Snapshot 55132
Normalized text
Scripts and page chrome removed; this is what change detection compares.
Privacy Policy INFORMATIVE PLATFORM INSTRUCTIONS This text is available to any person who supplies their personal data to Federlegno Arredo Eventi S.p.A. using the platform of Salone del Mobile. Milano PRIVACY NOTICE Pursuant to Article 13 of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 Pursuant to Article 13 of the General Data Protection Regulation – Regulation (EU) 2016/679 of the European Parliament and of the Council of 27th April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (hereinafter the “GDPR”), please note the following information regarding the processing of your personal data provided by completing the registration form for the “Salone del Mobile.Milano” trade fair (hereinafter, the “Event”) or the various forms available on the website www.salonemilano.it (hereinafter, the “Website”) Data Controller The Data Controller is Federlegno Arredo Eventi S.p.A., with its registered office at Foro Buonaparte 65, Milan, Tax Code and Milan Business Register number: 06987590152, email privacy@federlegnoarredo.it (hereinafter the “Data Controller” or “FLA Eventi”). Data Protection Officer (hereinafter “DPO”) The Data Protection Officer is TZ&A Studio Associato (hereinafter also “DPO”). To exercise your rights and for any correspondence, issues and/or requests for clarification regarding the protection of your personal data, please contact the DPO at dpoflaeventi@studiotza.it Mandatory purposes for which processing does not require your consent Purposes Base giuridica del trattamento Management of data provided for the purposes of registering for the Event and purchasing a ticket, and compliance with the relevant legal and tax obligations (Article 6(1)(b) of the GDPR) Performance of a contract (Article 6(1)(c) of the GDPR) Processing necessary to comply with a legal obligation to which the Data Controller is subject Processing of data provided for the purposes of registering on the Website and for digital events, and for the use of related services, including editorial services (Article 6(1)(b) of the GDPR) Performance of a contract Archiving and retention of data; sending of information and communications, including electronic communications, requested by you via the Website; sending of information and documents relating to your relationship with FLA Eventi (electronic communications may include tracking pixels for security and authentication purposes and for mandatory institutional or service messages) (Article 6(1)(b) of the GDPR) Performance of a contract (Article 6(1)(c) of the GDPR) Processing necessary to comply with a legal obligation to which the Data Controller is subject (Article 6(1)(f) of the GDPR) Processing necessary for the purposes of the Data Controller’s legitimate interests relating to the organisational and administrative management of its organisation Optional purposes for which processing does not require your consent Purposes Legal basis for processing Commercial and direct marketing activities involving the sending of communications to the contacts you have provided, relating to services similar to those already provided, provided that you do not object to such use initially or in response to subsequent communications (Article 130 of the Data Protection Act) (Article 6(1)(f) of the GDPR) Processing necessary for the pursuit of the Data Controller’s legitimate interests relating to its organisational and commercial management Anonymous surveys aimed at measuring the level of satisfaction with the digital experience on the Salone del Mobile.Milano website/app (Article 6(1)(f) of the GDPR) Processing necessary for the pursuit of the Data Controller’s legitimate interest in monitoring and improving the quality of its services Anonymous surveys designed to measure the level of satisfaction regarding visitors’ trade fair experience (Article 6(1)(f) of the GDPR) Processing necessary for the pursuit of the Data Controller’s legitimate interest in monitoring and improving the quality of its services Optional purposes for which processing requires your consent Purposes Base giuridica del trattamento Disclosure of your personal data to parties participating in the Event as exhibitors (hereinafter “Exhibitors”) for their own independent processing for promotional and marketing purposes, involving the provision of material and information concerning the Exhibitors and their activities, services, products, promotions, events, special offers and other information, including through the sending of relevant material in paper and/or electronic form (including via newsletters) and/or by telephone. (Article 6(1)(a) of the GDPR) Consent of the data subject The data subject gives their consent when they present the QR code affixed to their Event entry ticket to the Exhibitor and have it scanned. Once the QR code has been scanned, personal data will be transferred to the Exhibitor, who will process it as an independent data controller for promotional and marketing purposes. Promotional and marketing material – including the provision of material and editorial content relating to the Event’s exhibitors and commercial partners (such as, for example, institutional partners, official partners, media partners and the official timekeeper), their services, products, activities and events, as well as promotional material and content from FLA Eventi (including new services, products, promotions, trade fairs, events organised and/or sponsored by FLA Eventi, special offers and other information), via telephone and/or by sending material in paper and/or electronic form, including via