Privacy policy

This notice describes how Gina Lollobrigida – APS processes personal data through this website, under Regulation (EU) 2016/679 (GDPR) and Italian Legislative Decree 196/2003 as amended.

Last updated: 31 August 2026.

Data controller

The data controller is Gina Lollobrigida – APS, a social promotion association with its registered office in the Municipality of Subiaco (RM), Italy.

To exercise GDPR rights or for privacy-related requests, contact the association via the Contact page or the details published in the site footer (when available).

Categories of data processed

  • Browsing data: IP address, technical browser and device data, access dates and times, pages visited — collected automatically by hosting systems and the site software to ensure security and proper operation.
  • Data you provide voluntarily: first name, last name, e-mail address, phone number (if given), subject and message body, and acceptance of this privacy notice, when you submit the Contact or Become a member forms.
  • Language preference: language code (it / en) stored to show content in the chosen language.

Purposes and legal bases

  • Providing and maintaining the website (browsing, security, bilingual content) — Art. 6(1)(f) GDPR (legitimate interest).
  • Responding to contact requests and membership applications, handled via Contact Form 7 and stored with Flamingo in the WordPress admin area — Art. 6(1)(b) and/or (f) GDPR; the privacy acceptance checkbox records that this notice was provided.
  • Complying with legal obligations where applicable — Art. 6(1)(c) GDPR.

Data are not used for automated marketing, profiling, or behavioural advertising.

Recipients and processing locations

Data may be processed by:

  • association officers authorised to manage the website and incoming requests;
  • technical providers acting as processors or hosting providers (production hosting on Hostinger), limited to what is needed to run the service.

Data are not sold to third parties. Transfers outside the EU occur only if required by the hosting provider’s terms and with the safeguards set out in applicable law.

Retention

  • Form messages and requests: kept for as long as needed to handle the request and any related obligations, then deleted or anonymised when no longer necessary.
  • Technical hosting and security logs: according to the provider’s policies and security needs.
  • Language-preference cookie: up to 12 months (or until deleted by the user).

Cookies and similar technologies

Survey carried out on the local site as an anonymous visitor (no WordPress admin login) on 31 August 2026. Production should be re-checked for any cookies added by the host.

Technical cookies (no prior consent required under Art. 122 of the Italian Privacy Code and the Italian Data Protection Authority cookie guidelines of 10 June 2021)

  • Name: pll_language
  • Provider: Polylang (WordPress plugin on this site)
  • Purpose: store the selected browsing language (Italian or English)
  • Duration: 12 months
  • Type: technical / functionality cookie

Other WordPress cookies (wordpress_logged_in_*, wordpress_sec_*, wp-settings-*) may be set only when a user logs into the administration area. They are not used for public site visitors.

Browser session technologies

WordPress may use browser sessionStorage (for example for emoji support) for purely technical purposes without profiling. Such data stay on the user’s device and are not HTTP cookies.

In its current configuration, this site does not set profiling, marketing, or third-party analytics cookies. If non-technical tracking tools are introduced later, this notice will be updated and, where required, consent will be collected through a banner compliant with the Authority’s guidelines.

Data subject rights

You may ask the controller for: access, rectification, erasure, restriction, portability (where applicable), objection, and withdrawal of consent where processing is based on consent, without affecting the lawfulness of processing before withdrawal. You may also lodge a complaint with the Italian Data Protection Authority (www.garanteprivacy.it).

Updates

The association may update this notice. The version in force is the one published on this page, with the last-updated date at the top.