Privacy Policy
The cultural association Associazione Domenico Scarlatti, with its registered office at Via Port’Alba, 30, 80134 Naples, C.F./P.IVA 04893480634 (hereinafter also referred to as “Association” or “Data Controller”), is the data controller for the personal data of users who visit the website dedicated to the project “Notes from the Past, Sounds of the Future – New compositions inspired by the Neapolitan school of the 1700s,” accessible at https://www.domenicoscarlatti.it.
"For any requests related to this information or the exercise of rights concerning personal data protection, you can contact the Data Controller at the following contacts:"
- Email generale: info@domenicoscarlatti.it
- Altri contatti email (per ambiti specifici): presidente@domenicoscarlatti.it; direttoregenerale@domenicoscarlatti.it; didattica@domenicoscarlatti.it; direttoreartistico@domenicoscarlatti.it; ufficiostampa@domenicoscarlatti.it
- Telefono: +39 81 543 7430 / +39 349 05 26 546
IT systems and software procedures responsible for the functioning of the site acquire, during their normal operation, some personal data whose transmission is implicit in the use of Internet communication protocols (for example, IP addresses, domain names of the computers used by users, request time, numerical code indicating the status of the response from the server). This information is used solely to obtain anonymous statistical information about the use of the site and to monitor its proper functioning.
Data voluntarily provided by the user
This refers to the data that the user voluntarily sends via:
contact form available on the site (see also the Contacts page);
registration form for the composition competition (see the Competition Registration page);
any forms requesting materials, newsletters, or updates on the Festival and project activities.
The data may include, by way of example: first name, last name, date of birth, nationality, email address, phone numbers, postal address, banking data or payment details for registration fees, artistic or curricular information related to participation in the competition or project activities.
Data related to the works submitted to the competition
In the context of the procedures described in the Competition Regulation, personal data contained in scores, recordings, or attached materials may be processed, if they can be traced back to identified or identifiable individuals (for example, data of composers, performers, or interpreters).
Cookies and similar tools
The site may use technical cookies and, with prior consent, analytical or profiling cookies, as well as similar tools. For detailed information on the types of cookies used and their management methods, please refer to the specific Cookie Policy.
Data voluntarily provided by the user
This refers to the data that the user voluntarily sends via:
contact form available on the site (see also the Contacts page);
registration form for the composition competition (see the Competition Registration page);
any forms requesting materials, newsletters, or updates on the Festival and project activities.
The data may include, by way of example: first name, last name, date of birth, nationality, email address, phone numbers, postal address, banking data or payment details for registration fees, artistic or curricular information related to participation in the competition or project activities.
Data related to the works submitted to the competition
In the context of the procedures described in the Competition Regulation, personal data contained in scores, recordings, or attached materials may be processed, if they can be traced back to identified or identifiable individuals (for example, data of composers, performers, or interpreters).
Cookies and similar tools
The site may use technical cookies and, with prior consent, analytical or profiling cookies, as well as similar tools. For detailed information on the types of cookies used and their management methods, please refer to the specific Cookie Policy.
The personal data collected through the site are processed by the Data Controller for the following purposes and according to the corresponding legal bases:
a) Management of information requests and contacts
Responding to requests sent via the forms available on the site or to the contact addresses indicated on the project pages (for example, information about the Festival, competition, training activities).
Legal bases: execution of pre-contractual measures adopted at the request of the data subject (art. 6, par. 1, lett. b GDPR); legitimate interest of the Data Controller to manage communication with the public effectively (art. 6, par. 1, lett. f).
a) Management of information requests and contacts
Responding to requests sent via the forms available on the site or to the contact addresses indicated on the project pages (for example, information about the Festival, competition, training activities).
Legal bases: execution of pre-contractual measures adopted at the request of the data subject (art. 6, par. 1, lett. b GDPR); legitimate interest of the Data Controller to manage communication with the public effectively (art. 6, par. 1, lett. f).
b) Management of the composition competition and related activities
Collection of registrations, verification of requirements, communication with participants, organization of selection phases, awarding of prizes and recognitions, fulfillment of obligations set forth by the Competition Regulations, including the possible publication of the names and titles of the winning or mentioned works.