newsletters, and including the use of tracking technologies (tracking pixels) to check email opens and interaction with emails sent. (Article 6(1)(a) of the GDPR) Consent of the data subject (Article 122 of the Data Protection Act) Consent of the data subject Profiling and processing of your personal data, preferences, habits and interests (such as, for example, purchase data, including tickets, visits and activities carried out during the Event, newsletter engagement, and browsing data) using automated means, in order to identify and offer services, products and benefits that are more appropriate and tailored to your needs, including through the sending of personalised communications, market research and/or surveys. (Article 6(1)(a) of the GDPR) Consent of the data subject Recipients of personal data For the purposes set out above, your personal data may be disclosed to: employees and/or contractors of the Data Controller, duly appointed as authorised persons and instructed on how to process such data; other companies within the Group to which FLA Eventi belongs, for the management of specific functions and/or services; third parties other than the Data Controller, such as: Third parties or categories Purpose IT companies Management, maintenance and updating of the systems and software used by the Data Controller Providers of networks, electronic communications services and IT and telecommunications services for the archival, storage and IT management of data Hosting, housing, cloud, SaaS and other remote IT services essential for the performance of the Data Controller’s activities; archival and retention services for electronic documents in accordance with the law Parties with whom FLA Eventi engages in various capacities for the organisation of the Event and the services offered via the Website Organisational, administrative, financial and accounting management. Parties engaged by FLA Eventi to carry out surveys and market research Management of surveys and market research Communication and marketing service providers Communication and marketing activities Consultants, professionals, law firms, arbitrators Judicial, extrajudicial and insurance activities in the event of claims Organisational, administrative, financial and accounting management Regulatory and supervisory authorities and bodies and, in general, public or private entities performing public-law functions Compliance with applicable laws and legal procedures and to respond to requests from the competent authorities Companies within the Group to which FLA Eventi belongs and third parties to whom your personal data may be disclosed act as: data controllers, i.e. those who determine the purposes and means of processing personal data; data processors, i.e. entities that process personal data on behalf of the Data Controller; joint controllers who, together with the Data Controller, determine the purposes and means of such processing. An up-to-date list and details of the entities identified as data controllers, data processors or joint controllers are available from the Data Controller. The processing of data by certain third parties may involve the transfer of data to countries outside the EU. In this case, we will ensure that the data is properly and adequately protected, in accordance with the GDPR. Personal data retention period We set out below the retention period for personal data or, where this is not possible, the criteria used to determine that period. Personal data and documents Retention period or criteria for determining it Personal details and documents relating to your relationship with the Data Controller. For the period necessary to fulfil the purposes of the processing and, in any event, for a period not exceeding five years from your last interaction with the Data Controller. Events constituting such an “interaction” may include, by way of example and without limitation, accessing the personal area of the Website, purchasing a ticket for the Event, taking part in a survey or opening an email sent to you, where applicable. Personal data may also be retained thereafter to comply with legal obligations and/or to assert or protect the Data Controller’s rights, where necessary. Data collected and processed in connection with satisfaction surveys For the period necessary to fulfil the purposes of the processing. Contact details for promotional and marketing purposes, newsletters and invitations to events, as detailed above For the period necessary to fulfil the purposes of the processing and, in any event, for a period not exceeding five years from your last interaction with the Data Controller (hereinafter, “Interaction”). Events that constitute an Interaction may include, by way of example and without limitation, accessing the personal area of the Website, purchasing a ticket for an Event, taking part in a survey or opening an email sent to you. Email measuring and tracking (opening, IP address, device, timestamp) For the period necessary to fulfil the purposes of the processing and, in any event, for a period not exceeding five years from your last interaction with the Data Controller. You may opt out of tracking whilst continuing to receive emails from FLA Eventi, without any restriction on the service. Data required for mandatory institutional or service-related communications may be retained for the period specified by the applicable legislation and, where necessary, until the expiry of the relevant limitation periods. Profiling For the period necessary to fulfil the purposes of the processing and, in any event, for a period not exceeding 18 months. Rights of the data subject We wish to inform you of certain rights