Privacy Policy – TOM Instagram Feed

Last updated: July 3, 2026

1. Introduction

This Privacy Policy describes how the TOM Instagram Feed application processes information when interacting with the Meta Platform APIs.

The application is developed and managed by ARCI APS exclusively to display content published on the official Instagram account of the project TOM – Tutti gli Occhi sul Mediterraneo on the website https://tuttigliocchisulmediterraneo.org.

2. Data Controller

ARCI Milano APS

Website: https://tuttigliocchisulmediterraneo.org

Email: tom@arcinazionale.it

3. Information We Access

The application only accesses information necessary to display the official Instagram feed, including:

Instagram Business Account ID
Published posts
Images
Videos
Captions
Permalinks
Publication dates
Carousel media, where available

The application does not access:

Instagram Direct Messages
Followers lists
User contacts
User passwords
Private account information
Any personal information not required for displaying public content

4. Purpose of Processing

The accessed information is used exclusively to:

retrieve content published on the official Instagram Business account;
display that content on https://tuttigliocchisulmediterraneo.org;
improve website performance through temporary caching.

No automated decision-making or profiling is performed.

5. Legal Basis

Where applicable under the General Data Protection Regulation (GDPR), processing is based on the legitimate interest of the data controller in communicating the activities of the TOM project.

6. Data Sharing

The application does not sell, rent, or share personal data with third parties.

The content displayed is already publicly available through the official Instagram account.

7. Data Storage

The application stores only temporary cached copies of Instagram content for technical performance reasons.

Access tokens are stored securely within the WordPress installation and are used exclusively to authenticate requests to Meta APIs.

8. Security

Reasonable technical and organizational measures are implemented to protect access credentials and prevent unauthorized access.

9. Your Rights

If you believe that your personal information has been processed through this application, you may contact the Data Controller using the contact information above.

Where applicable, you may exercise the rights granted by the GDPR, including the rights of access, rectification, erasure, restriction of processing, objection, and data portability.

10. Contact

For questions regarding this Privacy Policy:

ARCI APS