Pursuant
to and having the effects arising from Article 13 of Regulation (EU) No
2016/679 of the European Parliament and of the Council of 27 April 2016
regarding the processing of personal data of natural persons and the free
circulations of such data, which repeals Directive 95/46/EC, and is also called
the General Data Protection Regulation (hereinafter "GDPR"),
we hereby inform you that the personal data voluntarily submitted by you to
Fiere Internazionali di Bologna - BolognaFiere S.p.A. (hereinafter also called
the "Company" or "BolognaFiere") will be
processed in compliance with current legal provisions governing the protection
of personal data.
1.
Data
Controller and Data Protection Officer
The Personal Data
Controller is Fiere Internazionali di Bologna - BolognaFiere S.p.A., in the
person of its pro tempore President, with headquarters in Bologna, Italy,
Viale della Fiera No. 20.
The Data
Protection Officer may be contacted at the following email address: dpo@bolognafiere.it for any need related to the processing of personal data.
2.
Purpose
of the processing and legal basis of the processing of personal data
Your
personal data will be processed for the following purposes:
a)
the
establishment and performance of the contractual relationship between you and
BolognaFiere (e.g. ticket sales, exhibition area rental, organization of events
in which you are interested in participating, provision of services ancillary
to your participation, planning of services requested by you, publication of
exhibitors' data in the event catalogue etc.). With reference to this purpose,
the legal basis for the processing is the performance of contractual or
pre-contractual obligations in relation to a contract to which you are a party.
Any refusal on your part to provide the data would make it impossible for
BolognaFiere to provide the requested service. Please note that any processing
of particular categories of personal data will only be carried out if such data
is communicated or made public directly by you. Such processing will be
legitimate on the basis of art. 9, par. 2, letter e) of the GDPR. The provision
of such data is never mandatory;
b)
compliance
with all regulatory, fiscal and administrative requirements imposed on
BolognaFiere. With reference to this purpose, the legal basis of the processing
is the fulfilment of legal obligations imposed on BolognaFiere. Any refusal on
its part to provide the data would make it impossible for BolognaFiere to
provide the requested service;
c)
in
order to conduct statistical surveys and market research. With reference to
this purpose, the legal basis of the processing is its specific consent,
without which BolognaFiere will not be able to carry out market research on its
data. In any case, you will be able to use the services offered by
BolognaFiere;
d)
the
performance of profiling activities aimed at understanding its possible needs
in relation to the provision of new services according to the preferences
expressed. With reference to this purpose, the legal basis of the processing is
its specific consent, without which BolognaFiere will not be able to carry out
profiling activities on its data. In any case, you may use the services offered
by BolognaFiere;
e)
the
performance of commercial and marketing activities related to BolognaFiere's
activities by post, internet, telephone, e-mail, MMS, SMS, from Italy or
abroad. With reference to this purpose, the legal basis for the processing is
its specific consent, without which BolognaFiere will not be able to carry out
the aforesaid commercial activities. In any case, you may use the services
offered by BolognaFiere;
f)
sending
your data to companies of BolognaFiere Group, to third parties such as
exhibition organisers or partners involved in the organisation of individual
fairs/events, including those based outside Europe, in order to allow the
latter to launch independent marketing initiatives relating to their products
and services. With reference to this purpose, the legal basis for the
processing is your specific consent, without which BolognaFiere will not be
able to send your data to third parties. In any case, you may use the services
offered by BolognaFiere;
g)
to
allow BolognaFiere to shoot videos and/or photos during fairs and events for
publication on our websites/landing pages and social profiles (e.g. Twitter,
Facebook, Youtube, etc.) and on brochures, catalogues, flyers and other printed
material promoting the events. The legal basis for the processing is the
legitimate interest of the Data Controller, since the filming carried out by
BolognaFiere for this purpose is exclusively generic. Any refusal on his part
would make it impossible for BolognaFiere to provide the requested service. Any
photographs or specific filming will be taken by BolognaFiere only with your
consent, which you may be asked to do, accompanied by appropriate information
and a dedicated disclaimer.
3.
Methods
of data processing
The
processing of personal data will be carried out using suitable paper,
electronic and/or telematics tools, with logic strictly related to the purposes
mentioned above and, in any case, in such a way as to ensure the security and
confidentiality of the data.
