Privacy and cookie policy
Privacy policy
Pursuant to Articles 13 and 14 of Regulation (EU) 2016/679 (GDPR), this notice describes how we process the personal data of visitors to luminaproject.it and of those who use the forms on the website.
Data controller
Lumina Project, a non-profit initiative by students of LUMSA University. For any request, you can write to us through the website's contact form.
Data processed
Browsing data: as with any website, the hosting systems record some technical data (such as IP address, browser type, date and time of the request), used only to ensure security and proper operation.
Contact form: name, email and the content of your message.
“Join us” form: full name, email, university and degree programme and, for team applicants, the motivation provided.
Purposes and legal bases
Replying to messages sent through the contact form: processing is necessary to follow up on your request (Art. 6(1)(b) GDPR).
Contacting you about your team application or informing you about Lumina's upcoming meetups and workshops: processing is based on your consent (Art. 6(1)(a) GDPR), which you can withdraw at any time without affecting the lawfulness of processing carried out before withdrawal.
Ensuring the security and operation of the website: the controller's legitimate interest (Art. 6(1)(f) GDPR).
Provision of data
Providing your data in the forms is optional, but without it we cannot reply to you or contact you.
Recipients and transfers
Your data is accessible only to members of Lumina's organising team and is not published or shared with third parties.
To run the website we rely on providers acting as data processors: Formspree Inc. (United States) for form handling, Vercel Inc. (United States) for hosting and Google LLC (United States) for Google Fonts typefaces.
Transfers outside the EU rely on the safeguards provided by the GDPR (standard contractual clauses or, where applicable, the EU-US Data Privacy Framework).
Retention
Data sent through the forms is kept for as long as necessary for the purposes above and in any case no longer than 24 months from collection, unless you withdraw your consent earlier.
Browsing data is kept for short periods, according to the hosting provider's settings.
Your rights
You may at any time request access to, rectification, erasure, restriction or portability of your data, object to processing and withdraw your consent (Arts. 15–22 GDPR) by writing to us through the website's contact form.
You also have the right to lodge a complaint with the Italian Data Protection Authority (garanteprivacy.it).