Personal Data Processing Notice (GDPR)

1. Data controller

The data controller is ArtCore APS - ETS, with registered office at the address above. For any request related to personal data protection, you can contact the association by email at segreteria@artcorehub.org.

2. Types of data processed

ArtCore APS - ETS may process the following categories of personal data:

• Identity and contact data (name, surname, email address, phone number, tax code);
• Data related to association activities (membership, participation in courses or events, membership card);
• Bank details necessary for donations or membership fees;
• Images, photographs, or video recordings taken during events promoted by the association;
• Information about artistic interests or preferences, if voluntarily provided by data subjects.

The association does not process data of minors.

3. Purposes and legal basis of processing

Personal data are collected and processed for the following purposes:

• Managing the association relationship and fulfilling statutory or legal obligations related to association activities (legal basis: art. 6(1)(b) GDPR);
• Sending informational and promotional communications about activities, events, and cultural initiatives promoted by ArtCore APS - ETS (legal basis: legitimate interest of the association, art. 6(1)(f) GDPR);
• Accounting and administrative management, including donations and sponsorships (legal basis: legal obligation, art. 6(1)(c) GDPR);
• Publishing images or videos on official channels (website, social networks) for documentation or promotion of association activities, in compliance with the notice and informed consent given.

4. Processing methods

Data are processed in paper and digital form lawfully, fairly, and transparently, ensuring their security, confidentiality, and integrity.

Appropriate technical and organizational measures are adopted to prevent loss, unauthorized access, improper use, or unauthorized disclosure.

5. Data communication and disclosure

Personal data may be communicated exclusively to:

• Collaborators and volunteers of the association, to the extent necessary for association activities;
• Digital support service providers (e.g. Google Workspace, newsletter platforms, or social networks) located in the European Union;
• Public or private entities where required by law.

No data are transferred outside the European Union.

6. Data retention

Personal data are retained for as long as necessary to manage the association relationship and in any case no longer than deletion from the members register, or ten years for accounting or administrative purposes only, unless longer retention is required by law.

7. Data subject rights

Data subjects may at any time exercise the rights provided by Articles 15-22 of Regulation (EU) 2016/679 (access, rectification, erasure, restriction, objection, data portability) by writing to segreteria@artcorehub.org.

The association undertakes to respond within the deadlines set by GDPR.

8. Cookies and website interaction

The ArtCore APS - ETS website uses only technical cookies necessary for the correct functioning of the platform and contact forms to enable communication with the association.

No profiling cookies or third-party statistical analysis tools are used.

9. Notice updates

This notice may be updated periodically to reflect legal or organizational changes.

Any updates will be published on the association's official website or communicated to members through usual channels.