Skip to content
Privacy Notice – Murals Pattern Lab

Pursuant to Articles 13 and 14 of Regulation (EU) 2016/679 (GDPR) and Italian Legislative Decree 196/2003 as amended

Last update: May 20, 2026


This privacy notice describes how personal data is processed when collected through the application form of "Murals Pattern Lab – Open Call for Emerging Designers", promoted by Murals S.r.l. via sponsored advertising campaigns on Meta (Facebook and Instagram) and through the murals.it website.

This document supplements the general privacy policy published on murals.it, which remains the main reference for any aspect not specifically addressed in this notice.


1. Data Controller

Murals S.r.l.
Via Radici Nord 178/A – 42014 Castellarano (RE) – Italy
VAT and Tax ID: 04000180366
Email: info@murals.it

For any matter regarding the processing of personal data, please write to: info@murals.it

Murals S.r.l. is not required to appoint a Data Protection Officer (DPO) under Article 37 of the GDPR. The contact above is the official reference point for any privacy-related matter.


2. Categories of personal data collected

The following personal data is collected through the Meta Lead Ads form:

  • First and last name
  • Email address
  • Country of residence

In later stages of the contest, candidates who choose to send their submission to contest@murals.it may voluntarily provide additional personal data, including:

  • Last name
  • Short professional biography
  • Links to public portfolios or professional profiles
  • Additional email or contact details
  • Any images that may contain identifying elements of the applicant

Such data will be processed in accordance with the principles set out in this notice.


3. Purposes and legal basis of processing

The personal data collected is processed solely for the following purposes:

a) Management of applications to the "Murals Pattern Lab" contest, including the evaluation of projects by the internal jury;

b) Operational communications related to the contest, including: requests for additional information, communication of results, sharing of guidelines and technical materials;

c) Follow-up contact with selected designers, for the purposes of project development and possible production.

Legal basis of processing:

  • explicit consent of the data subject expressed at the time of submitting the form (Art. 6(1)(a) GDPR);
  • performance of pre-contractual measures requested by the data subject (Art. 6(1)(b) GDPR).

The data collected through this form will not be used for marketing activities, newsletter campaigns, commercial profiling or transfers to third parties.


4. Methods of processing

Processing is carried out exclusively through electronic tools, in compliance with the principles of lawfulness, fairness, transparency, data minimisation, accuracy, purpose limitation and security set out in Article 5 of the GDPR.

Data collected through Meta Lead Ads is stored within the Meta Business Suite platform and periodically exported in CSV format by authorised internal personnel of Murals S.r.l. for the management of applications.

Adequate technical and organisational measures are in place to ensure the confidentiality, integrity and availability of the data processed, as well as to prevent loss, unauthorised access, alteration or disclosure.


5. Data retention period

Personal data collected through this form will be kept for a maximum period of 6 (six) months starting from the official closing date of the contest (July 10, 2026).

After this period, data will be permanently deleted or anonymised, with the exception of data relating to selected designers who enter into a contractual collaboration with Murals S.r.l., for whom the retention periods provided by applicable civil, tax and accounting regulations will apply.

The data subject may at any time request the early deletion of their data by writing to info@murals.it.


6. Recipients of the data

The personal data collected may be communicated to the following parties, each appointed as Data Processor pursuant to Article 28 of the GDPR where applicable:

  • Internal staff of Murals S.r.l. authorised to process data and trained on data protection regulations;
  • Meta Platforms Ireland Ltd. (for data collected through Lead Ads on Facebook and Instagram), acting as data processor;
  • Google Ireland Ltd. (for data exported automatically from the Lead Ads form to a Google Sheets file owned by the Data Controller), acting as data processor. Data may be processed on servers located in the United States of America in accordance with the EU-U.S. Data Privacy Framework and Standard Contractual Clauses approved by the European Commission.
  • External service providers of technical, IT and logistical services occasionally involved, exclusively for the purposes set out in this notice.

Personal data will under no circumstances be publicly disclosed or transferred to third parties for commercial purposes.


7. Transfer of data outside the European Union

Some data collected through Meta Lead Ads may be processed on servers located outside the European Economic Area (EEA), in particular in the United States of America, by Meta Platforms Inc.

These transfers take place in accordance with Article 46 of the GDPR and rely on:

  • the EU-U.S. Data Privacy Framework adopted by the European Commission's adequacy decision of July 10, 2023;
  • Standard Contractual Clauses approved by the European Commission.

Further information on transfers operated by Meta is available in Meta's privacy policy: https://www.facebook.com/policy.php


8. Rights of the data subject

As a data subject, you have the right at any time to exercise the rights set out in Articles 15 to 22 of the GDPR, and in particular:

  • right of access to your personal data (Art. 15 GDPR);
  • right to rectification of inaccurate data or completion of incomplete data (Art. 16 GDPR);
  • right to erasure ("right to be forgotten") (Art. 17 GDPR);
  • right to restriction of processing (Art. 18 GDPR);
  • right to data portability (Art. 20 GDPR);
  • right to object to processing (Art. 21 GDPR);
  • right to withdraw consent at any time, without affecting the lawfulness of processing based on consent before its withdrawal.

To exercise these rights, please send a request to: info@murals.it

Murals S.r.l. will reply without undue delay and in any event within 30 days of receipt of the request.


9. Right to lodge a complaint with the Supervisory Authority

If the data subject considers that the processing of their personal data infringes applicable regulations, they always have the right to lodge a complaint with the Italian Data Protection Authority (Garante per la Protezione dei Dati Personali):

Piazza Venezia, 11 – 00187 Rome – Italy
Email: garante@gpdp.it
PEC: protocollo@pec.gpdp.it
Website: www.garanteprivacy.it

Data subjects residing in other EU Member States may also lodge a complaint with their national supervisory authority.


10. Changes to this Privacy Notice

Murals S.r.l. reserves the right to modify or update this privacy notice at any time to reflect changes in regulations or organisational matters.

Any changes will be published on this web page and the data subject is invited to consult it periodically. The date of the last update is always indicated at the top of the document.


Murals S.r.l.
Via Radici Nord 178/A – 42014 Castellarano (RE), Italy
info@murals.it – murals.it