Introduction

This disclosure explains how the personal information of users obtained through the use of our website (www.ferrarabuskers.com) is managed, illustrating the methods and purposes of the collection, use and processing of information, pursuant to articles . 13 and 14 EU Reg. 2016/679 (so-called GDPR).

Data controller

The Data Controller is the Ferrara Buskers Festival© Association, with headquarters in Via Mentessi n. 4, CAP 44121 – Ferrara (FE).

Legitimation to provide data

Ferrara Buskers Festival declines all responsibility for the hypothesis in which the interested part provides incorrect, untruthful data, or relating to third parties for which he is not legitimated and/or expressly authorized to provide and to express consent to the processing. The interested part assumes full responsibility for such conduct.

Categories of data processed

This site uses technical and analytical cookies. To find out more, you can consult the extended information on cookies at the following link:

https://www.iubenda.com/privacy-policy/514626/cookie-policy

In order to allow access to and use of specific sections of the site, we also process the following personal data: name, surname, addresses and contact details (residence, email, telephone number, etc.), access, navigation data (system log, IP address), any further data uploaded or entered by the interested parts.

Purpose of the processing and legal basis

The aforementioned personal data will be processed for the following purposes:

to. technical cookies: 

      - Ensure the proper functioning of the site.

The aforementioned processing is mandatory and is based on the legitimate interest of the Data Controller in the correct and regular functioning of the website (Article 6, paragraph 1, letter f GDPR).

b. analytical cookies:

- Carry out aggregate and anonymised statistical analysis of site visitors. 

The aforementioned treatment is based on the consent of the interested part (art. 6, paragraph 1, letter a GDPR), given at the time of the first access to the website or subsequently. 

The interested part has the right to revoke the consent at any time without prejudice to the lawfulness of the treatment provided before the revocation. On how to exercise the right of revocation see section "Exercise of the rights of the interested parts".

The provision of data is optional and any withdrawal of consent by the interested part will make it impossible to process the data for the aforementioned purpose. 

c. Event registration:

- Registration by the interested part for the purpose of sending applications for participation as an artist in the Ferrara Buskers Festival and/or any further events or workshops organized by the Ferrara Buskers Festival Association, management by the interested party of the relative application, execution of the selection activity and eventual recontact by the Data Controller, also for any subsequent editions or different events.

The aforementioned treatment is based on the consent of the interested party (art. 6, paragraph 1, letter a GDPR). 

The interested part has the right to revoke the consent at any time without prejudice to the lawfulness of the treatment provided before the revocation. On how to exercise the right of revocation see section "Exercise of the rights of the interested part".

The provision of data is necessary for the purpose of submitting applications and the consequent duties relating to the same and to any participation in the event. Any withdrawal of consent by the interested part will make it impossible to use the information transmitted.

d. "Shop" and "Membership" area:

- Manage the purchase transaction of products, tickets, gadgets and/or membership cards by users, the preparatory and subsequent activities, any payment and shipping, fulfill the consequent legislative obligations and protect the rights of the Owner in the event of disputes.

The provision of data for the aforementioned purpose is necessary and is based on the need for correct execution of the contractual obligation (Article 6, paragraph 1, letter b GDPR) and on the fulfillment of applicable legal obligations (Article 6, paragraph 1, letter c GDPR), as well as on the legitimate interest of the Data Controller in the event of a dispute (Article 6, paragraph 1, letter f GDPR).

Any partial or total refusal to provide data, in addition to determining the impossibility of giving total or partial execution of the requested services and/or will result in the failure to establish or continue the contractual relationship.

And. Registration for the newsletter service:

    - For the periodic sending, via newsletter, of information, articles, communications and offers.

The aforementioned treatment is based on the consent of the interested party (art. 6, paragraph 1, letter a GDPR), given at the time of the first access to the website or subsequently.

