1. General Information

This Privacy Policy explains how Revitalize the Future Association collects, uses, stores, and protects the personal data of individuals who visit the website, participate in the Association's activities, or interact with the services provided through the online platform.

The Association considers the protection of personal data to be a fundamental element of the relationship of trust established with members, volunteers, donors, event participants, and website visitors.

All personal data is processed in accordance with Regulation (EU) 2016/679 (General Data Protection Regulation – GDPR), the applicable Italian data protection legislation, and the guidelines and decisions issued by the Italian Data Protection Authority.

By using this website, users acknowledge that their personal data may be processed solely for the purposes described in this Privacy Policy and in accordance with the principles of lawfulness, fairness, transparency, purpose limitation, data minimization, storage limitation, integrity, and confidentiality established by Article 5 of the GDPR.

2. Data Controller

The Data Controller is:

Revitalize the Future Association

Italian Tax Code: 90046170693

Registered Office

Viale Europa 5

66040 Rosello (CH)

Italy

Email

revitalizethefuture@revitalizethefuture.com

The legal representative of the Association is its President, acting as the legal representative of the organization.

Any request regarding the processing of personal data or the exercise of rights under the GDPR may be submitted using the contact details provided above.

Should the Association appoint a Data Protection Officer (DPO) in the future, the relevant contact details will be published on this page.

3. Definitions

For the purposes of this Privacy Policy, the following terms shall have the meanings assigned to them under Regulation (EU) 2016/679 (GDPR).

Personal Data

Any information relating to an identified or identifiable natural person ("Data Subject"), directly or indirectly identifiable by reference to an identifier such as a name, surname, email address, telephone number, IP address, or other identifying information.

Processing

Any operation or set of operations performed on personal data, whether or not by automated means, including collection, recording, organization, storage, consultation, use, disclosure, restriction, deletion, or destruction.

Data Subject

Any natural person whose personal data is processed, including website visitors, donors, members, volunteers, event participants, applicants, collaborators, and users of the Association's services.

Data Controller

Revitalize the Future Association, which determines the purposes and means of processing personal data.

Data Processor

A natural or legal person processing personal data on behalf of the Data Controller pursuant to Article 28 of the GDPR.

Recipient

Any natural or legal person, public authority, agency, or other body to whom personal data may be disclosed where permitted by law.

Consent

Any freely given, specific, informed, and unambiguous indication of the Data Subject's wishes by which they agree to the processing of their personal data for one or more specific purposes.

Profiling

Any form of automated processing intended to evaluate or predict aspects relating to a natural person.

Unless otherwise specified, the Association does not carry out profiling activities.

Cookies

Small text files stored on the user's device during browsing to ensure the proper functioning of the website, improve performance, or, where consent has been obtained, collect statistical or marketing information.

Third-Party Services

External applications and platforms used by the Association to provide its services, including, but not limited to, Wix, Donorbox, Stripe, and any newsletter or event management services that may be adopted.

4. Scope and Principles of Processing

4.1 Scope

This Privacy Policy applies to all processing of personal data carried out by Revitalize the Future Association through its website and related online services.

It applies, among others, to:

• website visitors;

• users submitting contact forms;

• donors making financial contributions;

• membership applicants;

• volunteer applicants;

• participants in events, workshops, training courses, and cultural initiatives;

• individuals requesting information;

• subscribers to newsletters or mailing lists.

This Privacy Policy applies exclusively to data processing carried out by the Association and does not apply to third-party websites or services that may be accessed through links on this website. Users are encouraged to review the privacy policies of those third-party providers.

4.2 Principles of Processing

The Association processes personal data in accordance with Article 5 of the GDPR.

Personal data is processed according to the following principles:

Lawfulness, Fairness and Transparency

Personal data is processed only where there is a valid legal basis and always in a lawful, fair, and transparent manner.

Purpose Limitation

Personal data is collected exclusively for specified, explicit, and legitimate purposes directly related to the Association's institutional activities, the management of donations, events, memberships, volunteers, and communications requested by users.

