Privacy Policy

Personal data processing pursuant to EU Regulation 2016/679 (GDPR) · Last updated: April 2026

1. Data controller

privacy.s1Body

info@fosforoscienza.it

2. Data collected and purposes of processing

We collect and process personal data in two distinct contexts:

A — Guest area / accreditation portal

Guests, stand operators and staff who register on the portal provide the following data, required for the organisation of the festival:

Data	Purpose
First and last name	Identification and access badge
Email address	Portal access and organisational communications
Mobile phone number	Urgent logistical communications during the festival
Organisation / institution	Attribution in the brochure and programme
Activity data (title, type, description, images)	Publication in the festival brochure and programme
Speaker photo	Promotional materials and brochure
Travel data (mode of transport, dates, times, flight/train)	Organisation of access and welcome logistics
Dietary preferences and intolerances	Meal planning during the festival
Vehicle data (number plate, model) — only if ZTL permit requested	ZTL permit request to the Municipality of Senigallia
Companion data (first name, last name, mobile, dietary preferences)	Logistical organisation and meals for companions

B — Public newsletter

Newsletter subscribers provide their name, email address and preferred language, used solely for sending festival updates.

3. Legal basis for processing

Processing is based on different legal grounds depending on the context:

Guest portal — Processing is necessary for the performance of the participation agreement for the event (Art. 6(1)(b) GDPR) and, for travel and dietary data, for the legitimate organisational interest of the Association (Art. 6(1)(f) GDPR).
Newsletter — Processing is based on the explicit consent of the data subject (Art. 6(1)(a) GDPR), given at the time of subscription. Consent may be withdrawn at any time.

4. Data retention

Guest portal data is retained for the period necessary for the organisation of the festival and for no more than 12 months after the event, unless otherwise required by law.

Newsletter data is retained until consent is withdrawn. Upon cancellation, the email address is deactivated within 30 days.

5. Disclosure to third parties and data transfers

Your data is neither sold nor shared with third parties. To provide the service we use the following providers acting as data processors:

Supabase — database and storage (servers in Europe, EU)
Vercel — web application hosting (USA, EU-US Data Privacy Framework participant)
Resend — transactional email and newsletter delivery (USA, EU-US Data Privacy Framework participant)

Vehicle number plate and model data, where provided for the ZTL permit, are shared with the Municipality of Senigallia solely for that purpose.

6. Rights of the data subject

Under Articles 15–22 of the GDPR, you have the right to:

Access — know what personal data we hold about you
Rectification — correct inaccurate data or update it
Erasure — request the deletion of your data ("right to be forgotten")
Restriction — restrict processing in certain circumstances
Portability — receive your data in a machine-readable format
Objection — object to processing based on legitimate interest
Withdrawal of consent — for the newsletter, via the link in every email

info@fosforoscienza.it

7. Complaints

You have the right to lodge a complaint with the Garante per la protezione dei dati personali (Italian Data Protection Authority):

www.garanteprivacy.it

8. Cookies

The guest portal uses only technical cookies necessary for the operation of the service (authentication session). No profiling or third-party tracking cookies are used.

Associazione Culturale NEXT ETS · Via Fattori 10, 60019 Senigallia (AN) · info@fosforoscienza.it

← Back to the Fosforo website