INFORMATION REGARDING THE PROCESSING OF PERSONAL DATA FOR EVENTS UNDER ARTICLE 13 OF REGULATION (EU) 2016/679 (“GDPR”) (v.2021.01)

  1. DATA CONTROLLER

REGESTA Spa, with registered office in via Brozzoni, 9 – 25125 (Brescia) and administrative office located in via Antonio Panigada 15 -25126 Brescia, tel. 030 2426053, e-mail privacy@regestaitalia.it (hereinafter Owner)

  1. DATA PROTECTION OFFICER (DPO)

The Data Controller has appointed Data Protection Officer : MASTER KONSULT S.R.L., based in Brescia, via A. Diaz n. 28, C.F./P. VAT 03998210987, contactable at:  dpo.regesta@masterkonsult.com

  1. DATA RETENTION PERIOD

Data will be retained:

  • than event registration, up to a maximum of 10 years after each event to fulfill obligations under regulations and applicable national and supranational legislation. Data will be retained as long as obligations under regulations or applicable national or supranational law remain.

If necessary, Your data will be processed to ascertain, exercise or defend the rights of the Controller in court. The condition that makes the processing lawful is a legitimate interest of the Owner. In the case of judicial litigation, the data will be retained for the duration of the litigation, until the time limits for appeal actions are exhausted.

  1. DATA PROCESSING METHODS

The personal data provided by You, will form the subject of processing operations in compliance with the aforementioned legislation and the obligations of confidentiality that inspire the activity of the Owner. The same will be processed by authorized personnel with both computer and paper tools in compliance with appropriate technical and organizational security measures provided by the GDPR.

  1. PURPOSE AND LEGAL BASIS FOR PROCESSING
  • Provision of services requested by You:
    Registration for events and activities (conferences, workshops, seminars, etc.) organized and promoted by the Owner. The legal basis is the execution of a contract that is finalized with the confirmation of registration (mandatory).
  • Marketing and Commercial Information
    The data you provide will be processed subject to your consent, if any, for the following additional processing purposes:
    weekly sending of newsletters; sending of communications related to events (invitations to conferences, workshops, seminars, etc.) and content produced or promoted by the Owner (report publications) via e-mail and/or text messaging and/or instant messaging; Involvement in Research activities (e.g., surveys, telephone interviews, etc.) of the Owner.
    The condition that makes the processing lawful is Your consent (mandatory for the use of the service and revocable at any time).
    The data will be retained until consent is revoked and in any case up to a maximum of 10 years.
  • Profiling
    The data provided by You will be processed subject to Your consent, if any, to enable the Data Controller to create profiles (individual and/or aggregate) to process statistical analysis and/or to improve products and services, as well as to send You targeted information and promotional communications that may be of Your greatest liking and interest.
    The condition that makes the processing lawful is Your consent (mandatory for the use of the service and revocable at any time). The data will be kept until the consent is revoked and in any case up to a maximum of 10 years.
  • Communication to partner companies and professionals
    The data you provide will be communicated, subject to your consent, if any, to affiliated companies (RegestaLAB and Clarex) and to partner companies or sponsors of the event in which you have registered, who will process it for their communications concerning their own products, services, newsletters and events as well as to carry out market studies and statistical analyses. The condition that makes the processing lawful is Your consent (optional and revocable at any time). The data will be kept until consent is revoked and in any case up to a maximum of 10 years.
  • Use of images and multimedia materials for the purpose of information, promotion and dissemination.
    Images for the purposes stated herein will be processed in accordance with the principles set forth in Article 5 of the GDPR, for a period of time not exceeding 5 years for the fulfillment of the aforementioned purposes and in accordance with the principle of storage limitation, without prejudice to the processing already carried out.
    In case of participation in the events organized by the Holder (after your registration or registration to the same), the same may use the footage possibly incorporating Your image and/or Your voice (for example in case of interventions during training events), through any channel and/or medium, for the pursuit of the purposes of information, promotion and scientific dissemination.
    The processed data, including images, stills, footage and audio/video recordings (hereinafter, the “Images”), even in partial and/or modified or adapted form, made during the event will be processed in full compliance with EU Reg. 2016/679 (“GDPR”).By way of example, the Images, even in partial and/or modified and/or adapted form, during and at the event may be used for the following purposes:

     

    1. posting on the owner’s circuit websites and making the footage available via live streaming or on demand;
    2. Publication on the Holder’s social platforms, including the Holder’s social media channels;
    3. making available to the public and media such as print and television, as part of the Holder’s statutory activities;
    4. carrying out communication activities of the Owner for the purpose of orientation and promotion of its business (by way of example, presentation documents of the Owner’s research and/or sending to partners and sponsors of the Owner’s events and/or research, advertisements, information materials, brochures etc.).

