Last updated: 2026-08-06
This Privacy & Cookie Policy explains how personal data is processed when you visit this website, contact Magma Fest, request access to an event, submit a community contribution or use optional website features.
1. Data controller
Magma Fest
Matera, Italy
Italy
Privacy contact: info@magmafest.it
2. Scope and principles
Personal data is processed lawfully, fairly and transparently, only for specified purposes and limited to what is necessary. Appropriate technical and organisational measures are used to protect data against unauthorised access, loss, alteration or disclosure.
3. Data processed, purposes and legal bases
| Data / activity | Purpose | Legal basis |
|---|---|---|
| Technical and browsing data, including IP address, device and browser information, requested resources, timestamps and security events. | Deliver the website, maintain security, prevent abuse, diagnose faults and comply with legal obligations. | Legitimate interests in operating and protecting the website (Art. 6(1)(f) GDPR) and legal obligations where applicable (Art. 6(1)(c)). |
| Name, email address, organisation, subject and message submitted through the contact form. | Respond to enquiries and take steps requested before entering into a relationship or collaboration. | Steps at the request of the data subject (Art. 6(1)(b)) and legitimate interests in handling communications (Art. 6(1)(f)). |
| Information submitted when requesting an invitation, including contact details, organisation, role and message. | Assess and manage participation requests, communicate about the event and maintain an internal record of the request. | Steps requested by the data subject and legitimate interests in event organisation (Art. 6(1)(b) and (f)). |
| Community contribution, name, email, organisation, role and publication preference. | Moderate contributions, contact the author where necessary and publish the message. The name is published only when the author explicitly requests it. | Legitimate interests in moderation and community management (Art. 6(1)(f)); consent for optional publication of the author’s name (Art. 6(1)(a)). |
| Consent choices and language preferences. | Remember privacy choices, avoid repeatedly showing the banner and provide requested language or preference functions. | Necessary technical storage and, for optional technologies, consent (Art. 6(1)(a) GDPR and applicable ePrivacy rules). |
Providing data in forms is voluntary, but fields marked as required are necessary to process the request. No solely automated decision-making or profiling with legal or similarly significant effects is carried out by Magma Fest through these forms.
4. Recipients and service providers
Data may be accessed by authorised Magma Fest personnel and by suppliers acting as processors or independent controllers where appropriate, including hosting, email, security, website maintenance, translation, analytics and embedded-media providers. Access is limited to what is necessary for the relevant service.
Hosting: Netsons — European Union.
5. International transfers
Some technology providers may process data outside the European Economic Area. Where this occurs, transfers are based on an adequacy decision, Standard Contractual Clauses or another safeguard permitted by Chapter V of the GDPR. Details should be checked in the privacy information of the relevant provider listed below.
6. Retention periods
- Contact enquiries: 12 months after the last communication, unless a longer period is required to establish, exercise or defend legal claims.
- Invitation requests: 24 months after the relevant event or until the request has been fully resolved, unless a longer period is required by law.
- Community submissions: Until the contribution is withdrawn or no longer relevant. Moderation data may be retained for up to 24 months.
- Security and technical logs: Up to 30 days, unless longer retention is necessary to investigate a security incident or comply with legal obligations.
- Consent choice: 180 days, unless the policy version changes or the visitor clears browser storage.
8. Your data protection rights
Subject to the conditions of the GDPR, you may request access to your personal data, rectification, erasure, restriction of processing, data portability, or object to processing based on legitimate interests. Where processing is based on consent, you may withdraw consent at any time without affecting the lawfulness of earlier processing.
To exercise your rights, contact info@magmafest.it. We may request information needed to verify your identity.
You also have the right to lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali) or another competent supervisory authority in the country where you live or work.
9. Children
The website is not intended to collect personal data from children without the involvement of a parent or guardian where required by law. If you believe a child has submitted data improperly, please contact the controller.
10. Changes to this policy
This policy may be updated when the website, services, providers or legal requirements change. Material changes to optional tracking will trigger a new consent request by changing the consent version.