Privacy Policy

For users browsing without an account, only technical navigation data is collected (IP address, browser, operating system, pages visited, access times), necessary for the system's operation and the Portal's security. This data is not linked to personal identities. Legal basis: legitimate interest of the Controller (Art. 6(1)(f) GDPR).

To access reserved features, the following data is required:

Mandatory: first name, last name, email, date of birth, tax code (Italian citizens only), country, region/state, address, postal code, phone number.
Optional: Instagram username (used for attribution when publishing content).

Data is used for: account management, Portal services (itinerary logbook, cultural competitions, content submission, groups), operational account communications, periodic informational communications about association activities, management of economic contributions, Portal security and logging, and impact measurement.

Each user's profile is visible to other Portal users. By default, the following are always visible: first and last name, country, region/state, user type, achievements and numerical statistics linked to the user's participation in the Portal. Users may choose to make their registered email address visible, as well as add and display their Instagram and TikTok profiles. Further information — such as published content, completed itineraries and competitions won — is only visible if the user explicitly enables it.

Your password is encrypted: no one can access it. No Tamsha member will ever ask for your password.

Tamsha Social Promotion Association creates institutional profiles upon request and prior agreement with public and private subjects — regions, provinces, municipalities, companies, agencies, bodies and associations. The data visible in the profile varies according to the legal nature of the subject and the agreements in place, in compliance with applicable regulations. Institutional profiles function as showcases linked to the Portal's content.

The Portal records technical access and usage data (logs) necessary to ensure account and infrastructure security, detect unauthorised access, validate user actions (itinerary completion, competitions, content publication) and protect the community. Geolocation is used to display the correct date and time, for session security and for logging purposes. Technical system specifications are not disclosed publicly to protect Portal security.

Contributions for participation in activities (itineraries, events, courses) are handled through secure payment systems. Tamsha never stores card, bank account or payment credential data. Administrative staff access only transaction data (amount, date, identifier) for management and accounting purposes. No Tamsha member will ever ask for your personal payment credentials.

By submitting photographs, videos, audio, articles or any other material in the context of Portal activities — including cultural competitions, galleries and initiatives — the user grants Tamsha Social Promotion Association a non-exclusive, royalty-free, perpetual licence to use and publish such content within the Portal and at related events. Attribution to the author is always guaranteed, in any context of use. On the association's official social channels, photographs and short content may be published in full, while videos, audio and longer texts may be shared in part. Ownership of the content remains with the user.