Personal data will not subsequently be processed in a manner incompatible with those purposes.

Data Minimization

Only personal data that is adequate, relevant, and limited to what is necessary for the stated purposes is collected.

Accuracy

The Association takes reasonable steps to ensure that personal data is accurate and kept up to date. Data Subjects are encouraged to notify the Association of any changes.

Storage Limitation

Personal data is retained only for as long as necessary to achieve the purposes for which it was collected or for the period required by applicable law.

Once the applicable retention period has expired, personal data will be securely deleted or anonymized unless a legal obligation requires further retention.

Integrity and Confidentiality

Appropriate technical and organizational measures are implemented to protect personal data against unauthorized access, loss, destruction, accidental disclosure, alteration, or unlawful processing.

Access to personal data is restricted to authorized individuals who require such access in the performance of their duties.

Accountability

The Association adopts internal procedures designed to demonstrate compliance with applicable data protection legislation and periodically reviews the effectiveness of its organizational and security measures.

4.3 Our Commitment

Revitalize the Future considers the protection of personal data an integral part of its institutional mission.

All processing activities are carried out with the aim of balancing the Association's institutional objectives with the protection of the rights and freedoms of Data Subjects, in full compliance with European and Italian data protection legislation.

The Association actively promotes a culture of privacy, transparency, accountability, and responsible data management in all its activities.

5. Categories of Personal Data Collected

Depending on the services used by the Data Subject, the Association may collect different categories of personal data.

The collection of data is always limited to what is necessary for the purposes described in this Privacy Policy.

5.1 Data Provided Directly by the User

The Association may collect personal data voluntarily provided by users through the website, including:

• first and last name;

• email address;

• telephone number;

• postal address (where applicable);

• date of birth (where required);

• information contained in contact forms;

• information provided in membership applications;

• information provided in volunteer applications;

• information submitted during event registrations;

• any additional information voluntarily communicated by the user.

Providing such data is voluntary; however, failure to provide the required information may prevent the Association from responding to requests or delivering the requested services.

5.2 Donation Data

When a donation is made through the website, the Association may receive limited information necessary to manage the donation, including:

• donor's name;

• email address;

• donated amount;

• transaction date;

• transaction reference number;

• payment status.

The Association does not collect or store complete payment card details.

Payments are processed exclusively by authorized third-party payment providers, such as Stripe and Donorbox, which process payment information in accordance with their own Privacy Policies and applicable legal requirements.

5.3 Membership Applications

Individuals applying for membership may be asked to provide information necessary to assess and manage the membership application, including:

• personal identification details;

• contact information;

• information required by the Association's Statute;

• any additional information voluntarily provided by the applicant.

Admission as a member is subject to the procedures established by the Association's Statute.

5.4 Volunteer Applications

Individuals wishing to participate as volunteers may be asked to provide:

• personal identification details;

• contact information;

• areas of interest;

• availability;

• experience relevant to volunteer activities;

• any additional information voluntarily submitted.

Such information is used solely for organizing and managing volunteer activities.

5.5 Event Registration Data

When registering for events, workshops, educational activities, or cultural initiatives, the Association may collect:

• participant's name;

• contact details;

• information necessary for organizational purposes;

• attendance preferences where applicable.

The requested information may vary depending on the nature of the event.

5.6 Automatically Collected Data

When users browse the website, certain technical information may be collected automatically, including:

• IP address;

• browser type and version;

• operating system;

• date and time of access;

• referring website;

• pages visited;

• technical diagnostic information;

• device identifiers where applicable.

Such information is primarily used to ensure website security, improve system performance, and generate anonymous statistical reports.

Whenever possible, this information is processed in aggregated or anonymized form.

5.7 Cookies and Similar Technologies

The website uses cookies and similar technologies as described in the Cookie Policy section of this Privacy Policy.