provided for under the GDPR with regard to personal data and its processing, which you may exercise by contacting the Data Controller. Right Description Right to withdraw consent (Article 13(2)(c)) You have the right to withdraw your consent to processing where consent is required, without this affecting the lawfulness of processing based on consent prior to withdrawal Right of access to data (Article 15) You may request: a) the purposes of the processing; b) the categories of personal data concerned; c) the recipients or categories of recipients to whom the personal data have been or will be disclosed, in particular if they are recipients in third countries or international organisations; d) where possible, the envisaged period for which the personal data will be stored or, if this is not possible, the criteria used to determine that period; e) whether the data subject has the right to request from the Data Controller the rectification or erasure of personal data, or the restriction of processing of personal data concerning them, or to object to such processing; f) the right to lodge a complaint with a supervisory authority; g) where the data have not been collected from the data subject, any available information as to their origin; (h) the existence of automated decision-making, including profiling as referred to in Article 22(1) and (4), and, at least in such cases, meaningful information about the logic involved, as well as the significance and the envisaged consequences of such processing for the data subject. You have the right to request a copy of the personal data being processed Right to rectification (Article 16) You have the right to request the rectification of inaccurate personal data concerning you and to have incomplete personal data completed Right to be forgotten (Article 17) You have the right to obtain from the Data Controller the erasure of personal data concerning you if the personal data are no longer necessary in relation to the purposes for which they were collected or otherwise processed Right to restriction of processing (Article 18) You have the right to obtain from the Data Controller the restriction of processing where you have contested the accuracy of the personal data (for the period necessary for the Data Controller to verify the accuracy of such personal data) or where the processing is unlawful, but you oppose the erasure of the personal data and request instead that its use be restricted, or where you need it for the establishment, exercise or defence of a right in court, when the Data Controller no longer requires them. Right to data portability (Article 20) You have the right to receive the personal data concerning you that you have provided to us in a structured, commonly used and machine-readable format, and you have the right to transmit that data to another data controller if the processing: (i) is based on consent, (ii) on a contract, and (iii) is carried out by automated means, unless the processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority, and such transfer would not prejudice the rights of a third party. Right to object (Article 21) You have the right at any time to object, in whole or in part, to the processing of your personal data where the processing is carried out to pursue a legitimate interest of the Data Controller or where the processing is carried out for direct marketing purposes. To exercise your rights, please contact privacy@salonemilano.it. Should you consider that the processing of your personal data is in breach of the provisions of the GDPR, you have the right to lodge a complaint with the Supervisory Authority (Article 77 of the GDPR). The exercise of the aforementioned rights is subject to the limitations, rules and procedures laid down by the GDPR, which the data subject must be aware of and comply with. Furthermore, in accordance with Article 12(3), the Data Controller shall provide the data subject with information regarding the action taken without undue delay and, in any event, no later than one month from receipt of the request. This time limit may be extended by two months, if necessary, taking into account the complexity and number of requests. The Data Controller shall inform the data subject of such an extension, and of the reasons for the delay, within one month of receiving the request. Changes and updates This Privacy Notice may be subject to amendments and/or additions, including as a result of the application of the GDPR and any future regulatory changes and/or updates. An updated Privacy Notice is always available on the Data Controller’s website. ********** The personal data provided may be processed by the Data Controller with or without the use of IT tools. Please also note that the provision of your personal data for the mandatory purposes indicated is a legal or contractual obligation or a necessary requirement for the performance of contractual obligations; therefore, you are obliged to provide your personal data, as failure to do so will make it impossible to manage your relationship with FLA Eventi. Finally, please note that, during the Event, you may be photographed and/or filmed, or appear in photographs taken within the exhibition centre (collectively, the “Images”). The Images, for the promotional and advertising purposes of FLA Eventi, are intended for publication and dissemination via a number of communication channels, including the Website, on social media pages (such as, by way of example, Facebook®, Instagram®, Twitter® and LinkedIn®) and in print magazines and catalogues, including in the form of advertisements. The right to use and exploit the Images is granted free of charge.