Bliss Beat Festival - Home

Privacy Policy

Information on the processing of personal data (Arts. 13 and 14 of EU Regulation 2016/679, "GDPR")

Last updated: 8 November 2026 — version 1.4

1. Data controller

Hari-Om ssd arl
Loc. Boschi 47, 15079 Sezzadio (AL), Italy
VAT no. and tax code IT02407290069
Email: info@hari-om.it

The Controller is the same for all the websites it manages: hari-om.it, hariomyogaschool.com, yogahariom.it, blissbeatfestival.com, figlidiares.com and figlidiares.it, hariomyoga.net (hereinafter "the Sites"). This page describes the processing related to blissbeatfestival.com. A Data Protection Officer (DPO) has not been appointed, as it is not mandatory.

2. What data we collect

  • Data you provide by filling in the contact form: first name, surname, email address, telephone number, country, the content of your message, your choice about subscribing to the newsletter, and any other data you choose to write. All fields marked with an asterisk are necessary for us to reply.
  • Form submission data: date and time, the page you are writing from, any parameters of the campaign you came from (for example UTM), the site language and confirmation of the boxes ticked (privacy and newsletter).
  • Contact data via email, if you write to the addresses given on the site: your address and the content of the message.
  • Browsing data: IP address, type of browser and device, pages visited, times. These are recorded in the server logs for security and operational purposes. The site does not use measurement or marketing tools.

We do not collect special categories of data (health, religion, etc.) and we ask you not to include them in your messages.

3. Why we process it and on what basis

  • Purpose: replying to requests sent via the form (information about tickets, programme, accommodation and festival activities) and acting on pre-contractual steps requested by you
    Legal basis: performance of pre-contractual measures at your request (Art. 6.1.b GDPR)
    Retention: up to 24 months from the last contact, then deletion; longer only if a contractual relationship arises, for the period required by law
  • Purpose: filing requests in the contact list (Mailchimp) without sending commercial communications, so that we can find you again and not lose your request
    Legal basis: the Controller's legitimate interest in handling the requests received (Art. 6.1.f)
    Retention: up to 24 months from the last contact, then deletion
  • Purpose: sending you the newsletter and communications about courses and events, only if you tick the relevant box
    Legal basis: consent (Art. 6.1.a), which can be withdrawn at any time
    Retention: until you withdraw consent or unsubscribe
  • Purpose: site security, prevention of abuse and spam, protection of legal rights in court
    Legal basis: legitimate interest (Art. 6.1.f) and legal obligations
    Retention: server logs for up to 12 months; for legal protection, for as long as necessary
  • Purpose: administrative, accounting and tax obligations, if you buy a ticket or sign up for an activity
    Legal basis: legal obligation (Art. 6.1.c)
    Retention: for the periods required by law (generally 10 years)

You can use the site and send us a request even without ticking the newsletter box. If you refuse to provide the necessary form data, we will not be able to reply.

4. What happens when you submit the contact form

The form data is sent to a script run by the Data Controller on Google Apps Script, which:

  • records your request in a Google spreadsheet used by the Data Controller's sales staff;
  • sends an email alert to the Data Controller's inbox, info@hariomyogaschool.com, so that we can reply to you;
  • saves your contact details in Mailchimp, in the "Newsletter Hari-om" list, noting that they come from the Bliss Beat Festival. If you tick the newsletter box, you are subscribed to the newsletter; if you don't, your contact stays on record as not subscribed and receives no marketing communications.

5. Who we share your data with

  • The Data Controller's staff and collaborators authorised to process data (administration, secretariat, sales).
  • Service providers who process data on behalf of the Data Controller as data processors: OVH SAS (hosting of the website on a virtual server and domain management, based in the European Union), Google Ireland Limited (Google Workspace for email and the spreadsheet, Apps Script to collect and route requests), Intuit Inc. / Mailchimp (contact list and newsletter).
  • Public authorities when required by law.

Your data is neither disclosed nor sold. An up-to-date list of data processors can be requested from the Data Controller.

6. Transfers outside the European Economic Area

Some providers (Google, Intuit/Mailchimp) may also process data in the United States. The transfer takes place on the basis of the EU-US Data Privacy Framework or the European Commission's standard contractual clauses, as adopted by each provider.

7. How we protect your data

We use appropriate technical and organisational measures: an encrypted connection (HTTPS), access restricted to authorised people, system updates and checks on providers' authorisations.

8. Your rights

You can ask the Data Controller (info@hari-om.it) at any time for: access to your data, rectification, erasure, restriction, portability, objection to processing based on legitimate interest, and withdrawal of consent (without affecting processing already carried out). We reply within one month. For the newsletter, you can unsubscribe using the link in every message. You also have the right to lodge a complaint with the Italian Data Protection Authority, the Garante per la protezione dei dati personali (www.garanteprivacy.it).

9. Third-party sites and external links

The site contains links to external services (Google Maps, Facebook, Instagram, YouTube, Spotify, the Cascina Bellaria shop). When you open them, you leave this site: those services' own privacy notices apply. The map is shown as a linked image: no Google service is loaded until you click.

Tickets are purchased on an external page of the cloud32.it service, which opens only when you click on the ticket you have chosen. This site embeds nothing from that service, and the data you enter for your purchase does not pass through this site.

10. Changes

We may update this notice: the date at the top shows the latest version. If the changes concern processing based on consent, we will ask for your consent again where necessary.