Depending on the user's preferences, cookies may be used for:

• essential website functionality;

• remembering user preferences;

• statistical analysis;

• improving user experience;

• ensuring website security.

Where required by law, non-essential cookies are activated only after the user's consent has been obtained.

5.8 Data Not Intentionally Collected

The Association does not intentionally collect:

• special categories of personal data under Article 9 GDPR (such as health data, racial or ethnic origin, political opinions, religious beliefs, or biometric data), unless strictly necessary and authorized by law;

• personal data relating to criminal convictions or offences under Article 10 GDPR, except where required by applicable legislation.

Users are requested not to submit such information unless specifically requested by the Association for legitimate legal purposes.

5.9 Accuracy of Information

Users are responsible for ensuring that the personal data they provide is accurate, complete, and up to date.

Where personal data relating to third parties is submitted, the user confirms that they are authorized to provide such information and that the third party has been informed where required by applicable law.

6. Purposes of Processing and Legal Bases

The Association processes personal data exclusively for specific, explicit, and legitimate purposes connected with its institutional activities.

Each processing activity is based on one or more legal grounds provided for by Article 6 of the GDPR.

6.1 Responding to Contact Requests

Personal data submitted through contact forms or email is processed in order to:

• respond to requests for information;

• provide assistance;

• answer questions regarding the Association's activities;

• communicate with users, members, volunteers, donors, and supporters.

Legal basis: Article 6(1)(b) GDPR – processing necessary to take steps at the request of the Data Subject prior to entering into a relationship.

6.2 Managing Donations

Personal data relating to donations is processed in order to:

• receive and record donations;

• manage donation-related communications;

• comply with accounting and legal obligations;

• prevent fraud and misuse of payment systems.

The Association does not process complete payment card information.

Legal basis:

• Article 6(1)(b) GDPR;

• Article 6(1)(c) GDPR where processing is required by law.

6.3 Membership Management

Personal data submitted in connection with membership applications is processed in order to:

• evaluate membership requests;

• manage the membership relationship;

• communicate with members;

• comply with the Association's Statute and applicable legal obligations.

Legal basis: Article 6(1)(b) GDPR.

6.4 Volunteer Management

Volunteer data is processed in order to:

• organize volunteer activities;

• assign tasks;

• coordinate communications;

• comply with insurance or legal obligations where applicable.

Legal basis:

• Article 6(1)(b) GDPR;

• Article 6(1)(c) GDPR where required by law.

6.5 Event Management

Personal data collected during event registration is processed in order to:

• organize participation;

• communicate logistical information;

• manage attendance;

• administer the event.

Legal basis: Article 6(1)(b) GDPR.

6.6 Newsletters and Communications

If the Association provides a newsletter service, personal data will be processed exclusively for sending:

• news about Association activities;

• updates on projects;

• invitations to events;

• fundraising campaigns;

• institutional communications.

Subscription is voluntary.

Recipients may withdraw their consent at any time by using the unsubscribe link included in each communication or by contacting the Association.

Legal basis: Article 6(1)(a) GDPR – Consent.

6.7 Compliance with Legal Obligations

Personal data may be processed whenever necessary to comply with legal, accounting, tax, administrative, or judicial obligations.

Legal basis: Article 6(1)(c) GDPR.

6.8 Protection of the Association's Rights

Where necessary, personal data may be processed in order to:

• establish, exercise, or defend legal claims;

• prevent fraud;

• protect website security;

• safeguard the legitimate interests of the Association.

Legal basis: Article 6(1)(f) GDPR – Legitimate Interests.

6.9 Statistical Analysis

The Association may use aggregated or anonymized information to improve website performance, evaluate services, and optimize content.

Where statistical tools require user consent, such consent will be requested through the cookie banner before activation.

6.10 Automated Decision-Making

The Association does not use automated decision-making or profiling processes that produce legal effects or similarly significant consequences for individuals within the meaning of Article 22 GDPR.

Should this change in the future, this Privacy Policy will be updated accordingly.

