privacypolicy.

Data controller

The data controller for the personal data collected through the website www.rethinkmob.it, the registration forms and the Association's activities is RethinkMOB APS, an Associazione di Promozione Sociale (APS, social promotion association) with its registered office in Pescara (PE), Via Eugenia Ravasco n. 60, postcode 65123, tax code 91182750686, registered in the Registro Unico Nazionale del Terzo Settore (RUNTS, the Italian national register of Third Sector organisations), section "Associazioni di Promozione Sociale", on 12 May 2026, registry no. 171114 (measure of the Abruzzo Region, Executive Decision no. DPG022/135 of 12 May 2026), in the person of its legal representative pro tempore. The Controller can be contacted at the email address info@rethinkmob.it and at the certified email (PEC) address rethinkmob@pec.it.

Data protection officer (DPO)

The Association is not required to appoint a Data Protection Officer under Art. 37 GDPR. For any matter concerning the processing of personal data, the Controller can be contacted directly using the contact details given in point 1.

Categories of data processed

Depending on the relationship established, the Association may process: personal and identification data (first name, surname, date and place of birth, tax code where necessary); contact data (email, telephone, address); data relating to the organisation or company the person belongs to; photographic images and videos; any data relating to the membership relationship and to payments; data provided voluntarily in the context of remarks, questionnaires or communications.

Purposes of the processing

Users' personal data are processed, in compliance with Regulation (EU) 2016/679 (GDPR), for the following purposes:

• management of requests to register for and take part in the events, initiatives, conferences, workshops and activities organised or promoted by the Association;
• sending of informational, logistical and organisational communications relating to the events and activities;
• inclusion in organisational materials (badges, lists of participants, certificates of attendance);
• management of membership applications and of the membership relationship, keeping of the register of members, the register of volunteers and the registers required by law, collection of membership fees and contributions;
• fulfilment of the administrative, accounting, tax, insurance and legal obligations connected with the Association's activity, including the obligations to file and update data with the RUNTS;
• production of attendance statistics, surveys and satisfaction questionnaires, in anonymous or aggregate form;
• management of fundraising activities, contributions, donations and charitable gifts, and the related obligations;
• participation in calls for proposals, projects, agreements and memoranda of understanding with public and private bodies, and the related reporting;
• photographic and video documentation of the activities and events;
• dissemination of images, content and materials on the Association's official channels (website, social networks, newsletter, brochures, promotional and reporting materials);
• recording and publication of voluntary remarks (questions, comments, interviews, contributions);
• (subject to consent) sending of newsletters, promotional communications and periodic updates on the Association's initiatives;
• (subject to consent) sharing of data with sponsors and third-party partners for the sending of communications consistent with the themes of the activities;
• management of any complaints and disputes and protection of the Association's rights in and out of court.

Legal basis for the processing

The processing of data is based on:

• Art. 6(1)(b) GDPR: performance of services and pre-contractual measures linked to participation in the events and activities;
• Art. 6(1)(b) GDPR: management of the membership relationship and of the obligations arising from it (for members);
• Art. 6(1)(c) GDPR: compliance with legal obligations in administrative, accounting, tax and insurance matters, including in implementation of Italian Legislative Decree 117/2017 (Codice del Terzo Settore, the Italian Third Sector Code);
• Art. 6(1)(f) GDPR: legitimate interest of the Controller in documenting, promoting and reporting on its activities of general interest and in protecting its rights;
• Art. 6(1)(a) GDPR: consent of the data subject, for the sending of newsletters and promotional communications and for the sharing of data with sponsors and third-party partners.

Nature of the provision of data

The provision of the data necessary for the purposes of registration, participation, management of the membership relationship and compliance with legal obligations is mandatory: failure to provide them makes it impossible to proceed with the registration, the participation or the establishment of the membership relationship. The provision of data for the purposes based on consent (newsletter, promotional communications, sharing with third parties) is optional; refusal does not affect participation in the activities.

