This policy explains what personal data we collect through this website, why we collect it and what your rights are, under Regulation (EU) 2016/679 (“GDPR”).
Data controller
The data controller is the association Ensemble Enarmonia, with registered office at via Giulio Aristide Sartorio 61, 00147 Rome, Italy, tax code (codice fiscale) 18291941005. For any privacy question you can write to info@ensembleenarmonia.org.
What data we collect
Data you send us with the contact form (“Play with us / Get in touch” section): full name, email address, reason for contacting us, instrument (optional) and the text of your message. Name, email and message are required for us to reply; without them we cannot follow up on your request.
Anti-spam check: before submission, the form uses Cloudflare Turnstile, which analyses some technical data about your browser and device (such as your IP address) to tell people apart from automated programs. This data is used only for that purpose, never for advertising or profiling.
Technical browsing data: like any website, the servers hosting it log technical data such as IP address, browser type and the pages requested, which is needed to run the site and protect it from abuse.
The site does not use profiling cookies or any analytics or advertising tools, and its fonts are served directly by the site, without external services.
Why we process it
- To reply to your message: applications to play with the orchestra (including arranging a rehearsal or audition), requests for information, programme or collaboration proposals and any other request you send us. The legal basis is your own request (Art. 6(1)(b) GDPR).
- To protect the site and the form from spam and abuse. The legal basis is our legitimate interest in keeping the site secure (Art. 6(1)(f) GDPR).
Who can see your data
Messages reach the association’s mailbox and are read only by the members of the Ensemble in charge of handling them (for applications, for example, those who organise auditions). We do not sell or share your data with third parties.
To run the site we rely on these providers, which process data on our behalf as data processors:
- Cloudflare, Inc.: hosts the site and handles form submission, the Turnstile anti-spam check and email forwarding.
- Resend (Plus Five Five, Inc.): delivers the email with your message to our mailbox.
Both are based in the United States. Data transfers rely on the EU-US Data Privacy Framework or on the standard contractual clauses approved by the European Commission.
How long we keep it
We keep messages for 24 months from receipt: for applications, this lets us contact you if a place opens up in your section. After that we delete them, and you can ask us to delete them earlier at any time. Technical browsing data and anti-spam data are kept by the providers only for as long as strictly necessary.
Your rights
At any time you can ask us to access, correct or delete your data, restrict its processing, receive it in a readable format, or object to its processing (Arts. 15–22 GDPR). Just write to info@ensembleenarmonia.org.
If you believe the processing does not comply with the law, you can lodge a complaint with the Italian data protection authority, the Garante per la protezione dei dati personali.
External links
The site links to our Facebook, Instagram and YouTube profiles and to our old WordPress blog. When you open them, those services’ privacy policies apply.
Updates
We may update this policy when the services we use change. Last updated: October 3, 2026.