Privacy & data.
Card service preview: the association must complete and approve the final privacy notice before activation. No cards are issued while email delivery is disabled.
Details & contact
Controcorrente
Via Santa Barbara, s.n.c., 98151 Messina
associazionecontrocorrenteac@gmail.com
Name, institutional email, phone number and faculty or department are required to request the card. After verification, the card identifier and verification dates are also stored. Consent to receive association information is separate, optional, not preselected and can be withdrawn in your account. The date and version of consent are recorded; it does not allow third-party advertising. Phone and faculty are not published by card verification.
Access & protection
We do not collect UniMe passwords. Links are single-use for 15 minutes; HttpOnly/Secure/SameSite session cookies last up to 30 days; email is reverified annually. QR reveals only card ID, status and expiry. You can delete your card and data in your account.
Talk to staff
The chat is anonymous to staff. Hosting may retain technical logs, so absolute anonymity is not guaranteed. Conversations expire after 30 days of inactivity.
Chat: a technical cookie stores a random token; only its hash is stored in the database. Staff see messages and conversation ID, separate from card data. Messages are retained up to 30 days after last activity; expired conversations are pruned during subsequent service requests. A temporary IP hash limits abuse without storing a plain IP in the chat. You can delete the conversation from the browser that created it.
Events
Events: RSVPs use your verified UniMe account, separate from anonymous chat. Staff see aggregate counts. A reminder requested for an event uses your verified email via Resend; the preference and sending attempts are stored. Cancel your RSVP or reminder on the event page. Deleting your account also deletes these records. RSVP and sending metadata are removed within 90 days after the event during automatic checks or subsequent staff requests; an email already being sent may still arrive after cancellation.
Providers & retention
The site and data use the owner’s WordPress hosting. Email uses Resend when enabled. Maps and external links use third-party services. Card and chat data use separate WordPress database tables.
External content
Opening a business card loads Google Maps, which receives technical data such as IP address. We do not request geolocation. Instagram, TikTok and sources open external services; Google Fonts and hosting may maintain their own logs or cookies. Language choice is stored in your browser.