Cookie Policy

1. Introduction

The present information (hereinafter, for simplicity, "Cookie Policy") governs the processing of your personal data during the navigation of the website https://www.aifestival.it/ ("Website"), through the use of cookies and other tracking tools, carried out by Search On Media Group S.r.l., VAT ID 02418200800, with registered office at Via Ugo Bassi, 7 - 40121 – Bologna (BO), email info@searchon.it (“Data Controller”), in accordance with the current regulations on the protection of personal data, including the EU Regulation 2016/679 (“GDPR”) and Directive 2002/58/EC (“Directive”), and any subsequent amendments.

2. Identity and contact details of the Representative

The data controller is established within the EU territory; therefore, no representative has been appointed.

3. Contact details of the Data Protection Officer

The Data Controller has appointed a Data Protection Officer ("DPO") pursuant to Art. 37 GDPR. The DPO can be reached at the address dpo@searchon.it.

4. Means and purposes of processing

Navigation Data

To complete the connection to the Website, some of your personal data is collected. This set of data includes, for example:

• the IP address of the device you are using;
• the date and time of access;
• the type of browsing browser;
• the operating system used.

Cookies

Cookies are small text files that are downloaded to your device when you visit the Website. They are used to improve your user experience. Cookies can remember your preferences, such as language or site settings, to make subsequent visits to the Website easier and more personalized.

Cookies can be classified in various ways:

• Based on the duration of information storage:
  • Session cookies: these are temporary and are deleted every time you close the browser.
  • Persistent cookies: these remain on your device until you delete them or until they expire.
• Based on who manages the cookies:
  • First-party cookies: these cookies are installed and managed directly by the Data Controller.
  • Third-party cookies: these are installed by other websites that provide various services to the Website. In other words, these cookies are managed by websites other than the one you are visiting.
• Based on the functional purpose of the cookie:
  • Technical cookies: cookies in this category allow the Website to function properly.
  • Statistical cookies: cookies in this category allow for statistical analysis related to different domains, websites, or apps attributable to the Data Controller.
  • Marketing cookies: cookies in this category allow the Data Controller to carry out marketing activities.
  • Profiling cookies: cookies in this category allow the Data Controller to track information about you to provide personalized services based on your needs and preferences.

5. List of third parties providing cookies

6. Delete and disable cookies

You can configure your browser to prevent the processing of cookies, or delete them immediately after browsing.

7. Legal Basis for Processing and Optional Nature of Consent

1. Personal data processed during Website navigation: The communication of such personal data is a contractual obligation, without which the services of the Website could not be made available and function properly.
2. Personal data processed with technical cookies: The communication of personal data is a contractual obligation, without which the services of the Website could not be made available and function properly.
3. Personal data processed with statistical cookies: The communication of personal data is purely optional. In case you do not express your consent to the communication of such data, it will be impossible for the Data Controller to carry out this tracking activity. The legal basis for processing is your consent, expressed in accordance with the applicable regulations.
4. Personal data processed with marketing cookies: The communication of personal data is purely optional. In case you do not express your consent to the communication of such data, it will be impossible for the Data Controller to carry out this tracking activity. The legal basis for processing is your consent, expressed in accordance with the applicable regulations.
5. Personal data processed with profiling cookies: The communication of personal data is purely optional. In case you do not express your consent to the communication of such data, it will be impossible for the Data Controller to carry out this tracking activity. The legal basis for processing is your consent, expressed in accordance with the applicable regulations.

You can give your consent to the processing of personal data through the tracking methods described in this Cookie Policy by clicking on specific boxes within dedicated banners.

8. Profiling

If you consent to the processing with tracking methods to enjoy personalized services, your personal data may be subject to automated decision-making, with one or more specific algorithms deciding which communications are more suitable for your profile or which might be of interest to you.

9. Source and Categories of Personal Data

The Data Controller will only process the personal data provided by you in accordance with the Cookie Policy, collected through the Website. The Data Controller will not process data from publicly accessible sources. The Data Controller will not process special categories of personal data as referred to in Article 9 of the GDPR.

10. Recipients and Possible Categories of Personal Data Recipients

Your personal data may be disclosed to:

• companies offering hosting services;
• companies providing commercial and marketing services on behalf of the Data Controller;
• partner companies of the Data Controller.

11. Transfer of Personal Data

The Data Controller intends to transfer Personal Data to entities established in a third country outside the European Union or to an international organization. Such entities may include, for example:

• communication companies performing communication activities on behalf of the Data Controller;
• companies providing information society services;
• companies offering hosting services;
• providers of communication society services.

The transfer of personal data to such entities, whether established in a third country or to an international organization, is made in the presence of an adequacy decision by the European Commission, which has verified how the third country, the territory, or one or more specific sectors within the third country, or the international organization in question, ensure an adequate level of protection for your rights. In the absence of such decisions, if deemed appropriate, the Data Controller reserves the right to conclude specific and separate agreements requiring such entities to adopt adequate security measures, including organizational measures, to provide appropriate guarantees regarding your rights. Data may be transferred to the following countries: United States of America.

To obtain a copy of such data or the location where they have been made available, simply send the relevant request to the Data Controller at the addresses above.

