Privacy Policy

1. Introduction

This notice describes how Team Albonea Events & Live (the "Controller") processes the personal data of users interacting with the website team-albonea.lovable.app, in accordance with Regulation (EU) 2016/679 (GDPR) and Italian Legislative Decree 196/2003 as amended by Legislative Decree 101/2018.

2. Types of data processed

• Contact details voluntarily provided (name, surname, email, phone, message) through contact, booking or newsletter forms.
• Navigation data automatically collected by IT systems (IP address, user agent, pages visited, timestamp).
• Cookie and similar-technology data, as detailed in the Cookie Policy.

3. Purposes and legal bases

• Replying to user requests (pre-contractual measures and legitimate interest — Art. 6(1)(b) and (f) GDPR).
• Sending informational and commercial newsletters (explicit consent — Art. 6(1)(a) GDPR).
• Compliance with legal, accounting and tax obligations (Art. 6(1)(c) GDPR).
• Site security, fraud prevention and technical diagnostics (legitimate interest — Art. 6(1)(f) GDPR).

4. Processing methods

Data is processed with electronic and organizational tools suitable to ensure security and confidentiality, through technical and organizational measures appropriate under Art. 32 GDPR (access control, in-transit encryption, backups, system logs).

5. Recipients of data

• Authorized personnel of the Controller, duly instructed.
• Hosting and cloud infrastructure providers, appointed as Data Processors under Art. 28 GDPR.
• Email, analytics and technical-support providers.
• Competent authorities, where required by law.

6. Transfers outside the EU

Some providers may process data outside the European Economic Area. In such case the transfer takes place exclusively to countries with an EU Commission adequacy decision or based on Standard Contractual Clauses adopted by the EU Commission (Art. 46 GDPR).

7. Retention period

• Contact data and requests: as long as necessary to handle the request and up to 24 months thereafter.
• Newsletter data: until consent is withdrawn (unsubscribe link in every email).
• Navigation data and technical logs: only as long as strictly necessary, normally no more than 12 months.
• Data processed for legal obligations: for the periods set out by applicable law (normally 10 years for accounting data).

8. Rights of the data subject

Under Arts. 15-22 GDPR you have the right to access your data, obtain its rectification or erasure, restrict or object to processing, receive your data in a structured format (portability), and where processing is based on consent, withdraw it at any time without affecting the lawfulness of prior processing.

To exercise your rights you can write to the contact details shown at the top of this page. You also have the right to lodge a complaint with the Italian Data Protection Authority (www.garanteprivacy.it).

9. Provision of data

Providing the data requested in the forms is optional, but failure to do so may make it impossible to handle your request. Explicit consent is required for the newsletter.

10. Changes to this notice

The Controller reserves the right to update this notice to reflect regulatory or organizational changes. Updated versions will be published on this page with the date of the latest update.