Privacy Policy & GDPR Compliance
Information on personal data processing and retention pursuant to EU Regulation 2016/679 (GDPR) and Italian Law no. 675/96.
Last updated: October 2026 · Version V1
1. Data Controller
The Data Controller is AEGEE Torino (Association des Etats Généraux des Etudiants de l'Europe – Antenna di Torino), a non-profit youth and student association based in Torino, Italy.
Official contact email for privacy and data protection inquiries: board@aegeetorino.it
2. Personal Data Processed
We collect and process personal data directly provided by the user upon registration on the website or submission of associative forms:
A. Community Pass (€12/6 months)
- First and last name
- Email address
- Telephone number (with international dialing prefix)
- Nationality
- Photo consent during community events
B. AEGEE Membership (€20/year)
- First and last name
- Date of birth and place of birth (statutory requirement for full members: 18–35 years old)
- Residence or domicile address in Torino
- Profession and field of studies
- Telephone number and email address
- Identity card or passport image (front and back) for statutory identity verification
- High-resolution digital autograph signature (PNG format)
3. Purposes of Processing and Legal Bases
- Associative and Statutory Management: Enrolment in the official register of members, convocation and voting in Local Assemblies (Agora), board administration, and working groups (Legal basis: Execution of the associative relationship / contract).
- Participation in Programmes & Events: Registration and logistics for local activities (Soft Skills Corner, Linguistic Tables, Off the Record, trips, European youth exchanges) (Legal basis: Execution of the requested service).
- Safeguarding & Welfare: Implementation of the AEGEE Torino Code of Conduct and Safeguarding Procedure to foster a respectful, inclusive, safe environment free from harassment and discrimination (Legal basis: Legitimate interest and statutory duty of care).
- Statutory Records & Archives: Retention of signed membership forms and identity documents to verify identity and validity of assembly deliberations under Italian associative law.
4. Data Retention and Confidentiality (GDPR Statement)
Declaration of Consent to Data Retention:
“In compliance with GDPR regulations, the data provided will be accessible solely to the members of the board of directors and retained for a duration no longer than 12 months from formal departure from the association (failure to renew).”
All data is securely stored in encrypted databases with two-factor authentication hosted on Supabase and European Union-compliant infrastructure adhering to strict GDPR technical security standards.
5. Consent to Data Processing (Italian Law 675/96 & GDPR)
Pursuant to and for the purposes of art. 11 of Italian Law no. 675/96 and art. 9 of EU Regulation 2016/679, the user consents to the processing and internal disclosure of personal data for purposes strictly related to the statutory activities of the association.
6. Photography and Event Recordings
During public and associative activities, photographs or short video clips may be taken for documentation and promotional storytelling on AEGEE Torino official social channels (primarily WhatsApp and Instagram).
Photo consent is requested explicitly during registration and may be revoked at any time by notifying event organizers or contacting the Board.
7. Data Subject Rights (Articles 15–22 GDPR)
At any time, you have the right to:
- Access your personal data and obtain a copy.
- Request rectification, correction, or updating of inaccurate data.
- Request erasure of your data (“right to be forgotten”) or restriction of processing.
- Object to processing at any time on legitimate grounds.
- Lodge a complaint with the Data Protection Authority (Garante per la Protezione dei Dati Personali — www.garanteprivacy.it).
To exercise any of these rights, simply email us at board@aegeetorino.it.