6.11 Purpose Limitation

Personal data will not be processed for purposes incompatible with those described in this Privacy Policy.

Should the Association intend to process personal data for a different purpose, Data Subjects will be informed in advance and, where required, their consent will be obtained.

7. Methods of Processing Personal Data

The Association processes personal data in accordance with the principles of lawfulness, fairness, transparency, data minimization, integrity, confidentiality, and accountability established by the General Data Protection Regulation (GDPR).

Personal data is processed using electronic, digital, and, where necessary, paper-based systems, adopting appropriate technical and organizational measures to ensure a level of security appropriate to the risks associated with the processing.

7.1 Organizational Principles

The Association has implemented internal procedures designed to ensure that personal data is:

• processed solely for the purposes described in this Privacy Policy;

• accessible only to authorized individuals;

• protected against unauthorized access or disclosure;

• kept accurate and up to date;

• retained only for the period necessary to achieve the purposes for which it was collected.

Access to personal data is restricted to members of the Association, volunteers, employees, or authorized collaborators who require such information in the performance of their duties.

7.2 Systems and Services Used

To carry out its activities, the Association may use third-party platforms and service providers, including, where applicable:

• Wix for website hosting and management;

• Donorbox for fundraising campaigns;

• Stripe for payment processing;

• email service providers;

• cloud storage services;

• event registration platforms;

• newsletter management services.

Each service provider processes personal data according to its own contractual terms and applicable data protection legislation.

7.3 Security Measures

The Association implements appropriate technical and organizational measures designed to prevent:

• accidental or unlawful destruction of personal data;

• loss of personal data;

• unauthorized access;

• unauthorized disclosure;

• alteration of information;

• unlawful processing.

Depending on the nature of the processing, these measures may include:

• encrypted HTTPS connections;

• password-protected systems;

• access control mechanisms;

• periodic software updates;

• data backup procedures;

• limited administrative access;

• use of trusted service providers with appropriate security standards.

7.4 Confidentiality

All persons authorized to process personal data are required to maintain strict confidentiality regarding any information acquired while carrying out their duties.

The Association promotes a culture of privacy awareness and responsible data protection.

7.5 Data Accuracy

The Association takes reasonable steps to ensure that personal data remains:

• accurate;

• complete;

• up to date.

Data Subjects are encouraged to promptly notify the Association of any changes affecting their personal information.

7.6 Data Minimization

The Association collects only the personal data that is strictly necessary to achieve the purposes described in this Privacy Policy.

No excessive or unnecessary information is requested.

7.7 Secure Storage

Personal data is stored in secure environments protected by appropriate technical and organizational safeguards.

Once the applicable retention period has expired, personal data will be securely deleted, anonymized, or retained only where required by applicable law.

7.8 Personal Data Breaches

In the event of a personal data breach likely to result in a risk to the rights and freedoms of individuals, the Association will act in accordance with Articles 33 and 34 of the GDPR.

Where required, the breach will be notified to the competent Supervisory Authority and, where applicable, to the affected Data Subjects.

7.9 Continuous Improvement

The Association periodically reviews its internal procedures, organizational measures, and security controls to ensure that personal data continues to receive an appropriate level of protection consistent with technological developments, legal requirements, and organizational changes.

8. Data Retention

The Association retains personal data only for as long as necessary to fulfill the purposes for which it was collected and in accordance with the storage limitation principle established by Article 5 of the GDPR.

Retention periods may vary depending on the nature of the relationship with the Association, the purposes of processing, and applicable legal obligations.

8.1 Contact Requests

Personal data submitted through contact forms or email communications is retained for the time necessary to respond to the request and, where appropriate, for any additional period required to protect the legitimate interests of the Association or comply with legal obligations.

8.2 Membership Data

Personal data relating to members is retained for the duration of the membership relationship and thereafter for the period required by applicable civil, tax, accounting, and administrative legislation.

