Privacy Policy

Effective Date: January 1, 2026 | Compliant with EU Regulation 2016/679 (GDPR) & Italian Privacy Code (D.Lgs. 196/2003)

1. Data Controller Information

The Data Controller responsible for the processing of your personal data on this website is Sceneminglebox Calcio Heritage Foundation S.r.l., registered under Italian Company Registration No. IT-84920194821, with its registered curatorial offices situated at Via dei Condotti 84, 00187 Roma (RM), Italy. For all inquiries regarding data protection, you may reach our designated Data Protection Officer (DPO) at [email protected].

2. Categories of Data Collected

We collect and process personal data strictly necessary to operate our digital stadium architecture museum, optimize 3D spatial visual rendering performance, and manage curatorial inquiries:

Browsing & Technical Data: IP addresses, browser fingerprinting strings, screen resolutions, WebGL compatibility flags, and device hardware telemetry used to render interactive wireframes.
Curatorial Inquiries Data: Name, professional email address, subject matter, academic affiliation, and message content submitted via our contact forms.
Consent Preferences: Local storage state indicators tracking your explicit acceptance or refusal of non-essential analytical cookies.

3. Legal Bases for Processing

Our processing activities are anchored on lawful bases established by Article 6 of the General Data Protection Regulation (GDPR):

Legitimate Interests (Art. 6(1)(f) GDPR): Ensuring network security, preventing denial-of-service vectors, and debugging rendering artifacts in WebGL architectural viewports.
Explicit Consent (Art. 6(1)(a) GDPR): Tracking analytical performance parameters and managing elective newsletter distributions.
Contractual & Pre-contractual Obligations (Art. 6(1)(b) GDPR): Responding to formal academic research inquiries and curatorial dossier requests submitted by users.

4. Third-Party Data Processors & Transfers

We do not sell, rent, or lease personal user data to commercial advertising brokers. Data is strictly processed by trusted infrastructure vendors located within the European Economic Area (EEA) or in jurisdictions offering equivalent adequacy decisions approved by the European Commission:

Secure cloud infrastructure and Content Delivery Networks (CDNs) for high-resolution archival architectural blueprint delivery.
Aggregated WebGL crash analytics providers bound by strict Data Processing Agreements (DPAs).

5. Data Subject Rights Under GDPR & Italian Law

As a data subject within the European Union, you possess comprehensive statutory rights regarding your personal information:

Right of Access (Art. 15 GDPR): Request written confirmation and copies of personal data processed by the Foundation.
Right to Rectification (Art. 16 GDPR): Correct inaccurate or incomplete historical records.
Right to Erasure / "Right to be Forgotten" (Art. 17 GDPR): Demand total deletion of records where legal retention grounds have expired.
Right to Restriction of Processing (Art. 18 GDPR) & Portability (Art. 20 GDPR): Restrict active processing or receive your data in structured machine-readable formats.
Right to Lodge a Complaint: You maintain the unconditional right to file a formal complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali) at www.garanteprivacy.it.

6. Retention Schedules & Security Safeguards

Contact form correspondence is securely archived for a maximum period of twenty-four (24) months before permanent automated purge. Technical logs are cycled every ninety (90) days. All network transfers utilize TLS 1.3 encryption protocols, cryptographic hash validation, and restrictive Content Security Policies.