Skip to content
— Shag&Love

Privacy Policy

This information notice, provided pursuant to Articles 13-14 of Regulation (EU) 2016/679 (GDPR), describes how Shag&Love A.P.S. processes personal data collected through this website, particularly during membership/registration requests, the payment of membership fees or contributions, and newsletter subscriptions.

Data controller

Shag&Love a.p.s — social promotion association, third-sector entity (ETS – Ente del Terzo Settore). Registered office: via delle Cave 88, Rome (RM), Italy. Contact email: [email protected] or [email protected].

Data we collect during purchase

When you apply for membership to the association (registration) or pay a contribution/fee for institutional activities via the website, we collect:

  • first and last name;
  • tax code (Codice Fiscale), date and place of birth (necessary for the Register of Members and for issuing the membership card);
  • email address and phone number;
  • residential address;
  • partner’s name, if provided in the registration/membership form;
  • account credentials (if the process requires creating a profile);
  • details regarding the membership or contribution (type of card, membership fee/contribution amount, date).

Payment data

The payment of membership fees, contributions for activities, or voluntary donations is made via bank transfer. Payment data is managed directly by the association and its banking institution in compliance with current regulations. We do not directly collect or store credit card data or other third-party electronic payment instruments.

Newsletter

If you subscribe to the newsletter (from the website or via an opt-in checkbox during membership registration), we process your email address and proof of consent. Communications exclusively concern the association’s activities, events, and community life. Subscriptions are managed through the MailPoet service and/or recorded in the website’s subscriber list.

Purposes and legal bases

  • Management of the associative relationship: To manage the membership application, registration, membership fee, access to activities reserved for members, and support — performance of the associative relationship / statutory obligations (Art. 6.1.b GDPR);
  • Legal obligations: To fulfill tax, accounting, administrative, and legal obligations required for Third Sector Entities and for maintaining the Register of Members — legal obligation (Art. 6.1.c GDPR);
  • Sending information and newsletters: To send updates and communications regarding the association’s initiatives — data subject’s consent (Art. 6.1.a GDPR), revocable at any time;

Data recipients

Personal data may be processed, exclusively for the purposes indicated above, by:

  • The website hosting service provider;
  • The email marketing service provider (MailPoet);
  • The association’s banking institution for managing bank transfers;
  • Any tax/administrative consultants of the association and public Authorities, in cases expressly provided for by law.

Under no circumstances will the data be disseminated or sold to third parties for commercial or marketing purposes.

Transfers outside the EU

Data processing primarily takes place within the European Economic Area (EEA). Should certain IT service providers process data outside the EU, the transfer will take place in compliance with the appropriate safeguards provided by Articles 44 and following of the GDPR (e.g., Standard Contractual Clauses approved by the European Commission).

Retention period

  • Members’ data, registrations, and receipts: Retained for the duration of the associative relationship and subsequently for the time required by tax, accounting, and legal obligations (usually 10 years);
  • Website account data: Retained until a deletion request is made or upon termination of the member status;
  • Newsletter data: Retained until consent is revoked (unsubscription via the appropriate link at the bottom of the emails).

Your rights

As a data subject, you can exercise the rights provided by Articles 15-22 of the GDPR at any time: the right to access data, rectification, erasure (right to be forgotten), restriction of processing, data portability, objection, and withdrawal of consent (without affecting the lawfulness of processing based on consent prior to its withdrawal).

You may also lodge a complaint with the Data Protection Authority (garanteprivacy.it). To exercise any of your rights, send a request to: [email protected] and [email protected].

Cookies

For information on the use of cookies and similar tracking technologies used by the website, please consult our Cookie Policy.

Changes

This information notice may be subject to updates over time, including in relation to regulatory or organizational changes within the association. Last updated: 28/07/2026.