Notice on the processing of personal data

1. Data controller

4 Rooms — cultural association
Registered office: Via Abate Salfi, 22, 87100 Cosenza (CS), Italy
Email: centrostoricocosenza@gmail.com · Tel. 388 991 6913
Tax code: 98113260784

2. What data we process, why and for how long

Data	Purpose	Legal basis	Retention
Name, email, reason for contact and message text sent through the contact form	To reply to your request (collaboration proposals, reports, information)	Art. 6.1.b GDPR (request of the data subject) and, for general enquiries, Art. 6.1.f (legitimate interest in replying)	For as long as needed to reply and, as a rule, no more than 12 months after the last exchange
Name, email and content of the submission (title, date, place, description, link, organiser) sent through the “Submit an event or news item” form	To review the submission, ask you for clarifications and, if suitable, publish it on the site and on our social channels	Art. 6.1.b GDPR (request of the data subject) and Art. 6.1.f (legitimate interest in handling submissions)	Name and email: for as long as needed to review the submission and, as a rule, no more than 12 months. Published text stays online for as long as it is useful; your email is never published
Emails, phone numbers or messages sent directly to our contacts or social profiles	To reply and manage the conversation	Art. 6.1.b and 6.1.f GDPR	As above
Technical browsing data (IP address, date and time, requested page) recorded by the hosting service	Security and correct operation of the site	Art. 6.1.f GDPR (interest in the security of the service)	According to the hosting provider’s policies, for a limited period

Providing the form data is optional, but without name, email and message (or the essential details of the submission) we cannot reply to you or review the submission. We take no automated decisions and we neither sell nor pass on data to third parties for commercial purposes.

3. External services and recipients

• Netlify, Inc. (United States) — hosts the site and receives the messages and submissions sent through the forms, which it forwards to us. It acts as our supplier (data processor). Transfers to the United States take place with the safeguards provided for by the GDPR.
• Google (Gmail) — the email service where we receive the requests sent to our address.
• CARTO — provides the map images. When you view a map your browser contacts its servers, which receive your IP address and the technical data of the request. CARTO’s privacy notice.
• Google Maps, Instagram, TikTok, Facebook, YouTube — the site only contains links to these services: we do not load their scripts or embedded content. If you open them, their own notices apply.

Fonts, libraries and images of the site are hosted on the site itself: they are not requested from third-party servers.

4. Cookies

The site uses no profiling cookies and no third-party cookies, and installs no analytics tools. A cookie consent banner is therefore not needed. If we ever enable measurement tools, we will update this page before doing so.

5. Your rights

You can ask us at any time for access to your data, rectification, erasure, restriction of processing and portability, and you can object to the processing, by writing to centrostoricocosenza@gmail.com. If you believe the processing breaches the law, you can lodge a complaint with the Italian Data Protection Authority — Garante per la protezione dei dati personali (garanteprivacy.it).

6. Updates

This notice may be updated: the date at the top of the page shows the latest version.