Privacy notice

Depending on how you use the site, we may process:

• contact details and message content, including your name, email address, subject, selected BAINSA recipient, and anything you choose to write;
• limited technical and security data, such as IP address, request time, browser or device information, form-verification results, and server logs;
• profile and attribution details supplied or approved for publication, such as names, photographs, roles, university affiliations, biographies, and research authorship;
• editor account information for authorised BAINSA users who sign in to the content management system.

Please do not send sensitive personal data through the general contact form unless it is necessary for your request.

We process personal data only for defined purposes:

• to answer enquiries and route messages to the appropriate BAINSA team;
• to consider applications, collaborations, partnerships, and research enquiries;
• to operate, protect, debug, and improve the reliability of the website;
• to publish association, member, and research information with proper attribution;
• to understand aggregate website traffic and improve public content;
• to meet legal obligations and establish, exercise, or defend legal claims.

The relevant legal bases are steps taken at your request, BAINSA’s legitimate interests in operating and protecting the association and communicating its work, compliance with legal obligations, and consent where a specific activity requires it. You may object to processing based on legitimate interests; we will assess the request against any compelling lawful grounds.

BAINSA members responsible for the selected inbox can read your message. We also use specialised providers only where needed to run the site: Vercel for hosting and aggregate Web Analytics, Resend for message delivery, Cloudflare Turnstile for bot protection, Upstash for short-lived rate limiting, Neon for the site database, and Cloudflare R2 for media storage. Our email provider processes messages delivered to BAINSA inboxes.

These providers process data under their own security and privacy commitments and, where applicable, on BAINSA’s instructions. We do not sell personal data and do not provide it to advertisers or data brokers.

Ordinary contact messages are kept for up to 12 months after the last meaningful exchange. We may keep a message longer when it becomes part of an active collaboration, application, contract, dispute, or legal record, and then only for the period needed for that purpose.

Rate-limit records are short-lived and ordinarily expire after the relevant ten-minute security window. Vercel discards the request-derived Web Analytics visitor hash after 24 hours; aggregate reports and routine hosting logs follow the retention settings of the relevant provider. Public profiles and research attribution remain available while they are relevant to BAINSA’s work or scholarly record, subject to correction, objection, archival needs, and applicable law.

Some providers may process data outside Italy or the European Economic Area. Where EU data protection law requires a transfer safeguard, the relevant provider and BAINSA rely on an adequacy decision, approved contractual clauses, or another lawful transfer mechanism as applicable. You may ask us for more information about the safeguards relevant to your data.

Subject to the conditions in data protection law, you may request access, correction, deletion, restriction, portability, or withdrawal of consent, and may object to certain processing. Withdrawing consent does not affect processing already carried out lawfully.

Send a request to board@bainsa.ai. We may ask for enough information to confirm your identity and locate the relevant record. You also have the right to complain to the Italian Data Protection Authority (opens in a new tab) or another competent supervisory authority.

We use access controls, private storage, encrypted network connections, bot verification, and request-rate limits to protect the website. No internet service can promise absolute security, so please use the contact address if your message contains information that needs special handling.

Turnstile and rate limiting automatically assess whether a form submission appears abusive. They can prevent the form from being sent, but they do not make decisions that produce legal or similarly significant effects. If the form rejects a genuine message, you can email BAINSA directly.

We will revise this notice when the website’s data practices materially change. The date at the top identifies the current version. If a change significantly affects how we use data already collected, we will provide an additional notice where reasonably possible.