Following termination of membership, personal data will be retained only where necessary to comply with legal obligations or protect the legitimate rights of the Association.

8.3 Volunteer Data

Personal data relating to volunteers is retained for the period necessary to manage volunteer activities, insurance obligations, organizational requirements, and any legal responsibilities arising from such activities.

After the applicable retention period, personal data will be deleted or anonymized unless otherwise required by law.

8.4 Event Data

Personal data collected in connection with events, workshops, educational activities, or cultural initiatives is retained for the period necessary to organize and administer the event and, where appropriate, for administrative, reporting, or statistical purposes consistent with the principle of data minimization.

8.5 Donation Data

Administrative information relating to donations is retained for the period required by applicable accounting, tax, and legal obligations.

The Association does not retain complete payment card information, which is processed exclusively by the selected payment service provider.

8.6 Newsletter Subscribers

Personal data collected for newsletter subscriptions is retained until the Data Subject withdraws consent or until the newsletter service is discontinued.

Subscribers may unsubscribe at any time by using the unsubscribe link included in every communication or by contacting the Association directly.

8.7 Technical Logs

Technical logs and security information generated automatically by the website are retained only for the period necessary to ensure website functionality, cybersecurity, fraud prevention, and compliance with applicable legal obligations.

8.8 Deletion and Anonymization

At the end of the applicable retention period, personal data will be:

• permanently deleted;

• irreversibly anonymized where appropriate; or

• retained only where required by law or necessary for the establishment, exercise, or defense of legal claims.

8.9 Periodic Review

The Association periodically reviews its data retention practices to ensure that personal data is retained only for as long as necessary and in accordance with applicable legislation and operational requirements.

9. Recipients of Personal Data and Data Processors

The Association discloses personal data only where permitted by law and strictly to the extent necessary to achieve the purposes described in this Privacy Policy.

The Association does not sell, rent, or commercially distribute personal data to third parties.

9.1 Authorized Persons

Personal data may be accessed by members of the Board of Directors, volunteers, collaborators, employees, or other individuals specifically authorized by the Association, solely within the scope of their assigned responsibilities.

All authorized persons are bound by confidentiality obligations.

9.2 Data Processors

To carry out its activities, the Association may appoint external service providers acting as Data Processors under Article 28 GDPR.

These providers may include:

• website hosting providers;

• cloud service providers;

• website management platforms;

• payment processors;

• fundraising platforms;

• newsletter service providers;

• IT consultants;

• accountants;

• legal advisors.

The Association selects service providers that provide appropriate guarantees regarding compliance with applicable data protection legislation.

9.3 Third-Party Service Providers

The website may use third-party services, including but not limited to:

• Wix.com Ltd. for website hosting and management;

• Donorbox for online fundraising campaigns;

• Stripe Payments Europe Ltd. for payment processing.

The Association does not have access to complete payment card information processed by these providers.

Additional third-party services may be introduced over time and will be reflected in updated versions of this Privacy Policy.

9.4 Disclosure to Public Authorities

Personal data may be disclosed where required by applicable law to:

• public authorities;

• judicial authorities;

• law enforcement agencies;

• regulatory bodies;

• legal professionals acting on behalf of the Association.

Any disclosure will always comply with the principles of necessity and proportionality.

9.5 International Data Transfers

Some service providers engaged by the Association may process personal data outside the European Economic Area (EEA).

Where this occurs, transfers will be carried out in accordance with Articles 44–49 GDPR through appropriate safeguards, including:

• European Commission adequacy decisions;

• Standard Contractual Clauses (SCCs);

• other legally recognized transfer mechanisms.

9.6 Data Minimization in Disclosures

Whenever personal data is shared with third parties, the Association ensures that only the information strictly necessary for the requested service or legal obligation is disclosed.

Processing performed by external providers is governed by contractual agreements designed to ensure compliance with the GDPR.

9.7 Updates to Service Providers

The Association reserves the right to update the list of service providers used in connection with the website and its services.

