Legal

Privacy Policy

Last updated: April 2026

1. Data Controller

The data controller is Alata Investment Club, a student association operating under the umbrella of Università degli Studi di Brescia.

For any privacy-related requests, contact us at: alatabrixiaic@gmail.com

2. Data We Collect

We collect the following categories of personal data:

  • Name and surname
  • Email address
  • University and degree programme
  • Application form data (year of study, motivation)
  • Authentication data for members accessing the reserved area

3. Purpose of Processing

Your personal data is processed for the following purposes:

  • Club membership management and selection of new members
  • Communication regarding club events, updates, and activities
  • Providing access to the member reserved area

The legal basis for processing is your explicit consent provided at the time of application, and the performance of the membership relationship.

4. Third-Party Processors

We use the following third-party services to operate this website and manage our activities:

Supabase

Used for database storage and user authentication. Data is stored in Supabase-managed infrastructure.

Vercel

Used for website hosting and deployment. Vercel may collect standard server-side analytics (IP addresses, request logs) as part of its infrastructure operation.

Microsoft Clarity

Used for behavioural analytics (heatmaps, session recordings). Clarity is only activated if you have explicitly accepted cookies via our cookie banner.

Resend

Used for sending transactional emails (e.g. application confirmation, member notifications).

5. Data Retention

  • Application data (from candidates not admitted) is retained for 1 year from the date of submission, then deleted.
  • Member data is retained for the duration of the membership and deleted upon withdrawal or end of membership.

6. Your Rights

Under the GDPR (Regulation (EU) 2016/679), you have the following rights:

  • Right of access — you may request a copy of the personal data we hold about you.
  • Right to rectification — you may request correction of inaccurate data.
  • Right to erasure — you may request deletion of your personal data.
  • Right to withdraw consent — where processing is based on consent, you may withdraw it at any time.

To exercise any of these rights, contact us at alatabrixiaic@gmail.com.

7. Cookies

For detailed information on how we use cookies, please refer to our Cookie Policy (accessible via the link in the footer).

8. Contact

For any questions or concerns regarding this Privacy Policy, please write to us at alatabrixiaic@gmail.com.