Privacy Notice

This notice describes how the newsletter sign-up form for the “Step Up Your Game” project (the “Form”) is managed, with regard to the processing of personal data of those who complete it, pursuant to Article 13 of Regulation (EU) 2016/679 (GDPR).

Personal data provided through the Form is processed by:

• soc. coop. Pot in Pot, based at viale Europa 6, 75100 Matera (MT), Italy — VAT/Tax code 01356070779

The personal data collected will be processed for the following purpose:

• Newsletter sign-up — Sending informative communications related to the “Step Up Your Game” project (open calls, labs, materials and project results). Legal basis: consent of the data subject (Art. 6(1)(a) GDPR). Newsletters are sent via Mailchimp (The Rocket Science Group, LLC) and/or directly from the project staff’s email address.

Mailchimp privacy policy: https://mailchimp.com/legal/privacy/

Providing data through this Form is entirely optional and is intended solely to receive project updates: it does not constitute enrolment or an application for any activity. Any participation in the project’s activities (labs, advocacy campaign, toolkit validation) will take place through a dedicated form (Google Form), for which a specific, separate privacy notice will be provided when applications open.

The personal data collected through the Form is as follows:

• Data for newsletter sign-up — Name, email address, category (young person aged 15–20 / educator or youth worker), country.
• Voluntarily provided data — Any optional, explicit and voluntary submission of personal data through the Form or other project contact channels results in the acquisition of that data, which will be processed solely to respond to the request received.

The Form may be completed independently by anyone who has already reached the minimum age required to validly give consent to the processing of their personal data in their country of residence (14 in Italy, 13 in Portugal). Since the project is aimed at young people aged 15 and above, all participants already meet this requirement. Should a user below that age nonetheless complete the Form, the Controller will delete the data collected as soon as it becomes aware of the circumstance.

Processing will take place using electronic tools, with appropriate security measures. Access to the data will be limited to authorised staff or external providers appointed as data processors.

Data is processed at the Controller’s premises and through digital tools used to manage the Form and communications (Google Drive for storage, Mailchimp for sending communications). Some data may be processed through third-party services, which may involve the transfer of data outside the European Economic Area. In such cases, processing takes place in accordance with the safeguards provided by the GDPR.

Personal data will be kept for as long as strictly necessary to achieve the purpose described above and, in any case, until consent is withdrawn or, at the latest, up to 12 months after the conclusion of the project (31 May 2027).

Data may be processed by parties authorised by the Controller and by any technical service providers (e.g. digital platforms), appointed as data processors pursuant to Art. 28 GDPR. Data may also be shared with INOVA+ – Innovation Services SA (Portugal), project partner, solely for the purposes described above.

Data subjects may exercise, at any time, the rights provided for under Articles 15-22 of the GDPR, including:

• access to data
• rectification or erasure
• restriction of processing
• objection to processing
• withdrawal of consent (without affecting the lawfulness of processing carried out beforehand).

Data subjects also have the right to lodge a complaint with the supervisory authority of their country of residence, or with the Italian Data Protection Authority (Garante per la protezione dei dati personali, www.garanteprivacy.it), competent for the data controller, if they believe the processing of their data breaches applicable law.

Requests can be sent to the Controller at the following contact: info@potinpot.it

By completing the Form, the data subject declares to have read this privacy notice on the processing of personal data.

Date: 4 September 2026