Privacy Policy

privacy.s1Body

info@fosforoscienza.it

We collect and process personal data in two distinct contexts:

A — Guest area / accreditation portal

Guests, stand operators and staff who register on the portal provide the following data, required for the organisation of the festival:

B — Public newsletter

Newsletter subscribers provide their name, email address and preferred language, used solely for sending festival updates.

C — Schools pre-registration 2027

Teachers who complete the pre-registration for Fosforo 2027 provide their first name, last name, email address, town and province of residence, details of the school where they teach (name, town, subject, phone number) and the school levels of their classes. The data is used to send the school programme in preview and to size the activities for each school level. The phone number provided is the school's, not a personal one.

Processing is based on different legal grounds depending on the context:

• Guest portal — Processing is necessary for the performance of the participation agreement for the event (Art. 6(1)(b) GDPR) and, for travel and dietary data, for the legitimate organisational interest of the Association (Art. 6(1)(f) GDPR).
• Newsletter — Processing is based on the explicit consent of the data subject (Art. 6(1)(a) GDPR), given at the time of subscription. Consent may be withdrawn at any time.
• Schools pre-registration 2027 — Processing is based on the consent given at sign-up (Art. 6(1)(a) GDPR), which may be withdrawn at any time without affecting the lawfulness of processing already carried out.

Guest portal data is retained for the period necessary for the organisation of the festival and for no more than 12 months after the event, unless otherwise required by law.

Newsletter data is retained until consent is withdrawn. Upon cancellation, the email address is deactivated within 30 days.

Schools pre-registration data is kept until the end of the 2027 edition of the festival and in any case no longer than 12 months from that date; participants can delete it themselves at any time from their private page.

Your data is neither sold nor shared with third parties. To provide the service we use the following providers acting as data processors:

• Database and storage — hosted on servers owned by the controller, located in Italy
• Vercel — web application hosting (USA, EU-US Data Privacy Framework participant)
• Resend — transactional email and newsletter delivery (USA, EU-US Data Privacy Framework participant)

Vehicle number plate and model data, where provided for the ZTL permit, are shared with the Municipality of Senigallia solely for that purpose.

Under Articles 15–22 of the GDPR, you have the right to:

• Access — know what personal data we hold about you
• Rectification — correct inaccurate data or update it
• Erasure — request the deletion of your data ("right to be forgotten")
• Restriction — restrict processing in certain circumstances
• Portability — receive your data in a machine-readable format
• Objection — object to processing based on legitimate interest
• Withdrawal of consent — for the newsletter, via the link in every email

info@fosforoscienza.it

You have the right to lodge a complaint with the Garante per la protezione dei dati personali (Italian Data Protection Authority):

www.garanteprivacy.it

The guest portal uses only technical cookies necessary for the operation of the service (authentication session). No profiling or third-party tracking cookies are used.