Last updated: 4 November 2026
This notice explains what personal data Cimavita collects through this website, why, how long we keep it and what your rights are, as required by the EU General Data Protection Regulation (Regulation (EU) 2016/679, “GDPR”) and the Italian Privacy Code (D.Lgs. 196/2003).
Who is responsible for your data
The data controller is Associazione Culturale Cimavita, Via Coste, 86091 Bagnoli del Trigno (IS), Molise, Italy. Codice Fiscale 90051630946.
Email: cimavita.ita@gmail.com · Phone and WhatsApp: +39 327 098 3174.
Write to us at the address above for any question about your data or to exercise your rights.
What we collect and why
Contact and event enquiry forms
Data: your name, email address, the topic or event you ask about, preferred dates, number of guests, your message, and the page you sent it from.
Why: to reply to you and, if you wish, to arrange your participation in an event or stay. Legal basis: steps taken at your request before an agreement (Art. 6(1)(b) GDPR) and our legitimate interest in answering messages (Art. 6(1)(f)).
How long: a copy of each message is kept on the website for up to 24 months and then deleted automatically. Each message is also sent by email to the people who handle enquiries for Cimavita, currently including the website manager who looks after this site for us, and stays in those mailboxes for as long as we are in correspondence with you.
Newsletter
Data: your email address, the date you subscribed and the page you subscribed on (our record of your consent).
Why: to send you occasional news about Cimavita and life in Molise. Legal basis: your consent (Art. 6(1)(a) GDPR), which you can withdraw at any time.
How long: until you unsubscribe. To unsubscribe, reply to any newsletter or email cimavita.ita@gmail.com and we will remove your address. If we use an email-sending service to deliver the newsletter, your address will be shared with that service only for that purpose.
Becoming a member
Data: the name, surname, date of birth, place of residence, phone number and payment date you send us by email, and the bank-transfer details of your membership fee.
Why: to register you as a member of the association, as required by our statute and Italian law for cultural associations. Legal basis: your membership agreement (Art. 6(1)(b)) and our legal and accounting obligations (Art. 6(1)(c)).
How long: for the duration of your membership, and accounting records for the period required by Italian law (normally 10 years).
WhatsApp, phone and email
If you contact us directly, we use your details only to reply. Messages sent through WhatsApp are also handled by WhatsApp (Meta) under its own privacy policy.
Visiting the website
Like every website, our hosting provider’s servers record technical data (IP address, browser, pages requested, date and time) to deliver the site and keep it secure. These logs are kept for a short period and are not used to identify you. To stop the forms being misused, the website also counts how many messages and sign-ups arrive from each connection, using a scrambled (hashed) form of the IP address that is deleted automatically after about a day. Legal basis: legitimate interest in running a secure website (Art. 6(1)(f)).
Cookies, analytics and third-party services
When you first visit, a banner asks whether we may use Google Analytics. Reject and Accept carry equal weight, and nothing is sent to Google unless you press Accept. You can change your choice at any time with the Cookie settings link at the bottom of every page; if you withdraw consent, the Analytics cookies are deleted from your browser.
Google Analytics (only with your consent)
What it is: a statistics service from Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland) that tells us how many people visit, which pages they read and how they found us. Data: a random identifier stored in a cookie, the pages you view, how long you stay, the site that sent you, your device, browser and screen size, and your approximate location (country or city), worked out from your IP address. Google Analytics 4 does not store IP addresses for visitors in the EU. We have turned off Google signals and advertising features, so this data is not used to show you ads.
Legal basis: your consent (Art. 6(1)(a) GDPR and Art. 122 of the Italian Privacy Code). How long: Analytics data is kept for up to 14 months and then deleted by Google. Transfers: Google may process this data in the United States; Google LLC is certified under the EU–US Data Privacy Framework, and the European Commission’s Standard Contractual Clauses also apply. Google’s own notice: policies.google.com/privacy.
The cookies this site uses
- cv_consent (technical, always set once you choose): remembers whether you accepted or rejected Analytics, for 6 months. It contains no personal data.
- _ga and _ga_<ID> (Google Analytics, only after you accept): tell apart visitors and visits, for up to 2 years unless you clear them or withdraw consent.
- WordPress login cookies (technical): set only for site administrators when they log in.
Other services
- Fonts and scripts are served from our own server. Apart from Google Analytics once you accept it, your browser does not contact Google Fonts or any other external service when you visit.
- Links to Instagram, Facebook and WhatsApp are plain links. Those services receive data about you only if you click them, under their own privacy policies.
Who else sees your data
We do not sell or share your data for marketing. It is seen only by the people who run Cimavita and by the providers that help us operate, acting on our instructions:
- our website hosting provider, which stores the website and its data and sends the website’s emails from its server;
- our website manager, who maintains this site for us and currently receives the messages sent through its forms;
- Google, which hosts our mailbox (Gmail) and, if you accept it, provides Google Analytics. Google may process data outside the EU under the EU–US Data Privacy Framework and the European Commission’s Standard Contractual Clauses;
- our bank, for membership payments.
Your rights
You can ask us at any time to see the data we hold about you, correct it, delete it, restrict or object to its use, or receive it in a portable format (Articles 15–22 GDPR). Where we rely on your consent, you can withdraw it at any time without affecting what was done before. Write to cimavita.ita@gmail.com; we will reply within one month. When you ask us to delete your data, we delete it from the website and the copies of your messages in our mailbox.
If you believe we have not handled your data correctly, you can complain to the Italian supervisory authority, the Garante per la protezione dei dati personali.
Other information
Giving us your data is voluntary, but without it we cannot reply to your message, send the newsletter or register your membership. We do not make automated decisions or profile you. We may update this notice; the date at the top shows the latest version.