Information pursuant to Articles 13 and 14 of Regulation (EU) No. 2016/679

(General Data Protection Regulation)


Your personal data will be processed in compliance with the new European legislation on Privacy, for the processing of orders, the provision of services for which registration is required and for other purposes indicated in this policy; the processing will be based on the principles of correctness, lawfulness, transparency, free release of consent, protection of your privacy, right to data portability and limitation of purposes as well as the right to be forgotten.

The methods of processing include the use of manual, computer and telematic tools (including telefax, telephone, even without operator assistance, electronic mail, SMS and other computer and/ or automated communication systems) and shall be such as to ensure the security and confidentiality of the data.

In accordance with the principle of European-derived accountability, this structure is committed to protecting the Personal Data that is given to it. Therefore, their management and security are guaranteed with the utmost attention, in accordance with what is required by the privacy law (e.g. EU Regulation 2016/679), through the drafting of a Governance Privacy Model, specific procedures for Data Processors and Data Processors, together with a Data Protection Impact Assessment (DPIA) document and the procedure for handling data breach cases (Data Breach).

The data controller is FIMI - Federazione Industria Musica Italia, based in Milan, at Via Leone XIII, n. 14.

The data controller pursuant to art. 28 of Regulation (EU) 2016/679 may be contacted at


Under the new General Data Protection Regulation:


1. The data subject shall have the right to obtain confirmation of the existence or otherwise of personal data relating to him, even if not yet recorded, and their communication in an intelligible form.


2. The person concerned shall have the right to be informed of:

a) the origin of personal data;

b) the purposes and methods of processing;

c) the logic applied in the case of processing with the aid of electronic means;

d) the identification details of the holder, the persons in charge and the persons in charge;

e) of the persons or categories of persons to whom the personal data may be disclosed or who may become aware of it in their capacity as designated representative in the territory of the State, as responsible persons or persons in charge.


3. The data subject shall have the right to obtain:

a) updating, rectification or, where it is of interest to you, data integration;

b) the deletion, transformation into anonymous form or blocking of data processed in violation of the law, including those whose storage is not necessary in relation to the purposes for which the data were collected or subsequently processed;

c) a limitation on the original purpose for which consent to processing was granted;

d) the portability of your data, that is, to receive in a structured, commonly used and machine-readable format the personal data you provide;

e) proof that the transactions referred to in letters a) and b) have been brought to the attention, including as regards their content, of those to whom the data have been communicated or disseminated, except where such performance proves impossible or involves the use of means manifestly disproportionate to the protected right.

4. The data subject shall have the right to object, in whole or in part:

a) for legitimate reasons relating to the processing of personal data concerning them, even if relevant to the purpose of the collection;

b) to the processing of personal data concerning him for the purpose of sending advertising material or direct sales or for the performance of market research or commercial communication.


You may exercise your rights as indicated above and request any information regarding our personal data protection policy by sending a communication to the above address or by sending an e-mail to

Failure to provide the personal data reported as mandatory will make it impossible to execute any order while the failure to provide those not marked as mandatory has no consequences for the execution of the order.

You may revoke your consent at any time without this, however:

a) prejudice the lawfulness of the processing based on the consent given before the withdrawal;

b) prejudice further processing of the same data on other legal grounds.

Subject to your consent, FIMI may process your personal data for the provision of services for which registration is required. In such cases, the provision of data is not mandatory and does not affect the conclusion and execution of any order.

Consent to the processing of personal data

After reading the information on the processing of personal data, I agree that FIMI will process my personal data for:

1. the conclusion, execution and all activities connected with the orders I have transmitted;

2. the provision of services for which registration is required.

Use of audio/video images

In the course of events promoted and/or realized by FIMI in which it is planned to make audio video footage that, for institutional purposes, will be published on the associative site and/or disseminated through the relevant social channels, The Association undertakes to request and obtain, for each event, explicit consent.

To resort to such eventualities, FIMI, also according to articles. 10-320 c.c. and 96-97 L. 633/1941, will request permission for the free use of photographs, portraits, images, recordings and audio/video recordings made within the event and the environments, premises, objects and documents that will be taken, also in a partial, modified and adapted form, in strict compliance with the institutional objectives.

The aforementioned authorization will involve the granting of a non-exclusive license, without limits of duration and territorial extension, transferable to third parties and includes the rights referred to in art. 12 et seq. of L. 633/1941, including but not limited to the right of publication, reproduction in any way and in any form, transcription, editing, adaptation, processing, reduction, communication and publication on the FIMI website.

In this context, the interested party will be required to:


1. read, in full, the Information pursuant to art. 13 EU Regulation 2016/679 (GDPR) on the FIMI website;

2. have acquired, that they have not transferred exclusively or, in any case, that they have regained the rights granted and therefore have freely disposed of them for the aforementioned purposes;

3. substantially and processually indemnify FIMI and keep it free from any loss, damage, liability, cost and expense, including legal, arising or in any way related to claims or claims of third parties relating to the use of materials by FIMI, prohibiting, in any case, any use of the materials that could prejudice the honour, reputation, decorum and dignity of the person portrayed, taken back or registered.

The authorization obtained will be valid and effective from the day of the release of the consent, whether it is acquired by computer or by document subscription, unless written notice is sent to the e-mail address, with at least 15 days notice of the planned event and for which consent is required.

To get in touch with FIMI, please use the following contact form.

Contact Us