Privacy
Policy

Last updated: February 1, 2025

This Privacy Policy describes the methods for collecting, using and protecting the personal data of users of the website www.fantasiafestival.org (hereinafter “the Site”) in accordance with Regulation (EU) 2016/679 (GDPR).

1. Data Controller

The Data Controller is:
Ass. Cultural Fantasy
Registered office: Via Valle del Pozzo 13, 61037 Mondolfo (PU), Italy
Certified email: associazione_fantasia@pec.it
Tax Code: 90055170410
VAT number: 02827540416
Unique code: M5UXCR1

For any questions or requests regarding the protection of your personal data, you can contact us at the addresses indicated above.

2. Types of Data Collected

We collect and process the following categories of personal data:

a) Data provided voluntarily

• First name, last name, email address, telephone number (for example, filling out contact forms or registering for events).
• Payment information in the case of buying tickets or donations.

b) Browsing data

• IP address, browser type, operating system, pages visited and time of access.
• Collected automatically for security reasons and statistical analysis.

c) Cookies and tracking technologies

• Technical and profiling cookies used to improve the user experience and personalize content.
• For more details, see our Cookie Policy.

3. Purposes and Legal Bases of the Treatment

Personal data is processed for the following purposes:

• Purpose/Legal Basis
• Provide services and manage access to festival eventsExecution of a contract (Art. 6.1.b GDPR)
• Sending newsletters and promotional communicationsUser consent (Art. 6.1.a GDPR)
• Analysis and improvement of the website Legitimate interest of the Data Controller (Art. 6.1.f GDPR)
• Fulfilment of legal and tax obligationsLegal obligation (Art. 6.1.c GDPR)
• Respond to requests and provide assistance to usersLegitimate interest of the Data Controller (Art. 6.1.f GDPR)
• Consent can be revoked at any time by writing to associazione_fantasia@pec.it.

4. Processing Methods and Data Security

• The processing takes place electronically and/or on paper, adopting appropriate security measures to prevent unauthorized access, loss or illegal disclosure of data.
• We use advanced encryption and firewall technologies to protect information.
• Access to data is limited to authorized personnel only.

5. Communication of Data to Third Parties

The data may be communicated to:

• External service providers (e.g. hosting, email marketing, payment services), who act as Data Processors.
• Competent authorities, if required by law.
• Business partners, only with the user's prior consent.

The data will NEVER be sold to third parties.

6. Transfer of Data Abroad

• If data is transferred outside the European Economic Area (EEA), we ensure adequate levels of protection by adopting the European Commission's Standard Contractual Clauses (SCC).
• In the case of external services (Google, Meta, PayPal), we recommend that you read the respective privacy policies.

7. Data Retention Period

Data TypeRetention Period:

• Event registration datesUp to 12 months after the event.
• Billing and payment data 10 years (legal obligation).
• Browsing data/12 months.
• Data for marketing purposesUntil consent is revoked.

Upon expiry, the data is deleted or anonymized.

8. Rights of the interested party

Based on articles 15-22 of the GDPR, you have the right to:

• Access your personal data and receive a copy of the data processed.
• Ask for the correction of inaccurate data or for an update.
• Request the cancellation of your data (“Right to be forgotten”).
• Restrict data processing under certain circumstances.
• Oppose the processing, when based on legitimate interest.
• Request data portability, where applicable.
• Revoke your consent at any time.

To exercise your rights, send a request to associazione_fantasia@pec.it.

If you believe that the processing is unlawful, you can file a complaint with the Guarantor Authority for the protection of personal data (www.garanteprivacy.it).

9. Cookie Policy

Our site uses technical, analytical and marketing cookies.

• Essential cookies are necessary for the operation of the site.
• Profiling cookies are used to show you personalized content.
• You can manage your cookie preferences through the site's banner.

For more details, see our full Cookie Policy.

10. Changes to the Privacy Policy

We reserve the right to update this Privacy Policy. Any changes will be published on this page with notification to registered users.

​

11. Contacts

For questions about this Privacy Policy or to exercise your rights:

Address: Via Valle del Pozzo 13, 61037 Mondolfo (PU), Italy
Certified email: associazione_fantasia@pec.it

Effective date: 01/02/2025

‍