IT / EN
IT / EN

Privacy Policy

Last updated: 5 May 2026

This Privacy Policy explains how the Maria Golia International Piano Competition ("we," "us," or "the Competition") collects, uses, and protects your personal data in compliance with the General Data Protection Regulation (GDPR) and Italian data protection laws.

1. Data Controller

The data controller responsible for your personal data is:

Associazione Orium APS
Registered office: Via Montalenghe 7, 10010 Orio Canavese (TO), Italy
Italian fiscal code: 93053580010
Listed on the Italian RUNTS register (APS section) since 23 October 2024
Legal representative: Marina Scalafiotti
Email: info@mariagolia.com · info@orium-aps.com

Orium APS has not appointed a Data Protection Officer (DPO) under Article 37 GDPR, as the conditions for mandatory appointment do not apply. The reference for any data-protection request is the Legal Representative, reachable at the addresses above.

2. Personal Data We Collect

When you apply to the competition or contact us, we may collect the following personal data:

  • Name and surname
  • Date of birth
  • Nationality
  • Email address
  • Phone number
  • Mailing address
  • Curriculum vitae and musical background
  • Video recordings or links to performances
  • Passport or identity document (for age verification)
  • Payment information (for application fees)

3. Legal Basis for Processing

We process your personal data based on the following legal grounds:

  • Consent: By submitting an application, you consent to the processing of your data for competition purposes.
  • Contract: Processing is necessary to evaluate your application and, if selected, to manage your participation.
  • Legitimate interest: We may contact you about future editions of the competition or related musical events.

4. How We Use Your Data

Your personal data is used for the following purposes:

  • Processing and evaluating competition applications
  • Communicating with applicants about their submissions
  • Organizing competition logistics (scheduling, venue access)
  • Publishing results and winner announcements (with consent)
  • Promotional activities related to the competition (with consent)
  • Fulfilling legal and administrative obligations

4-bis. Processing of Minors' Data

Section I — Young Talents admits participants from 4 years of age. The following additional rules apply to the processing of minors' personal data:

  • Parental consent. Applications for minors must be submitted and signed by the parent or legal guardian holding parental responsibility, in accordance with Article 8 GDPR and Article 2-quinquies of the Italian Privacy Code (Legislative Decree 196/2003).
  • Publication of results. On the public pages of the website, Section I results are published with the participant's first and last name, based on the consent given by the parent/legal guardian at the time of application. The parent/guardian may at any time request removal, or replacement with the surname initial only (see right to withdraw, below).
  • Photos and video. Photographs and video recordings depicting minors are published only with the specific written consent of the parent/guardian, collected via a dedicated form at the time of application and revocable at any time.
  • Diploma and certificates. The physical diploma delivered to the participant shows their full name (necessary for the documentary value of the certificate), but is not published online.
  • Right to withdraw. The parent/guardian may at any time request the removal of the minor's name and data from the public pages and promotional materials by writing to info@mariagolia.com. Requests are honoured within 7 working days.

5. Data Storage and Security

Your data is stored securely using industry-standard measures. We implement appropriate technical and organizational safeguards to protect against unauthorized access, alteration, or destruction of your data.

We do not sell or rent your personal data to third parties. Data may be shared only with:

  • Jury members (for application evaluation)
  • Service providers necessary for competition operations, acting as Data Processors under Article 28 GDPR (see section 5-bis)
  • Authorities when required by law

5-bis. Data Processors (Subprocessors)

To provide the service, we rely on the following providers, each appointed as Data Processor and bound by an agreement compliant with Article 28 GDPR:

  • Cloudflare, Inc. (USA) — static hosting, CDN, anti-bot protection. Non-EU transfer covered by the European Commission's Standard Contractual Clauses (SCCs).
  • Resend (USA) — sending of transactional emails to participants. Non-EU transfer covered by SCCs.
  • Google LLC (USA) — Google Workspace for organisational email management and Google Maps embed on the contact page. Transfer covered by Google's Data Processing Addendum + SCCs.
  • YouTube (Google LLC) (USA) — publication of competition video recordings (unlisted channel, link-only access). Only with the explicit consent of the participant or, in the case of minors, of the parent/guardian.

5-ter. Transfers of Data Outside the European Economic Area

Some of our providers (Cloudflare, Resend, Google) are based in the United States. Transfers of your personal data outside the European Economic Area (EEA) take place in compliance with the GDPR through:

  • The provider's adherence to the EU–US Data Privacy Framework (where applicable);
  • Execution of the Standard Contractual Clauses (SCCs) approved by the European Commission;
  • Supplementary technical measures (encryption in transit and at rest, access control).

Section II finalists come from various countries (EU and non-EU). The data we collect is processed exclusively on the servers of the providers listed above. We do not transfer data to third countries lacking an adequacy decision or appropriate safeguards.

6. Data Retention

Retention periods vary by data type:

  • Application and candidacy data (form, CV, pre-selection video): 2 years from the conclusion of the edition, then securely deleted.
  • Accounting documentation (scholarship receipts, expense reimbursements): 10 years, as required by Article 2220 of the Italian Civil Code and tax law.
  • Data published on the Hall of Fame (winners and finalists, with consent): retained indefinitely as a historical archive of the competition. You may request the removal of your data at any time by writing to info@mariagolia.com.
  • Photos and video of the competition: published with consent and retained indefinitely as a historical archive, unless the data subject (or the parent/guardian for minors) requests removal.

7. Your Rights

Under the GDPR, you have the following rights regarding your personal data:

  • Right of access: Obtain confirmation of whether your data is being processed and access to it.
  • Right to rectification: Request correction of inaccurate or incomplete data.
  • Right to erasure: Request deletion of your data ("right to be forgotten").
  • Right to restrict processing: Limit how your data is used.
  • Right to data portability: Receive your data in a structured, machine-readable format.
  • Right to object: Object to processing based on legitimate interests.
  • Right to withdraw consent: Withdraw your consent at any time.

To exercise any of these rights, please contact us at info@mariagolia.com.

8. Cookies and Tracking

This website does not use analytics or profiling cookies. We do not employ any third-party tracking tools (Google Analytics, Meta Pixel, etc.). Only strictly necessary technical cookies are used:

  • Cloudflare security cookies (__cf_bm, cf_clearance): required for anti-bot protection, with a maximum duration of 30 minutes / 30 days. They do not require consent under the Italian Data Protection Authority's 2021 Guidelines.

The Contact page includes a Google Maps widget that loads only after explicit user consent (click on "Load Map"), to prevent any data transfer to Google without your prior authorisation.

9. Third-Party Services

When you choose to load the Google Maps widget on the Contact page, Google may collect data according to its own privacy policy. For more information, please refer to Google's Privacy Policy.

10. Filing a Complaint

If you believe your data protection rights have been violated, you have the right to lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali):

Garante per la protezione dei dati personali
Piazza Venezia 11
00187 Roma, Italy
Website: www.garanteprivacy.it

11. Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated revision date. We encourage you to review this policy periodically.

12. Contact Us

For any questions or concerns about this Privacy Policy or our data practices, please contact us at:

Email: info@mariagolia.com