PRIVACY INFORMATION NOTICE

INFORMATION ON THE PROCESSING OF PERSONAL DATA PURSUANT TO ART. 13 OF REGULATION (EU) 2016/679 (UK GDPR)

This notice describes how Funn Italiano processes the personal data of users who use the web platform (hereinafter, the "Site") and its related services. We invite you to read this document carefully to understand how your information is collected, used, and protected.

DATA CONTROLLER

The Data Controller of your personal data is Funn Italiano Limited, Reg. Address: 128, City Road EC1V 2NX London, Company Reg. Number: 16243962. For any questions or to exercise your rights, you can contact us at the e-mail address: privacy@funnitaliano.com.

TYPES OF DATA PROCESSED

Funn Italiano collects and processes various categories of personal data to provide and improve its services.

Data provided by the user:

Users (Participants): for account creation, we mandatorily collect full name, e-mail address, and phone number. The residential/domicile address is optional;
Event Creators and Companies: for profile creation, we mandatorily collect full name, e-mail address, phone number, address, company name, company registration number, and VAT number, if applicable;
Communication data: should you contact us through communication channels such as e-mail or instant messaging services (e.g., WhatsApp), we will process the data you provide (e.g., name, e-mail, phone number, and the content of the request) to manage and respond to your inquiries.
Payment data (for Participants and Companies): if you make a payment through the Site (for the purchase of a ticket or a Membership), we will process the data necessary to complete the transaction. This data, handled through our payment processors (e.g., Stripe, PayPal), may include billing details, the transaction amount, and a transaction identifier. We do not collect or store your full credit card details.

Financial data for payments (for Event Creators): in order to transfer the proceeds from ticket sales, we will collect your banking information, such as IBAN and the account holder’s name, which are necessary to make the payment.

Data collected automatically:

navigation and usage data: we collect information about your interactions with the site, such as IP address, browser type, operating system, pages visited, access times, and time spent on the site. This data is used to analyze the use of the platform and improve its functionality;

cookies and similar technologies: we use cookies and other tracking technologies to enhance your Browse experience, analyze traffic, and personalize content. For more details, please consult our cookie policy.

PURPOSES AND LEGAL BASIS FOR PROCESSING

We process your personal data only for specific purposes and in the presence of a valid legal basis, as provided for by the UK GDPR.

Purpose of Processing	Type of Data Processed	Legal Basis (UK GDPR)
Account management and access to the Platform	Personal and payment data.	Art. 6(1)(b) – Performance of a contract: to create and manage your account and allow you to use the basic features of the Platform.
Evaluation of applications from Event Creators and Companies	Contact and professional data provided in the application form.	Art. 6(1)(b) – Performance of pre-contractual measures: to assess your request to register as an Event Creator or Company prior to entering into a contract.
Management of payments for tickets and Memberships	Payment and transaction data.	Art. 6(1)(b) – Performance of a contract: to process the purchase of a ticket or Membership and fulfill our contractual obligations to the User.
Management of payments to Event Creators	Financial data (e.g., IBAN).	Art. 6(1)(b) – Performance of a contract: to transfer ticket sale proceeds to the organizer, as set out in our agreement.
Sending marketing communications and newsletters	Contact data and preferences.	Art. 6(1)(a) – Consent: subject to your specific, free, and optional consent.
Platform improvement and statistical analysis	Browsing and usage data (in aggregated and anonymized form).	Art. 6(1)(f) – Legitimate Interest: to analyze and improve the functionality and security of our Site, provided that your rights do not override our interests.
Compliance with legal, tax, and accounting obligations	Transaction data, billing data, financial data.	Art. 6(1)(c) – Legal Obligation: to comply with applicable tax, accounting, and anti-money laundering regulations.
Fraud prevention and protection of our rights	All relevant categories of data.	Art. 6(1)(f) – Legitimate Interest: to protect the security of our platform and defend our rights in the event of disputes.

PROVISION OF DATA

The provision of data for purpose a), b), c) and d) is necessary to use our services. Failure to provide it would make it impossible to create an account and participate in events. The provision of data for purpose e) is optional and requires your explicit consent.

