Privacy
Personal data
processing policy
Last updated: June 2026.
Data controller
The data controller is Vo.Ci. Nei Castelli, with registered office at Via Cà dei Lunghi 132, Cailungo (Republic of San Marino), as organiser of Nova Armonia, AI Music Festival San Marino. For any request regarding your data or to exercise your rights you can write to [email protected].
What data we collect
We collect the data you provide when registering and submitting a track:
- Account data: name, any stage name, email, password (stored only in encrypted form).
- Personal and residence data: date and place of birth, citizenship, telephone, residential address.
- Tax data: tax code or foreign tax identifier and any VAT number, required for obligations connected to a possible award of prizes.
- Application materials: audio track, lyrics, process sheet, transparency declaration, staging proposal and any other uploaded files.
- Browsing data: aggregated and anonymised visit statistics (no third-party profiling cookies).
Why we process it and on what basis
- Managing the application (registration, evaluation, service communications): performance of a contract and pre-contractual measures requested by the data subject.
- Tax and administrative obligations connected to prizes: legal obligation.
- Newsletter and communications on the festival’s journey: your consent (revocable at any time).
- Sharing with commercial partners for dedicated offers: your consent (revocable at any time).
Who it may be disclosed to
The data may be processed by parties providing us with technical services (in particular hosting and email delivery) as data processors, by the jury in the context of evaluating applications, and, only with your consent, by the festival’s commercial partners. The materials of the finalist tracks may be presented to the public and recorded as part of the event and its possible broadcast. The data is neither disseminated nor transferred to third parties for purposes other than those indicated without your explicit consent.
How and where it is processed
Processing is carried out by electronic means, in compliance with the GDPR (EU Reg. 2016/679) and applicable law, with appropriate technical and organisational measures to protect the data. Passwords are stored in encrypted form. The data is hosted with hosting service providers whose servers may also be located outside the European Union: in that case the transfer takes place subject to the appropriate safeguards required by law.
How long we keep it
We keep the data for as long as necessary for the purposes described: application data for the duration of the edition and for the period required by any tax and administrative obligations; data processed on the basis of consent (newsletter, partners) until you withdraw it; account data for as long as you keep your profile active.
Your rights
You have the right to access your data, request its rectification or erasure, restrict or object to processing, obtain portability and withdraw at any time the consents given (newsletter, partners) without affecting processing already carried out. The newsletter and optional consents can be changed independently from your reserved area. For any request write to [email protected]. You also have the right to lodge a complaint with the competent supervisory authority.
Changes to this policy
The data controller reserves the right to amend or update this policy at any time, making it evident on this page with the date of the last update.