Any significant changes affecting the processing of personal data will be reflected in future updates to this Privacy Policy.

10. Data Subject Rights

In accordance with Regulation (EU) 2016/679 (GDPR), every Data Subject is entitled to exercise the rights described below regarding the processing of their personal data.

The Association is committed to handling all requests promptly, transparently, and in accordance with applicable data protection legislation.

10.1 Right of Access

Data Subjects have the right to obtain confirmation as to whether or not personal data concerning them is being processed.

Where personal data is being processed, Data Subjects have the right to obtain:

• confirmation that processing is taking place;

• access to their personal data;

• information regarding the purposes of processing;

• the categories of personal data concerned;

• the recipients or categories of recipients to whom the data has been disclosed;

• the envisaged retention period;

• information about the origin of the data where it was not collected directly from the Data Subject;

• information concerning any automated decision-making.

Data Subjects may also request a copy of the personal data undergoing processing.

10.2 Right to Rectification

Data Subjects have the right to request the correction of inaccurate personal data concerning them without undue delay.

They may also request the completion of incomplete personal data where appropriate.

10.3 Right to Erasure ("Right to be Forgotten")

Under the conditions set out in Article 17 GDPR, Data Subjects may request the deletion of their personal data.

This right may apply, for example, where:

• the personal data is no longer necessary for the purposes for which it was collected;

• consent has been withdrawn;

• the processing is unlawful;

• deletion is required to comply with a legal obligation.

The right to erasure may be limited where retention of personal data is required by law or is necessary for the establishment, exercise, or defense of legal claims.

10.4 Right to Restriction of Processing

Data Subjects have the right to request the restriction of processing in the circumstances provided for by Article 18 GDPR.

During the restriction period, personal data may continue to be stored but will not otherwise be processed except where permitted by law.

10.5 Right to Data Portability

Where the legal requirements are met, Data Subjects have the right to receive the personal data they have provided to the Association in a structured, commonly used, and machine-readable format.

They may also request that such data be transmitted directly to another data controller where technically feasible.

10.6 Right to Object

Data Subjects have the right to object at any time to the processing of their personal data carried out on the basis of the Association's legitimate interests.

If an objection is received, the Association will cease processing unless it demonstrates compelling legitimate grounds that override the interests, rights, and freedoms of the Data Subject or where processing is necessary for legal claims.

10.7 Right to Withdraw Consent

Where processing is based on consent, Data Subjects may withdraw that consent at any time.

Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

10.8 Right to Lodge a Complaint

If a Data Subject believes that the processing of their personal data violates the GDPR, they have the right to lodge a complaint with the Italian Data Protection Authority (Garante per la Protezione dei Dati Personali) or with the competent supervisory authority in their country of residence.

This right is without prejudice to any judicial remedy available under applicable law.

10.9 Exercising Your Rights

Requests relating to the exercise of the rights described above may be submitted using the following contact details:

Revitalize the Future Association

Viale Europa 5

66040 Rosello (CH)

Italy

Email:

revitalizethefuture@revitalizethefuture.com

The Association will respond without undue delay and, in any event, within one month of receiving the request, unless an extension is permitted under Article 12 GDPR.

10.10 Our Commitment to Data Subjects

The Association considers the protection of personal data to be an essential part of its relationship with members, volunteers, donors, supporters, and website users.

Accordingly, the Association is committed to ensuring that all Data Subjects can effectively exercise their rights under applicable data protection legislation through clear, transparent, and accessible procedures.

11. Cookies and Similar Technologies

11.1 General Information

This website uses cookies and similar technologies to ensure its proper functioning, improve the user experience, and, where permitted, collect statistical information about website usage.

Cookies are small text files stored on the user's device during browsing.

Users may manage or modify their cookie preferences at any time through the cookie banner or their browser settings.

11.2 Types of Cookies Used

Strictly Necessary Cookies

These cookies are essential for the proper operation of the website.

