Your data, in plain terms

One thing only: the language you choose with the EN / IT switch, kept in your browser's local storage under the name bsmc-lang so the site opens in the same language next time. It is technical storage, it never leaves your device, and it is not used to identify or profile you. There are no advertising cookies and no third-party trackers; the fonts are served from this site, so no external company sees your visit. Clearing your browser data removes it. Audience measurement, if it is ever switched on, is opt-in and never loads before you agree — the cookie page explains exactly what it would collect.

The application form is hosted on Google Forms (Google Ireland Limited) and collects your name, university email, programme and year, CV and your answers. We use it to evaluate applications and to contact you about the outcome — the legal basis is the steps taken at your request before joining the association. Access is limited to the board members who run the selection: the Head and Team Directors of the division you apply to, plus the presidency. Applications are kept for twelve months from the close of the recruitment window and then deleted. They are never used for anything else and never shared outside the association.

The board and members pages show name, role, a short biography, a photo and, where the person chose to add one, a link to their LinkedIn profile. Everything there is published with the person's consent, which can be withdrawn at any time by writing to us: the entry is removed at the next update, normally within a few days.

When an event needs registration, it opens a form on Google Forms (Google Ireland Limited). We collect what we need to let you in and to know how many people to expect, and we delete the list after the event unless you asked to hear about the next ones. Photographs taken at our events are published on our social channels; tell us on the day if you prefer not to appear and we will leave you out.

The site is served by GitHub Pages (GitHub, Inc.). Like any web server, it records the requests it receives, including the visitor's IP address, for security and operational reasons. We do not have access to those logs.

You can ask us what we hold about you, correct it, delete it, restrict how we use it, or receive it in a portable form. Write to and we will answer within thirty days. If you believe we have handled your data badly you can complain to the Garante per la protezione dei dati personali, the Italian supervisory authority.