for the taking of photographs and audio and video recordings on the occasion of events of fondazione marionanni ets and the use of such materials
pursuant to art. 13 of Regulation (EU) 2016/679 (hereinafter also only the “gdpr”), fondazione marionanni ets (hereinafter also only the “foundation”), data controller, wishes to inform on how it processes personal data for the taking of photographs and/or audio and video recordings and for the use of such materials.
the controller of the processing of personal data is (tax code 91473680378, vat no. 04327171205), with registered office in via santo stefano n. 94, 40124 bologna, reachable at the following contacts:
telephone: +39 3392042568
email address: amministrazione@fondazionemarionanni.org
the personal data subject to processing include:
the personal data referred to in letter d) above are collected and processed for purposes of documentation, communication and promotion of the activities carried out by the foundation on the basis of the express consent pursuant to art. 6, letter a), of the gdpr; the remaining personal data are processed to protect the prerogatives and, where necessary, the rights of the foundation on the basis of a legitimate interest of the latter, pursuant to art. 6, letter f) of the gdpr.
the provision of personal data for the aforesaid purposes of documentation, communication and promotion of the activities carried out by the foundation is optional and, in the absence of an explicit consent to such processing, the foundation will not be able to carry out any processing of personal data.
the personal data will be processed in both paper and digital form and may be posted on websites and/or social networks, as well as used through any other communication tools adopted by the foundation. the photographs and the audio and video recordings will in any case not be used in contexts that may cause prejudice to dignity, decorum and reputation.
the foundation may make the personal data available to its own personnel, duly authorised, who have reason to access them for the performance of their professional assignment.
the personal data may also be made available to service providers used by the foundation in carrying out its activity.
such parties process the personal data as processors, according to the instructions given to them by the foundation.
the service providers in question belong to the following categories:
the foundation may also disclose personal data to comply with any requests from the authorities and/or to protect its own rights in litigation.
in some cases the personal data - which will not be disseminated, nor marketed - may be transferred outside the territory of the european union. such transfer takes place guaranteeing adequate levels of protection of personal data, also as provided for by arts. 45 and 46 of the gdpr.
in particular, transfers of data outside the european union take place to countries that offer an adequate level of protection of personal data, as established by specific decisions of the european commission.
the lawfulness of the transfer of personal data to the united states is also guaranteed by the adherence to the eu-us data privacy framework by the service providers used by the foundation. further information on the eu-us data privacy framework (the agreement that governs the transfer of personal data between the european union and the usa) is available at the following addresses:
in the other cases the transfers of personal data outside the european union take place upon the issuance of adequate guarantees for the protection of personal data by the providers or sub-providers of the foundation that receive them. such parties have in fact signed the standard contractual clauses for the protection of personal data adopted by the european commission.
the personal data will be kept for a period of time not exceeding that necessary to achieve the purposes for which they are processed.
the personal data processed by the foundation for purposes of documentation, communication and promotion of its own activities will be processed for a period not exceeding 10 years from their collection.
it is possible to object at any time to the processing of personal data based on consent by writing to the email address amministrazione@fondazionemarionanni.org.
once the request is received, the foundation will see to promptly ceasing the processing of personal data based on the withdrawn consent.
the processing operations that are different or based on conditions of lawfulness other than consent will continue to be carried out as provided for by this notice and in full compliance with the provisions in force.
the withdrawal of consent to the processing of personal data does not prejudice the lawfulness of the processing carried out by the foundation on the basis of the consent given before the withdrawal.
it is possible to contact the foundation at any time by writing an email to the address amministrazione@fondazionemarionanni.org to receive the list of the processors of personal data (that is, of the service providers of the foundation that carry out personal data processing operations on the basis of the indications given to them by the latter).
in the same manner it is possible to request to exercise the rights provided for by the legislation on the protection of the confidentiality of personal data (as provided for by articles 15 to 22 of the gdpr) including those of:
once the request is received, the foundation will process it with the utmost promptness and seriousness in order to facilitate the exercise of the rights, providing a reply without delay, and in any case within one month of receipt of the request. only in cases of particular complexity, the deadline for replying to the request may be extended up to two months from its receipt; in that case the foundation will keep you informed on the status of the handling of your request.
(last updated: 2 october 2026)