Recipients and disclosure of data

The data collected may be disclosed, within the limits of the purposes indicated above:

• to partners, co-organisers and technical, logistics and service providers, where applicable appointed as data processors under Art. 28 GDPR;
• to professionals and consultants (e.g. administrative and accounting, insurance, legal) for the related obligations;
• to public bodies and administrations, where required by legal obligations or in the context of calls for proposals, projects and agreements;
• to sponsors and third parties, for the sending of communications consistent with the themes of the activities (only subject to consent).

The data will not be disseminated or transferred to third parties for generic commercial purposes and are not subject to transfer to third countries outside the European Economic Area, except within the limits and with the safeguards provided for in Chapter V of the GDPR.

Methods of processing

Processing is carried out using manual and electronic tools, in compliance with the principles of fairness, lawfulness, transparency, minimisation, accuracy, storage limitation, integrity and confidentiality, adopting appropriate technical and organisational measures under Art. 32 GDPR.

Cookies and third-party tools

The website www.rethinkmob.it uses technical cookies that are necessary for its operation and for delivering the content requested by the user. Consent is not required for these cookies, under Art. 122 of Italian Legislative Decree 196/2003 and the Guidelines on cookies and other tracking tools adopted by the Garante per la protezione dei dati personali (the Italian Data Protection Authority) by decision of 10 June 2021.

Some pages of the website embed video content hosted on YouTube (Google Ireland Limited) in privacy-enhanced mode (youtube-nocookie.com domain): in this configuration no profiling cookies are installed when the page is simply loaded, while starting playback of the video involves connecting to the provider's servers and communicating the user's IP address.

The website also contains links to third-party websites, platforms and forms (social networks, document storage and sharing services, application forms). The Controller is not responsible for the processing carried out by these parties, to which their respective privacy notices apply.

Should analytics or profiling cookies be activated, their use will be subject to the user's prior consent, collected through a dedicated banner, and governed by a specific cookie policy published on the website.

Retention period

The data are kept for the time strictly necessary to pursue the purposes for which they are collected. In particular: data relating to participation in the events are kept for the time necessary to manage the initiative and the related activities; data relating to the membership relationship, accounting, tax and reporting data are kept for the applicable statutory periods, as a rule up to 10 years under Art. 2220 of the Italian Civil Code and tax legislation; data processed on the basis of consent (newsletter and promotional communications) are kept until consent is withdrawn. Once these periods have elapsed, the data are erased or anonymised, unless they need to be kept to protect the Controller's rights within the applicable limitation periods.

Data relating to minors

The Association's activities may involve minors. The data of minors are processed exclusively with the consent and under the responsibility of the person exercising parental authority or guardianship. With regard to information society services offered directly to a minor, processing is lawful, under Art. 8 GDPR and Art. 2-quinquies of Italian Legislative Decree 196/2003, where the minor is at least 14 years old; otherwise the consent of the person exercising parental responsibility is required.

Automated decision-making

The Controller does not use automated decision-making processes, or profiling activities, that produce legal effects on the data subject or similarly affect the data subject under Art. 22 GDPR.

Rights of the data subject

The data subject may at any time exercise the rights provided for in Articles 15-22 GDPR, including:

• access to, rectification or erasure of the data;
• objection to processing or a request for restriction;
• data portability;
• withdrawal of the consent given, without affecting the lawfulness of the processing carried out before the withdrawal;
• a complaint to the Garante per la protezione dei dati personali (www.garanteprivacy.it).

To exercise these rights, the Controller can be contacted at the email address info@rethinkmob.it or by certified email (PEC) at rethinkmob@pec.it.

Photographs, video recordings and dissemination of images

During the Association's events and activities, photographs and video recordings will be taken. The images may be used for communication, promotion, documentation and reporting purposes, through websites, official social networks, newsletters, brochures and information materials of the Association. By taking part in the activities, the user authorises the use of their image, unless an explicit objection is communicated before the start of the event.

Public remarks

Users' spontaneous remarks (questions, comments, interviews, contributions) may be recorded and published in the Association's materials.

Identification data on badges and lists

The first name, surname and, if provided, the organisation/company the person belongs to may be shown on badges, lists of participants and materials distributed during the events.

Third-party content

The content presented by speakers, sponsors and partners during the events is the sole responsibility of the respective authors.

Changes to this notice

This notice may be subject to changes and updates. Please check this page periodically. Last updated: August 2026.