---
title: "Privacy notice"
type: page
locale: en
url: https://liminalfutures.com/privacy
summary: "How Liminal collects, uses and protects personal data on this website, and the rights you hold under the GDPR."
---

# Privacy notice

Type: page

## Summary

How Liminal collects, uses and protects personal data on this website, and the rights you hold under the GDPR.

## Work

This notice describes the processing of personal data carried out through this website, pursuant to Regulation (EU) 2016/679 (GDPR) and Italian Legislative Decree 196/2003 as amended. It applies to the public archive and to Liminal Members.

## Data controller

The data controller (titolare del trattamento) is:

- **Liminal Associazione di Promozione Sociale**
- C.F. 96492980584
- Via del Seminario 113, 00186 Roma, Italia
- info@liminalfutures.com

Requests relating to the processing of personal data must be addressed to the contact indicated above. No data protection officer (DPO) has been appointed: the Association does not carry out large-scale monitoring or large-scale processing of special categories of data.

## Categories of data, purposes and legal bases

**Public archive.** Consultation of the public archive serves only the requested pages. The hosting provider retains short-lived server and security logs (including the IP address) necessary to deliver the service and to protect it against abuse. Legal basis: legitimate interest (art. 6(1)(f)).

**Request form.** Where the request form is used (protocol access, training dates, or institutional contact), the Association processes the name (optional), email address and message provided, solely in order to respond to the request. Legal basis: measures taken at the data subject's request and the legitimate interest in replying (art. 6(1)(b)/(f)). The message is transmitted to the institutional mailbox through an email delivery provider; it is not stored in a database and is not used for marketing purposes.

**Mailing list.** Subscription is operated on an external newsletter platform, which acts as an independent controller in respect of the address provided to it. Newsletter addresses are not collected through this website.

**Liminal Members.** For current or prospective members, the Members area processes identity data (email address and any passkey), profile and directory information, membership status and, where dues apply, billing identifiers held by the payment provider. Legal bases: performance of the membership relationship (art. 6(1)(b)), legal obligations incumbent on the Association (art. 6(1)(c)), and consent where profile details are published to the member directory (art. 6(1)(a)). Members may request erasure; see the account deletion page.

## Cookies and similar technologies

This website uses solely technical cookies and equivalent local storage, strictly necessary to deliver the service and to maintain authenticated sessions in the Members area. Details are set out in the cookie policy at /cookies.

## Recipients and processors

The Association relies on a limited number of service providers, each appointed as a data processor under a data processing agreement (art. 28 GDPR), for the following functions:

- Website hosting and delivery (CDN, serverless functions and logs).
- Members authentication (passwordless email codes and passkeys).
- Members database and storage.
- Payment processing for membership dues.
- Transactional email delivery for the request form.
- Bot protection for abuse defence.
- Digital membership passes.

Personal data is neither sold nor disclosed for third-party marketing.

## Transfers outside the EEA

Certain providers are established outside the European Economic Area, principally in the United States. Where such transfers occur, they are governed by an adequacy decision (the EU–US Data Privacy Framework) or by Standard Contractual Clauses accompanied by supplementary measures, as required by Chapter V GDPR. The applicable safeguard for a given provider may be requested from the Association.

## Retention

Request-form messages are retained only for the period necessary to handle the exchange and any follow-up, and are then deleted. Membership data is retained for the duration of the membership and, thereafter, for the periods prescribed by applicable association, tax and accounting law. Server and security logs are short-lived.

## Data subject rights

Under the GDPR the data subject may request access to, rectification, erasure, restriction and portability of personal data, and may object to processing based on legitimate interest. Where processing is founded on consent, such consent may be withdrawn at any time without affecting prior processing. Requests must be addressed to info@liminalfutures.com. The data subject also has the right to lodge a complaint with the Italian supervisory authority, the Garante per la protezione dei dati personali (https://www.garanteprivacy.it).

## Updates to this notice

This notice is updated when the relevant processing changes. The version in force is always available at this address.

## Sources

- legal-identity: Liminal internal register