foto.samichay.eu privacy policy
Last updated: 7 October 2026
On foto.samichay.eu, people who attended Samichay 2026 (3–6 September 2026, Tenuta Bellavista Insuese, Guasticce, Livorno, Italy) can download the festival photos for free. The photos were taken by nine photographers. This page explains what data we collect, why, how long we keep it and how you can have it deleted.
This policy covers foto.samichay.eu and the data that the access form sends to samichay.eu. Cookies and browser storage are covered on a separate page: the cookie policy.
The Italian version of this policy is the reference text.
1. Who handles your data
Data controller: Mutex S.r.l.s. VAT number IT02435390501 Registered office: Via Pietro Toselli 15, 56125 Pisa, Italy Email: hello@samichay.eu
We have not appointed a data protection officer (DPO). For any privacy question, write to hello@samichay.eu.
2. What data we collect and why
| What | Why | Legal basis | Required? |
|---|---|---|---|
| Name and email | To let you into the gallery | A service you ask us for (Art. 6(1)(b) GDPR) | Yes: without them you cannot enter |
| Name, email, date and time of access | To know who accessed the photos, so we can protect the people in them and handle removal requests | Our legitimate interest (Art. 6(1)(f) GDPR) | Comes with access |
| Email (and name) for the newsletter | To send you the Samichay newsletter | Your consent (Art. 6(1)(a) GDPR) | No, it is optional |
| Technical data: IP address, date and time, file requested, browser | To run the site and protect it from abuse | Our legitimate interest (Art. 6(1)(f) GDPR) | Yes, for any website |
Access to the gallery
To get in, we ask for your name and email. The form sends them to samichay.eu, where we store them in the site's database.
We use them to let you in and to write to you about the gallery: for example, when photos from more photographers arrive, if a photo you reported has been removed or if the gallery closes. For these emails we also keep your contact on Brevo, in a list for the 2026 photos. We do not use them for the newsletter or for advertising, unless you tick the newsletter box.
Newsletter (optional)
Below the form there is a separate, unticked box. Only if you tick it do we record your consent and send you the newsletter. The newsletter comes from hello@samichay.eu and is sent through Brevo. We write about upcoming editions, the line-up and practical information.
If you leave it unticked you still get into the gallery: the two are independent.
You can withdraw your consent at any time, using the link at the bottom of every email or by writing to hello@samichay.eu. Withdrawing does not affect your access to the photos.
Brevo records whether you open our emails and click the links, to give us sending statistics. If you don't want this, you can block images in your email app.
You must be at least 14 to sign up for the newsletter.
Technical data
When you open the site or download a photo, Cloudflare (which hosts the site and the photos) records technical data such as your IP address, browser, date and time, and the file requested. Hostinger does the same when you send the form to samichay.eu. This keeps the site running and protects it from attacks. We do not use it to profile you.
3. The people in the photos
The photos were taken by the nine official photographers during the festival. We publish them to tell the story of the festival and share it with the people who were there: this is our legitimate interest (Art. 6(1)(f) GDPR). The gallery is open only to people who register with name and email.
Before publishing, we remove location data and camera data from the files. Only the photographer's name, the copyright notice and the date the photo was taken remain.
How to ask us to remove a photo
If you can be recognised in a photo and don't want it online, write to hello@samichay.eu with the subject "Photo removal". Tell us:
- the link to the photo or the file name;
- the name of the photographer;
- if there are several people in the photo, which one is you.
You don't have to explain why. We remove the photo from the gallery and from the online archive within, and in any case within one month, as the law requires. We reply when it is done.
If the photo shows a minor, the request can be made by a parent or legal guardian. We handle these requests first.
Please note: we cannot recall copies that other people have already downloaded.
4. How you can use the photos
- Personal use and social media: yes, for free, as long as you tag the photographer (you'll find their name and profile next to each photo).
- Commercial use (advertising, products, resale, paid printing): only with an agreement. Write to hello@samichay.eu.
5. Who receives the data
Your data is seen only by the Samichay staff who need it and by the providers below, who process it on our behalf and on our instructions (data processors, Art. 28 GDPR). We do not sell or hand over your data to anyone.
| Provider | What it does | Where the data is | Transfer safeguards |
|---|---|---|---|
| Cloudflare, Inc. (San Francisco, USA) | Hosts the site and the photos (Cloudflare Pages), protects it from attacks | United States and a worldwide server network | EU-US Data Privacy Framework, plus European Commission standard contractual clauses (Cloudflare data processing addendum) |
| Hostinger International Ltd. (Larnaca, Cyprus) | Hosts samichay.eu, where the form is received and where we store name and email | European Union | No transfer outside the EU; Hostinger data processing addendum |
| Brevo (Sendinblue SAS, 106 boulevard Haussmann, 75008 Paris, France) | Sends emails about the gallery and, only to those who ticked the box, the newsletter. Receives name and email | France and Belgium (EU) | Data in the EU; standard contractual clauses for any Brevo providers outside the EU (Brevo data processing agreement) |
| Salvia Studio (info@salviastudio.it) | Maintains the site on our behalf and can access the database | Italy | Appointed as data processor |
6. How long we keep the data
| Data | How long |
|---|---|
| Name and email used for access, date and time | While the gallery is online, and in any case no longer than 24 months after you register |
| Newsletter contact | Until you withdraw consent. We also delete contacts who open no email for 24 months |
| Proof of newsletter consent (date, time, text of the box) and unsubscribe date | Up to 24 months after you unsubscribe, to show that consent was given and to make sure we don't write to you again |
| Photo removal requests | 12 months, to show we handled them and avoid republishing the photo by mistake |
| Technical data (logs) at Cloudflare and Hostinger | For the period set by the providers for security |
| Browser storage | See the cookie policy |
7. Your rights
At any time, free of charge, you can ask us:
- to see what data we hold about you and get a copy;
- to correct it;
- to delete it;
- to restrict its use;
- to receive it in a machine-readable format, to take it elsewhere;
- to stop using it where we rely on our legitimate interest (objection);
- to withdraw your newsletter consent, with no effect on your access to the gallery.
Write to hello@samichay.eu. We reply within one month. For complex requests this can extend to three months, but we will tell you within the first month.
If you think we are handling your data unlawfully, you can lodge a complaint with the Italian data protection authority, Garante per la protezione dei dati personali, Piazza Venezia 11, 00187 Rome, www.garanteprivacy.it, or with the authority of the EU country where you live or work.
8. Automated decisions
We make no automated decisions about you and we do not profile you.
9. Changes
If we change this policy, we update the date at the top. If the change affects the newsletter or how we use your data, we will tell you by email first.