WHAT INFORMATION DO WE COLLECT?

DATA CONTROLLER

Entropia APS — Via Giacomo Matteotti 6, 38122 Trento (TN), Italy

Email: info@poplarfestival.it

TYPES OF DATA COLLECTED

Personal Data processed by poplarfestival.it, independently or through third parties, includes: Cookies, email and Usage Data.

Full details on each category of data collected are provided in the dedicated sections of this policy or in specific information notices displayed prior to data collection. Personal Data may be freely provided by the User or, in the case of Usage Data, collected automatically during the use of poplarfestival.it.

The use of Cookies — or other tracking tools — by poplarfestival.it or the providers of third-party services used by poplarfestival.it, unless otherwise specified, serves the purpose of delivering the Service requested by the User and fulfilling the additional purposes described in this document.

The User is responsible for any Personal Data of third parties obtained, published or shared through poplarfestival.it and warrants having the right to communicate or share such data, holding the Controller harmless from any liability towards third parties.

HOW AND WHERE DATA IS PROCESSED

—PROCESSING METHODS

The Controller applies appropriate security measures to prevent unauthorised access, disclosure, modification or destruction of Personal Data. Processing is carried out using IT and telematic tools, with organisational methods strictly connected to the stated purposes. In addition to the Controller, access to Data may be granted to other parties involved in operating poplarfestival.it (administrative staff, system administrators) or to external parties — such as technical service providers, hosting providers and communication agencies — appointed, where necessary, as Data Processors. An updated list of Processors is available upon request from the Controller.

—LEGAL BASIS FOR PROCESSING

The Controller processes the User's Personal Data when at least one of the following conditions applies: the User has given consent for one or more specific purposes; processing is necessary for the performance of a contract with the User and/or for pre-contractual measures; processing is necessary to comply with a legal obligation; processing is necessary for the pursuit of a legitimate interest of the Controller or a third party. Users may always request clarification from the Controller on the specific legal basis for each processing activity, and in particular on whether processing is based on law, required by a contract or necessary to enter into one.

—LOCATION

Data is processed at the Controller's operational offices and wherever the parties involved in processing are located. The User's Personal Data may be transferred to a country other than the one in which the User is based. For further information on the location of processing, Users may refer to the relevant sections of this document or contact the Controller.

—RETENTION PERIOD

Data is processed and retained for as long as required by the purpose for which it was collected. Personal Data collected in connection with the performance of a contract will be retained until the contract has been fully executed. Data collected on the basis of the Controller's legitimate interest will be kept until that interest has been satisfied. Where processing is based on the User's consent, Data may be retained until consent is withdrawn. The Controller may also be required to retain Data for a longer period in compliance with legal obligations or by order of an authority. Upon expiry of the retention period, Personal Data will be deleted, and the rights of access, erasure, rectification and portability will no longer be exercisable.

—PURPOSES OF PROCESSING

User Data is collected to enable the Controller to provide its Services and for the following purposes: analytics, contact management and communications, direct contact with the User.

USER RIGHTS

Users may exercise certain rights with respect to the Data processed by the Controller. In particular, the User has the right to: withdraw consent at any time; object to the processing of their Data; access their Data and receive a copy; verify and request rectification of inaccurate Data; obtain restriction of processing; request erasure of their Personal Data where conditions are met; receive their Data in a structured, commonly used and machine-readable format and, where technically feasible, transfer it to another controller without hindrance (data portability); lodge a complaint with the Italian Data Protection Authority (gpdp.it).

Requests may be sent to info@poplarfestival.it. There is no charge and the Controller will respond as promptly as possible, and in any event within thirty days.

COOKIE POLICY

poplarfestival.it uses Cookies. We only collect traffic data through Google Analytics. For more information: policies.google.com/technologies/partner-sites.

FURTHER INFORMATION

—LEGAL PROCEEDINGS

The Controller may use the User's Personal Data to assert or defend its rights in legal proceedings or in the preparatory stages thereof. The User acknowledges that the Controller may be required to disclose Data upon request from public authorities.

—DO NOT TRACK

poplarfestival.it does not honour "Do Not Track" requests. To find out whether any third-party services support them, Users are invited to consult their respective policies.

—CHANGES TO THIS POLICY

The Controller reserves the right to amend this policy at any time by publishing an updated version on this page. Users are encouraged to check back regularly, referring to the date of last update indicated at the top. Where changes affect processing activities based on consent, the Controller will collect the User's consent again where necessary.