Privacy and cookie notice

This notice is provided under Article 13 of Regulation (EU) 2016/679 (GDPR) to visitors of endimione.art and to anyone who contacts the association through the website, by email or through the membership and support forms. This is an English translation: in case of discrepancy, the Italian version prevails.

1. Data controller

The data controller is Endimione ETS, a Third Sector Entity registered in RUNTS, with registered office at Via Aldo Moro 5, 25124 Brescia (BS), Italy, tax code 98238670172.

For any request about your personal data you can write to info@endimione.art or to our certified email (PEC) endimione@legalmail.it.

The association has not appointed a Data Protection Officer (DPO), as it does not fall within the cases where one is required (Art. 37 GDPR).

2. Data processed, purposes and legal bases

We only process the data needed for the purposes listed below. We do not sell it, use it for profiling or make automated decisions.

• Requests via the Contact form or by email: first name, surname, email and message content, in order to reply. Legal basis: your request (Art. 6.1.b GDPR).

• "We'll get in touch" form: email, in order to contact you. Legal basis: your request (Art. 6.1.b).

• Membership of the association: first name, surname, place and date of birth, tax code, address, telephone, email and personal presentation, in order to assess the application and manage membership (register of members, general meetings, fees, communications). Legal basis: membership relationship and Statute (Art. 6.1.b); legal obligations for Third Sector Entities, Legislative Decree 117/2017 (Art. 6.1.c).

• Newsletter and updates for supporters: name and email. Legal basis: consent, which can be withdrawn at any time (Art. 6.1.a).

• Donations: first name, surname, tax code, address, amount and bank transfer details, in order to manage donations and issue receipts for tax benefits. Legal basis: accounting and tax obligations (Art. 6.1.c).

• Website operation and security: technical browsing data (IP address, browser, server logs). Legal basis: legitimate interest (Art. 6.1.f).

Providing your data is optional, but without the required data we cannot reply, assess a membership application or issue a receipt. Please do not include in your messages or personal presentation any data concerning health, political or religious opinions or other special categories (Art. 9 GDPR).

3. How and for how long we keep data

Data is processed with IT tools and, for signed forms, on paper, with appropriate security measures. Only members of the Board of Directors and persons authorised by the association have access to it.

• Contact requests: the time needed to reply, then for a maximum of 12 months.

• Membership applications not accepted: 12 months from the decision of the Board of Directors.

• Members' data: for the whole duration of membership and 10 years after it ends.

• Newsletter subscription: until consent is withdrawn or you unsubscribe.

• Donations and receipts: 10 years, as required for accounting records (Art. 2220 of the Italian Civil Code).

• Technical browsing data: for the time strictly necessary, according to the hosting provider's settings.

4. Recipients of the data

Data is not disclosed to the public. It may only be shared with parties that help us carry out the activities described, appointed as data processors (Art. 28 GDPR) where required:

• Hostinger International Ltd., 61 Lordou Vironos str., 6023 Larnaca, Cyprus: provider of the website, hosting and the mailbox info@endimione.art (data processing agreement);

• the bank where donations are received, for payment collection;

• accounting or tax advisers, for legal obligations;

• public authorities, when required by law.

Some of Hostinger's sub-processors may process data outside the European Economic Area. In these cases the transfer is covered by the Standard Contractual Clauses approved by the European Commission (Decision 2021/914), as provided for in the agreement with Hostinger.

5. Your rights

At any time you can ask to:

• access your data and receive a copy (Art. 15);

• correct or update it (Art. 16);

• erase it, unless the law requires us to keep it (Art. 17);

• restrict its processing (Art. 18);

• receive it in a machine-readable format and transmit it to another controller (Art. 20);

• object to processing based on legitimate interest (Art. 21);

• withdraw your consent to the newsletter, without affecting processing already carried out (Art. 7.3).

To exercise these rights, write to info@endimione.art or to our PEC endimione@legalmail.it: we reply within one month. If you believe the processing breaches the GDPR, you can lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali).

6. Cookies and tracking tools

The website only uses technical tools that are necessary for it to work; it does not use profiling cookies or analytics tools. For this reason your consent is not required.

• Browser local storage (shopping-cart-items), by Hostinger: needed for the technical operation of the platform; it remains until you clear your browser data.

• Images and graphic resources from Hostinger (assets.zyrosite.com, cdn.zyrosite.com): used to display the pages; nothing is stored on your device.

• Stock images and videos from Pexels (images.pexels.com, videos.pexels.com): used to display some visual content; nothing is stored on your device.

When a page loads content from third-party servers, they receive your IP address, as with any web resource. The Facebook and Instagram buttons are simple links: no data is sent to the social networks unless you click them.

You can clear local storage and cookies from your browser settings at any time.

Last updated: 23 October 2026.