They enable functions such as:

• page navigation;

• secure access to website features;

• management of user preferences;

• protection against fraudulent activity.

These cookies do not require user consent.

Functional Cookies

Functional cookies allow the website to remember user preferences, such as:

• preferred language;

• display settings;

• navigation preferences.

Where required by applicable law, these cookies are activated only after user consent.

Analytics Cookies

Where analytics services are used, cookies may collect statistical information regarding website usage.

The Association uses such information exclusively to improve website performance and user experience.

Where analytics cookies are not fully anonymized or are provided by third parties, they will be activated only after obtaining the user's consent.

Third-Party Cookies

The website may integrate third-party services that install their own cookies, including:

• Donorbox;

• Stripe;

• YouTube;

• Google Maps;

• newsletter platforms;

• social media services.

Users are encouraged to review the privacy and cookie policies of those providers for further information.

11.3 Cookie Consent

Upon the user's first visit, a cookie banner allows them to:

• accept all cookies;

• reject non-essential cookies;

• customize their cookie preferences.

11.4 Browser Settings

Users may configure their web browser to:

• refuse cookies;

• delete previously stored cookies;

• receive a notification before cookies are installed.

Disabling essential cookies may affect the proper functioning of the website.

12. Security Measures

The Association implements appropriate technical and organizational measures to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorized disclosure, or unauthorized access.

Such measures include, where appropriate:

• HTTPS encrypted communications;

• password-protected systems;

• restricted access controls;

• periodic backups;

• regular software updates;

• security monitoring;

• use of reliable third-party service providers with appropriate security standards.

Security measures are reviewed periodically to ensure that they remain appropriate in light of technological developments, operational needs, and applicable legal requirements.

13. Processing of Children's Personal Data

The Association does not knowingly collect or process personal data relating to children under the age established by applicable data protection laws without the consent of a parent or legal guardian where such consent is required.

If the Association becomes aware that personal data relating to a child has been collected in violation of applicable legislation, it will promptly take appropriate measures to delete the information or otherwise comply with legal requirements.

Where educational activities, workshops, or events specifically involve minors, the Association may provide additional privacy notices and obtain parental or guardian consent where required by law.

14. Changes to this Privacy Policy

The Association reserves the right to amend or update this Privacy Policy at any time in order to:

• comply with new legal or regulatory requirements;

• implement recommendations issued by competent supervisory authorities;

• reflect changes to the Association's activities or services;

• introduce new technologies or processing operations;

• improve the clarity and completeness of this Privacy Policy.

The most recent version of this Privacy Policy will always be published on this website together with the date of the latest update.

Where changes significantly affect the rights of Data Subjects or the manner in which personal data is processed, the Association will take appropriate steps to inform users in accordance with applicable law.

15. Contact Information

For any questions regarding this Privacy Policy or the processing of personal data, or to exercise any of the rights described herein, please contact:

Revitalize the Future Association

Italian Tax Code: 90046170693

Registered Office

Viale Europa 5

66040 Rosello (CH)

Italy

Email

revitalizethefuture@revitalizethefuture.com

The Association will respond to all legitimate requests without undue delay and, where applicable, within the time limits established by the General Data Protection Regulation (GDPR).

16. Final Provisions

This Privacy Policy constitutes the official Privacy Policy of the Revitalize the Future Association website.

If any provision of this Privacy Policy is found to be invalid, unlawful, or unenforceable, such provision shall not affect the validity or enforceability of the remaining provisions, which shall continue in full force and effect.

This Privacy Policy shall be governed by and interpreted in accordance with:

• Regulation (EU) 2016/679 (General Data Protection Regulation – GDPR);

• applicable Italian data protection legislation;

• any other relevant European Union or Italian laws governing the protection of personal data.

The Association is committed to continuously improving its data protection practices and maintaining a high standard of transparency, accountability, and respect for the privacy rights of all users.

Version: 1.0

Last updated: June 26, 2026

Consent preferences may be changed at any time.