Privacy Policy

Privacy Policy

This privacy policy describes how the www.kairopia.org website manages the processing of users' personal data.

1. Data Controller

The Data Controller is:
KAIROPIA Association
Headquarters: 311 Chemin de Beauvert, 06600 Antibes, France
Email: info.kairopia@gmail.com
Represented by the President: Luciana Squicciarini

2. Types of Data Collected

Personal data collected by the site may include:

• Browsing data: IP addresses, browser type, operating system, pages visited
• Voluntarily provided data: name, surname, email, phone number (through contact or registration forms)
• Registration data: information necessary for association membership and participation in activities

3. Purpose of Data Processing

Personal data is processed for the following purposes:

• Managing information requests
• Association membership and member management
• Booking and participation in activities
• Sending communications related to the association's activities
• Sending newsletters (with prior consent)
• Legal compliance

4. Legal Basis for Processing

Data processing is based on:

• User consent
• Execution of a contract or pre-contractual measures
• Compliance with legal obligations
• Legitimate interest of the data controller

5. Processing Methods

Data processing is carried out through IT and telematic tools, with organizational and logical methods strictly related to the stated purposes. Processing is carried out by the data controller and any authorized personnel.

6. Data Retention Period

Personal data will be kept for the time necessary to fulfill the purposes for which they were collected:

• Registration data: for the entire duration of the association relationship and for 10 years after
• Browsing data: deleted immediately after processing
• Newsletter data: until consent is withdrawn

7. Data Communication and Disclosure

Personal data will not be disclosed. They may be communicated to:

• Authorized association personnel
• Professionals for tax and accounting purposes
• Competent authorities for legal compliance
• IT service providers (hosting, email)

8. Data Transfer

Data may be transferred to non-EU countries only when using services (e.g., Google, hosting) that guarantee adequate security measures in compliance with the GDPR.

9. Data Subject Rights

Data subjects have the right to:

• Access their personal data
• Request rectification or deletion
• Object to processing
• Request restriction of processing
• Request data portability
• Withdraw consent at any time
• Lodge a complaint with a supervisory authority

To exercise these rights, contact: info.kairopia@gmail.com

10. Supervisory Authority

The data subject has the right to lodge a complaint with the competent supervisory authority:

For Italy: Garante per la protezione dei dati personali
Website: www.garanteprivacy.it

For France: Commission Nationale de l'Informatique et des Libertés (CNIL)
Website: www.cnil.fr

11. Cookie Policy

The site uses technical cookies necessary for the functioning of the site itself. We do not use profiling or third-party cookies for advertising purposes.

Technical cookies used:

• Session cookies for navigation
• Cookies to store language preferences
• Cookies for site security

You can disable cookies through your browser settings, but this may compromise some site functionalities.

12. Data Security

The association adopts appropriate security measures to protect personal data from unauthorized access, alteration, disclosure, or destruction.

13. Policy Updates

This policy may be updated periodically. Changes will be published on this page with an indication of the update date.

14. Contacts

For any questions or requests regarding privacy, you can contact the Data Controller:

• Email: info.kairopia@gmail.com
• Phone: +33 606 68 67 46 (France) or +39 351 925 97 05 (Italy)
• Address: Kairopia, 311 Chemin de Beauvert, 06600 Antibes, France

15. Data Protection Officer (DPO)

The Association, not reaching the thresholds required by the GDPR, is not required to appoint a DPO. For any data protection issues, please contact the Data Controller directly.

16. Processing Records

The Association maintains a record of processing activities as required by the GDPR, available upon request to the competent authorities.

Last updated: January 2025