Last updated: 26 October 2026
This notice explains how personal data is processed for people who visit www.ebas.it (“Eventi in Basilicata”, “Ebas”), create an account or publish events, places or businesses. It is provided under Articles 13 and 14 of Regulation (EU) 2016/679 (“GDPR”) and Italian Legislative Decree 196/2003 as amended by Legislative Decree 101/2018.
1. Data controller
Tecnomind Soc. Coop. – Viale Europa 3, 85037 Sant’Arcangelo (PZ), Italy – VAT IT01438330761
Email: [email protected] – Phone +39 0973 612143
2. What data we process and why
a) Browsing the site
The systems that run the site record some technical data sent by your browser: IP address, date and time of the request, page visited, browser and device type. This is needed to run the site, keep it secure (including a protection system against abusive access) and detect faults. Site traffic passes through the Cloudflare network (Cloudflare, Inc.), which receives this technical data to deliver pages faster and protect the site from attacks and automated traffic; for this purpose Cloudflare may set technical security cookies (for example __cf_bm, 30 minutes), which do not require consent. Legal basis: the controller’s legitimate interest in the security and proper operation of the service (Art. 6(1)(f) GDPR).
b) User account
To create an account we ask for your name, email address and password (stored only in encrypted form). Your account also stores your preferences (for example light or dark theme), saved items and the trip you build with “Plan your trip” (stops, dates and personal notes). Legal basis: providing the service you requested (Art. 6(1)(b) GDPR).
c) Requests to become an organiser and published content
If you ask to publish events or businesses, you give us the data in the form (for example name of the organisation or business, role, contact details, message). We use it to assess the request and reply. Published events, places and businesses, with the contact details the user chooses to add (phone, email, website, social profiles, address), are publicly visible on the site. Whoever publishes is responsible for only including data they are entitled to share. Legal basis: providing the service you requested (Art. 6(1)(b) GDPR).
d) Messages and reports
If you contact us or send a report through the site, we use the data you provide only to reply and handle the request. The site also sends service emails (for example account confirmation or moderation outcome). Legal basis: providing the service or steps taken at your request (Art. 6(1)(b) GDPR).
e) Push notifications
If you turn them on, your browser creates a technical identifier that we store to send you alerts (for example new events). Notifications go through the push service of your browser’s maker (for example Google, Apple, Mozilla). You can turn them off at any time from your account or your browser settings. Legal basis: consent (Art. 6(1)(a) GDPR).
f) Statistics (Google Analytics)
Only if you accept it in the cookie banner, we use Google Analytics 4 (Google Ireland Ltd.) to collect aggregate statistics on how the site is used. Without consent the tool is not loaded. You can change your choice at any time from the “Cookie preferences” link at the bottom of the page. Legal basis: consent (Art. 6(1)(a) GDPR). More details in the Cookie Policy.
g) Purchases (once the shop is open)
For orders we process the data needed for the sale and invoicing (name, address, email, phone, tax details). Payments are handled directly by the payment providers: Ebas does not receive full card details. Legal basis: performance of the contract and legal obligations (Art. 6(1)(b) and 6(1)(c) GDPR).
3. Maps
Maps are provided by OpenStreetMap: to display them, your browser downloads map images from the OpenStreetMap Foundation’s servers, which receive the visitor’s IP address. When you search for an address or town (for example in the publishing form or for notifications), the search text is sent to OpenStreetMap’s Nominatim search service to find its position on the map. The site does not use your device location unless you ask for it (for example “near me”); in that case the location is used only in your browser for the search and is not stored.
4. Recipients
Data is processed by the controller’s authorised staff and by providers acting as processors, including the hosting provider, Cloudflare, Inc. (content delivery network, DNS and site protection), the site security service, email delivery services, Google (statistics, only with consent) and, for the shop, payment and shipping providers. Data is not sold or passed on to third parties for marketing.
5. Transfers outside the European Union
Some providers (for example Google and Cloudflare) may process data in the United States. In those cases the transfer is based on the EU–US adequacy decision (EU-U.S. Data Privacy Framework) or on standard contractual clauses approved by the European Commission.
6. How long we keep data
- Technical browsing data and security logs: up to 12 months, unless needed to investigate abuse.
- Account, trip and preferences: as long as the account is active; they are deleted when the account is deleted.
- Published content: as long as it stays online or until removal is requested.
- Requests and messages: as long as needed to handle them and no longer than 24 months.
- Google Analytics statistics: 14 months.
- Order data: 10 years, as required by tax law.
7. Your rights
You can ask at any time for access to your data, rectification, erasure, restriction of processing, portability, and object to processing based on legitimate interest. You can withdraw consent at any time, without affecting the lawfulness of earlier processing. To exercise your rights write to [email protected]. You also have the right to lodge a complaint with the Italian Data Protection Authority (www.garanteprivacy.it).
8. Is providing data required?
Browsing the site requires no data. The data requested for the account, for publishing content or for orders is needed to provide those services: without it they cannot be used.
9. Minors
Creating an account is reserved for people aged 14 or over, as required by Italian law.
10. Changes
This notice may be updated. The current version is always published on this page, with the date of the last update.
