Personal data
processing policy

The data controller is the Associazione Vo.Ci. Nei Castelli, with registered office at Via Cà dei Lunghi 132, Cailungo (Republic of San Marino), as organiser of Nova Armonia, AI Music Festival San Marino. For any request regarding your data or to exercise your rights you can write to [email protected].

We collect the data you provide when registering and submitting a track:

• Account data: name, any stage name, email, password (stored only in encrypted form).
• Personal and residence data: date and place of birth, citizenship, telephone, residential address.
• Tax data: tax code or foreign tax identifier and any VAT number, required for obligations connected to a possible award of prizes.
• Application materials: audio track, lyrics, process sheet, transparency declaration, staging proposal and any other uploaded files.
• Browsing data: visit statistics collected without cookies and without storing your IP address (see the section “Cookies and visit statistics”).
• Payment data: where a registration contribution is required, the amount, date and identifiers of the PayPal transaction. We do not receive or store your card or PayPal account details: payment takes place entirely on PayPal’s website. If you cannot use PayPal and pay the contribution by bank transfer, we process the transfer data (payer, amount, date, payment reference and bank details), which we need to record the payment and for any refund.

• Managing the application (registration, evaluation, service communications): performance of a contract and pre-contractual measures requested by the data subject.
• Tax and administrative obligations connected to prizes: legal obligation.
• Managing the registration contribution and any refunds: performance of a contract; the related accounting records are kept as a legal obligation.
• Newsletter and communications on the festival’s journey: your consent (revocable at any time).
• Sharing with commercial partners for dedicated offers: your consent (revocable at any time).

Essential communications about your application (email verification, submission confirmation, status updates) are sent as service communications, regardless of newsletter subscription.

The data may be processed by parties providing us with technical services (in particular hosting, file storage and email delivery) as data processors, by the jury in the context of evaluating applications, and, only with your consent, by the festival’s commercial partners. The materials of the finalist tracks may be presented to the public and recorded as part of the event and its possible broadcast. Payment of the registration contribution is handled by PayPal (Europe) S.à r.l. et Cie, S.C.A., which processes the data needed for the payment as an independent controller, under its own privacy policy. If you pay the contribution by bank transfer, the payment data is also processed by the association’s bank. The data is neither disseminated nor transferred to third parties for purposes other than those indicated without your explicit consent.

Processing is carried out by electronic means, in compliance with Law no. 171/2018 of the Republic of San Marino, the GDPR (EU Reg. 2016/679) and applicable law, with appropriate technical and organisational measures to protect the data. Passwords are stored in encrypted form. The data is hosted with hosting, file storage and email delivery providers whose servers may also be located outside the European Union: in that case the transfer takes place on the basis of the appropriate safeguards required by law, such as the standard contractual clauses approved by the European Commission or the provider’s participation in the EU-U.S. Data Privacy Framework.

We keep the data for as long as necessary for the purposes described: application data for the duration of the edition and for the period required by any tax and administrative obligations; data processed on the basis of consent (newsletter, partners) until you withdraw it; account data for as long as you keep your profile active; the log of service emails sent (recipient, subject and text) for 12 months; visit statistics for 24 months.

The site only uses technical cookies, necessary for it to work, which do not require consent:

• na_lang: remembers the language of the pages you visit (Italian or English), so that the reserved area and the sign-in pages are shown in the same language; it lasts 12 months.
• na_session: keeps you signed in to your reserved area after login; it lasts up to 30 days, or until you sign out.

The network and security service protecting the site (Cloudflare) may set technical cookies to recognise automated traffic. We do not use profiling cookies or third-party analytics tools, and fonts are served by the site itself. We collect visit statistics ourselves, without cookies: we record the page visited, the referring site (without parameters) and an encrypted code, derived from the IP address and the browser, that changes every day and is only used to count unique visitors. The IP address is not stored.

You have the right to access your data, request its rectification or erasure, restrict or object to processing, obtain portability and withdraw at any time the consents given (newsletter, partners) without affecting processing already carried out. The newsletter and optional consents can be changed independently from your reserved area. For any request write to [email protected]. You also have the right to lodge a complaint with the Data Protection Authority of the Republic of San Marino (Autorità Garante per la protezione dei dati personali) or, if you live in the European Union, with the supervisory authority of your country.

The data controller reserves the right to amend or update this policy at any time, making it evident on this page with the date of the last update.