We are the controller and responsible for your personal data. As organisers and producers of Photo Workshop New York, we operate on the website www.photoworkshopnewyork.com
Our address is: Strada Maggiore 29, 40125, Bologna, Italy
Our email: firstname.lastname@example.org
It is important that the personal data we hold about you is accurate and current, so please keep us informed if your personal data changes during your relationship with us.
Personal data we collect about you
We may collect, use, store and transfer different kinds of personal data about you which we have grouped together as follows:
Identity Data which includes first name, last name, username or similar identifier, title, date of birth
Contact Data includes billing address, delivery address, email address and telephone numbers
Financial Data includes bank account
Transaction Data includes details about payments to and from you and other details of products and services you have purchased from us.
Any other information which you provide to us.
We do not collect any special categories of personal data (which include sensitive personal information such as details about your race, ethnicity, religious beliefs, political affiliation and sexual orientation).
How your personal data is collected
We collect most of this information from you directly as you correspond with us by email, phone, post or otherwise when you:
subscribe to our publications, such as our newsletter
request marketing, promotional material or information to be sent to you
enter our scholarship call or give us some feedback.
However, we may also collect information from
automated technologies, such as cookies which collect Technical Data about your equipment and browsing activities. Publicly accessible sources, such as Companies House providers of technical, payment and delivery services, such as PayPal, analytics providers [such as Google, based outside the EU] a third party with your consent (e.g. your bank).
How and why we use your personal information
Under Data Protection Law, we can only use your personal data if we have proper reason for doing so, eg:
to comply with our legal and regulatory obligations
for the performance of our contract with you or to take steps at your request before entering into a contract
for our legitimate interests or those of a third party; or
you have given consent
A legitimate interest is when we have a business or commercial reason to use your information, provided this is not overridden by your own rights and interests.
We may use your personal data to send you updates (by email, telephone or post) about our events and workshops that might be of interest to you and/or information about our services, including our newsletter, which may contain exclusive offers and promotions.
We have a legitimate interest in processing your personal data for promotional purposes. This means we do not usually need your consent to send you promotional communications. However, where consent is needed, we will ask for this consent separately and clearly.
We will always treat your personal data with the utmost respect and never share it with other organisations for marketing purposes unless we have your express prior consent to do so.
You have the right to opt-out of receiving promotional communications at any time by contacting us by email to email@example.com
Where your personal data is held
Information may be held at our offices and service providers.
Some of these third parties may be based outside the European Economic Area
How long your personal data will be kept
We will only retain your personal data for as long as necessary to fulfill the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements.
For example, if we have collected your personal data because you are a customer of our products or services, by law we have to keep basic information about you (including Contact, Identity, Financial and certain Transaction Data for six years after you cease being a customer for tax purposes).
To determine the appropriate retention period for personal data, we consider the amount, nature, and sensitivity of the personal data, the potential risk of harm from unauthorised use or disclosure of your personal data, the purposes for which we process your personal data and whether we can achieve those purposes through other means, and the applicable legal requirements. We will conduct regular reviews of the personal data we are holding and delete any data we no longer require.
You have the following rights, which you can exercise free of charge:
Access The right to be provided with a copy of your personal data (the right of access)
Rectification The right to require us to correct any mistakes in your personal data
To be forgotten The right to require us to delete your personal data in certain situations
Restriction of processing The right to require us to restrict processing of your personal data in certain circumstances, e.g. if you contest the accuracy of the data
Data portability The right to receive the personal data you provided to us, in a structured, commonly used and machine-readable format and/or transmit that data to a third party in certain situations
To object The right to object:
at any time to your personal data being processed for direct marketing (including profiling);
in certain other situations to our continued processing of your personal data, e.g. processing carried out for the purpose of our legitimate interests.
Not to be subject to automated individual decision-making The right not to be subject to a decision based solely on automated processing (including profiling) that produces legal effects concerning you or similarly significantly affects you.
If you would like to exercise any of those rights, please:
email, call or write to our data protection manager—see below: ‘How to contact us’; and
let us have enough information to identify you (e.g. your full name, address and client reference number);
let us have proof of your identity and address (a copy of your driving licence or passport); and
let us know what right you want to exercise and the information to which your request relates.
Keeping your personal data secure
We have appropriate security measures to prevent personal data from being accidentally lost or used or accessed unlawfully. We limit access to your personal data to those who have a genuine business need to access it. Those processing your information will do so only in an authorised manner and are subject to a duty of confidentiality.
We also have procedures in place to deal with any suspected data security breach. We will notify you and any applicable regulator of a suspected data security breach where we are legally required to do so.
Updating this statement
How to contact us
by email to firstname.lastname@example.org
by post to Photo Workshop New York c/o Spazio Labo’, Strada Maggiore 29, 40125, Bologna, Italy.
by phone to the Office Manager: 0039 3283383634