Privacy notice — Pro Teste

1. Data controller

• Pro Teste Photography (Pro Teste)
• VAT number: 15392121008
• Tax code: PRTTST80A01H501U
• Address: Via Casilina 1879, 00132 Roma (RM), IT
• Email: info@stefanblejeru.com
• Phone: +393518060535

2. What data we process

Depending on how you interact with the studio, we may process:

• contact data: first name, last name, email, phone;
• booking and service data: dates, locations, preferences, answers to forms and questionnaires;
• photos and videos in which you appear, taken during the service;
• billing data: address, tax code or VAT number;
• payment data: online payments are handled by a payment service provider; the studio does not store full card details;
• messages and communications exchanged with the studio;
• technical data collected when you use the online pages (such as IP address and browser type), for security and operation.

3. Why we process it and on which legal basis

• answering enquiries and preparing quotes — pre-contractual steps (Art. 6(1)(b) GDPR);
• carrying out the photography service and delivering photos, galleries and products — performance of the contract (Art. 6(1)(b));
• issuing invoices and meeting tax and accounting obligations — legal obligation (Art. 6(1)(c));
• sending service communications (reminders, confirmations, deliveries) — performance of the contract and legitimate interest (Art. 6(1)(b) and 6(1)(f));
• sending promotional communications or publishing images in the studio’s portfolio and channels — only with your consent (Art. 6(1)(a)), which you can withdraw at any time;
• protecting the studio’s rights in case of disputes — legitimate interest (Art. 6(1)(f)).

4. How long we keep the data

• enquiries that do not lead to a booking: for the time needed to reply and no longer than 24 months;
• contract and service data: for the duration of the relationship and then for the period set by law to protect legal claims;
• invoices and accounting records: 10 years, as required by Italian tax law (Art. 2220 of the Civil Code);
• photos: for the time agreed for delivery and archiving of the service;
• data processed on the basis of consent: until consent is withdrawn.

5. Who we share the data with

Data is never sold or made public. Only for the purposes above, it may be accessed by these categories of recipients:

• hosting, cloud storage and business software providers;
• email delivery and messaging providers;
• payment service providers;
• print labs and photo product suppliers, if you order prints or albums;
• tax and accounting advisers;
• the studio’s collaborators (for example second shooters or assistants), bound by confidentiality;
• public authorities, where required by law.

Providers process data on the studio’s behalf as data processors (Art. 28 GDPR).

6. Transfers outside the European Economic Area

If a provider is located outside the European Economic Area, data is transferred only to countries covered by a European Commission adequacy decision or with the safeguards required by the GDPR, such as standard contractual clauses.

7. Your rights

At any time you can ask the studio to:

• access your data and receive a copy (Art. 15);
• correct inaccurate or incomplete data (Art. 16);
• erase your data, except what the law requires us to keep (Art. 17);
• restrict processing (Art. 18);
• receive your data in a structured format and transfer it to someone else (portability, Art. 20);
• object to processing based on legitimate interest or for marketing (Art. 21);
• withdraw your consent, without affecting processing already carried out.

You also have the right to lodge a complaint with the supervisory authority: Garante per la protezione dei dati personali (www.garanteprivacy.it).

8. Contact

To exercise your rights or for any privacy question, write to info@stefanblejeru.com.