METHODS OF PROCESSING AND ACCESS TO DATA

The processing of your personal data is carried out using computer and telematic tools, with logic strictly related to the stated purposes and, in any case, in a way that guarantees the security and confidentiality of the data itself. We adopt appropriate technical and organizational security measures to prevent the loss, illicit or incorrect use, and unauthorized access to your data. Access to the data is allowed exclusively to duly authorized and trained Funn Italiano personnel, as well as to external suppliers appointed as Data Processors.

SCOPE OF COMMUNICATION AND DATA SHARING

Your personal data will not be disseminated but may be communicated to third parties for the purposes described above:

Event Organizers (Creators): if you register for an event, we will share your first name, last name, and e-mail address with the organizer to enable them to manage your participation;
Service Providers: we use third-party providers for essential services such as site hosting, data analysis (Google Analytics), and payment processing (Paypal / Stripe). These subjects act as Data Processors on the basis of a specific contract;
External community platform: to facilitate interaction among users, we direct our community to a third-party platform. The use of this platform is subject to its own Privacy Policy;
Public authorities and law enforcement agencies: we may disclose your data if required by law or to protect our rights.

PLACE OF PROCESSING AND TRANSFER ABROAD

Your personal data is processed and stored on servers located within the United Kingdom and the European Economic Area (EEA). Should it become necessary, for the purposes indicated above, to transfer data to third countries (outside the UK/EEA), such transfer will take place in compliance with the applicable regulations, ensuring an adequate level of protection through the adoption of UK Adequacy Decisions or Standard Contractual Clauses (SCCs) approved by the ICO, supplemented by additional security measures where necessary.

DATA RETENTION PERIODS

We retain your personal data for a period no longer than is necessary to achieve the purposes for which it is processed, in compliance with the principle of storage limitation.

account data (Users, Event Creators, Companies): will be retained for as long as the account remains active. after deletion, the data will be anonymized or erased, except for data required to comply with legal obligations;
Payment and financial data: data related to transactions (ticket and membership purchases) and data required for tax and accounting purposes will be retained for 7 years from the date of the transaction;
Application data (for unapproved event creators and companies): in case of non-approval, the data provided will be retained for a maximum period of 12 months from the date of the rejection notice, for the purpose of handling any complaints or inquiries;
Data processed for marketing purposes: will be retained until you withdraw your consent and, in any case, for no more than 24 months from the last contact;
Browsing and usage data: will be retained for a maximum period of 24 months;
Communication data: will be retained for up to 2 years from the date of the request, unless it is necessary to retain them longer for legal purposes.

RIGHTS OF DATA SUBJECTS

As a data subject, you have the right to exercise the rights provided by the UK GDPR (arts. 15-22) at any time. In particular, you have the following rights:

right of access (Art. 15): to obtain confirmation as to whether or not personal data concerning you is being processed, and, where that is the case, access to the personal data and information on the processing;
right to rectification (Art. 16): to obtain the correction of inaccurate personal data concerning you without undue delay;
right to erasure ("right to be forgotten", Art. 17): to obtain the erasure of personal data concerning you without undue delay;
right to restriction of processing (Art. 18): to obtain the restriction of processing in certain circumstances;
right to data portability (Art. 20): to receive the personal data concerning you in a structured, commonly used and machine-readable format and have the right to transmit those data to another controller;
right to object (Art. 21): to object at any time to the processing of personal data concerning you for direct marketing purposes or based on legitimate interest;
right to withdraw consent: to withdraw consent at any time, without affecting the lawfulness of processing based on consent before its withdrawal;
right not to be subject to automated decision-making (Art. 22): not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you.

To exercise your rights, you can send a written request to the e-mail address: privacy@funnitaliano.com.

Please note that, for data related to your booking for a specific Event, the Data Controller is the Event Creator. Therefore, to exercise your rights (e.g., request for deletion) regarding such data, you may need to contact the event organizer directly. Funn Italiano will provide assistance, where possible, to facilitate this contact.

RIGHT TO LODGE A COMPLAINT

If you believe that the processing of your personal data is in violation of the provisions of the UK GDPR, you have the right to lodge a complaint with the Information Commissioner's Office (ICO).

COOKIE POLICY

For detailed information on the use of cookies by our Site, we invite you to consult our Cookie Policy, where you can also manage your preferences.

Data di ultimo aggiornamento: 10th July 2025