Privacy Policy

Notice provided pursuant to Article 13 of Regulation (EU) 2016/679.

1. Personal data processed

We may process first and last name, contact details, booking and transaction data, customer service communications and any information concerning allergies, intolerances or dietary requirements voluntarily provided by the user.

2. Purposes and legal basis

• management of booking, payment, admission and event-related customer service, based on performance of the contract;
• compliance with administrative, accounting, tax and legal obligations;
• fraud prevention, protection of rights and event security, based on the Controller’s legitimate interests;
• management of dietary requirements voluntarily communicated. Since such information may reveal health data, it will be processed exclusively to organize the requested service and on the basis of explicit consent given during booking.

3. Payments and recipients

Payments are managed by Stripe, which processes payment data under its own privacy policy. GEM does not retain full card details. Data may be disclosed, where necessary, to technical providers, consultants, authorized staff, parties involved in organizing the event and public authorities where required by law.

4. Data retention

Data will be retained for the time necessary to manage the event and thereafter for the periods required by administrative and tax obligations and the protection of legal rights. Information concerning allergies and intolerances will be retained only for the time strictly necessary to manage the experience, unless otherwise required by law or for legal protection.

5. Provision of data

Providing the data required for booking is mandatory; without it, the purchase cannot be completed. Providing dietary information is optional, but failure to provide it, or late communication, may prevent the Organizer from accommodating the relevant requirement.

6. Data subject rights

The data subject may request access, rectification, erasure, restriction, portability and objection in the cases provided for by Articles 15–22 GDPR, and may withdraw consent without affecting processing already carried out. The data subject may also lodge a complaint with the Italian Data Protection Authority.

7. Cookies and technical tools

This version does not use profiling tools. Before final publication, any cookies, analytics, advertising pixels or third-party services must be described and, where required, subject to consent through a compliant banner.