Privacy Policy

Effective Date: 21/07/2025
Last Updated: 27/07/2025

1. Introduction

Welcome to Ortigia Music (“we,” “our,” or “us”). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website www.ortigiamusic.com (“Site”) and use our services related to the electronic music festival that mixes Mediterranean tradition with contemporary music trends.

We are committed to protecting your privacy and ensuring compliance with the General Data Protection Regulation (GDPR) and other applicable data protection laws.

2. Data Controller

Eve 5 s.r.l.
Corso Principe Oddone 18
10122 Torino (TO)
gdpr@ortigiamusic.com

3. Information We Collect

3.1 Personal Information You Provide

We collect information you voluntarily provide when you:

Purchase merchandise, or services
Subscribe to our newsletter
Contact us through forms or email
Participate in surveys or promotions

This may include:

Name and contact details (email, phone, address)
Payment information (processed securely by third-party payment processors)
Age/date of birth (for age verification)
Preferences and interests related to music events

3.2 Information Automatically Collected

We automatically collect certain information when you visit our Site:

Device information (IP address, browser type, operating system)
Usage data (pages visited, time spent, click patterns)
Location data (general geographic location based on IP address)
Cookies and similar tracking technologies

3.3 Information from Third Parties

We may receive information from:

Social media platforms (when you interact with our social content)
Payment processors
Analytics providers
Marketing partners

4. Legal Basis for Processing

Under GDPR, we process your personal data based on:

Consent: When you subscribe to newsletters, marketing communications, or use optional features
Contract: When processing is necessary for merchandise purchases, or service delivery
Legitimate Interest: For website analytics, security, fraud prevention, and improving our services
Legal Obligation: For tax records, legal compliance, and regulatory requirements

5. How We Use Your Information

We use your information to:

Process services and merchandise sales
Provide customer support
Send event updates and important communications
Deliver marketing content (with your consent)
Improve our website and services
Ensure security and prevent fraud
Comply with legal obligations
Analyze usage patterns and preferences

6. Cookies and Tracking Technologies

Our Site uses cookies and similar technologies for:

Essential Cookies: Necessary for basic site functionality
Analytics Cookies: To understand how visitors use our site
Marketing Cookies: To deliver relevant advertisements
Preference Cookies: To remember your settings and choices

You can manage cookie preferences through your browser settings or our cookie consent tool. Note that disabling certain cookies may affect site functionality.

7. Information Sharing and Disclosure

We may share your information with:

7.1 Service Providers

Payment processors
Email marketing platforms
Analytics providers
Cloud hosting services
Customer support tools

7.2 Business Partners

Event venues
Merchandise suppliers

7.3 Legal Requirements

We may disclose information when required by law, court order, or to protect our rights and safety.

7.4 Business Transfers

In case of merger, acquisition, or sale of assets, your information may be transferred to the new entity.

8. International Data Transfers

If we transfer your data outside the European Economic Area (EEA), we ensure adequate protection through:

European Commission adequacy decisions
Standard Contractual Clauses (SCCs)
Other approved transfer mechanisms

9. Data Retention

We retain your personal data for as long as necessary to:

Fulfill the purposes outlined in this policy
Comply with legal obligations
Resolve disputes and enforce agreements

Specific retention periods:

Customer accounts: Until deletion requested or 3 years of inactivity
Transaction records: 7 years (for tax/legal purposes)
Marketing data: Until consent is withdrawn
Website analytics: 26 months

10. Your Rights Under GDPR

As an EU resident, you have the right to:

Access: Request copies of your personal data
Rectification: Correct inaccurate or incomplete data
Erasure: Request deletion of your data (“right to be forgotten”)
Restriction: Limit how we process your data
Portability: Receive your data in a portable format
Object: Object to processing based on legitimate interests
Withdraw Consent: Withdraw consent for consent-based processing

To exercise these rights, contact us at gdpr@ortigiamusic.com

11. Data Security

We implement appropriate technical and organizational measures to protect your data, including:

Encryption of sensitive data
Secure server infrastructure
Regular security assessments
Access controls and staff training
Incident response procedures

12. Third-Party Links

Our Site may contain links to third-party websites. We are not responsible for their privacy practices. Please review their privacy policies before providing personal information.

13. Children’s Privacy

Our services are not intended for children under 18. We do not knowingly collect personal information from children under 18. If you believe we have collected such information, please contact us immediately.

14. Changes to This Privacy Policy

We may update this Privacy Policy periodically. We will notify you of significant changes by:

Posting the updated policy on our website
Sending email notifications (for material changes)
Updating the “Last Updated” date

15. Contact Information

For privacy-related questions, concerns, or to exercise your rights:

gdpr@ortigiamusic.com

Supervisory Authority:
You have the right to lodge a complaint with your local data protection authority if you believe we have not addressed your concerns adequately.

16. Consent

By using our website and services, you acknowledge that you have read and understood this Privacy Policy. For activities requiring explicit consent (such as marketing communications), we will obtain your clear, informed consent before processing your data.