Privacy Policy

Last updated: 24 July 2026

This Privacy Policy explains how Cultural Heritage Online (“CHO”, “we”, “us”), a service operated by OASIS Tech LLC (Wyoming, USA), collects, uses and protects personal data when you visit culturalheritageonline.com, subscribe to our newsletter, create an account, or contact us. We are the data controller for this processing.

1. What we collect and why

We collect only what we need to run the site and the services you ask for:

  • Newsletter — your email address, collected with your explicit consent through a double opt-in (you confirm the subscription by clicking a link we email you). Purpose: to send you our editorial newsletter. Legal basis: consent.
  • Account registration — your name and email address, and the membership level you hold (free reader, Operatore PRO, Organiser, Founding Partner, Ambassador, contributor). Purpose: to give you access to your account and the features of your plan. Legal basis: performance of a contract and our legitimate interest in operating the service.
  • Payments — if you buy a paid plan, billing details are processed by our payment provider, Stripe. We do not see or store your full card number; we receive confirmation of payment and the billing information needed for our records and invoicing. Legal basis: performance of a contract.
  • Sign in with Google — if you choose social login, Google shares your name, email address and basic profile with us to create or access your account. Legal basis: consent and performance of a contract.
  • Contact and submissions — if you write to us, or submit an event, a place, a photograph or an article as a contributor, we process the contact details and content you provide. Purpose: to answer you and, where relevant, to review and publish your submission. Legal basis: consent and legitimate interest.
  • Cookies and usage data — see the Cookie Policy. Analytics and marketing cookies are only set after you consent through our cookie banner. Aggregate search-performance data (impressions, clicks) is provided to us in non-identifying form by Google Search Console. Legal basis: consent for non-essential cookies; legitimate interest for essential, security and aggregate data.

2. Who we share data with

We do not sell your personal data. We share it only with the service providers (processors) that make the site work, and only for the purposes above:

  • Brevo — newsletter and transactional email delivery.
  • Stripe — payment processing for paid plans.
  • Google — sign-in (if you use it), and, subject to your cookie consent, analytics and tag management.
  • Hostinger — website hosting and infrastructure.

Each provider processes data under its own security and data-protection commitments and only on our instructions. We may also disclose data where required by law, or to protect our rights, safety or property.

3. International transfers

OASIS Tech LLC is established in the United States, and some of our providers operate outside the European Economic Area. Where personal data of EEA/UK users is transferred outside those areas, we rely on the safeguards our providers put in place, such as the European Commission’s Standard Contractual Clauses and equivalent mechanisms.

4. How long we keep it

  • Newsletter: until you unsubscribe (there is an unsubscribe link in every email).
  • Account: for as long as your account is active; we delete or anonymise it on request or after prolonged inactivity.
  • Payment records: for as long as required by tax and accounting law.
  • Correspondence and submissions: for as long as needed to handle your request or maintain the published content, subject to your removal rights below.

5. Your rights

If you are in the EEA, the UK or a jurisdiction with equivalent rights, you can ask us to:

  • access the personal data we hold about you;
  • correct inaccurate data;
  • erase your data (“right to be forgotten”);
  • restrict or object to certain processing;
  • receive your data in a portable format;
  • withdraw a consent you gave, at any time, without affecting prior processing.

To exercise any of these, write to us through the contact page or at info@culturalheritageonline.com. We respond within a reasonable time, normally within a few working days. You also have the right to lodge a complaint with your local data-protection authority.

6. Children

The site is intended for a general adult audience and is not directed at children under 16. We do not knowingly collect personal data from children. If you believe a child has provided us data, contact us and we will delete it.

7. Security

We use appropriate technical and organisational measures — including encrypted connections (HTTPS), access controls and reputable processors — to protect personal data against loss, misuse and unauthorised access. No method of transmission over the internet is completely secure, but we work to protect your data and to keep these measures current.

8. Changes to this policy

We may update this Privacy Policy as our services or the law change. We will post the updated version here with a new “last updated” date; significant changes will be highlighted where appropriate.

9. Contact

Cultural Heritage Online — OASIS Tech LLC
Questions about this policy or your data: contact page · info@culturalheritageonline.com

Scroll to Top