Version 1.0 · 19 September 2026
This notice explains how personal data is processed to organise Master Show and operate its platform, including registration, attendance, services, exhibitor relationships and support. It covers groomers, visitors, accompanying persons, company representatives, staff, judges and speakers.
1. Controller and contact details
The controller is GROOMINIT di Paola Acco, Via dei Salici 43, 30175 Venezia (VE), Italy, VAT number 02701290278.
For privacy enquiries and requests to exercise your rights, contact [email protected]. You may also write to the controller’s postal address, marking your correspondence “Master Show privacy request”, or to the certified email address [email protected].
2. Data and sources
Data is collected from you when you register, book, use services or contact the organiser. It may also be supplied by someone booking on your behalf, a company representative or the organiser when assigning event duties.
Depending on your relationship with Master Show and the services requested, data may include:
- Identity and contact details: name, email, telephone number, nationality and other details required for the particular registration.
- Account information: protected credentials, identifiers, language, preferences and access management information.
- Professional and administrative information: business name and contacts, tax and invoicing details, orders, payments and supporting documents.
- Attendance and services: tickets, passes, bookings, admissions, competitions, classes, results, seminars, packages, stands, sponsorships, prizes, parking, washing facilities and gala dinner bookings.
- Collaborations: staff category, duties, availability, commitments and remuneration where applicable.
- Registered dogs: breed, microchip number, size, country of registration, required documentation and owner details. Information about an animal may be linked to its owner or the person registering it.
- Communications and security: support enquiries, preferences, consent records, privacy requests, IP addresses and technical records needed to protect the service.
- Dietary requirements: menu choices and optional notes. Notes may reveal health information or religious beliefs; this information is processed only with explicit consent to arrange the requested service.
Anyone supplying another person’s data must provide accurate information limited to what is necessary and make this notice available to that person. The controller remains responsible for providing the required information within the applicable deadlines: ordinarily within one month of collection and, if earlier, at the first communication with the person or disclosure to another recipient, subject to statutory exceptions. You may request information about the source of your data.
3. Purposes and legal bases
| Purpose | Legal basis |
|---|---|
| Managing your account, registration, purchases, bookings and requests | Performance of a contract with you or steps taken at your request before a contract, GDPR Article 6(1)(b) |
| Managing accompanying persons, business contacts and people designated by others | Legitimate interests in organising the event, identifying entitled attendees and providing booked services, Article 6(1)(f), subject to the rights of the people concerned |
| Managing judges, speakers and collaborators | Performance of the contract with the individual and applicable legal obligations; legitimate interests in organising duties for staff designated by third parties |
| Managing orders, receipts, invoices and tax requirements | Contract performance and legal obligations, Article 6(1)(b) and (c) |
| Sending confirmations, instructions, changes and necessary service messages | The legal basis applicable to the underlying service or relationship |
| Providing support, maintaining security, preventing abuse and protecting rights | Legitimate interests in service continuity, security and handling disputes; legal obligations where applicable |
| Accommodating dietary needs involving optional sensitive information | Explicit consent, Article 6(1)(a) and Article 9(2)(a) |
| Sending promotional emails about Master Show | Separate, optional consent, Article 6(1)(a), and applicable electronic communications rules |
| Handling access, correction, erasure and other privacy requests | Compliance with data protection obligations, Article 6(1)(c) |
Registration details do not automatically become a marketing list. Marketing consent is not required to attend. Messages necessary to manage a booking may be sent without marketing consent.
4. Required information and consent
Required fields are identified in the relevant form. Without them, it may not be possible to complete registration, issue a document or provide the requested service. Other information is optional.
You can select a menu without providing diagnoses or medical details. Dietary notes should contain only what is necessary to prepare the meal. Explicit consent for sensitive information about another person must be validly obtained from that person or someone legally entitled to represent them.
You may withdraw consent at any time by contacting the controller. Withdrawal does not affect processing lawfully performed before withdrawal. For dietary requirements, it may prevent the accommodation that depends on that information, without itself cancelling the booking.
5. Recipients
Authorised personnel access data according to their responsibilities. Where necessary, data may be disclosed to hosting, storage, maintenance, email and technical support providers; payment providers; administrative and professional advisers; event service providers; and competent authorities.
Judges, speakers, admission staff and caterers receive only information relevant to their duties. Providers processing data on the controller’s behalf act under instructions and appropriate appointments; independent controllers are responsible for their own processing.
Exhibitors and sponsors do not automatically receive attendee lists or contact details for their own marketing.
Providers used for the platform include Aruba and OVHcloud for technology services and Stripe and PayPal for online payments, where available and selected by the user. The data disclosed depends on the service used. Payment providers may also act as independent controllers for their own purposes, including regulatory compliance and fraud prevention.
