Personal data processing notice

1. 01Data controller

   The data controller is Associazione Eudaimonia, registered office at Via Bocca di Valle 1, 65015 Montesilvano (PE), Italy, in the person of its legal representative pro tempore.

   For any question about your data you can write to info@eudaimoniayouth.org.

   No data protection officer has been appointed: the association falls into none of the cases in which article 37 GDPR makes one mandatory.

2. 02What data we collect

   We collect only the data you provide by filling in the forms on this website: first and last name, email address, and where applicable phone number, organisation, city, country, date of birth and the content of your message.

   We neither ask for nor want special categories of data, such as health, religious beliefs or sexual orientation (art. 9 GDPR): please do not enter any in the forms.

3. 03Cookies and browsing data

   The website sets a single, technical cookie that remembers the language you chose. There are no profiling cookies, no analytics and no embedded third-party content, which is why you see no banner: there is nothing here that requires your consent. The cookie policy sets it out in full.

   The hosting provider logs the requests the server receives: IP address, date and time, page requested, browser and operating system. The processing rests on the legitimate interest in keeping the website secure and working (art. 6(1)(f) GDPR); these logs are not used to identify you and are not cross-referenced with form data.

4. 04Purposes and legal basis

   Data submitted through the contact form is processed in order to answer your request, on the basis of the consent you give when submitting it (art. 6(1)(a) GDPR).

   Data submitted through the membership application is processed to carry out the membership procedures set by the by-laws and the legal obligations attached to keeping the members' register (art. 6(1)(b) and (c) GDPR).

   Subscribing to updates is optional, is based on consent and can be withdrawn at any time.

5. 05Whether you have to provide the data

   No form on this website is compulsory. But without the data marked as needed we cannot answer your enquiry or process a membership application: that is the only consequence of not providing it.

6. 06Retention

   Data relating to enquiries is kept for as long as needed to handle the request and in any case no longer than twenty-four months.

   Members' data is kept for the duration of membership and thereafter for the period required by law.

   Technical server logs are kept for a limited period, no longer than thirty days.

7. 07Recipients

   Data is processed by the members of the governing bodies and by persons authorised by the association.

   It is also processed by two technical service providers, appointed as data processors under article 28 GDPR: Vercel Inc., which hosts the website, and Resend, which delivers the emails the forms generate. We do not sell or transfer data to third parties for commercial purposes, and we disclose it to no one else save where the law requires it.

8. 08Transfers outside the EU

   The providers named above are based in the United States, so the processing may involve transferring data outside the European Economic Area.

   Any such transfer takes place under the standard contractual clauses adopted by the European Commission or, for providers certified under it, the adequacy decision on the EU-US Data Privacy Framework, together with the supplementary safeguards set out in the contract.

9. 09Automated decision-making

   We take no decisions based solely on automated processing, including profiling, that produce legal effects concerning you or similarly significantly affect you (art. 22 GDPR).

10. 10Your rights

    At any time you may request access to your data, rectification, erasure, restriction of processing, portability and objection to processing, and you may withdraw consent without affecting the lawfulness of processing already carried out.

    An email to info@eudaimoniayouth.org is enough to exercise these rights: we answer within one month, as article 12 GDPR requires.

    You also have the right to lodge a complaint with the Italian Data Protection Authority (www.garanteprivacy.it) or with the supervisory authority of the country where you live.

11. 11Minors

    The association's activities may involve people under the age of majority. In that case data is always collected with the consent of those holding parental responsibility and through dedicated procedures, never through the generic forms on this website.

12. 12Changes to this notice

    If the processing changes, this page changes with it: the date at the top says when it was last revised. Earlier versions stay in the public history of the website's source code.

See also: Cookies