Privacy policy

Version 2026-10-11, effective from 11 October 2026.

This policy explains what personal data www.salentoswingfestival.it collects, why we use it, how long we keep it and how you can exercise your rights. We only use the data we really need.

In short

  • Your data is only for the Festival. We use it to run and improve the site and, if you sign up, to write to you about Salento Swing Festival. Nothing else.
  • No spam. We only write to you if you ask us to, only about the Festival, and you can stop with one click from any email.
  • We don't sell your data or hand it over to anyone. We look after it ourselves. The only others who process it are the technical providers working on our behalf (hosting and email delivery) and, for statistics and for advertising if you accept it, Google and Meta, as explained below.
  • You're in control. You can ask us at any time to see, correct or delete your data: write to info@salentoswingfestival.it.

Who handles your data

The data controller is ASD Salento Swing People, the association that organises Salento Swing Festival, with its registered office at Via Nicotera, 80/A, 73015 Salice Salentino (LE), Italy, tax code and VAT number 05037990750. For any question about your data, or to exercise your rights, write to us at info@salentoswingfestival.it or to our certified email address (PEC) salentoswingpeople@pec.it.

When you visit the site

For each visit we store some information in our database: your IP address, the browser and device you use, your browser language, your country (worked out from your IP address on our own server, without sending it to anyone), the first page you open, the site you came from (just the site name, not the full address), any campaign parameters in the link (UTM) and click IDs from Google and Meta ads, how many pages you visit and when. To recognise the same browser from one visit to the next we use the ssf_vid cookie, described in our cookie policy.

We use this data for our own internal statistics: to understand how the site is used, which channels and campaigns bring visits and sign-ups, to improve the site and to protect it from abuse. These statistics stay on our server and we don't share them with anyone.

  • Legal basis: our legitimate interest in knowing how the site is used, measuring the results of our communication and protecting the site from abuse (Art. 6(1)(f) GDPR). You can object at any time by writing to us.
  • How long we keep it: 14 months, then we make it anonymous: only information that no longer leads back to you remains (for example country, campaign and landing page), so we can compare statistics over time.

Our hosting provider's servers also automatically log requests to the site (technical logs), to keep it running and secure. The provider processes them on our behalf and keeps them only for as long as these purposes require.

When you sign up for updates

If you leave us your name and email to find out when Festival registrations open, we store: your name, email, language, the date and IP address of your consent, the version of this policy you accepted, where you came from (campaign parameters and referring site) and a link to the visit you signed up from. We then email you straight away to confirm your address: you won't receive anything from us until you click the confirmation link. If you don't confirm it, the data you left stays stored for 14 months and is then made anonymous; in the meantime we won't send you anything else and, if you'd like us to delete it sooner, just write to us.

We use this data to send you news about Salento Swing Festival (for example when registrations open, the programme, the artists) and to understand which channels bring sign-ups. We also keep a record of the emails we send you and what happened to them (for example sent or not delivered).

  • Legal basis: your consent (Art. 6(1)(a) GDPR). You can withdraw it at any time, with no consequences, using the "unsubscribe" link in every email.
  • How long we keep it: for as long as you stay subscribed. If you unsubscribe, we only keep your email and the date you unsubscribed, so we can respect your choice and prove it, for 24 months; then we make them anonymous. We keep the email history for 24 months after sending, then we make it anonymous.
  • Do you have to give it? No. Without your name and email, though, we can't let you know.

Your cookie choice

When you choose which cookies to accept, we store your choice (the categories you accepted, how you chose, the cookie policy version and the date), linked to your visit. This lets us respect your choice and prove your consent, as the law requires.

  • Legal basis: legal obligation (Art. 6(1)(c) and Art. 7(1) GDPR).
  • How long we keep it: for as long as the visit data, 14 months.

Statistics with Google Analytics

The site uses Google Analytics 4 to understand how it is used: which pages are visited, which channels and campaigns bring visitors, how many people sign up for updates. Google receives: the pages you visit and the actions you take on the site (for example signing up for updates), the site you came from, your browser, device and language, and your IP address, which Google only uses to work out your approximate location (country, region, city) and does not store. We never send Google your name or email.

  • If you accept statistics cookies, Google Analytics also uses the _ga cookies, with a random code that recognises your browser from one page and one visit to the next.
  • If you don't accept them, Google Analytics uses no cookies and receives no code that recognises you: it only uses the information about pages and actions to estimate, statistically, the visits of people who didn't give consent.
  • Google Signals: if you have a Google account with ads personalisation turned on, Google may link these statistics to your account, to show us aggregated data on the age, gender and interests of our visitors and to recognise visits from different devices. We only see aggregated data, never individual accounts.

