Personal data notice
Privacy Policy
Last updated: 20 October 2026
This notice explains how Atalante ETS processes the personal data of people who visit the imaginaria.eu website and of those who use the services offered through it (contact forms, press accreditation, registration for workshops and the Kids Jury, ticket purchase), in accordance with Regulation (EU) 2016/679 (GDPR) and Italian Legislative Decree 196/2003 as amended by Legislative Decree 101/2018.
1. Data controller
Atalante ETS
Via Metastasio 12, 70014 Conversano (BA), Italy
Tax Code 93262800720 – VAT 06337600727
Email:
Atalante ETS has not appointed a Data Protection Officer (DPO), as it is not required to do so. For any privacy question you can write to the address above.
2. What data we process
- Browsing data: the systems that run the site automatically record some technical information, such as IP address, browser and device type, pages visited, date and time of the request. It is used to keep the site working and secure and is not used to identify you.
- Cookies: for details see the Cookie Policy.
- Data you give us when filling in the site’s forms or writing to us: first and last name, email, phone number, city, media outlet, photo for the press pass, the content of your messages and any attachments.
- Data about minors, provided by a parent or legal guardian to register a child or teenager for the workshops or the Kids Jury: first and last name, age, home town, participation in previous editions.
- Payment data for registration fees: the chosen method and any receipt uploaded. Card or account details never reach us; they are handled directly by PayPal or your bank.
Please do not send us special categories of data (for example health data) unless strictly necessary, for instance to tell us about a workshop participant’s specific needs.
3. Why we process data and on what legal basis
| Purpose | Legal basis | Retention |
|---|---|---|
| Running the site and protecting it from abuse (browsing data, Google reCAPTCHA) | Legitimate interest in the security of the site (Art. 6.1.f GDPR) | Technical logs: normally no longer than 6 months |
| Answering requests sent through the contact forms or by email | Pre-contractual steps at your request and legitimate interest in replying (Art. 6.1.b and 6.1.f) | As long as needed to handle the request, and no longer than 24 months |
| Handling press accreditation (checking the request, issuing the pass with photo) | Performance of the accreditation request (Art. 6.1.b) | Up to 24 months after the end of the festival edition |
| Sending press releases to journalists and newsrooms who have joined the mailing list | Consent (Art. 6.1.a), which can be withdrawn at any time | Until consent is withdrawn |
| Handling registrations for the Kids workshops and applications to the Kids Jury, including communication with parents | Performance of the requested service (Art. 6.1.b) | Up to 24 months after the end of the festival edition |
| Handling payments, accounting and tax obligations | Legal obligation (Art. 6.1.c) | 10 years, as required by Italian civil and tax law |
| Handling works submitted to the festival selection and relations with filmmakers and distributors | Performance of the submission rules (Art. 6.1.b) | For the edition and afterwards for the festival’s historical archive |
| Establishing, exercising or defending legal claims | Legitimate interest (Art. 6.1.f) | As long as needed to protect the right |
Providing the data marked as mandatory in the forms is necessary to obtain what you ask for: without it we cannot handle your request. We do not use your data for profiling or automated decision-making.
4. How we process data
Data is processed with IT tools and, when necessary, on paper, by people authorised and instructed by Atalante ETS, with technical and organisational measures suitable to protect it from unauthorised access, loss or disclosure.
5. Who may receive the data
Data is not published or sold. It may be processed on behalf of Atalante ETS, within the limits of their activities, by:
- providers that host and technically manage the website and email, including the studio that develops the site (Rumore Bianco Studio);
- accounting, tax and legal advisers;
- partners involved in organising the festival and workshops, only as strictly necessary.
Some services are provided by parties acting as independent controllers, who process data under their own privacy notices: PayPal for payments, oooh.events for ticket purchase, film submission platforms (such as FilmFreeway and Festhome), Google (reCAPTCHA, YouTube) and Vimeo for embedded videos. Public authorities may also receive data when required by law.
6. Where data is processed
Data is mainly processed within the European Union. Some service providers (such as Google, Vimeo and PayPal) may also process it in the United States or other non-EU countries: in these cases the transfer is based on the safeguards provided by the GDPR, such as the EU-U.S. Data Privacy Framework or the standard contractual clauses approved by the European Commission.
7. Data about minors
The site’s services are not addressed directly to children under 14. Registrations for the workshops and the Kids Jury must be made by a parent or legal guardian, who provides the child’s data and the details needed to be contacted. If you believe a minor has sent us data without such consent, write to us and we will delete it.
8. Your rights
At any time you can ask Atalante ETS, under Articles 15–22 of the GDPR, for:
- access to your data and a copy of it;
- rectification of inaccurate data or completion of incomplete data;
- erasure of your data, where applicable;
- restriction of processing;
- portability of the data you have provided;
- to object to processing based on legitimate interest;
- to withdraw your consent, without affecting the lawfulness of processing carried out before withdrawal.
To exercise your rights write to . We will reply free of charge within one month of your request (extendable where provided by law). You also have the right to lodge a complaint with the Italian Data Protection Authority, the Garante per la protezione dei dati personali.
9. Links to third-party sites
The site contains links to external websites (for example those of partners, distributors and social platforms). Atalante ETS is not responsible for the content or privacy practices of these sites: please read their own notices.
10. Changes to this policy
This policy may be updated, for example when we add new services or the law changes. The version in force is always the one published on this page, with the date of the last update shown at the top.
