Last updated: 6 November 2026
This notice explains, pursuant to Articles 13 and 14 of Regulation (EU) 2016/679 (GDPR) and Italian Legislative Decree 196/2003 (Personal Data Protection Code, as amended by Legislative Decree 101/2018), how CinemaLab processes the personal data of people who visit www.cinemalab.it, fill in a form, subscribe to the newsletter or book an Art Gym session.
CinemaLab is a project created and run by Christian Pagin and Roberta Freni, who act as joint controllers (Art. 26 GDPR) pending the incorporation of a company. CinemaLab is based in Catanzaro, Italy: the exact address will be published on this site as soon as it is final.
For any request about the processing of personal data, or to exercise your rights, write to info@cinemalab.it: your request is handled by the joint controllers, who have agreed between themselves on tasks and responsibilities. On request, we will provide you with the essence of that arrangement. We have not appointed a Data Protection Officer (DPO), as it is not mandatory for our activity.
We only process the data you voluntarily give us by filling in the forms and the technical data described below. We never publish the data sent through the forms and we do not use it for automated decisions.
Fields marked as required are necessary to reply to your request and manage your enrollment or booking: if you don't provide them we cannot follow up on the form. The other fields are optional.
We don't ask you for data about health, origin, opinions, religious beliefs or other special categories of data (Art. 9 GDPR), and we ask you not to enter them in free-text fields. If you think it's useful to tell us something of this kind, for example an accessibility need, we will use it only to organise your participation in the best way, on the basis of the consent you give by writing it (Art. 9.2.a).
Our labs and the Art Gym are also open to children and teenagers. For anyone under 14, the forms and the newsletter subscription must be completed by a parent or guardian, who gives us their own contact details and the participant's data (Art. 2-quinquies of Legislative Decree 196/2003); from age 14 you can subscribe to the newsletter on your own. For minors aged 14 to 17 as well, enrollments in the labs and applications for the short film must be made by a parent or guardian, who takes responsibility for them.
If you think a minor has sent us data without a parent's or guardian's authorisation, write to info@cinemalab.it and we will delete it.
Data is accessible to the joint controllers and to the people they authorise, who are bound by confidentiality. We never sell or hand over your data to third parties for marketing purposes.
To run the site we rely on providers who process data on our behalf and under our instructions, as processors (Art. 28 GDPR):
We may disclose data to public authorities or professional advisers (for example an accountant) only where required by law or necessary to protect our rights.
The site contains links to external services, such as GoFundMe to support the project, Instagram and news outlets' websites. When you open them you leave this site: the data you enter there is processed by those services, as independent controllers, under their own notices. CinemaLab never receives or stores your card or payment details.
Some providers are based, or have infrastructure, outside the European Economic Area, in particular in the United States. In these cases the transfer takes place only with the safeguards required by the GDPR: an adequacy decision of the European Commission, such as the EU-US Data Privacy Framework for certified companies, or standard contractual clauses (Arts. 45 and 46 GDPR). You can ask us for information about these safeguards by writing to info@cinemalab.it.
We adopt suitable technical and organisational measures to protect data: encrypted connection (HTTPS), access limited to authorised people only, anti-bot and anti-spam checks, collection of only the minimum data needed (for example, the Art Gym calendar never shows personal data) and a personal, protected unsubscribe link in every newsletter email. In case of a data breach that poses a risk to your rights, we notify the Italian Data Protection Authority and, where required, the people concerned, within the times and in the ways set out in Arts. 33 and 34 GDPR.
We do not take decisions based solely on automated processing, nor do we carry out profiling that has effects on you. The anti-bot check only serves to block suspicious automated submissions on the forms.
At any time you can exercise, free of charge, the rights set out in Arts. 15-22 GDPR:
To exercise them, write to info@cinemalab.it. We reply within one month of your request (extendable by two months in more complex cases, in which case we will let you know). If there are doubts about your identity, we may ask you for information to verify it.
If you believe the processing of your data breaches the law, you have the right to lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali, Piazza Venezia 11, 00187 Rome, www.garanteprivacy.it), without prejudice to any other administrative or judicial remedy.
We may update this notice when the site, the services or the law change. The date of the latest update is shown at the top of the page; in case of significant changes we will flag it prominently.
