Privacy Policy

Notice provided pursuant to Article 13 and, where applicable, Article 14 of Regulation (EU) 2016/679 (“GDPR”)

Last updated: September 2026

1. Data Controller

The data controller is Associazione Italiana Giovani per l’UNESCO – ETS (hereinafter “AIGU” or the “Controller”), with registered office at Via di Monte Giordano 36, 00186 Rome (RM), Tax Code 97818680585. For any request or information concerning the processing of personal data, the Controller may be contacted by e-mail at: info@aiguofficial.it.

2. Categories of data processed

Browsing data. Browsing data: The IT systems and software procedures used to operate this website acquire, during their normal operation, certain data whose transmission is implicit in the use of Internet communication protocols (IP addresses, access times, pages visited, browser and operating system parameters). This information is used solely to enable the proper provision of the website’s functions, obtain anonymous statistical information on its use, and ascertain any liability in the event of cybercrimes.

Data provided voluntarily:

  • “Contact Us” form: through the contact form available on the website, the user may provide the data requested by the form, such as name, e-mail address and message content, as well as any further personal data voluntarily included in the communication.
  • Applications and membership requests to AIGU: the voluntary submission of an application or membership request to the e-mail addresses indicated on the website entails the acquisition of the sender’s e-mail address, the data contained in the communication and any attached documents, such as curriculum vitae and motivation letter, as well as the personal information contained therein. Candidates are invited not to include in their curriculum vitae or application any data belonging to the special categories referred to in Article 9 GDPR, unless this is strictly necessary for the purposes of the application.
  • Membership registrations and renewals: the procedures for registering and renewing membership in AIGU are managed through Google Forms made available by the Association. Through these forms, the personal data necessary to manage the registration or renewal request are collected. As part of the provision of the service, the data may also be processed by the provider of the platform used.

Event registration: Registration for events organized or promoted by AIGU may take place through external third-party platforms (e.g. Eventbrite or similar) accessible via links on the website. In such cases, the initial processing is governed by the privacy notice of the third-party platform; AIGU will process the participant data transferred or downloaded from such platforms as an independent Controller solely for the organizational management of the event.

3. Purposes and legal bases of processing

The personal data provided by users are processed for the following purposes:

  1. Responding to requests for information: responding to questions and communications sent by users through the contact form or by e-mail.
    • Legal basis: performance of pre-contractual measures taken at the request of the data subject (Article 6(1)(b) GDPR) and the Controller’s legitimate interest in responding to requests received (Article 6(1)(f) GDPR).
  2. Management of applications and membership requests to AIGU: assessing candidates’ profiles for association activities and membership in AIGU.
    • Legal basis: performance of pre-contractual measures (Article 6(1)(b) GDPR).
  3. Compliance with legal obligations: complying with obligations provided for by law, regulation or EU legislation.
    • Legal basis: legal obligation to which the Controller is subject (Article 6(1)(c) GDPR).
  4. Organization and management of events: registration and management of participation in initiatives promoted by the Association.
    • Legal basis: performance of a contract or pre-contractual measures (Article 6(1)(b) GDPR).
  5. Management of membership registrations and renewals: receiving and managing requests to join AIGU, membership renewals and the requirements connected with the management of the membership relationship.
    • Legal basis: performance of measures taken at the request of the data subject and, after admission, performance of the membership relationship (Article 6(1)(b) GDPR), as well as compliance with any applicable legal obligations (Article 6(1)(c) GDPR).

4. Processing methods and retention periods

Processing is carried out using IT and telematic tools, with logic strictly related to the purposes indicated above and with the adoption of appropriate technical and organizational measures pursuant to Article 32 GDPR.

  • Data collected through the “Contact Us” form are retained until the management of the request and any subsequent communication with the data subject has been completed. The data may be retained for a longer period where necessary to comply with legal obligations or for the establishment, exercise or defense of a legal claim.
  • Data relating to applications are retained for the time necessary to manage the application and any related communications with the data subject. Subsequently, the data are retained only where still necessary in relation to the purposes for which they were collected, to comply with legal obligations or for the establishment, exercise or defense of a legal claim, and are deleted when they are no longer necessary.
  • Data relating to membership registrations and renewals are retained for the entire duration of the membership relationship and, thereafter, for the period required by applicable law and necessary to comply with the administrative, accounting, tax and legal obligations to which the Controller is subject.
  • Technical browsing data and logs are retained for the period necessary for the proper functioning and security of the website, in relation to the specific technical and security purposes for which they are collected.

5. Recipients of the data

Personal data may be accessed and processed by:

  • Internal staff and collaborators of the AIGU Association, duly authorized and instructed to process the data.
  • Third parties providing services functional to the Controller’s activities, such as hosting providers, e-mail service providers, IT maintenance and support services, and platforms used to manage membership registrations and renewals, including Google Forms, appointed where necessary as processors pursuant to Article 28 GDPR.

Personal data are not sold to third parties, nor are they disseminated or communicated to third parties for their own commercial purposes, unless this occurs on the basis of an appropriate legal basis.

6. Transfers of data to third countries

Some providers used by the Controller may involve the processing or transfer of personal data to countries located outside the European Economic Area (“EEA”). In such cases, AIGU ensures that any transfers take place in compliance with Chapter V of the GDPR, on the basis of an adequacy decision by the European Commission or through the safeguards provided for by applicable law, such as the standard contractual clauses approved by the European Commission.

7. Rights of the data subject

 As a data subject, where the relevant conditions are met, you may exercise the rights guaranteed by Articles 15–22 of the GDPR:

  • Request confirmation as to whether or not personal data concerning you are being processed;
  • Obtain access to the data and information relating to the processing;
  • Obtain rectification of inaccurate data or completion of incomplete data;
  • Request erasure of the data (“right to be forgotten”);
  • Request restriction of processing;
  • Request data portability in a structured, commonly used format;
  • Object to the processing of personal data;
  • Withdraw consent at any time, where given, without affecting the lawfulness of processing based on consent before its withdrawal.

Requests to exercise rights may be sent to the Controller by e-mail at: info@aiguofficial.it.
If you believe that the processing of your personal data is carried out in breach of the Regulation, you also have the right to lodge a complaint with the Italian Data Protection Authority (www.garanteprivacy.it) or to seek remedy before the competent courts.

8. Nature od data provision

The provision of the data requested as necessary in the “Contact Us” form, in applications sent to AIGU and in the forms used for membership registrations and renewals is necessary to enable AIGU to manage the relevant request. Failure to provide the necessary data may make it impossible to follow up on the request, application, registration or renewal. The provision of any optional data is instead voluntary.

AIGU does not, within the scope of the processing described in this notice, make decisions based solely on automated processing, including profiling, which produce legal effects or similarly significant effects on the data subject.

9. Cookies and technical tools

The website uses only cookies and other technical tools strictly necessary for the proper functioning and security of the website.
These tools do not require the user’s consent.
If cookies or other tracking tools that are not strictly necessary are introduced in the future, this notice will be updated and, where required by applicable law, such tools will be activated only after the user’s consent has been obtained.

10. Minors

The website and the services offered through it are not specifically directed at minors under the age of 14. AIGU does not intend to knowingly collect personal data from minors in breach of applicable law.

Applications for membership in AIGU are reserved for persons who have reached the age of 18.

11. Changes to the Privacy Policy

The Controller reserves the right to amend or update this notice at any time in order to adapt it to legislative developments or technical changes to the website. Updated versions will be published on this page indicating the date of last update.