information notice on the processing of personal data

for the taking of photographs and audio and video recordings on the occasion of events of fondazione marionanni ets and the use of such materials

pursuant to art. 13 of Regulation (EU) 2016/679 (hereinafter also only the “gdpr”), fondazione marionanni ets (hereinafter also only the “foundation”), data controller, wishes to inform on how it processes personal data for the taking of photographs and/or audio and video recordings and for the use of such materials.

controller of the processing

the controller of the processing of personal data is (tax code 91473680378, vat no. 04327171205), with registered office in via santo stefano n. 94, 40124 bologna, reachable at the following contacts:

telephone: +39 3392042568

email address: amministrazione@fondazionemarionanni.org

type of data processed

the personal data subject to processing include:

first name and surname;
date and place of birth;
address of residence;
likeness, appearance, image and voice within photographs and/or audio and video recordings.

purposes and legal basis of the processing

the personal data referred to in letter d) above are collected and processed for purposes of documentation, communication and promotion of the activities carried out by the foundation on the basis of the express consent pursuant to art. 6, letter a), of the gdpr; the remaining personal data are processed to protect the prerogatives and, where necessary, the rights of the foundation on the basis of a legitimate interest of the latter, pursuant to art. 6, letter f) of the gdpr.

mandatory/optional nature of the provision of data

the provision of personal data for the aforesaid purposes of documentation, communication and promotion of the activities carried out by the foundation is optional and, in the absence of an explicit consent to such processing, the foundation will not be able to carry out any processing of personal data.

methods of processing

the personal data will be processed in both paper and digital form and may be posted on websites and/or social networks, as well as used through any other communication tools adopted by the foundation. the photographs and the audio and video recordings will in any case not be used in contexts that may cause prejudice to dignity, decorum and reputation.

parties who may have access to the personal data

the foundation may make the personal data available to its own personnel, duly authorised, who have reason to access them for the performance of their professional assignment.

the personal data may also be made available to service providers used by the foundation in carrying out its activity.

such parties process the personal data as processors, according to the instructions given to them by the foundation.

the service providers in question belong to the following categories:

companies, consultants and providers of IT services;
communication agencies.

the foundation may also disclose personal data to comply with any requests from the authorities and/or to protect its own rights in litigation.

scope of circulation of the personal data

in some cases the personal data - which will not be disseminated, nor marketed - may be transferred outside the territory of the european union. such transfer takes place guaranteeing adequate levels of protection of personal data, also as provided for by arts. 45 and 46 of the gdpr.

in particular, transfers of data outside the european union take place to countries that offer an adequate level of protection of personal data, as established by specific decisions of the european commission.

the lawfulness of the transfer of personal data to the united states is also guaranteed by the adherence to the eu-us data privacy framework by the service providers used by the foundation. further information on the eu-us data privacy framework (the agreement that governs the transfer of personal data between the european union and the usa) is available at the following addresses:

in the other cases the transfers of personal data outside the european union take place upon the issuance of adequate guarantees for the protection of personal data by the providers or sub-providers of the foundation that receive them. such parties have in fact signed the standard contractual clauses for the protection of personal data adopted by the european commission.

data retention period

the personal data will be kept for a period of time not exceeding that necessary to achieve the purposes for which they are processed.

the personal data processed by the foundation for purposes of documentation, communication and promotion of its own activities will be processed for a period not exceeding 10 years from their collection.

withdrawal of consent

it is possible to object at any time to the processing of personal data based on consent by writing to the email address amministrazione@fondazionemarionanni.org.

once the request is received, the foundation will see to promptly ceasing the processing of personal data based on the withdrawn consent.

the processing operations that are different or based on conditions of lawfulness other than consent will continue to be carried out as provided for by this notice and in full compliance with the provisions in force.

the withdrawal of consent to the processing of personal data does not prejudice the lawfulness of the processing carried out by the foundation on the basis of the consent given before the withdrawal.

your rights

it is possible to contact the foundation at any time by writing an email to the address amministrazione@fondazionemarionanni.org to receive the list of the processors of personal data (that is, of the service providers of the foundation that carry out personal data processing operations on the basis of the indications given to them by the latter).

in the same manner it is possible to request to exercise the rights provided for by the legislation on the protection of the confidentiality of personal data (as provided for by articles 15 to 22 of the gdpr) including those of:

obtaining confirmation as to whether or not a processing of one’s personal data is under way, having access to one’s data processed by the foundation, knowing the purpose of the processing, the categories of personal data processed and the recipients or categories of recipients to whom one’s personal data have been or will be disclosed. one also has the right to know the retention period of one’s personal data or, if this is not possible, the criteria used to determine such period;
verifying the accuracy of one’s personal data and their origin, requesting the supplementation, updating, rectification, erasure or anonymisation of one’s personal data, as well as the restriction of their processing, or objecting to their processing (in the cases provided for by articles 17 and 18 of the gdpr);
lodging a complaint with the supervisory authority (the competent one for italy is the garante per la protezione dei dati personali);
in the event of transfer of one’s data to a third country, being informed of the existence of adequate safeguards pursuant to art. 46 of the gdpr relating to the transfer;
objecting, on grounds relating to a particular situation, to the processing of one’s personal data carried out on the basis of a legitimate interest of the foundation, provided that no grounds of the foundation prevail for proceeding with the processing anyway (for example, for the need to protect the latter’s rights in litigation);
exercising the right to portability of one’s personal data.

once the request is received, the foundation will process it with the utmost promptness and seriousness in order to facilitate the exercise of the rights, providing a reply without delay, and in any case within one month of receipt of the request. only in cases of particular complexity, the deadline for replying to the request may be extended up to two months from its receipt; in that case the foundation will keep you informed on the status of the handling of your request.

(last updated: 2 october 2026)