Privacy policy
Last updated: 6 August 2026
ANPAI considers data protection an essential part of responsible use of digital technologies. This information describes how personal data is collected, used, stored and protected when you consult the site, you send a request or interact with the contents and initiatives of the association.
The Data Controller is the legal entity that manages ANPAI; full name, location and identification data must be confirmed and entered before the final publication.
The Data Controller is the legal entity that manages ANPAI; full name, location and identification data must be confirmed and entered before the final publication.
Data we can collect
When using contact forms, membership requests, inscriptions or direct communications, we can receive the data provided voluntarily, such as name, email address, organization, professional role, phone number and message content.
Technical and usage data may also be processed during navigation, such as IP address, browser type, operating system, device, pages consulted, source URL, session duration and diagnostic information necessary for safety and operation.
The site may use cookies and similar technologies. Unnecessary cookies are activated only on the basis of your preferences; more information is available in the cookie policy.
Technical and usage data may also be processed during navigation, such as IP address, browser type, operating system, device, pages consulted, source URL, session duration and diagnostic information necessary for safety and operation.
The site may use cookies and similar technologies. Unnecessary cookies are activated only on the basis of your preferences; more information is available in the cookie policy.
Purposes and basics of treatment
Data can be used to respond to requests, manage membership and participation in membership activities, send required communications, organize events and programs, maintain and protect the site, prevent abuse, comply with legal obligations and improve content and services. The legal basis depends on the purpose and may consist in the execution of measures requested by the data subject, the fulfilment of obligations, the legitimate interest or consent, when necessary.
Data communication
ANPAI does not sell personal data.
Data can be communicated to suppliers who support hosting, maintenance, modules, communications, events or analysis, appointed responsible for processing where required and authorized to operate only for the purposes entrusted. They can also be communicated when necessary for obligations
law, authority requests, protection of rights or security of systems. The updated list of managers can be requested by the Owner.
Data can be communicated to suppliers who support hosting, maintenance, modules, communications, events or analysis, appointed responsible for processing where required and authorized to operate only for the purposes entrusted. They can also be communicated when necessary for obligations
law, authority requests, protection of rights or security of systems. The updated list of managers can be requested by the Owner.
International transfers
If suppliers or infrastructure involve data transfers outside the European Economic Area, ANPAI will adopt one of the instruments provided for by applicable legislation, such as adequacy decisions,
standard contractual clauses or other appropriate guarantees. The actual configuration of suppliers must be verified before publication.
standard contractual clauses or other appropriate guarantees. The actual configuration of suppliers must be verified before publication.
Storage times
The data are kept for the time necessary for the purposes for which they were collected and, subsequently, for any administrative, accounting, contractual or rights protection obligations. Specific periods depend on the data category and service used and must be defined in the treatment register.
Data security
ANPAI adopts risk-proportionate technical and organizational measures to prevent unauthorized access, loss, alteration or disclosure of data. No system
can guarantee absolute security; any accidents are managed according to procedures that provide assessment, containment and communications to the authorities or interested parties when required.
can guarantee absolute security; any accidents are managed according to procedures that provide assessment, containment and communications to the authorities or interested parties when required.
Rights of interested parties
In the cases provided, the data subject may request access, rectification, cancellation, limitation, portability, opposition to the processing and revocation of the consent without prejudice to the previous lawfulness. You can also lodge a complaint with the Garante for the protection of
personal data. Requests can be sent through the channel indicated in the Contacts section.
personal data. Requests can be sent through the channel indicated in the Contacts section.
Services and external links
The site may contain links or content provided by third parties. ANPAI does not control the ways in which such subjects treat personal data; before using external services, we invite you to consult their privacy and cookies.
Minor data
The site and the activities described are not specifically addressed to minors. If an initiative involves their participation, information, legal basis and adequate guarantees will be prepared at age and context, including the involvement of parents when necessary.
Changes to information
This information may be updated to reflect regulatory, organizational or technological changes. The published version will report the update date; when changes
significantly affect treatment, appropriate channels will be used to inform interested parties.
significantly affect treatment, appropriate channels will be used to inform interested parties.
Contact
For questions or to exercise rights you can use the Contact form of the site. Before the final publication must be inserted: full name and location of the Owner, privacy email address or
JEP and, if appointed, contact of
Data protection officer.
JEP and, if appointed, contact of
Data protection officer.