Privacy Policy

1. Identity of the Data Controller

You must clearly state:

• The full legal name of the controller → AmiCorti International Film Festival A.P.S.

• The legal address → Via Molino Bioera 4, 12016 Peveragno (CN), Italy

• Contact details → info@amicorti.org

• Name or role of the Data Protection Officer (DPO) or responsible person for data handling (if appointed).

2. Purpose of Data Processing

Specify why and how personal data are collected.
For AmiCorti, typical purposes include:

• Managing participation in the film festival and related events (submissions, accreditation, press, jury, volunteers).

• Communicating with participants, partners, and institutions.

• Managing Cinema Education programs and workshop registration.

• Sending newsletters and updates about cultural events.

• Administrative and legal compliance (billing, contracts, reporting to funders).

2. Purpose of Data Processing

Specify why and how personal data are collected.
For AmiCorti, typical purposes include:

• Managing participation in the film festival and related events (submissions, accreditation, press, jury, volunteers).

• Communicating with participants, partners, and institutions.

• Managing Cinema Education programs and workshop registration.

• Sending newsletters and updates about cultural events.

• Administrative and legal compliance (billing, contracts, reporting to funders).

4. Types of Data Collected

List the categories of personal data you handle, such as:

• Identification data: name, surname, date of birth, nationality.

• Contact data: email, phone, address.

• Professional data: role, company, affiliation, biography.

• Media content: photos, videos, recordings during the festival.

• Website and social interaction data: cookies, IP address, analytics.

5. Methods of Processing

Explain that all data are:

• Processed lawfully, fairly, and transparently.

• Stored securely (digital and physical protection).

• Accessed only by authorized personnel.

• Not subject to automated decisions or profiling (unless explicitly stated).

6. Data Retention Period

Indicate how long data are kept:

• General data → until the purpose is fulfilled or consent withdrawn.

• Administrative/fiscal documents → 10 years (per Italian law).

• Media and archive materials → for cultural/historical purposes, indefinitely, with appropriate safeguards.

7. Data Recipients

Specify who may access the data:

• Internal staff and collaborators of AmiCorti (communication, programming, education).

• Technical partners (e.g., website hosting, submission platforms like FilmFreeway/Festhome).

• Institutional partners (only when required for projects, funding, or reporting).

• Service providers bound by confidentiality agreements.

7. Data Recipients

Specify who may access the data:

• Internal staff and collaborators of AmiCorti (communication, programming, education).

• Technical partners (e.g., website hosting, submission platforms like FilmFreeway/Festhome).

• Institutional partners (only when required for projects, funding, or reporting).

• Service providers bound by confidentiality agreements.

8. Data Transfer to Non-EU Countries

If you collaborate with partners in Iran, India, or the UK (post-Brexit), you must declare:

• Whether data are transferred outside the EU.

• What safeguards are in place (e.g., standard contractual clauses, explicit consent).

9. User Rights under GDPR

Clearly explain users’ rights:

• Access, rectification, deletion (“right to be forgotten”).

• Limitation and opposition to processing.

• Data portability.

• Withdrawal of consent at any time.
  Provide contact info for exercising these rights: info@amicorti.org

10. Cookies and Tracking

Add a brief summary and link to your Cookie Policy, explaining:

• Types of cookies used (technical, analytics, profiling).

• Third-party services (e.g., Google Analytics, YouTube, Meta).

• How users can manage or disable cookies.

11. Minors’ Data

Since AmiCorti works with students through Cinema Education, you must specify:

• Data of minors are processed only with parental or guardian consent.

• All educational content complies with child protection laws.

12. Updates to the Policy

State that the Privacy Policy may be updated periodically and indicate:

• How users will be informed (e.g., updated date on the page).

• Last update date (e.g., Last revised: October 2025).

Optional but Recommended Additions

• Video/Photo Release Clause for public events.

• Data Protection Impact Assessment (DPIA) reference if processing sensitive data.

• Contact for Supervisory Authority: Garante per la Protezione dei Dati Personali (www.garanteprivacy.it).