Legal bases: execution of a contract or pre-contractual measures (art. 6, par. 1, lett. b); fulfillment of legal obligations (for example, of a fiscal or administrative nature, art. 6, par. 1, lett. c).
c) Institutional communication, cultural promotion, and newsletter
Sending, with prior consent, informative communications about the project, the Festival, concerts, multimedia materials, and training or social inclusion initiatives.
Legal bases: explicit consent of the data subject (art. 6, par. 1, lett. a). The data subject can withdraw consent at any time by following the instructions provided in each communication or by writing to the contact details of the Data Controller.
d) Legal, accounting, tax obligations, and protection in court
Fulfillment of legal, regulatory, or European Union obligations and, if necessary, verification, exercise, or defense of a right of the Data Controller in court or out of court.
Legal bases: fulfillment of legal obligations (art. 6, par. 1, lett. c); legitimate interest of the Data Controller in the protection of their rights (art. 6, par. 1, lett. f).
e) Statistical analysis and site improvement
Processing of anonymous or aggregated statistics on the use of the site and its content, in order to improve usability and accessibility. Legal bases: legitimate interest of the Data Controller to enhance its digital services (art. 6, par. 1, lett. f), in compliance with the guidelines of the Data Protection Authority; where required, user consent for non-anonymized cookies or analysis tools.
The processing of personal data is carried out using paper, computer, and telematic tools, with logics strictly related to the indicated purposes and in compliance with the principles of lawfulness, fairness, transparency, minimization, and limitation of storage as provided by the GDPR.
The Owner adopts appropriate technical and organizational measures to ensure the security of personal data, preventing loss, unlawful or incorrect use, unauthorized access, disclosure, or unauthorized modification.
contact module data: for the time necessary to fulfill the request and in any case no longer than 24 months from the last significant contact, except for additional retention needs related to the protection of the rights of the Data Controller;
data related to competition registrations and associated activities: for the entire duration of the competition procedures and for the time necessary to document the activities carried out, in accordance with the provisions of the Competition Regulation and applicable civil, tax, and accounting legislation;
data used for sending informative communications and newsletters: until the consent is revoked by the data subject or, in the absence of interactions, for a maximum period of 36 months;
browsing data: for the time strictly necessary for the technical functioning of the site and for conducting aggregated or anonymous statistical analyses.
At the end of the retention periods, the data will be deleted, anonymized, or retained only if required by additional legal obligations or legitimate needs for the protection of the Data Controller.
The Owner adopts appropriate technical and organizational measures to ensure the security of personal data, preventing loss, unlawful or incorrect use, unauthorized access, disclosure, or unauthorized modification.
contact module data: for the time necessary to fulfill the request and in any case no longer than 24 months from the last significant contact, except for additional retention needs related to the protection of the rights of the Data Controller;
data related to competition registrations and associated activities: for the entire duration of the competition procedures and for the time necessary to document the activities carried out, in accordance with the provisions of the Competition Regulation and applicable civil, tax, and accounting legislation;
data used for sending informative communications and newsletters: until the consent is revoked by the data subject or, in the absence of interactions, for a maximum period of 36 months;
browsing data: for the time strictly necessary for the technical functioning of the site and for conducting aggregated or anonymous statistical analyses.
At the end of the retention periods, the data will be deleted, anonymized, or retained only if required by additional legal obligations or legitimate needs for the protection of the Data Controller.
The personal data collected are not subject to indiscriminate dissemination. They may, however, be communicated, within the limits strictly relevant to the purposes indicated in this notice, to the following categories of recipients:
- collaborators and members of the Association's bodies expressly authorized to process, previously trained and bound to confidentiality;
- third parties providing technical, organizational, or managerial services to the Data Controller (for example, IT and hosting service providers, newsletter sending platforms, administrative or legal consultants), appointed as necessary as data processors pursuant to Article 28 of the GDPR;
- public entities, supervisory and control authorities, subjects to whom communication is mandatory by law, regulation, or EU legislation, or by order of the Authority;
- cultural, institutional, or artistic partners involved in the project's activities, if necessary for the implementation of initiatives and in compliance with the principles of minimization and proportionality.
