Privacy Policy
Information on the processing of personal data
Data Controller
The data controller is the B.A. Film Festival Association, with registered office in Busto Arsizio (VA), Italy.
For any request regarding the processing of personal data, please write to: info@baff.it
Legal Basis and Purposes of Processing
Personal data is processed in accordance with EU Regulation 2016/679 (GDPR) and Italian Legislative Decree 196/2003, as amended by Legislative Decree 101/2018. Personal data is processed for the following purposes:
- Website navigation: browsing data (IP address, browser, pages visited) is collected automatically to ensure the technical functioning of the website.
- Newsletter subscription: the email address provided voluntarily is processed to send communications about the festival, subject to the user's consent.
- Contact form: personal data provided via the contact form (name, email, message) is processed to respond to enquiries.
- Press and industry accreditations: professional data provided is processed for managing festival accreditations.
- Ticket purchases: data required for purchases is processed for the execution of the sales contract and for tax compliance.
Types of Data Collected
We collect the following categories of personal data:
- Identification data: name, surname, email address, telephone number.
- Browsing data: IP address, browser type, operating system, pages visited, access time.
- Professional data: publication/organisation, role (for accreditations).
Data Retention
Personal data is retained for the time strictly necessary to achieve the purposes for which it was collected, and in any case no longer than permitted by applicable law:
- Browsing data: maximum 90 days.
- Newsletter data: until consent is withdrawn.
- Contact data: 12 months from the enquiry.
- Accreditation data: duration of the festival edition + 12 months.
- Ticket purchase data: 10 years (tax obligations).
Rights of the Data Subject
Pursuant to Articles 15-22 of the GDPR, the data subject has the right to:
- Access their personal data and obtain a copy.
- Rectify inaccurate or incomplete data.
- Obtain the erasure of data ("right to be forgotten").
- Restrict the processing of data.
- Object to processing.
- Request data portability.
- Withdraw consent at any time.
- Lodge a complaint with the supervisory authority (Italian Data Protection Authority — Garante per la Protezione dei Dati Personali).
To exercise your rights, write to: info@baff.it
Data Transfers
Personal data is not transferred outside the European Economic Area (EEA). Should this be necessary for the use of third-party services (e.g., hosting or analytics services), transfers will only take place to countries ensuring an adequate level of protection pursuant to Art. 45 of the GDPR or in the presence of appropriate safeguards (Art. 46 GDPR).
Updates
This privacy policy may be updated from time to time. The latest version is always available on this page.
Last updated: March 2026