard Contractual Clauses (SCCs) approved by the European Commission, to guarantee an adequate level of data protection.
-
7. Your Rights Under GDPR
-
As a data subject, you have the following rights regarding your personal data:
-
Right of Access: Request a copy of the personal data we hold about you.
-
Right to Rectification: Request correction of inaccurate or incomplete data.
-
Right to Erasure ("Right to be Forgotten"): Request deletion of your data when it is no longer needed or if consent is withdrawn.
-
Right to Restrict Processing: Request the limitation of how we process your data under certain conditions.
-
Right to Data Portability: Receive your personal data in a structured, commonly used, machine-readable format.
-
Right to Object: Object to the processing of your data based on legitimate interests or direct communications.
-
Right to Withdraw Consent: Revoke your consent at any time without affecting the lawfulness of prior processing.
-
To exercise any of these rights, please contact us at [privacy@yourwebsite.com]. You also have the right to lodge a complaint with your local Data Protection Authority (in Italy, the Garante per la protezione dei dati personali).
-
8. Updates to This Policy
-
We reserve the right to update this Privacy Policy periodically to reflect changes in our legal obligations or operational practices. The latest version will always be available on this page with the updated effective date.
-
