top of page

Privacy Policy

Effective Date: 7 July 2025

This Privacy Policy describes how your personal data is collected, used, and shared when you visit or interact with https://cinalex.org/ (the “Website”).

This policy is provided pursuant to Article 13 of Regulation (EU) 2016/679 (“GDPR”) and applicable Italian privacy laws.

1. Data Controller 

The Data Controller is:

Enrico Toti
Email: cinalex.amministrazione@gmail.com

2. Types of Data Collected

We may collect and process the following categories of personal data:

  • Identification Data: first name, last name

  • Contact Data: email address

  • Login Data: if you log in via Google, we may receive your name, surname, and email address from Google, in accordance with your Google profile settings

  • Event Registration Data: when registering for an event, we may collect your name, surname, email, telephone number, and professional affiliation (if any)

  • Payment and Donation Data: payments and donations may be processed via Stripe and PayPal; we do not store your financial information, but may receive confirmation of the transaction and related identifiers

  • Technical and Navigation Data: IP address, browser type, operating system, referral URLs, and other technical information collected automatically during your navigation

  • Newsletter Subscription: email address provided via the Wix mailing system

3. Legal Basis and Purposes of Processing

Your personal data is processed for the following purposes and based on the following legal grounds:
 

  • Account registration and management: When you create an account on the Website, your personal data (such as name, surname, and email) are processed to allow you to access the reserved areas and use the relevant services. This processing is based on the performance of a contract or pre-contractual measures, pursuant to Article 6(1)(b) of the GDPR.

  • Login via Google: If you choose to log in using your Google account, we receive from Google certain information (such as name and email address), in accordance with the authorizations you grant through your Google profile. This processing is based on the performance of a contract, and your consent is provided directly to Google for sharing the relevant information.

  • Newsletter subscription: If you sign up for the newsletter, we will use your email address to send you informational and promotional communications related to the content of the Website, such as updates on Chinese law. This processing is based on your explicit consent, pursuant to Article 6(1)(a) of the GDPR. You may withdraw your consent at any time by clicking the unsubscribe link in any newsletter or by contacting us.

  • Event registration: When you register for events via the Website, we process the information you provide (such as name, email address, telephone number, and other registration details) in order to manage your participation. This processing is necessary to take steps at your request and, where applicable, for the performance of a contract.

  • Payments and donations: If you make a payment or donation via PayPal or Stripe, we process the data necessary to manage the transaction (transaction ID, amount, user email, etc.). Financial data is not stored by us but managed directly by the payment platforms. This processing is based on the performance of a contract and legal obligations related to accounting and taxation.

  • Website operation and security: We may collect technical data automatically when you visit the Website, including IP address, browser type, and pages visited. This data is used to ensure the correct technical functioning of the site, to improve user experience, and to detect potential anomalies or abusive behavior. This processing is based on the legitimate interest of the Data Controller in ensuring the security and functionality of the Website, in accordance with Article 6(1)(f) of the GDPR.

  • Legal obligations: In some cases, we may process your data to comply with legal obligations, such as those related to tax, accounting, or public safety, in accordance with Article 6(1)(c) of the GDPR.

​

4. How We Process Your Data

Personal data is processed using electronic tools in compliance with principles of lawfulness, fairness, transparency, purpose limitation, data minimization, accuracy, integrity, and confidentiality.

We do not engage in automated decision-making, including profiling.

5. Data Retention

We retain your data only for as long as necessary to achieve the purposes for which it was collected:

  • User account data: until the user deletes their account

  • Newsletter: until you unsubscribe or withdraw consent

  • Event registration: for the duration of the event and for any legal follow-up (e.g. invoices or certificates)

  • Payment data: as required for tax and accounting purposes (usually 10 years)

  • Technical data: no longer than 12 months, unless required for legal proceedings

6. Data Sharing and Transfer

Your personal data may be shared with:

  • Wix.com Ltd. – provider of the website platform and mailing tool

  • Google LLC – if you log in using Google

  • PayPal Holdings Inc. and Stripe Inc. – for processing payments and donations

  • IT service providers or consultants acting as data processors

  • Public authorities, when required by law

Some of these recipients may be located outside the European Economic Area (EEA), particularly in the United States. In such cases, the transfer will occur in accordance with the provisions of Chapter V of the GDPR, for example through Standard Contractual Clauses or adequacy decisions by the European Commission.

7. Your Rights

Under the GDPR, you have the right to:

  • Access your personal data (Art. 15)

  • Rectify inaccurate or incomplete data (Art. 16)

  • Request erasure of your data (Art. 17)

  • Request restriction of processing (Art. 18)

  • Object to the processing of your data (Art. 21)

  • Withdraw your consent at any time, without affecting the lawfulness of processing based on consent before withdrawal

  • Lodge a complaint with the Italian Data Protection Authority (Garante per la Protezione dei Dati Personali – www.garanteprivacy.it)

 

To exercise your rights, please contact us at cinalex.amministrazione@gmail.com.

8. Cookies

The Website uses technical and, with your consent, analytical or profiling cookies. For more information, please refer to our Cookie Policy.

bottom of page