Provider information: Aruba, OVHcloud, Stripe, PayPal.
6. Public information, images and external services
Public pages may present the programme, exhibitors and sponsors, and professional profiles provided by judges and speakers to introduce the event. Information necessary to present an assignment is processed within that relationship. Additional content or promotional image use requires a separate assessment and, where necessary, authorisation.
Any publication of rankings or results is accompanied by specific information about the data displayed, purpose and duration. Private contact details, payment data, dog documents and microchip numbers are not intended for publication. This notice is not a general photography or video release.
Links to WhatsApp, external websites or other services lead to tools also governed by their providers’ notices. Identity documents or health information are not needed in chat for ordinary support enquiries.
7. International transfers
Where using a provider involves transferring data outside the European Economic Area, the controller must ensure the conditions required by GDPR Chapter V: an applicable adequacy decision or appropriate safeguards, such as standard contractual clauses and supplementary measures where necessary. Derogations may be used only where legally permitted.
Contact [email protected] to learn about transfers involving your data and obtain information or a copy of the applicable safeguards. Confidential portions may be redacted without preventing an understanding of the protections provided.
8. Retention
Retention is proportionate to the purpose. The ordinary retention periods provided for are:
| Information | Period or criterion |
|---|---|
| Account | During the relationship; review after 36 months of inactivity, with 30 days’ notice before closure if no outstanding relationship requires management |
| Registrations, visitor and companion details, bookings and event operational records | Up to 24 months after the edition ends, for support and service verification; earlier deletion when the purpose is exhausted |
| Event admission records | Up to 90 days after the edition ends |
| Dog profiles | For use of the services; review and removal of profiles no longer needed after 24 months since last use, following notice |
| Dog passports and documents | Up to 90 days after the edition ends |
| Sensitive dietary notes | Up to 7 days after the relevant service |
| Accounting and tax documents | For the applicable statutory period; ordinarily 10 years from the last entry for documentation subject to Article 2220 of the Italian Civil Code |
| Marketing | Until withdrawal and no longer than 24 months after consent or its explicit renewal |
| Minimum consent evidence | Up to 5 years after consent-based processing ends, limited to demonstrating choices and protecting rights |
| Privacy requests | Up to 3 years after closure; unnecessary identity documents are removed after verification |
| Operational communications | Up to 180 days after sending, except documents retained for a distinct purpose |
| Ordinary technical logs and security logs | Up to 30 and 180 days respectively after recording, except specific security incidents; at least six months for system administrator access logs subject to specific legal requirements |
Employment and collaboration administration follows the obligations applicable to the relationship. Publications, images and certificates used for additional purposes are governed by the specific information for that processing.
A legal obligation, concrete dispute or authority request may require longer retention of only the necessary data, with restricted access and periodic review. Keeping an invoice does not justify retaining an entire profile indiscriminately.
A minimal reference may be retained to prevent further marketing following withdrawal or objection, for as long as needed for that purpose. Backups follow their rotation cycle and are not used as ordinary archives. Previously ordered deletions and restrictions must be reapplied following restoration.
9. Your rights
You may request access and a copy of your data, correction, erasure where applicable, restriction and portability where the relevant conditions apply. You may object to legitimate-interest processing on grounds relating to your particular situation, and to direct marketing at any time. You may also withdraw consent.
Send requests to [email protected], whether or not you have an account. Platform tools provide an additional channel: downloading a summary does not limit your right to a complete response. Protecting other people’s data may require redaction or specific delivery arrangements.
Identity is verified proportionately; further information is requested only where necessary. Requests are answered within one month of receipt. Where permitted, an extension of up to two further months is explained within the first month. Requests are ordinarily free of charge; statutory exceptions must be justified.
Account deletion does not automatically cancel orders or remove documents subject to retention obligations. The response identifies any data retained and explains why.
You may complain to the Italian Data Protection Authority (Garante per la protezione dei dati personali) through www.garanteprivacy.it, or another competent supervisory authority, and seek a judicial remedy.
10. Automation and cookies
Automated checks of availability, capacity, prices and bookings support the requested services. No decision-making based solely on automated processing producing legal or similarly significant effects within GDPR Article 22 is envisaged.
Technical tools for authentication, security and preferences must be limited to what is needed for the service. Non-essential analytics or tracking require specific information and prior consent where applicable. Linked websites, including the editorial website, are subject to their own cookie information.
11. Updates
The version and date appear at the start of this notice. Material changes are communicated through channels appropriate to the relationship. Updating this notice does not amount to obtaining new consent.