Dear Sir / Madam
We wish to inform you that the EU Regulation 2016/679 (“European Regulation on the protection of personal data”) provides for the protection of persons and other subjects and respect for the processing of personal data. According to the art. 13, therefore, we provide you with the following information:
The Data Controller, pursuant to Article 28 of the Code regarding the protection of personal data, is VENDITALIA SERVIZI SRL, with headquarters in VIA NAPO TORRIANI, 29 – 20124 MILANO (MI), Tel. 02/33105685, e-mail : firstname.lastname@example.org, in the person of its legal representative.
Treatments carried out and purposes
VENDITALIA SERVIZI SRL wishes to inform you that your data will be collected and processed for the following purposes:
a) Execution of the contractual services detailed in the contract signed between the Parties;
b) Execution of administrative / accounting requirements (including legal obligations);
c) the organization, conservation, consultation, communication to the employees for the realization of promotional and / or sector journalistic articles in the context of the fair, the elaboration, the modification, the creation of the catalogue both on paper (available at the fair ) and online, the creation of the map of the pavilions on paper (available at the fair) and online;
d) Subject to your consent, execution of marketing activities for sending informative material, including newsletters, which will be sent via email, post, telephone contact, newsletter and text messages;
e) Subject to your consent, the collection and publication of images and / or videos in public and / or private areas (internet, social networks, etc.).
The treatments carried out with the aid of analogical / IT tools, in compliance with the provisions of art. 32 of the GDPR 2016/679 concerning safety measures, by specifically appointed persons and in compliance with the provisions of art. 29 GDPR 2016/679, do not provide for the use of automated decision-making processes including profiling, as per article 22, paragraphs 1 and 4, of EU Regulation no. 679/2016.
Legal basis of the processing
The processing is carried out based on the existence of a contractual relationship between the Data Controller and the Data Subject and, in any case, the processing is necessary to achieve the legitimate interest of the Data Controller.
Provision of data
The provision of data is mandatory to achieve the purposes referred to in points a) and b) and c) and the unavailability of the same does not allow the fulfilment of the above obligations or the administrative and accounting management of the relationship.
For the purposes indicated in point d) execution of marketing activities and sending of informative material, made by fax, email, text messages, post and for the purposes indicated in point e) collection of images and / or videos, the conferment of data is carried out only with your specific consent.
Communication of data and scope of dissemination
The data may be communicated to the following categories of subjects, of which VENDITALIA SERVIZI SRL uses for the performance of some functional activities for the provision of its services: Accounting Firm for accounting / tax compliance; Payments Banks; Law Firm in the event of a dispute; Public Administration for mandatory communications by law; Employees and employees in relation to the management of exhibition activities, and related tasks.
The data will not be disseminated.
The data will be kept for the time necessary to carry out the aforementioned purposes in compliance with the contractual and legal terms. Specifically, tax and accounting data 10 years from the termination of the relationship.
Transfer of personal data to a third country
Your data will not be transferred outside the European Union.
Rights of the interested party
You are given the right to ask the Data Controller for access to personal data and the correction or deletion of the same, excluding the exceptions provided for, or the limitation of the processing that concern you or the opposition to their treatment, in addition to the right to data portability.
Furthermore, the Data Controller will interrupt the processing when the notice of revocation of the previously expressed consent is received from him.
Complaint to the supervisory authority
The interested party has the right to lodge a complaint with the Supervisory Authority in the event that their requests for information addressed to the Data Controller have not given satisfactory answers
The reference Authority is the Guarantor for the Protection of Personal Data.
If you wish to have more information on the processing, or exercise your rights, you can contact the following email address: email@example.com.