Privacy Policy of “A Rocca Associazione Artistica Culturale”
This Privacy Policy describes how A Rocca Associazione Artistica Culturale (“A Rocca”, “we”, “our”, or “us”) collects, uses, and protects the personal data of users, members, partners, and visitors, in accordance with Articles 13 and 14 of EU Regulation 2016/679 (General Data Protection Regulation – GDPR).
By interacting with this website, participating in our cultural or educational activities, or contacting us via email or phone, the User acknowledges that personal data may be processed in the ways and for the purposes described below.
Data Controller
The Data Controller is:
A Rocca – Associazione Artistica Culturale
Tax Code: 90013330833 – VAT No. 03552790838 – OID E10020390
Registered Office: Via T.C.P. Arcodaci 48, 98051 Barcellona Pozzo di Gotto (ME), Italy
Operational Office: Via Naumachia 6–8, 95121 Catania, Italy
Email: info@eprojectconsult.com – PEC: associazionearocca@pec.it
Telephone: +39 090 2130696
President and Data Controller: Antonino Pietrini
Purposes and Legal Basis of Processing
Personal data are collected and processed for purposes strictly connected to the association’s statutory, cultural, and educational activities. These include:
Managing members, volunteers, and participants in projects and initiatives;
Organising events, European programmes, internships, and Erasmus+ activities;
Sending institutional or informational communications by email or telephone;
Managing and publishing images and videos related to our cultural and educational events for documentation and promotional purposes;
Fulfilling legal, fiscal, and administrative obligations.
The processing of data is based on the following legal grounds:
Execution of contractual or statutory obligations (Art. 6.1.b GDPR);
Compliance with legal obligations (Art. 6.1.c GDPR);
Explicit consent given by the individual (Art. 6.1.a GDPR);
Legitimate interest pursued by the Data Controller (Art. 6.1.f GDPR).
Categories of Personal Data Processed
The categories of personal data processed include:
Identification data (name, surname, date of birth, nationality);
Contact details (email, phone number, address);
Curriculum vitae and educational background information;
Photographs and video materials recorded during association activities;
Technical and browsing data collected through the website aroccaassociazione.com (such as IP address, browser type, and access logs).
Data Recipients and Transfers
Data may be communicated to:
Internal staff, collaborators, and volunteers of the association;
Project partners and service providers involved in specific activities;
Public authorities, national agencies, and European institutions;
External consultants such as legal, fiscal, or IT professionals.
Should data be transferred outside the European Economic Area (EEA), such transfers will occur only where adequate safeguards are in place, in accordance with Articles 44–50 of the GDPR.
Data Retention Period
Personal data are retained for a maximum period of five (5) years from the date of the last interaction or the completion of the project or activity for which the data were collected.
Upon expiry of this period, data will be securely deleted or anonymised, ensuring they can no longer be used for identification purposes.
Rights of Data Subjects
Users and data subjects have the right to exercise, at any time, the rights provided under Articles 15–22 of the GDPR, including:
The right to access, rectify, and erase personal data;
The right to restrict or object to processing;
The right to data portability;
The right to withdraw consent at any time;
The right to lodge a complaint with the Italian Data Protection Authority (Garante per la Protezione dei Dati Personali – www.garanteprivacy.it).
Requests can be sent to:
info@eprojectconsult.com or associazionearocca@pec.it
Updates and Modifications
This Privacy Policy may be updated to reflect changes in legal requirements or the association’s data processing practices.
Version Date: 2025
Definitions and Legal References
Personal Data (or Data)
Any information that directly or indirectly identifies or makes an individual identifiable, including by reference to an identification number or to one or more factors specific to their identity.
Usage Data
Information collected automatically through this website or associated systems, which may include IP addresses, domain names, browser type, operating system, pages visited, and time spent on each page.
User (or Data Subject)
The individual who uses this website or participates in association activities and whose personal data are subject to processing.
Data Processor (or Manager)
Any natural or legal person, public authority, or other body that processes personal data on behalf of the Data Controller, as described in this Privacy Policy.
Data Controller (or Owner)
The natural or legal person that determines the purposes and means of personal data processing. For this platform, the Data Controller is A Rocca – Associazione Artistica Culturale.
This Website (aroccaassociazione.com)
The online platform through which A Rocca provides information, collects participation requests, and communicates with users and partners.
Legal References
This Privacy Policy is drafted in compliance with Articles 13 and 14 of Regulation (EU) 2016/679 (GDPR) and relevant national data protection laws.
Unless otherwise specified, this document applies exclusively to this website: aroccaassociazione.com