Privacy Policy

2Foreword: processing of minors' data

This site is dedicated to a talent, fashion and casting agency that primarily involves minors. The Controller acknowledges the particular sensitivity of processing personal data of minors and adopts enhanced security measures, compliant with art. 8 GDPR and the guidelines of the Italian Data Protection Authority (Garante).

A minor’s data may only be provided by the holder of parental responsibility or legal guardianship (hereafter “Parent”). The Controller does not accept applications filled in directly by minors.

3Types of data processed

Through the registration and submission forms on the Site, the Controller may collect the following categories of data:

• Minor’s personal data: first name, surname, date and place of birth, tax code, gender, residence, domicile
• Minor’s physical data: height, weight, sizes, eye/hair color, presence of orthodontic appliance, glasses
• Images and videos of the minor: photos and/or presentation videos uploaded for casting purposes
• Parents’/Guardians’ personal data: first name, surname, date and place of birth, tax code, residence
• Contact data: email, landline and mobile phone numbers
• Bank data (if applicable): IBAN of the Parent/Guardian for fee payouts
• Professional data: previous artistic experience, sports, musical, linguistic skills, course attendance
• Geographic availability: cities in which the minor is available for casting

4Purposes and legal bases of processing

Data is processed for the following purposes:

1. Registration for artistic representation services and management of the contractual relationship with the Parent. Legal basis: contract performance (art. 6.1.b GDPR).
2. Presentation of the minor to Agency clients (production companies, brands, photographers, directors) for casting purposes. Legal basis: explicit consent of the Parent (art. 6.1.a and art. 8 GDPR).
3. Publication of images/videos of the minor on the Agency’s official channels (website, social, promotional material). Legal basis: explicit consent of the Parent.
4. Administrative communications relating to registration and casting management. Legal basis: contract performance.
5. Fiscal and accounting obligations. Legal basis: legal obligation (art. 6.1.c GDPR).
6. Legal defense of a right of the Controller. Legal basis: legitimate interest (art. 6.1.f GDPR).

5Consent

Consent to the processing of the minor’s data is given by the Parent by ticking the appropriate boxes on the online forms. The Parent declares, under their own responsibility, to hold parental responsibility or legal guardianship over the minor.

Withdrawal from the contract can be done at any time via email to info@agenziapeterpan.it.

6Data recipients

Data may be communicated to:

• Authorized internal staff of the Agency (casting officers, administration)
• Clients and contractors of the Agency (production companies, fashion brands, photographers, directors) limited to the data necessary to evaluate the application for a specific casting
• External providers acting as Data Processors (e.g. hosting provider Aruba S.p.A., email service, accountants)
• Competent authorities in case of legal obligations or motivated requests

Data is not disseminated to undefined recipients without the Parent’s specific consent.

7Extra-EU data transfer

Data is stored on servers located in the European Union (Aruba S.p.A., Italy). Any transfer to third countries occurs only with adequate guarantees pursuant to artt. 44-49 GDPR (adequacy decision, standard contractual clauses).

8Retention period

• Active registration data: for the entire duration of the relationship with the Agency
• Non-confirmed application data: maximum 24 months, unless renewal is requested
• Accounting and fiscal documents: 10 years as required by fiscal regulations
• Images and videos: for the duration of the relationship, unless the consent is explicitly withdrawn

At the end of the retention period, data will be deleted from active and working copies. Removal of data from physical and electronic cold storage may take up to 12 months after withdrawal.

9Data subject rights

The Parent, on behalf of the minor, may exercise the following rights provided by artt. 15-22 GDPR at any time:

• Right of access to the minor’s personal data
• Right to rectification of inaccurate or incomplete data
• Right to erasure (“right to be forgotten”)
• Right to restriction of processing
• Right to data portability
• Right to object to processing
• Right to withdraw consent at any time
• Right to lodge a complaint with the Italian Data Protection Authority (www.garanteprivacy.it)

10Security measures

The Controller adopts adequate technical and organizational measures to protect personal data from unauthorized access, loss or misuse, in compliance with art. 32 GDPR. Measures include: encrypted transmission (HTTPS), individual credential-protected access, periodic backups, access limited to authorized personnel only.

11Cookies and tracking technologies

The Site uses exclusively technical cookies necessary for operation (session management, cache). No profiling cookies or advertising tracking tools are present. Some pages embed third-party services required for their function (Google Maps for our offices, YouTube for the presentation video, Calendly and YouCanBook.me for bookings). These services may set their own technical cookies, under the responsibility of their respective operators. The images in the Instagram feed are served from our own server.

12Changes to this notice

The Controller reserves the right to update this notice to adapt it to any regulatory changes. The current version is always available on this page with the date of last update.