Legal notice and privacy
In short. The portal uses no cookies and no analytics; the hosting service records only technical access data (see below) and the forms send data directly to the association archive on Google, over https; the events calendar and the gallery are read, without personal data, from the association's programmes on the same service. It connects to other sites only if you choose so, with a click: the "Fill in with Google" button of the registration form, the YouTube videos (live stream and gallery), WhatsApp, the appointment booking page and the "Share" links. This is a courtesy translation: the Italian text prevails.
Who publishes the portal
Prosumer – Rete di Consumatori Indipendenti APS, via Antonio Russo n. 9, 84132 Salerno, Italy, tax code 95200840650, RUNTS Rep. n. 133746 del 28/03/2024, info@prosumer.cloud. It is the controller of the data described on this page. Data Protection Officer (DPO): RPD.privacy@prosumer.cloud.
Technical access data
The portal is hosted by Aruba S.p.A., which processes on behalf of the association the technical data of requests (for example IP address, date and time, requested page) for the security and operation of the service, for the time set by the provider.
Cookies and browser storage
The portal uses no cookies. Only the following stay in your device's browser storage: the portal settings (language, theme, text size, light version); drafts, ticks and exercises of the kit and mini-course, so they are not lost if the page reloads; for a few minutes, the events calendar read from the archive. We do not receive them and you can delete them with the page buttons or in your browser settings.
To work offline and to be installable as an app, the portal keeps a copy of its public pages in the browser (a "service worker"), except in the light version: it contains no personal data and is deleted together with the site data, from your browser settings.
The heading typeface (Bricolage Grotesque, SIL Open Font License 1.1) is served by the portal itself: no requests to external font services.
Bot check
Before sending, the registration form and the contact form make your browser compute a short check proving that the request comes from a real page and not from an automated programme. The computation uses and sends no personal data, involves no third-party services and uses no cookies.
"Fill in with Google", live video, WhatsApp and appointments
Only if you press "Fill in with Google" does the event page load Google's sign-in library, which processes your account data as an independent controller under its own notice: the association keeps only first name, last name and confirmed email address. Only if you press the button to show the video on the page (the live stream of the day or a gallery video, on the Italian page) does it load the YouTube (Google) player in privacy-enhanced mode: YouTube receives your IP address and may use cookies or similar technologies under its own notice. The WhatsApp and "Book an appointment" buttons, when active, open WhatsApp and the Google Calendar booking page: the rules and notices of those services apply there. Without these clicks the portal does not connect to Google, YouTube or WhatsApp.
Gallery and sharing
At every visit the event page asks the association's register programme on Google Workspace for Nonprofits, as for the events calendar, whether the gallery is on; if it is, the page reads its titles and photos (the thumbnails when the section comes close to the screen, an enlarged photo when you open it). The requests contain only the edition or the photo code, no personal data: Google, which hosts the programme for the association, receives only the technical data of the connection. Only people who agreed to images appear in the photos. The "Share" links (WhatsApp, Telegram, Facebook, X, LinkedIn, email) are plain links: the page loads no social buttons or programmes, and the service you choose receives your data only when you open it, under its own notice.
The forms
The registration form, the app submission form and the contact form send data directly, over https, to the association's programmes on Google Workspace for Nonprofits: the data do not pass through the portal server and do not stay here. Purposes, legal bases, retention and rights are in the event privacy notice (Italian), on the submission page (Italian) and in the contact form notice.
Events calendar
The calendar and the .ics files contain only public event data (title, date, venue, page): no participant data.
Android app
The "Prosumer LAB" Android app (package cloud.prosumer.lab), when available, opens these same pages full screen in the phone's Chrome browser (Trusted Web Activity): the rules of this page apply. The app sends no notifications and the association receives from the app no data other than the technical access data and what you write in the forms, described above. Google Play processes download and update data under its own notice.
Security
The portal consists only of static pages, with no database and no code running on the server. Pages, scripts, style sheets and images are compared every hour with the reference copy: if something changes without authorisation, the person in charge is alerted and the site is restored. The videos, which are larger, are checked against their fingerprint at each publication.
Rights and contacts
You can exercise the rights under Articles 15-22 of Regulation (EU) 2016/679 by writing to info@prosumer.cloud or to the Data Protection Officer, RPD.privacy@prosumer.cloud, and lodge a complaint with the Italian supervisory authority, Garante per la protezione dei dati personali.