The interested part has the right to revoke the consent at any time without prejudice to the lawfulness of the treatment provided before the revocation. On how to exercise the right of revocation see section "Exercise of the rights of the interested part".

The provision of data for the aforementioned purposes is entirely optional. Any refusal by the interested part to provide personal data, the lack of consent or its revocation for one or more purposes, will make it impossible to use the services connected to them.

Data retention time

Personal data will be kept for the following periods.

1. Cookie: v. cookie policy. 
2. Event logging: 10 years from the submission of the application or from the end of the event, if applicable artist selection.
3. "Shop" area: 10 years from the completion of the order.
4. Newsletter service: for the period for which the Ferrara Buskers Festival Association will keep the service active or until the consent is revoked by the interested part, if     previous. In each message, the User will be reminded that he has the right to unsubscribe from the     service with appropriate link. In case of lower frequency of messages, this faculty will be     further reminded to the interested party on an annual basis.

Data communication 

Personal data may be communicated, in addition to the P.A. and to the Judicial Authority, in fulfillment of legal obligations and administrative or judicial provisions, to external subjects, duly appointed as data processors (art. 28 GDPR), who process the same on behalf of Ferrara Buskers Festival.

In particular, the data processed through our website may be communicated to the following categories of recipients:

- technical experts e software house who assist the owner in the development, maintenance and care of the website;

- companies supplying the hosting service and other IT tools and third-party services used for the functioning of the website;

- third parties who assist or collaborate with the owner in order to manage the information received and/or carry out the activities of the owner;

- couriers/freight forwarders;

- experts in accounting, legal and tax matters.

The data processing takes place within the European Union.

If, for logistical and operational purposes related to the hosting service, personal data should be transferred to non-EU countries, the latter must be subject to an adequacy decision by the EU Commission, or provide adequate guarantees to pursuant to art. 46 GDPR. 

The disclosure of the personal data being processed is not envisaged.

Security measures

Personal data will be subjected to paper and electronic processing. To this end, all suitable procedures will be adopted to protect the confidentiality, integrity and availability of information in compliance with current regulations.

Rights of the interested party

Pursuant to articles 13-21 of the GDPR, under the conditions set forth therein, the interested party may at any time exercise the following rights towards Ferrara Buskers Festival:

    - right to withdraw consent to data processing (see section "Purpose of the processing and legal basis”)

    - right of access (the interested party has the right to have confirmation about the existence of the treatment, as well as information on the data processed and to receive a copy of the same);

    - right of rectification (the interested party can request the updating or correction of their personal data);

    - right to erasure of data (so-called "right to be forgotten") (the interested party can request the cancellation of their personal data, in the cases and under the conditions referred to in Article 17 of the GDPR);

    - right to portability (in the cases and under the conditions referred to in Article 20 of the GDPR, the interested party has the right to receive their data in a structured format, commonly used and readable by an automatic device and, where technically feasible, to obtain their transfer without hindrance to another holder).

    - limitation of treatment (The interested part may request the limitation of the processing of their data, in the cases referred to in Article 18 of the GDPR. In this case, the data may be processed by the Data Controller, as well as for storage, with the consent of the interested part or for the protection of one's rights or those of others in court or for reasons of public interest).

    - right of opposition (The interested part, when the personal data are processed by virtue of the public interest or the legitimate interest of the Data Controller, have the right to oppose the processing for reasons connected to their particular situation. In the case of treatment for direct marketing purposes, the opposition can be exercised without any justification). 

    - right to lodge a complaint with the Guarantor Authority (www.garanteprivacy.it).

Exercise of the rights of the interested party

To exercise the aforementioned rights, the interested part must send a written request to Ferrara Buskers Festival at the following addresses:

info@ferrarabuskers.com

 

Changes to this privacy policy

FERRARA BUSKERS FESTIVAL ASSOCIATION reserves the right to make changes to this privacy policy at any time by giving adequate information to Users, who may revoke the consent given to the processing of the related personal data.