Privacy notice

Who is the data controller

DOPE Hubs, a non-profit association with its registered office in Genoa, Italy. Tax code 95254390107.

For any question about your data: info@dopehubs.com.

What data we process

Browsing data. The server that hosts the website records, like every web server, the IP address, the date and time of the request, the page requested and the browser type.

Data from the Take part form. If you write to us using the form, we keep what you enter: the project you choose, your full name, email, what you study or do and, if you enter them, your phone number and what you would like to do. We keep it on the website's server, where it is read only by the people at DOPE who organise the meetings. Every time a request arrives, a copy also goes to the association's mailbox.

To stop rapid-fire submissions, the system that receives the form keeps your IP address in memory for a quarter of an hour, without writing it down anywhere.

Data you send us by email. If you write to us, we process your email address, your name and whatever you choose to tell us.

We ask you not to send us health data or other special category data that is not needed. The website does not use profiling cookies, statistics tools or advertising. YouTube videos load only if you press play: we explain this on the cookies page.

Donation data. If you donate to one of our fundraisers on a crowdfunding platform, the platform passes on to us the data that its privacy notice provides for: usually your full name, email, the amount, the date and any message you leave. Card and payment details stay with the platform and its payment service provider: we do not see them. If you donate by bank transfer to our account, we receive from the bank your name, IBAN, the amount and the payment reference.

Your name among our supporters. If you choose to appear among the people who have supported us, we also process the name you give us for the Support page or for the object we print it on.

Why we process it and on what basis

To reply to you, invite you to an open meeting and assess your joining the association: at your request, for pre-contractual measures (Article 6.1.b of the GDPR).

To run the website and protect it from abuse: legitimate interest (Article 6.1.f).

To comply with legal obligations, when they apply: Article 6.1.c.

To thank you for a donation and answer your questions: legitimate interest (Article 6.1.f). To send you what you chose with your donation: to follow through on your donation (Article 6.1.b).

To keep the accounts and the report for each fundraiser: legal obligation (Article 6.1.c).

To put your name among our supporters, on the website or on an object: only if you choose to (consent, Article 6.1.a). You can withdraw your consent at any time by email; however, a name already printed on an object can no longer be removed.

We do not use donation data for other fundraisers or to send you news, unless you ask us to.

We do not make automated decisions and we do not carry out profiling.

For how long

Browsing data: at most 90 days, unless it is needed to establish abuse.

Form requests and messages: the time needed to invite you and get to know each other, and in any case no more than 24 months from the last contact. If you join the association, we keep the data needed for the register of members, as required by law. You can ask us to delete your data sooner, at any time.

Donation data needed for the accounts: ten years, as required by Article 2220 of the Italian Civil Code, and longer only if a tax assessment that is still open requires it. Your name among our supporters: until you ask us to remove it.

Who sees the data

The people at DOPE authorised to process it.

The providers that help us run the website and email, as data processors: whoever hosts the website's server, and Google, for email. Google may process data outside the European Union too, with the safeguards required by the GDPR, such as the EU-U.S. Data Privacy Framework and standard contractual clauses.

We do not sell or transfer the data to anyone.

The fundraising platforms we use (Produzioni dal Basso, GoFundMe, BuonaCausa, WhyDonate and Rete del Dono) and their payment service providers process your data as independent controllers, under their own privacy notices. The same applies to the bank, for bank transfers. Whoever helps us keep the accounts sees the data needed to do so.

The name you choose to show among our supporters is visible to anyone who visits the page.

Your rights

You can ask to access your data, to correct or delete it, to restrict its processing, to object to the processing and to receive it in a readable format (Articles 15 to 22 of the GDPR). Just write to info@dopehubs.com.

You can also lodge a complaint with the Garante per la protezione dei dati personali (the Italian data protection authority), garanteprivacy.it.