Last updated: April 5, 2026 — Version: 2.0
TOAgency, a trade name of TOA di Leonardi Marco (sole proprietorship)
Via Cavour 21, 10123 Torino (Italy)
VAT IT 11800210012
Email: info@toagency.it
PEC: leonardimarco@cndlpec.it
Phone: +39 351 789 9225
TOAgency collects the following personal data: browsing data (IP address, pages visited, time spent), contact data voluntarily provided via forms (name, email, phone), and — for talent onboarding — identification documents, fiscal code, IBAN, professional portfolio, and photographs.
Your personal data is processed for the following purposes:
• Website management and security — Legal basis: legitimate interest (Art. 6.1.f GDPR)
• Responding to contact requests — Legal basis: pre-contractual measures (Art. 6.1.b GDPR)
• Talent management and casting — Legal basis: consent (Art. 6.1.a GDPR) and contractual performance (Art. 6.1.b GDPR)
• Marketing and newsletter — Legal basis: consent (Art. 6.1.a GDPR)
Personal data is retained for the time strictly necessary for the purposes described. Contact form data is retained for 12 months. Talent onboarding data is retained for the duration of the professional relationship and for up to 5 years thereafter, unless a different period is required by law.
Personal data may be shared with: (a) brand/client companies for casting and production purposes, only with your explicit consent; (b) IT service providers acting as data processors; (c) public authorities when required by law. Data is not sold to third parties.
This website uses Google Analytics (via Google Tag Manager) and Microsoft Clarity for statistical analysis of visitor behaviour. These tools may set cookies on your device. All analytical tools are activated only after explicit consent via the cookie banner. For details, see our Cookie Policy.
Under the GDPR (Arts. 15–22) you have the right to: access your data, rectify inaccurate data, request erasure (“right to be forgotten”), restrict or object to processing, and data portability. You also have the right to withdraw consent at any time without affecting the lawfulness of prior processing. To exercise your rights, contact us at info@toagency.it. You may also lodge a complaint with the Italian Data Protection Authority (Garante): www.garanteprivacy.it.
The website is hosted on SiteGround’s cloud infrastructure. Google Analytics and Microsoft Clarity may transfer data to the United States under Standard Contractual Clauses (SCCs) approved by the European Commission.
This notice is provided to talent individuals who submit their data via the TOAgency onboarding form, pursuant to Art. 13 of the EU Regulation 2016/679 (GDPR).
TOAgency, a trade name of TOA di Leonardi Marco (sole proprietorship), Via Cavour 21, 10123 Torino — VAT IT 11800210012 — info@toagency.it — PEC: leonardimarco@cndlpec.it
Personal data collected: name, surname, date and place of birth, fiscal code, residential address, email, phone number, identity document (ID card or passport), IBAN, professional photographs, portfolio (video/images), physical measurements, professional history and skills.
3.1 — Internal database and professional communications (mandatory consent — Art. 6.1.b): Registration in the TOAgency talent database; sending castings, auditions and job proposals by email, phone, or messaging platforms.
3.2 — Data transfer to brand/client companies (Art. 6.1.b — performance of the relationship): Sharing talent profiles with client companies or brands for casting and production purposes. Refusal does not prevent registration in the database.
3.3 — Marketing and newsletter (optional consent — Art. 6.1.a): Sending promotional communications, news about the industry, and agency updates. Refusal does not affect other processing.
Photographs and videos submitted as portfolio materials may reveal physical features, ethnicity, or health status and therefore constitute special category data (Art. 9 GDPR). By submitting such materials, you provide explicit consent (Art. 9.2.a GDPR) for their use exclusively for casting and production purposes.
In some cases TOA di Leonardi Marco receives a talent’s personal data not directly from the data subject, but from a partner representation agency.
Source of the data. Talent management agencies, Italian or foreign, representing the data subject, which have contractually undertaken to collect their consent and to provide them with this privacy notice before transmitting any data.
Categories of data received. First and last name, date of birth, nationality, contact details (email and phone), physical measurements and sizes, photographs and portfolio material, professional experience, languages spoken. Identity documents and bank details are neither requested nor accepted through this channel: those are provided by the data subject directly, if and when the collaboration goes ahead.
Purposes and legal bases. Inclusion in the talent database and offering of professional opportunities (Art. 6.1.b GDPR, pre-contractual measures); sending the talent’s profile to clients and brands for castings and selections (Art. 6.1.b GDPR, pre-contractual measures).
Notice to the data subject. Within one month of receiving the data, and in any case no later than the first direct contact, TOA di Leonardi Marco provides this privacy notice to the data subject (Art. 14(3) GDPR).
Rights. The data subject may at any time request access to, correction of, or erasure of their data — even if they never registered on the website — by writing to info@toagency.it or to the certified email leonardimarco@cndlpec.it. Erasure requests are handled within one month, extendable by two further months for complex or numerous requests, with notice to the data subject and do not require the consent of the agency that transmitted the data.
Retention. The same periods set out in the retention section apply.
Data may be shared with: (a) internal staff of TOAgency involved in talent management; (b) brand/client companies for casting purposes (only with consent under §3.2); (c) IT service providers (hosting, CRM, email platforms) acting as processors under Art. 28 GDPR; (d) public authorities when legally required.
Data is retained for the duration of the professional relationship with TOAgency and for 5 years thereafter. Marketing data is retained until consent is withdrawn. At the end of the retention period, data is securely deleted or anonymised.
Each consent is recorded with: timestamp of collection, IP address, version of the privacy notice accepted, and specific consents given. This record serves as proof of consent pursuant to Art. 7 GDPR.
Data is processed on the hosting provider’s servers (SiteGround). Transfers to third countries may occur via cloud services (e.g. email platforms) under Standard Contractual Clauses (SCCs) or adequacy decisions. Specific recipients and applicable transfer mechanisms are available upon request.
You have the right to: (a) access your data (Art. 15); (b) rectify inaccurate data (Art. 16); (c) request erasure (Art. 17); (d) restrict processing (Art. 18); (e) data portability (Art. 20); (f) object to processing (Art. 21); (g) withdraw consent at any time without affecting prior lawful processing (Art. 7.3). To exercise these rights: info@toagency.it.
You have the right to lodge a complaint with the Italian Data Protection Authority (Garante per la Protezione dei Dati Personali): garante@gpdp.it — www.garanteprivacy.it.
Providing personal data for §3.1 purposes is necessary to be registered in the TOAgency talent database. Failure to provide it makes registration impossible. Providing data for §3.2 (transfer to brands) and §3.3 (marketing) is optional and does not affect registration.
TOAgency does not use automated decision-making or profiling systems that produce legal or similarly significant effects on data subjects (Art. 22 GDPR). Casting proposals are always evaluated by human staff.
This notice may be updated to reflect changes in applicable law or company practices. Any significant change will be communicated by email to registered talent. The current version is always available on this page. Version: 2.0 — April 5, 2026.