It should
be noted that BolognaFiere does not process your data for the purpose of making
decisions based on automated processing which produce legal effects or
significantly affect you pursuant to art. 22 of the GDPR.
4.
Recipients,
categories of recipients of personal data and data transfer in third countries
Your
personal data may come to the knowledge of shareholders, members of the board
of directors or other administrative body and, in any case, of the Data
Protection Officer, external Data Processors, Persons in charge of processing
and/or Data Processing Authors appointed by BolognaFiere in the performance of
their duties. Your personal data may be communicated to subjects who provide
BolognaFiere with services or services instrumental to the purposes indicated
above, such as, by way of example, parent companies, subsidiaries, investee
companies and/or associates, partners/joint venture partners; subjects,
entities and/or companies that manage and/or participate in the management
and/or maintenance of the Internet sites and the electronic and/or telematic
tools used by us, photographers and/or videomakers who produce video-audio
material or the related post-production, journalists and newspapers, companies
providing services necessary for the organisation and management of events
(e.g. installation of fittings and equipment, publishers of printed and on-line
catalogues, logistics, safety and security, first aid, hostesses, etc.),
diplomatic representatives, consultants, law firms, banks, marketing and
communication service providers; other subjects in charge of the selection
process and management of the related benefits for buyers (such as insurance
companies, travel agencies, hotels), etc.
The
updated list of Data processors is available at the Data Controller's
headquarters, or may be requested by email at: privacy@bolognafiere.it.
Your
personal data may be communicated and/or transferred abroad, in accordance with
the provisions of current legislation (Articles 45 et seq. of the GDPR), even
in countries outside the European Union, or if necessary, in the countries
where the recipients referred to in the previous paragraph are located. In all
the above cases, the transfer is necessary for the execution of the contract
with the Data Subject or for the execution of contractual measures adopted upon
your request, or to ascertain, exercise or defend a right in the Court; in
general, it is carried out on the basis of an adequacy decision adopted by the
Commission (Art. 45 of the GDPR) or in accordance with the standard data
protection clauses or other appropriate guarantees pursuant to Articles 46 or
49 of the GDPR. In the event that no Commission adequacy decision has been
taken and the other guarantees established by GDPR are not applicable, the
communication and/or transfer of data outside the European Union will be
subject to your consent, after having been informed that the country in
question does not provide an adequate level of protection.
5.
Data
retention
The
personal data provided by you will be processed only for the time necessary to
achieve the purposes described above, without prejudice to further terms
related to the specific conditions of legitimacy of the processing (e.g. 10
years for the exercise of defence actions in court).
6.
Rights
of the data subject
We inform
you that at any time in relation to your data, you may exercise your rights
under the limits and conditions provided for in Articles 7 and 15-22 of the
GDPR.
To
exercise these rights, described below, please contact the Data Controller at privacy@bolognafiere.it; this request will be answered in a
timely and appropriate manner.
In detail, you have the right to:
- to obtain confirmation of whether or not
personal data concerning you are being processed;
- where processing is in progress, obtain
access to personal data and information relating to the processing and request
a copy of the personal data;
- to obtain the adjustment of inaccurate
personal data and the integration of incomplete personal data;
- to obtain, if one of the conditions laid
down in Article 17 of the GDPR is met, the deletion of personal data concerning
you;
- to obtain, in the cases provided for in
Article 18 of the GDPR, the limitation of treatment;
- to receive personal data concerning you in
a structured, commonly used and readable format by an automatic device and
request their transmission to another holder, if technically feasible.
Furthermore,
you have the right to object at any time to the processing of your data carried
out for the pursuit of a legitimate interest of the Data Controller. In case of
opposition, your data will no longer be processed, unless there are legitimate
reasons for the processing prevailing over the interests, rights and freedom of
the Data Subject or for the establishment, exercise or defence of a right in
the Court.
With
reference to the processing of data for marketing and profiling purposes, you
may revoke your consent at any time or oppose its processing by writing an
e-mail to privacy@bolognafiere.it. The
revocation of your consent will not affect the lawfulness of the processing
based on the consent given before the revocation.
Finally,
pursuant to Article 77 of the GDPR, we remind you that you have the right to
lodge a complaint with the Privacy Guarantor, in the event that you believe
that your rights have been violated under the terms of the GDPR, in the manner
indicated on the website of the Privacy Guarantor accessible at www.garanteprivacy.it.