    The data will be processed, also with the aid of electronic means, by individuals specifically appointed for the dissemination and communication activities of the Owner. The images collected will be stored, including in electronic form and on any technological support for the purposes and within the limits defined above and may be disseminated on institutional websites as well as through social network channels (Facebook, Twitter, Linkedin, YouTube by way of example but not limited to). The use of the images does not entitle the user to any compensation.

    The Holder has the right to access or disclose User Images without any consent, due to Art. 97 of Law no. 633/1941. This authorization implies the granting of a non-exclusive, unlimited, worldwide license, transferable to third parties, for the use of the materials and includes the rights set forth in Articles 12 to 19 of Law April 22, 1941, no. 633, including but not limited to the following: right of publication; right of reproduction in any manner or form; right of transcription, editing, adaptation, processing and reduction; right of communication and distribution to the public, including the rights of projection, transmission and broadcasting even in a summarized and/or reduced version, by any technical means, right to keep copies of the materials, including in electronic form and on any known or future invented technological support for the purposes and within the limits defined above. It is in any case excluded under the aforementioned article and under art. 10 of the Civil Code any use of the Images that may harm the honor, reputation or decorum of the person portrayed, filmed or recorded.

    If you do not wish your image to be possibly filmed during the event, we ask that you do not enter the areas where the event takes place. The condition that makes the processing lawful is the execution of a contract (which is done through your registration or registration for the Event).

  1. RECIPIENTS OF THE DATA

The data may be processed by external parties acting as data controllers such as, by way of example, self-employed professionals (e.g., law firms, accountants), Authorities and supervisory and control bodies, and in general subjects, public or private, entitled to request the data. Data may also be processed, on behalf of the Entity, by external parties designated as data processors, to whom appropriate operational instructions are given. These subjects are essentially included in the following categories:

  • Companies that offer e-mailing services and/or perform billing and/or tax management activities;
  • Companies that provide services to manage and maintain the information infrastructure of the website;
  • Companies that offer support in conducting market studies.
  1. RIGHTS OF THE DATA SUBJECT

REGESTA guarantees that you can exercise your rights under Article 12 of the GDPR at any time. In particular You have the right to:

  • to know whether the Controller holds and/or processes personal data relating to your person and to access them in full, including by obtaining a copy (Art. 15 Right to Access);
  • To rectification of inaccurate personal data or supplementation of incomplete personal data (Art. 16 Right of Rectification);
  • to the deletion of personal data held by the Data Controller if one of the grounds provided by the GDPR (Art. 17 Right to Deletion) exists;
  • to ask the Data Controller to restrict processing to only certain personal data, if one of the grounds provided for in the Regulation exists (Art. 18 Right to restriction of processing);
  • to request and receive all your personal data processed by the data controller in a structured, commonly used, machine-readable format or request transmission to another data controller without hindrance (Art. 20 Right to Portability);
  • to object in whole or in part to the processing of data for the purpose of sending advertising material and market research (so-called Consent) (Art. 21 Right to object)
  • to object in whole or in part to the processing of data in automatic or semi-automatic mode for profiling purposes (so-called Consent).

The exercise of these rights may be exercised by notifying the Data Controller/Data Protection Officer whose contact information is provided in the appropriate section of this policy.

With respect to recorded images, in view of the intrinsic nature of the data processed as images collected in real time concerning an event, certain rights are not exercisable in practice (the right to update or supplement, the right to erasure, the right to rectification under Article 16 GDPR).In the event of opposition by the data subject, the Data Controller, taking into account available technology and implementation costs, will take reasonable measures where technically feasible, including technical measures, to obscure the image of the participant who objected for legitimate reasons or requested deletion.

The information is provided only for the processing described in this statement and managed by the Owner in the foreword and for the purpose of completing this form, not also for other websites/platforms that may be consulted by the user through links. The platform that hosts the campaign may contain links to other websites that do not belong to or are not under the direct supervision of the Owner and that, therefore, is not responsible for any illegal conduct or otherwise not in accordance with current legislation, including in relation to the protection of personal data, adopted on those websites.

8. CLAIM

In case of no or unsatisfactory response, he/she has the right to apply to the competent Data Protection Authority for any violation he/she believes he/she has suffered (Data Protection Authority www.garanteprivacy.it – urp@gpdp.it).

9. LIMITATION OF LIABILITY

The information is provided only for the processing described in this statement and managed by the Owner in the foreword and for the purpose of completing this form, not also for other websites/platforms that may be consulted by the user through links. The platform that hosts the campaign may contain links to other websites that do not belong to or are not under the direct supervision of the Owner and that, therefore, is not responsible for any illegal conduct or otherwise not in accordance with current legislation, including in relation to the protection of personal data, adopted on those websites.