In cases where publication on the site or on informational materials is planned (for example, names of winners, finalists, or nominees of the competition), the interested parties will be clearly informed within the procedures described in the Competition Regulations and, if necessary, specific consent will be requested..
As the data subject, the user can exercise at any time, within the limits and conditions set by the GDPR, the following rights regarding the processing of their personal data:
- Right of access (art. 15): to obtain confirmation whether or not personal data concerning them is being processed and, if so, to receive a copy and information regarding the purposes and characteristics of the processing.
- Right of rectification (art. 16): to obtain the correction of inaccurate data or the completion of incomplete data;
- Right to erasure (art. 17): obtain the deletion of personal data in cases provided for by the regulations (for example, withdrawal of consent, unlawful processing, or data no longer necessary for the purposes).
- Right to restriction of processing (art. 18): to obtain the restriction of processing in the presence of the conditions provided by the GDPR;
- Right to data portability (Article 20): to receive in a structured, commonly used, and machine-readable format the personal data provided to the Data Controller and to transmit it to another controller, where technically feasible and the necessary legal bases exist;
- Right to objection (art. 21): to oppose at any time, for reasons related to one's particular situation, the processing of data carried out based on the legitimate interest of the Data Controller; the objection to processing for institutional or promotional communication purposes results in the interruption of such communications.
- Right of withdrawal of consent, where the processing is based on consent (art. 7): the withdrawal does not affect the lawfulness of the processing carried out prior to the withdrawal itself;
- Right to lodge a complaint with the supervisory authority (art. 77): to submit a complaint to the Data Protection Authority or to another competent supervisory authority if you believe that the processing of data is taking place in violation of the applicable regulations.
Normally, the Data Controller does not transfer users' personal data to countries outside the European Union or the European Economic Area. If, for technical or organizational needs related to the services used (such as newsletter sending platforms, cloud services, or collaborative tools), it becomes necessary to transfer data to third countries, this will be done in compliance with Articles 44 and following of the GDPR.
In such cases, the Data Controller will verify the existence of adequacy decisions from the European Commission or, in their absence, will adopt appropriate safeguards (such as standard contractual clauses, approved contractual standards, or other instruments provided by law), ensuring that data subjects are guaranteed a level of protection essentially equivalent to that in force in the European Union.
More detailed information about any ongoing transfers can be requested by contacting the Data Controller at the contact details provided in this notice.
In such cases, the Data Controller will verify the existence of adequacy decisions from the European Commission or, in their absence, will adopt appropriate safeguards (such as standard contractual clauses, approved contractual standards, or other instruments provided by law), ensuring that data subjects are guaranteed a level of protection essentially equivalent to that in force in the European Union.
More detailed information about any ongoing transfers can be requested by contacting the Data Controller at the contact details provided in this notice.
This privacy information may be subject to changes and updates, also in consideration of any regulatory changes, developments of the project "Notes from the Past, Sounds of the Future – New compositions inspired by the Neapolitan school of the 1700s," the introduction of new digital services, or indications from the relevant supervisory authorities.
The updated versions will be published on this page, which is therefore recommended to be consulted periodically, also through the link present in the footer of the site and in the sections Competition Regulations and Contacts as relevant.
If the changes involve processing based on consent or significantly affect the rights and freedoms of the data subjects, the Data Controller will provide appropriate communication through the website or other available contact channels, where appropriate.
The updated versions will be published on this page, which is therefore recommended to be consulted periodically, also through the link present in the footer of the site and in the sections Competition Regulations and Contacts as relevant.
If the changes involve processing based on consent or significantly affect the rights and freedoms of the data subjects, the Data Controller will provide appropriate communication through the website or other available contact channels, where appropriate.
