Information pursuant to art. 13 of EU Regulation no. 2016/679
Florence Tattoo Convention
The Firenze Indelebile Association – Viale dei Mille, 9 50131 Florence – VAT and Fiscal Code: 05813860482 organizes the FLORENCE TATTOO CONVENTION event together with the company Firenze Indelebile Srls.
The Subjects act for the treatment described below as Joint Controllers of the treatment pursuant to art. 26 GDPR.
The main objectives of the event are: to promote the artistic and historical culture of tattooing; Enhance the tattoo artist’s work skills to encourage adolescents new tools of creativity and expression for professional growth and affirmation; Maintain a network of sector operators who, through common documents and their own experience, offer direct evidence of good work practices; Develop sensitivity to the issue of the importance of health and hygiene standards through typically youthful expression codes in compliance with current regulations and with the support of the local promoters of the event; Confirm the Florence Tattoo Convention as a fixed annual appointment for exchange, meeting and growth; Share the planning of the event with all collaborators and promoter partners (local authorities, trade associations, professionals and schools, etc).
Joint controllers of the treatment
The Data Controllers are
Indelible Florence Association
Viale dei Mille, 9
50131 Florence c/o Studio del Sala
VAT and Fiscal Code: 05813860482
in the person of the President Lorenzo Provvedi.
Florence Indelible Srls
Viale dei Mille, 9
50131 Florence c/o Studio del Sala
VAT and Fiscal Code: 06919350485
Email address where to contact the Joint Controllers for the purposes of this information: info@florencetattooconvention.com
In the following, the Joint Controllers may also be referred to only as “Owner”.
Purposes, categories of interested parties and methods of data processing, legal basis.
Purpose
We inform you that any personal data provided by the interested party and thus acquired by the Joint Controllers in relation to navigation on this website may be subject to treatment in compliance with the principles of lawfulness, fairness, correctness, proportionality, necessity, accuracy, completeness and security and other legal obligations in force, as better described and in the cookie policy.
The treatment will take place using IT, manual and paper tools for the following purposes:
- Organizational planning and management of Events: forwarding requests for booking the exhibition space and associative procedure, including related legal obligations.
- Publication of tattoo artists who agree to the dissemination of their image and their work for the promotion of their business and the event.
Legal basis of the treatment
- The processing for the purposes sub 1 bases its legal basis on the need of the Joint Controllers to fulfill the obligations assumed through the contract stipulated with the interested party and to carry out all the functional actions for the correct and complete execution of the same and/or legal obligations that derive from it (art. 6 paragraph 1 letter b) and c) of the GDPR); therefore this treatment does not require any prior consent from the interested party, who is also free not to give his data to the Joint Controllers who, however, in this case will not be able to provide the service requested by the interested party or referable to him (e.g. to participate the interested party to the Event of interest and provide him with the connected services) and/or will not be able to fulfill the legal obligations connected to the relationship (for example also the regulations on health and safety). The data requested will be those necessary for the execution of the contract.
- The processing for the purposes sub 2 bases its legal basis on the consent freely given by the interested party (Article 6 paragraph 1 letter a) of the GDPR) and the release given for an indefinite period and free of charge
Need to provide
The provision of data for the purposes referred to in point 1 is mandatory, and for the purposes referred to in point 2, optional.
In any case, failure to provide data does not allow the Joint Controllers to execute the requests of the interested party.
Categories of recipients
The personal data on this website may be processed by the Joint Controllers and/or by specifically authorized and/or appointed personnel, as well as by their internal and external managers, all formally appointed/authorized for the operations necessary for the pursuit of the indicated purposes.
In particular, for the purposes under 1 and 2, the data may also be communicated by the Joint Controllers to the suppliers of the management and maintenance service of IT systems, websites and databases and consultants, who will process the data as External Managers.
Furthermore, in the cases provided for by law, the information collected for the indicated purposes could be communicated to the Authorities also competent following specific requests.
Methods of treatment
All data will be processed in paper and electronic format. Personal data as well as any other information that can be directly or indirectly associated with an interested party are processed by applying security, technical and organizational measures such as to guarantee a level of security appropriate to the risk, taking into account the state of the art and the costs of implementation, or where provided for security measures prescribed by specific legislation, by way of example but not limited to, provisions issued by the guarantor, regulations, measures, provisions of law.
Storage period
The Data are processed and stored for the time required by the purposes for which they were collected.
Therefore:
- Personal Data collected for purposes related to the execution of a contract between the Owner and the User will be processed until the execution of this contract is completed and kept for 10 years from the termination of the contract, except for events interrupting the prescription.
- The data for the pursuit of the purposes referred to in point 2 are processed for as long as necessary for the pursuit of the purposes and kept for the time referred to in the laws on the subject of limitation of rights, therefore the images will be kept by the Joint Controllers indefinitely free of charge and in the meantime the Owner will leave the website and the contents for this edition published.
At the end of the retention period, the Personal Data will be deleted.
Data transfer to third countries
The Joint Data Controllers do not transfer the data collected for the purposes indicated to third countries pursuant to Regulation 2016/679.
Rights of the interested party
In relation to the processing of personal data, the interested party may, at any time, exercise the rights provided for by the GDPR (pursuant to articles from 15 to 22).
In particular, he will be able to:
- access your personal data, obtaining evidence of the purposes pursued by the owner, of the categories of data involved, of the recipients to whom they may be communicated, of the applicable retention period, of the existence of automated decision-making processes, including profiling, and, at least in such cases, significant information on the logic used, as well as the importance and possible consequences for the data subject, where not already indicated in the text of this Policy;
- obtain without delay the rectification of inaccurate personal data concerning you;
- obtain, in the cases provided for by law, the cancellation of data;
- obtain the limitation of the treatment or to oppose the same, when admitted on the basis of the provisions of the law applicable to the specific case;
- in the cases provided for by law, request the portability of the data that you have provided to the holder, i.e. to receive them in a structured format, commonly used and readable by an automatic device, and also request to transmit such data to another holder, if technically doable;
- where deemed appropriate, lodge a complaint with the supervisory authority (art. 77 GDPR).
In particular, the following rights are recognized to the interested parties: articles 15 – “Right of access of the interested party”, 16 – “Right of rectification”, 17 – “Right to cancellation”, 18 – “Right to limit processing”, 19 – “obligation to notify in case of rectification or cancellation of personal data or limitation of treatment”, 20 – “Right to data portability”, 21 – “Right to object”, 22 – “automated decision-making process relating to natural persons, including profiling” of the GDPR within the limits and under the conditions set by the ‘art. 12 GDPR. (In general, please note that for the processing of personal data for which the legal basis is consent, this may be revoked).
The interested party can exercise his rights by writing to the Data Controller by email: info@florencetattooconvention.com