INFORMATION ON THE PROCESSING OF PERSONAL DATA

IN ACCORDANCE WITH REGULATION (EU) 2016/679 (“GDPR”)

 

 

1.     INTRODUCTION

Pursuant to article 13 of Regulation (EU) 2016/679, concerning the protection of individuals with regard to the processing of personal data (“GDPR”), we provide you with the requested information on the processing of personal data concern you (“Data”) carried out by LOMBARDIA FIERE in relation to:

  1. a) registering on the website beitalianshow.com (hereinafter, “Site”);
  2. b) registering to events promoted and organized by LOMBARDIA FIERE;
  3. c) using the services offered by LOMBARDIA FIERE through the Website (hereinafter, “Services”).

 

 

2.     PERSONAL DATA PROCESSED

Holder of the treatment

LOMBARDIA FIERE

MAIN HEADQUARTERS c/o UNIONCAMERE LOMBARDIA:

Via Ercole Oldofredi 23 – 20124 Milan

ADMINISTRATIVE HEADQUARTERS c/o CENTRO FIERA S.p.A.:

Via Brescia 129 – 25018 Montichiari (BS)

Pec: lombardiafiere@pec-legal.it – info@lombardiafiere.it

(hereinafter, “Company”)

 

3.     DATA PROCESSED AND OBLIGATORY OF THEIR PROVISION

Data

 

Data” is intended as: name, surname, place, and date of birth, fiscal tax code, VAT number, residence, ID number, telephone contact, email

 

4.     PURPOSE OF PROCESSING AND LEGAL BASIS

PURPOSE LEGAL BASIS DURATION OF STORAGE
Allow one to register to the Site or Event / use the newsletter and/or services such as personalized ticket booking online, etc. Execution of a contract which you are a part of For the duration of the contract [and, after the termination, for 10 years]
Need to fulfill legal obligations

 

 

If necessary, to assert and/or defend the rights of the Company in civil, criminal and/or administrative litigation. Legitimate interest Throughout the duration of the dispute, up until the terms of the practicability of the appeals have all been exhausted.
Video surveillance for security protection Legitimate interest 7 days

Consent (optional and revocable at any time).

 

24 months.
Profiling purposes: analysis of your preferences, habits, behaviors or interests in order to send you personalized commercial communications using the methods indicated above.

Consent (optional and revocable at any time).

 

12 months.
Once the storage periods indicated above have elapsed, the Data will be destroyed, deleted or made anonymous, consistent with the technical cancellation and backup procedures.

 

  1. METHODS OF PROCESSING

Data processing is based on the principles of correctness, lawfulness, transparency and data minimization (privacy by design); it may be carried out either manually or through automated procedures designed to store, process and transmit them, and it will take place through appropriate technical and organizational measures, taking into account the state of the technique and implementation costs, to guarantee, among other things, the security, confidentiality, the integrity, availability and resilience of the systems and services, thereby avoiding the risk of the loss, destruction, unauthorized access or disclosure or, in any case, illicit use, as well as by reasonable measures to immediately cancel or correct inaccurate data for the purposes for which they are processed.

 

 

  1. RIGHTS OF THE INTERESTED PARTY (ARTICLES 15- 22 of the GDPR)

6.1 The parties concerned are granted the rights referred to in Articles 15 to 22 of the GDPR, where applicable.

6.2 In particular, the interested parties may request access to the data from the Data Controller, the correction of inaccurate Data, integration of incomplete Data, deletion of Data, as well as the limitation of the processing in the cases provided for by article 18 of the GDPR[1].

6.3 The interested parties have the right to object at any time, in whole or in part, to the processing of the Data necessary for the pursuit of the legitimate interests of the Data Controller.

6.4. Furthermore, the interested parties in the cases provided for by article 20 of the GDPR[2]  for the exercise of the right to portability, have the right to receive the data provided to the Controller in a structured manner that is commonly used and in a readable form by an automatic device, as well as, if technically feasible, to transmit them to another holder without obstacles.

6.5 The interested parties have the right to revoke the consent given at any time for marketing and/or profiling purposes, as well as to oppose to the processing of data for marketing purposes, including profiling that is related to direct marketing. There will always be a possibility for the interested party who prefers to be contacted for the aforementioned purpose exclusively through traditional methods, to express his opposition only to the receipt of communications through the automated methods.

6.6 The interested parties have the right to file a complaint with the competent Supervisory Authority (in particular in the Member State they normally reside in or work in or in the State in which the alleged violation has been committed).

6.7 These rights may be exercised by registered mail to the following address: LOMBARDIA FIERE – ADMINISTRATIVE HEADQUARTERS c/o CENTRO FIERA S.p.A.: Via Brescia 129 – 25018 Montichiari (BS) or by email at the address: info@lombardiafiere.it.

 

 

  1. MANAGEMENT OF PRIVACY MODEL

7.1 The Company, as Data Controller, has prepared a model for the protection of personal data, identifying roles and responsibilities in terms of data protection, identifying, in particular, the managers of corporate organizational units, limited to the processing of their own competence , as managers for the execution of the model in compliance with the applicable regulatory requirements (“Referrals of Privacy”).

7.2 The Data may be processed by employees of the corporate functions appointed for the pursuit of the aforementioned purposes (hereinafter, “Authorized Employees”). These Authorized Employees have been appointed as Data Processors and have received appropriate operating instructions in this regard.

 

 

  1. CATEGORIES OF RECIPIENTS WHICH DATA MAY BE DISCLOSED TO AS HOLDERS OR THAT COULD COME TO KNOWLEDGE AS MANAGERS

8.1 The Data may be processed by third parties operating as Data Controllers such as, for example, authorities and supervisory and control bodies and in general subjects, public or private, entitled to request the Data.

8.2 The Data may also be processed, on behalf of the Company, by external parties designated as Managers, who are given appropriate operating instructions. These subjects are essentially included in the following category:

  1. companies that offer website maintenance services.

 

 

 

 

[1] And that is if:

  1. the interested party disputes the accuracy of the personal data for the period necessary so that the data controller may verify the accuracy of such personal data;
  2. the processing is illegal and the interested party opposes the cancellation of the personal data and asks instead that its use be limited;

 

  1. although the data controller no longer needs it for processing purposes, personal data are necessary for the data subject to verify, exercise or defend a right in a judicial court;
  2. the interested party has opposed to the treatment pursuant to Article 21, paragraph 1, pending verification of the possible prevalence of the legitimate reasons of the data controller with respect to those of the interested party.

[2] And that is, if the treatment is based on consent pursuant to article 6.1 a, or article 9.2, a, or on the contract pursuant to article 6.1, b, of the GDPR and is carried out with automated tools.