Google processes this data on our behalf, as a processor (Art. 28 GDPR), under its data processing terms.

  • Legal basis: for statistics cookies, your consent (Art. 6(1)(a) GDPR), which you can withdraw at any time from "Review your cookie choices", at the bottom of every page; for measurement without cookies, our legitimate interest in knowing how the site is used (Art. 6(1)(f) GDPR). If you don't want to be measured even this way, you can block Google Analytics with Google's opt-out browser add-on or with browser extensions that block it.
  • How long we keep it: Google Analytics cookies last 2 years; statistics data stays in Google Analytics for 14 months and is then deleted.

Advertising on Facebook and Instagram, only with your consent

If you accept advertising cookies, the site uses Meta's tools (Meta Pixel and Conversions API) to measure how our ads on Facebook and Instagram perform and to show them to people who might be interested in the Festival. Meta receives: the pages you visit and the actions you take on the site (for example signing up for updates), your IP address, your browser, Meta's cookies (_fbp and _fbc), the click ID if you came from an ad and the code that recognises your browser on our site (the ssf_vid cookie), in coded form (hashed). When you sign up for updates we also send your email and name in coded form (hashed): Meta uses them to connect your sign-up to the ad you saw, if you have an account.

For collecting and sending this data we are joint controllers with Meta Platforms Ireland Limited (Art. 26 GDPR), under Meta's joint controller agreement. What Meta does with the data afterwards is decided by Meta, as an independent controller, under its privacy policy.

  • Legal basis: your consent (Art. 6(1)(a) GDPR). You can withdraw it at any time from "Review your cookie choices", at the bottom of every page.
  • How long we keep it: Meta's cookies last 3 months; Meta keeps the data it receives under its own privacy policy.

If you write to us

If you email us, we only use your data to reply, based on our legitimate interest in answering people who contact us (Art. 6(1)(f) GDPR). We keep the correspondence for 24 months after the last message.

Who we share data with

We handle your data ourselves, through authorised people bound by confidentiality. For some services we rely on providers who process data on our behalf, as processors (Art. 28 GDPR):

  • Keliweb S.r.l. (Italy): hosting of the site, the database and the mailbox that sends notifications to our team;
  • Sendinblue SAS, the Brevo service (France): sending our emails;
  • Google Ireland Limited (Ireland): statistics with Google Analytics 4 (with cookies only if you accept them).

If you accept advertising cookies, the data described above also reaches Meta Platforms Ireland Limited (Ireland). We don't sell your data or pass it to anyone else for their own purposes.

Data outside the European Union

Our hosting and email providers keep the data in the European Union. Meta and Google may transfer data to the United States, with the safeguards required by the GDPR: the European Commission's adequacy decision on the EU-U.S. Data Privacy Framework and standard contractual clauses.

Your rights

At any time you can ask us to:

  • tell you what data we hold about you and give you a copy (access, Art. 15);
  • correct it (rectification, Art. 16) or delete it (Art. 17);
  • limit how we use it (Art. 18) or give it to you in a machine-readable format (portability, Art. 20);
  • stop processing based on our legitimate interest (objection, Art. 21);
  • withdraw a consent, without affecting what we did before.

When you ask us to delete your data, or when the period we keep it for runs out, we make it anonymous: we remove everything that leads back to you (name, email, phone, IP address and the like) and only a statistical fact remains, for example that someone signed up after arriving from Instagram. We only keep data with your name when the law requires it, such as tax records, and only for as long as the law requires. The site's security backups are renewed periodically: your data stays there, protected, until they are replaced by newer backups.

Just write to us at info@salentoswingfestival.it or to our PEC salentoswingpeople@pec.it: we'll reply within a month. If you think we haven't followed the rules, you can lodge a complaint with the Italian data protection authority, the Garante per la protezione dei dati personali (www.garanteprivacy.it), or with the authority in your own country.

Other information

  • We don't make decisions based solely on automated processing, including profiling, that have legal effects on you.
  • We work out visitors' countries from their IP address using the DB-IP database, installed on our own server: IP Geolocation by DB-IP.
  • If this policy changes, we update the version at the top; if the change affects data you have already given us, we'll tell you first.
Back to the home page