Privacy.

1. Data Controller

The Data Controller for personal data collected through eventilagoidro.com is:

Pro Loco Lago d'Idro

[REGISTERED ADDRESS]

25074 Idro (BS), Lombardia — Italy

Email: [CONTACT EMAIL]

For any questions regarding the processing of your personal data, please write to the email address above.

2. Types of data collected

This website collects the following categories of personal data:

• Navigation data: IP address, browser type, operating system, referring URL, date and time of access. This data is collected automatically by the systems managing the website and is necessary for the technical operation of the service.

• Data provided voluntarily: organizer name, contact email address and other event information submitted through the event submission form. Providing this data is optional but necessary in order to use the event publication service.

• Data collected via cookies: please refer to our Cookie Policy for a complete list of cookies used.

3. Purposes and legal basis for processing

Personal data is processed for the following purposes:

a) Managing event submissions: organizer name and email are processed to evaluate, approve and publish submitted events. Legal basis: performance of a contract or pre-contractual measures (Art. 6(1)(b) GDPR).

b) Communications regarding submitted events: email is used to inform the organizer about the status of their submission. Legal basis: legitimate interest of the Controller (Art. 6(1)(f) GDPR).

c) Technical operation of the website: navigation data is processed to ensure security and correct functioning of the site. Legal basis: legitimate interest of the Controller (Art. 6(1)(f) GDPR).

d) Aggregated statistical analysis: anonymous and aggregated form, to improve the service. Legal basis: legitimate interest (Art. 6(1)(f) GDPR).

4. Recipients of data

Personal data is not sold or distributed to third parties. It may be shared with:

• Technical service providers (hosting, server infrastructure) acting as Data Processors under Art. 28 GDPR, with whom appropriate agreements have been entered into.

No transfers of data to third countries outside the European Economic Area are carried out.

5. Retention periods

Data provided through the event submission form is retained for the time necessary to manage the published event and, in any case, no longer than 24 months from the date of submission.

Navigation data is retained for the time strictly necessary for security purposes, generally no longer than 90 days.

6. Data subject rights

Under Arts. 15–22 of EU Regulation 2016/679, you have the right to:

• Access: obtain confirmation as to whether personal data concerning you is being processed and, if so, obtain a copy.

• Rectification: request correction of inaccurate or incomplete data.

• Erasure ("right to be forgotten"): request deletion of your data when it is no longer necessary for the purposes for which it was collected.

• Restriction of processing: request that processing be restricted in certain circumstances.

• Portability: receive your data in a structured, commonly used and machine-readable format.

• Objection: object to processing based on the Controller's legitimate interest.

To exercise these rights, write to: [CONTACT EMAIL]

You also have the right to lodge a complaint with the Italian Data Protection Authority (Garante) at www.garanteprivacy.it.

7. Cookies

This website uses technical cookies necessary for operation and, with your consent, analytical cookies. For detailed information please see our Cookie Policy.

8. Minors

This website is not intended for children under 16 years of age. We do not knowingly collect personal data relating to minors.

9. Changes to this policy

The Controller reserves the right to make changes to this policy at any time. Changes will be indicated by the update date shown at the top of this page.