AREA

Privacy Policy

Last updated: 05/10/2025

This notice describes how the personal data collected through the websites albeisa.it e albeggia.com (hereinafter, the “Site”) are processed.

1. Data Controller

Consorzio ALBEISA
Address: Via Generale Govone 4, 12051 Alba CN
Email: This email address is being protected from spambots. You need JavaScript enabled to view it.
Phone:0173.440063

2. Types of data processed

• Browsing data: IP addresses, date/time, requested URLs, user agent, error logs (arising from the normal operation of systems).

• Event account data (Site registration): username, password, email address.

• Data for event participation: first name, last name, address, city, postal code, region, phone and other dates/information strictly necessary for participation.

• Payment data: the Site does not process online payments; only bank transfer is provided. References to IBAN/account holders contained in bank slips may be processed.

• Newsletter data: email address (and sometimes first/last name) to send communications to members and updates on the Consortium’s activities/events.

• Cookies and similar technologies: see Cookie Policy.

3. Purposes and legal bases

1. Provision of Site services and management of accounts/event registrations

   • Legal bases: performance of pre-contractual measures/contract (Art. 6(1)(b) GDPR); legal obligations for administrative/accounting purposes (Art. 6(1)(c)).

2. Organisational communications about booked events and newsletter service for members/participants

   • Legal basis: the Controller’s legitimate interest (Art. 6(1)(f)) in informing about news and upcoming events related to its institutional activity; opt-out always available. For unrelated promotional communications, consent will be requested (Art. 6(1)(a)).

3. Site security and abuse prevention

   • Legal basis: the Controller’s legitimate interest (Art. 6(1)(f)).

4. Usage statistics (Google Analytics)

   • Legal basis: consent (Art. 6(1)(a)) via cookie banner.

5. Third-party content (YouTube, Google Maps, Google Fonts, Font Awesome)

   • Legal basis: consent for components that set non-technical cookies (Art. 6(1)(a)). For fonts loaded from a CDN, processing is based on the legitimate interest in the correct delivery/optimisation of the Site (Art. 6(1)(f)).

4. Nature of provision

• Mandatory for data necessary to register/participate in events; without them, it is not possible to complete registration.

• Optional for analytics and non-essential third-party components (managed via the cookie banner).

• Newsletter: when registering for an event, the user is automatically subscribed to the Consortium’s informational newsletter; it is always possible to unsubscribe independently (see §7).

5. Processing methods

Processing is carried out using IT tools and appropriate technical/organisational measures (password encryption, access control, backups). No automated decision-making is carried out that produces legal effects concerning the data subject.

6. Recipients / categories of recipients

• Hosting provider: SiteGround (EU data centers – e.g., the Netherlands).

• IT service providers and site maintenance.

• Third-party platforms: Google (Analytics/Fonts/Maps/YouTube), Font Awesome.

• Banking institutions (for bank transfers).
  These parties act as Processors under Art. 28 or as independent Controllers, as applicable.

7. Newsletter and unsubscribe

The newsletters inform members/participants about institutional activities and upcoming events. You can unsubscribe at any time: go to the “Newsletter” section, enter your email address and follow the unsubscribe procedure, or use the unsubscribe link at the bottom of each email. The right to object under Art. 21 GDPR remains unaffected.

8. Transfers outside the EU

The Google/YouTube/Maps/Fonts services may involve transfers to third countries (e.g., the USA). In such cases, the transfer takes place on the basis of Standard Contractual Clauses/appropriate instruments and supplementary measures, where necessary.

9. Retention periods

• Accounts and event data: for the time necessary to manage the event and, subsequently, in accordance with statutory terms (up to 10 years for administrative/accounting obligations).

• Technical logs: generally 7–30 days, unless legal needs require otherwise.

• Newsletter: until subscription is revoked (opt-out).

• Cookies: see the table in the Cookie Policy.

10. Data subjects’ rights

Access, rectification, erasure, restriction, portability, objection, withdrawal of consent (without affecting the lawfulness of processing based on consent before withdrawal).
Complaint: Italian Data Protection Authority (www.garanteprivacy.it).

11. Minors

The services are not intended for children under 14. If a parent/guardian believes that a child’s data has been provided, they may contact us to request its removal.

12. Changes

This notice may be updated; the most recent versions will be published on this page.