Privacy Policy

1. Data Controller

The Data Controller for this website is Project NANDA Italy, the Italian chapter of the Project NANDA network, reachable at:

2. What Data We Collect

When you interact with the forms on this website, we collect the following personal data:

Join the Chapter form:

• First and last name
• Email address
• Organisation or institution
• Role or job title
• Country
• Participant type (e.g. researcher, company, student)
• Whether you consent to receive project updates (optional)

White Paper download form:

• First and last name
• Email address
• Affiliation or institution

We do not use cookies for tracking or analytics purposes. No cookies are set by this website other than those strictly necessary for its operation.

3. Purpose and Legal Basis

We process your data exclusively to: (a) assess your interest in joining the Project NANDA Italy Chapter and follow up with relevant opportunities; and (b) deliver the white paper you requested and send you a download confirmation. The legal basis for this processing is your freely given, specific, informed, and unambiguous consent (Art. 6(1)(a) GDPR), which you provide by ticking the consent checkbox before submitting any form on this website.

You may withdraw your consent at any time by contacting us at privacy@projectnandaitaly.org. Withdrawal of consent does not affect the lawfulness of processing carried out prior to withdrawal.

4. Data Retention

We retain your personal data for no longer than 12 months from the date of your submission, unless an ongoing relationship (e.g. chapter membership) requires longer retention, in which case we will notify you separately.

5. Data Processors and Third-Party Recipients

Your data is processed by the following third-party service providers acting as data processors under Art. 28 GDPR:

We do not sell, rent, or share your personal data with any other third parties, unless required by law.

6. International Transfers

Resend, Inc., Google LLC (Firebase), and Anthropic, PBC are US-based companies. Any transfer of personal data to these processors outside the European Economic Area (EEA) is governed by Standard Contractual Clauses (SCCs) adopted by the European Commission, ensuring an adequate level of protection in accordance with GDPR Chapter V (Art. 46).

7. Your Rights

Under the GDPR and the Italian Privacy Code (D.Lgs. 196/2003), you have the right to:

• Access the personal data we hold about you (Art. 15)
• Rectify inaccurate data (Art. 16)
• Erase your data ("right to be forgotten") (Art. 17)
• Restrict processing in certain circumstances (Art. 18)
• Data portability in a machine-readable format (Art. 20)
• Object to processing based on legitimate interest (Art. 21)
• Withdraw consent at any time without affecting prior processing

To exercise any of these rights, contact us at privacy@projectnandaitaly.org. We will respond within 30 days.

8. Right to Lodge a Complaint

If you believe your data protection rights have been violated, you have the right to lodge a complaint with the Italian Data Protection Authority:

9. AI Transparency (EU AI Act)

In accordance with the transparency obligations of the EU AI Act for generative AI systems, we disclose that communications or responses you receive from us may have been drafted with the assistance of Claude, a generative AI system developed by Anthropic. All AI-assisted communications are reviewed before sending to ensure accuracy and quality.

Where this applies, the relevant communication will include a footer notice such as: “This communication was drafted with the assistance of Artificial Intelligence systems (Claude by Anthropic) and reviewed to ensure the highest quality of service.”

10. Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be published on this page with an updated date. We encourage you to review this policy periodically.