PRIVACY POLICY

1. Data controller

The data controller is Marco Bentoglio, based in Bergamo (Italy), reachable at info@followthepanda.it.

2. Data collected

Through the website forms and the Family sign-up form we collect: first and last name, email address, phone/WhatsApp number, date of birth, province or area, car availability, sports and social interests, any notes, and the answers given in activity participation forms.

3. Purposes and legal basis

Your data is used to:

• manage expressions of interest and participation in activities (pre-contractual measures requested by you);
• manage your Family membership and access to your personal area (performance of the requested service);
• organise the WhatsApp groups of the activities you join (consent, given by voluntarily joining the group);
• send the newsletter and updates on Family activities: you receive it automatically when you join, but it is optional and you can turn it off anytime from MY AREA or via the link at the bottom of every email (legitimate interest in informing members, with right to object);
• comply with any legal obligations (legal obligation).

4. Tools and recipients

Data is processed through: the website’s secure database, the Family sign-up form on the website, a Google Sheet accessible only to administrators as a service copy of the data, WhatsApp to organise activity groups, and newsletter tools. Data is never sold or passed on to third parties for their own purposes. Some providers (Google, Meta/WhatsApp) may process data outside the EU under their own policies and standard contractual clauses.

5. Retention

We keep your data until you ask us to delete it. You can request deletion at any time by writing to info@followthepanda.it; we will act without undue delay.

6. Your rights

Under the GDPR (EU Reg. 2016/679) you have the right of access, rectification, erasure, restriction, portability, objection and withdrawal of consent. You may also lodge a complaint with the Italian Data Protection Authority (www.garanteprivacy.it).

7. Security

We apply appropriate technical and organisational measures (restricted access, encrypted connections, anti-bot checks) to protect data from unauthorised access.