Privacy Policy for the processing of personal data pursuant to articles 13-14 of EU Regulation 2016/679 (GDPR)

1. Data Controller

The Data Controller for personal data is:

Hip Hop Protection – Comitato Promotore

Non-profit free association

Tax Code: 96521560589

E-mail: comitatopromotore@hiphoprotection.com

PEC: veronica.benanti@timpec.it

2. Data Protection Officer (DPO)

The Controller has appointed a Data Protection Officer (DPO) pursuant to articles 37-39 of the GDPR.

For matters relating to the processing of personal data, the exercise of data subject rights, or reports regarding data protection, the DPO can be contacted at:

E-mail: privacy@hiphoprotection.com

3. Purposes of processing and legal basis

The personal data you provide will be processed for the following purposes:

a) Sending the newsletter (legal basis: art. 6, par. 1, letter a) GDPR – consent of the data subject): For the periodic sending of informative communications, updates on Committee initiatives, events, news related to Hip Hop culture and developments in the UNESCO candidacy, as well as promotional material related to Hip Hop Protection activities.

b) Technical management of the service (legal basis: art. 6, par. 1, letter b) GDPR – execution of pre-contractual measures adopted at the request of the data subject): To manage subscription, cancellation, and preferences related to the newsletter.

4. Nature of provision and consequences of refusal

The provision of data is optional. Refusal to provide the requested data makes it impossible to proceed with the newsletter subscription and to receive communications regarding the Committee’s initiatives.

5. Categories of data processed

The personal data subject to processing are:

  • First and Last Name
  • E-mail address
  • Browsing data and statistics relating to opening and interaction with the communications sent (e-mail opening, clicks on links, device used)

6. Processing methods

The processing of personal data is carried out using computer and electronic tools, with logic strictly related to the indicated purposes and through the adoption of adequate technical and organizational security measures to guarantee confidentiality, integrity, and availability of data, in accordance with articles 25 and 32 of the GDPR.

7. Data recipients

Personal data may be communicated to:

  • E-mail marketing service providers and technological platforms necessary for the management and sending of the newsletter, in their capacity as data processors pursuant to art. 28 GDPR
  • Subjects providing hosting and maintenance services for the website www.hiphoprotection.com
  • External consultants and professionals, within the limits strictly necessary for the performance of their duties

Data will not be disseminated. Any transfers to non-EU third countries will take place exclusively in accordance with articles 44 et seq. of the GDPR and with the adoption of adequate guarantees (standard contractual clauses, adequacy decisions).

8. Retention period

Personal data will be stored for a period of 24 months from the date of newsletter subscription.

The retention period is tacitly renewed for a further 24 months in the event of documented interaction by the data subject with the communications sent (such as opening e-mails, clicking links contained in the newsletter, or other forms of engagement).

In the absence of interactions by the data subject for 24 consecutive months, the data will be automatically deleted, unless consent is previously revoked, which will result in immediate deletion at any time.

Following deletion from the newsletter list, data may be stored in an anonymous and aggregated form for statistical purposes, without the possibility of identifying the data subject.

9. Rights of the data subject

As a data subject, you have the right to:

  • Access your personal data (art. 15 GDPR)
  • Obtain the rectification of inaccurate or incomplete data (art. 16 GDPR)
  • Obtain the deletion of data (right to be forgotten – art. 17 GDPR)
  • Obtain the limitation of processing (art. 18 GDPR)
  • Object to the processing (art. 21 GDPR)
  • Receive data in a structured format and transmit it to another controller (portability – art. 20 GDPR)
  • Withdraw consent at any time, without prejudice to the lawfulness of the processing based on the consent given before the withdrawal
  • Lodge a complaint with the Data Protection Authority (www.garanteprivacy.it)

10. Exercise of rights and cancellation

To exercise the rights indicated above or to unsubscribe from the newsletter, it is possible to:

  • Use the unsubscribe link at the bottom of each e-mail received
  • Send a communication to: comitatopromotore@hiphoprotection.com
  • Send a PEC communication to: veronica.benanti@timpec.it

The Controller will provide feedback without undue delay and in any case within one month of receiving the request.

Last updated: January 2026