INFORMATION ON THE PROCESSING OF PERSONAL DATA
This is to inform you that at our company your personal data is processed in full compliance with the current national legislation of the European Union on the processing of personal data
Pursuant to Art. 13 and 14 of EU REGULATION 679/2016 we inform you that:
- The data controller is Next Exhibition srl Unipersonale, with registered office in Turin – Corso Vittorio Emanuele II 92. For any information and/or requests regarding the processing of your data, or to exercise your rights under Art. 7 of the Privacy Code, you may contact the administration by phone at +39.011 19214730 or by writing to info@nextexhibition.it.
- There is no provision for the above company to appoint a Data Protection Officer since the processing carried out does not fall within the cases of Art. 37 of Reg. 679/2016.
- Purpose of processing: Personal data are processed as part of the normal business activities of the company according to the following purposes:a) directed exclusively to the fulfillment of contractual obligations or for the acquisition of pre-contractual information, as well as for information related to requests from the interested party for supplies and services.
(b) related to obligations under laws, regulations and EU legislation as well as provisions issued by authorities empowered to do so and by supervisory and control bodies, as well as obligations in tax and accounting matters;
(c) for communication activities, including those of a commercial nature, if the data subject has given specific consent. - Category of data collected: The data collected fall into the category of personal identification data (personal details, tax code or VAT number, details of identification documents) closely related and instrumental to the management of relations with customers and suppliers (e.g. acquisition of information prior to the conclusion of a contract, execution of operations on the basis of obligations arising from the concluded contract, fulfillment of tax and accounting obligations, etc.).
- Methods of data processing: The data are processed using paper, computer and telematic tools with logic strictly related to the purposes themselves and, in any case, in such a way as to ensure the security and confidentiality of the data. In particular, we inform you that your data are:
– processed in a lawful, fair and transparent manner;
– collected for the purposes determined above, explicitly and legitimately, and subsequently processed in a manner that is not incompatible with those purposes;
– adequate, relevant and limited to what is necessary in relation to the purposes for which they are processed (“data minimization”);
– accurate and, if necessary, updated, deleted and/or corrected;
– kept in a form that permits identification for a period of time not exceeding the achievement of the purposes for which they are processed;
– processed in a manner that ensures adequate security of personal data, including protection, through appropriate technical and organizational measures, from unauthorized or unlawful processing and accidental loss, destruction or damage. - Data disclosure: For the pursuit of the stated purposes, your data may be disclosed for the purposes mentioned in point 4 to companies that carry out the acquisition, recording and processing of data contained in documents or media in order to carry out texts and specifications, conventions; legal; designers companies among which, those for information technology, to enable the management of electronic tools, filing procedures, printing of correspondence and management of incoming and outgoing mail; companies in charge of fraud control, debt collection and the detection of credit risks and insolvencies; to Public Administrations, in accordance with the law; to all those entities that perform banking, financial and insurance services; service companies for the management of the company’s information system; companies that carry out transmission, enveloping, transportation and sorting of communications; firms or companies within the scope of assistance and consulting relationships; Supervisory Board; certifying bodies of the Quality System; Board of Statutory Auditors; individuals who carry out control, audit and certification of the activities carried out by the company; individuals to whom the communication is necessary or functional for the proper fulfillment of contractual obligations undertaken, as well as obligations arising from the law or who have access to personal data by virtue of regulatory or administrative measures; accountant and contracting stations. In addition to this, your data may be transferred to partner companies or companies that sponsor events and exhibitions organized by Next Exhibition.
- Dissemination of data: Personal data are not subject to dissemination.
- Transfer abroad: Your personal data may be transferred out of the country in accordance with the provisions of the EU-US and Swiss-US Privacy Shield Framework (EU-US Privacy Shield Framework and Swiss-US Privacy Shield Framework).
- Mandatory/optionality of data provision: Without prejudice to the personal autonomy of the person concerned, the provision of personal data, whether common or falling into particular categories, may be:- obligatory in relation to the obligations laid down by laws, regulations and European Union legislation, as well as provisions issued by authorities empowered to do so and by supervisory and control bodies, as well as obligations in tax and accounting matters;
– inescapable to the conclusion of new relationships or to the management and execution of existing or ongoing contractual relationships. - Refusal to provide data: Any refusal on the part of the data subject to provide personal data for the purposes indicated in section 3 letters a) (b) of this notice will result in the inability to proceed with the proper and complete execution of the contract.
- Data retention period: The personal data concerning you will be kept in a form that allows your identification for a period of time not exceeding the achievement of the purposes for which they are processed, and in any case in compliance with legal obligations regarding the time of data retention (tax assessments and limitation periods for the exercise of rights) for a maximum period therefore of ten years from the termination of each contractual relationship.
- Rights of the data subject: You may apply to the data controller to enforce your rights, as provided for in the Regulations, and in particular you have the right to:a) request from the data controller access to and rectification or erasure of your personal data or restriction of the processing of personal data concerning you and to object to their processing, as well as the right to data portability;
(b) to file a complaint with a supervisory authority;
(c) to know the source from which the personal data originated and, if applicable, whether the data came from publicly accessible sources;
(d) to obtain confirmation from the data controller as to whether or not personal data concerning him or her are being processed, and if so, to obtain access to the personal data and the following information:
– the purposes of processing;
– the categories of personal data in question;
– The recipients or categories of recipients to whom the personal data have been or will be disclosed, particularly if recipients in third countries or international organizations;
– when possible, the intended retention period of personal data or, if not possible, the criteria used to determine this period;
e) to request from the data controller the rectification or erasure of personal data or the restriction of the processing of personal data concerning him or her or to object to their processing;
(f) to know, where the data are not collected from the data subject, all available information about their origin, the existence of automated decision-making, including profiling, and, at least in such cases, meaningful information about the logic used, as well as the importance and the expected consequences of such processing for the data subject;
(g) to obtain from the data controller the rectification of inaccurate personal data concerning him/her without undue delay;
h) to obtain, taking into account the purposes of processing, the integration of incomplete personal data, including by providing a supplementary statement;
(i) to obtain from the data controller the erasure of personal data concerning him/her without undue delay;
(j) to obtain from the data controller the restriction of processing in the event that he or she disputes the accuracy of the personal data, or objects to the deletion of the data, or – although the data controller no longer needs the data for the purposes of processing – the data are necessary for the establishment, exercise or defense of a legal claim, or has objected to the processing carried out by the data controller in pursuit of his or her own legitimate interest;
k) to receive in a structured, commonly used, machine-readable format personal data concerning him or her and to transmit such data to another data controller without hindrance from the data controller to whom he or she has provided them (so-called right to data portability);
(l) to object at any time, on grounds relating to his or her particular situation, to the processing of personal data concerning him or her (when the processing is necessary for the performance of a task carried out in the public interest or in connection with the exercise of official authority vested in the controller, or when the processing is necessary for the pursuit of a legitimate interest of the controller), including profiling on the basis of such provisions, as well as to object to the processing of data carried out for direct marketing purposes. - The above rights may be exercised by written request addressed to the Data Processor by registered letter, or also by e-mail to the following e-mail address: info@nextexhibition.it