12. Data Retention Period

1. Personal data processed during Website navigation: The Data Controller will retain your personal data processed during Website navigation for a period not exceeding 12 (twelve) months from the date of each collection;
2. Personal data processed with technical cookies: The Data Controller will retain your personal data processed with technical cookies to allow you to use the Website correctly for a period not exceeding 12 (twelve) months from the date of each collection;
3. Personal data processed with statistical cookies: The Data Controller will retain your personal data processed to provide personalized services through statistical cookies for a period not exceeding 12 (twelve) months from the date of each collection;
4. Personal data processed with marketing cookies: The Data Controller will retain your personal data processed to provide personalized services through marketing cookies for a period not exceeding 12 (twelve) months from the date of each collection;
5. Personal data processed with profiling cookies: The Data Controller will retain your personal data processed to provide personalized services through profiling cookies for a period not exceeding 12 (twelve) months from the date of each collection.

The Data Controller reserves the right, in any case, to request you to renew and/or verify the consents expressed.

13. Right to Object

As the "data subject," you have the right to object, at any time, for reasons related to your particular situation, to the processing of personal data concerning you, pursuant to Article 6, paragraphs 1, letters e) or f) of the GDPR, including profiling based on these provisions.

The Data Controller refrains from further processing your personal data, unless it demonstrates compelling legitimate grounds for processing that override your interests, rights, and freedoms or for the establishment, exercise, or defense of legal claims.

If personal data is processed for direct marketing purposes, you have the right to object at any time to the processing of personal data concerning you for such marketing, including profiling to the extent that it is related to such direct marketing.

In case of objection to processing for direct marketing purposes, personal data will no longer be processed for such purposes.

You can object to the processing of your personal data for direct marketing purposes only in part, for example, by objecting to the automated and/or digital sending of promotional communications or to receiving paper communications and/or telephone communications.

If your personal data is processed for scientific or historical research, or statistical purposes under Article 89, paragraph 1 of the GDPR, you have the right, for reasons related to your particular situation, to object to the processing of personal data concerning you, unless the processing is necessary for the performance of a task carried out for reasons of public interest.

14. Other Rights

The Data Controller also wants to inform you about the existence of the following rights:

• Right of Access: You have the right to obtain from the Data Controller confirmation as to whether or not personal data concerning you is being processed. In this case, you have the right to access your personal data and specific information, in accordance with Article 15 of the GDPR;
• Right to Rectification: You have the right to obtain from the Data Controller the rectification of inaccurate personal data concerning you without undue delay. Taking into account the purposes of the processing, you have the right to have incomplete personal data completed, including by providing a supplementary statement, in accordance with Article 16 of the GDPR;
• Right to Erasure: You have the right to obtain from the Data Controller the erasure of personal data concerning you without undue delay. The Data Controller is obligated to erase personal data without undue delay if the reasons listed in Article 17 of the GDPR exist;
• Right to Restriction of Processing: You have the right to obtain from the Data Controller the restriction of processing if the conditions listed in Article 18 of the GDPR exist;
• Right to Data Portability: You have the right to receive the personal data concerning you, which you have provided to the Data Controller, in a structured, commonly used, and machine-readable format, as well as the right to transmit those data to another controller without hindrance from the Data Controller, in cases and conditions specified in Article 20 of the GDPR;
• Right to Object to Commercial Communications: You have the right to object at any time, free of charge, to receiving commercial communications from the Data Controller;
• Rights in Relation to Profiling: You have the right to obtain human intervention by the Data Controller, to express your opinion, and to contest the decision, in accordance with Article 22 of the GDPR;
• Right to Lodge a Complaint with the Supervisory Authority: You have the right to lodge a complaint with the Supervisory Authority for the Protection of Personal Data to report a violation of the regulations on the protection of personal data, in accordance with Article 77 of the GDPR.

15. How to Exercise Your Rights

You can exercise the rights indicated in the Cookie Policy by addressing your requests directly to the Data Controller at the email address info@searchon.it, or by sending the relevant communication via registered mail with return receipt to the Data Controller's address.

You can lodge a complaint with the Supervisory Authority for the Protection of Personal Data following the methods provided on the official website, addressing it to the contact details available at the Garante Privacy page.

16. Accessibility

The Cookie Policy is accessible within the Website and at the offices of the Data Controller. Upon your explicit request, the Data Controller may provide you with information orally, provided that your identity is proven, with a telephone request directed to the Data Controller's contact details.

17. Changes

The Data Controller may change the Cookie Policy, also to comply with national and/or European Union regulations or technological innovations. Any new versions of the Cookie Policy will be reported on the Website. We recommend checking the Cookie Policy periodically. Any changes will be communicated to you through a pop-up on the Website or different methods and/or computer tools. If the Data Controller substantially changes the Cookie Policy, foreseeing new processing purposes and/or categories of personal data processed or changing third parties, the Data Controller will inform you, requesting the necessary consents, through a specific banner. If it is impossible for the Data Controller to verify the storage of cookies on your device during your subsequent visit to the Website, for example, in case of deletion of installed cookies, the Data Controller will inform you, requesting the necessary consents, through a specific banner. If at least 6 (six) months have passed since the previous presentation of the banner on the Website, the Data Controller will inform you, requesting the necessary consents, through a specific banner.