Release for the use of photos and personal data - adults only

(Updated on: 06/29/2022, template: Template release form and data protection information fotobox_EN V1.0)

The user of the "Fotobox" service, identified through the registration form on the device, hereby

authorizes

the use of his/her own images in photographs taken by A. Loacker Spa/AG, for the purpose of sending them to his/her email address. The photographs will be deleted after a period of 14 days.

Any other use not indicated in this release is also prohibited. This authorization does not allow the photographs to be used in contexts that are detrimental to personal dignity and decorum and in any case for uses and/or purposes other than those indicated above. The service is provided free of charge.

The authorization is also given for any minors taken, in respect of whom the user declares to exercise parental responsibility pursuant to art. 316 et seq. of the Italian Civil Code.

Data Protection

The personal data of the Data Subject, in compliance with Legislative Decree No. 196 of 30 June 2003 (updated by Legislative Decree No. 101 of 10 August 2018) (hereinafter, "Privacy Code") and Regulation (EU) 2016/679 (hereinafter, "GDPR") will be processed by A. Loacker Spa/AG, with registered office in Via Gasterer Weg 3, 39054 Auna di Sotto/Unterinn, Italy, VAT No. 00187320213 (hereinafter, "Data Controller"), as data controller, for the purpose of sending the photo created through the "Fotobox" to the email address of the Data Subject who requested the service. In relation to this purpose, the processing of personal data is carried out by persons specifically appointed, authorized and instructed to process the data in accordance with art. 2/quaterdecies of the Privacy Code and articles 28 and 29 of the GDPR, as well as by “Autonomous Data Controllers” or “External Data Processor” appointed by Data Controller; in any case, the processing will be carried out by means of manual, computerized and telematic tools, with logic strictly related to the purposes and in any case in such a way as to guarantee the confidentiality and security of the personal data and in full and absolute compliance with the regulations in force on the subject. The Data Subject's personal data will be stored by the Data Controller for a time period strictly necessary for the fulfilment of the purpose described above, as indicated in the release. The processing of personal data is based on the authorization provided through the attached release (art. 6/1/b GDPR).

In accordance with the provisions of art. 12 of the GDPR, the Data Subject may write to the email address info@loacker.com or to the Data Controller's head office and requests:

• confirmation of the existence or otherwise of personal data concerning him/her, even if not yet recorded, and their communication in intelligible form;
• indication of the origin of the personal data, of the purposes and methods of processing, of the logic applied in the event of processing carried out with the aid of electronic instruments, of the identification details of the Data Controller;
• the updating, rectification, integration, cancellation, transformation into an anonymous form or blocking of data processed in breach of the law - including data whose retention is not necessary in relation to the purposes for which the data are collected or subsequently processed -, certification that these operations have been notified, also as regards their contents, to those to whom the data were communicated or disseminated, unless this requirement proves impossible or involves a manifestly disproportionate to the protected right.

The Data Subject may also exercise in the same manner the right:

• to withdraw at any time his/her consent (where given) to the processing of his/her personal data (without affecting the lawfulness of the processing based on the consent given before withdrawal);
• to object, in full or in part, for legitimate reasons, to the processing of personal data concerning him/her, even though they are relevant to the purpose of the collection;
• to object, in full or in part, to the processing of personal data pertaining to him/her, where it is carried out for the purpose of sending advertising materials or direct selling, or else market research or commercial communications;
• to lodge a complaint with a Supervisory Authority in the cases provided for by the GDPR (in the member country in which he/she usually lives, works or in the member country where the alleged violation has taken place). The Italian Supervisory Authority is the Garante per la protezione dei dati personali: website: www.gpdp.it - www.garanteprivacy.it, email: protocollo@gpdp.it, fax: +39 06.69677.3785, telephone switchboard: +39 06.69677.1;
• of portability of personal data within the limits of art. 20 of the GDPR.

A. Loacker Spa/AG has appointed a Data Protection Officer (DPO) who can be contacted at the company's registered office or via email info@loacker.com.