Pursuant to Article 13 of EU Regulation 2016/679 – GDPR

A) General Information

Browsing this website and/or accessing certain sections of it may involve the collection and processing of personal data by the Data Controller.

This Privacy Policy provides information regarding the management of personal data of users who visit www.paganinifestival.com  and use the functions and services available on the website.

This notice is provided pursuant to Article 13 of Regulation (EU) 2016/679 (“GDPR”) and Legislative Decree 196/2003 as amended.
This Privacy Policy applies exclusively to this website and not to any other websites that may be accessed by the user via external links.

B) Data Processing

1. Data Controller

The Data Controller is:

Società dei Concerti di Parma APS
Via Giuseppe Muggia 1 – 43121 Parma (PR), Italy
Tel. +39 0521 572600
E-mail: info@societaconcertiparma.com

The Data Controller is responsible for the lawful and proper use of personal data and may be contacted for any information or request concerning data processing.

2. Data Collected During Browsing

The IT systems and software procedures used to operate the website acquire certain personal data as part of their normal functioning. The transmission of such data is implicit in the use of Internet communication protocols (such as IP addresses, requested URL addresses, time of request, method used to submit the request to the server, etc.).

These data are not collected in order to be associated with identified individuals; however, by their very nature, they could allow users to be identified through processing and association with data held by third parties.

3. Data Voluntarily Provided by the User

The optional, explicit, and voluntary sending of messages to the addresses indicated on the website or the completion of contact forms results in the acquisition of the sender’s email address and any other personal data included in the communication.

Voluntary registration through forms available on the website results in the acquisition of the data entered in the relevant fields. Such data are processed exclusively for the purpose of providing the requested service.

4. Newsletter and Informational Communications

If the user has given specific consent, personal data may be used to send newsletters, informational or promotional communications, or updates regarding activities organized by Società dei Concerti di Parma APS, via email or automated systems.

Consent to data processing for marketing purposes is optional and may be withdrawn at any time, without affecting the lawfulness of processing based on consent given before its withdrawal.

Failure to provide consent for marketing purposes will not affect access to other services offered by the website.

5. Purpose and Legal Basis of Processing

Personal data are processed pursuant to Article 6 of the GDPR for the following purposes:

• to ensure the proper functioning of the website;
• to respond to user requests;
• to manage registrations for events, competitions, orchestras, exhibitions, or other activities;
• to fulfill administrative, legal, and accounting obligations;
• to send newsletters and informational communications (subject to consent).

The legal basis for processing includes the data subject’s consent, the performance of contractual or pre-contractual obligations, and compliance with legal obligations.

6. Processing Methods

Personal data are processed using electronic and digital tools, in accordance with the principles of lawfulness, fairness, transparency, and data minimization.

Appropriate technical and organizational security measures are adopted to prevent data loss, unlawful use, unauthorized access, or disclosure.

7. Data Recipients

Personal data may be disclosed to authorized persons or Data Processors appointed by the Data Controller (such as IT service providers, hosting services, newsletter management platforms, and administrative consultants).

Personal data will not be publicly disclosed.

Any transfers of data to third countries will take place in compliance with Articles 44 et seq. of the GDPR.

8. Data Retention

Personal data will be retained only for the time necessary to achieve the purposes for which they were collected and in compliance with applicable legal obligations.

Specifically:

• browsing data are retained for the duration of the session;
• contact request data are retained for the time necessary to respond;
• administrative data are retained in accordance with legal requirements;
• newsletter data are retained until consent is withdrawn.

9. Data Subject Rights

Data subjects may exercise the rights provided under Articles 15–22 of the GDPR, including:

• right of access;
• right to rectification;
• right to erasure;
• right to restriction of processing;
• right to object to processing;
• right to data portability;
• right to withdraw consent at any time;
• right to lodge a complaint with the competent Data Protection Authority.

10. Exercising Your Rights

You may exercise your rights at any time by contacting:

info@societaconcertiparma.com

or by writing to the contact details indicated in Section 1 of this Privacy Policy.