- The EU Privacy Regulation 679/2016 (hereinafter referred to as “GDPR”) requires Italian Exhibition Group S.p.A., with registered office in Via Emilia, n. 155, 47921 Rimini - Italy (hereinafter referred to as “IEG”), in the capacity of the Data Controller in charge of the processing of the personal data provided by the Data Subject, or otherwise acquired through the mutually established relationship, to abide by a set of information rules within the context of the aforementioned data processing. Said personal data include -- in addition to personal, ID and/or contact details (e.g. name and surname, email address etc.) -- photographic pictures and videos of natural persons as well as the transcription texts of verbal statements (interviews) issued to IEG, and any authorial and/or creative material produced by the parties involved (or by related third parties) and used by IEG in connection with the aforesaid relationship (e.g. finished products, creative products, prototypes, presentation slides, convention reports etc.), and photographic and/or video reproductions of authorial and/or creative materials;
- Articles 96 and 97 of the Law dated 22nd April 1941, No 633 on the subject of the “protection of copyright and other rights related to its exercise”, also imply IEG’s obligation to collect the prior written consent by the party involved regarding the use of the aforementioned materials, objects and products (e.g. jewels, creative materials etc.) as well as their photographic and video reproductions and any photographic, text and audio files of any interviews provided by the party involved.
We hereby declare, pursuant to articles 13-14 of the GDPR, that IEG will, also through their own staff and/or third-party suppliers, collect and process photographic images and/or interviews related to individuals and material objects (e.g. jewels, creative materials etc.) of their property and/or production, attributable to the signatory subject, for either exclusive disclosure or corporate communication as well as for advertising and promotional purposes, in particular, merely by way of example and not in an exhaustive fashion, through publishing in newspapers, magazines, TV programmes, posters, informative and/or illustrative brochures, newsletters, websites -- such as the www.iegexpo.it website and related sites -- social media profiles (Facebook, Twitter, WhatsApp, YouTube, Vimeo and the likes), on e-books (digital publishing), and in printed publications (exhibition catalogues, Trendbook, etc.), in general (please note that this list is only an example and not necessarily exhaustive).
The processing of personal data may be carried out by IEG officers by means of electronic and/or paper systems and methods according to the aforementioned purposes. Data processing is subjected to strict security measures so as to minimise the risk of access by the authorised personnel during the processing stages prior to publication.
Consent to the aforementioned processing by the party involved is optional, but consent refusal will prevent Italian Exhibition Group SpA to collect and process the aforementioned data for the purposes of the disclosure or corporate communications, advertising and promotion initiatives indicated above (the above mentioned consent being the legal basis for processing). Personal data will be processed as long as the consent remains in place (on the assumption that said consent is the legal basis for processing), whilst if they are required for the fulfilment of either contractual and/or legal obligations, the data will be processed for up to 10 years from the date of termination of the related contract.
By signing this document, you declare that you do not require any financial compensation for the use of the aforementioned materials, photographs, images (including authorial and/or creative material), videos and/or any other data mentioned above.
The data in question may be transmitted by IEG to the companies in charge of marketing analysis, advertising, communications and/or to public relations agencies, printing companies producing advertising and promotional materials as well as web design and web marketing companies and any other subjects in charge of the creation and/or maintenance of said promotional materials; to photographers and companies working in the post-production of audio-visual material; to journalists and press, information system maintenance companies involved in processing and/or publishing said data, as well as to possible third-party commercial partners -- with whom IEG shares the aforementioned promotional initiatives, -- involved in the treatment of the data for the aforementioned purposes (in the capacity, according to circumstance, of independent holders, co-owners and external managers on behalf of IEG).
You have the right to request access to your personal data from the Data Controller, and the right to have any of them corrected or deleted without any undue delay or limitation in the related processing, or to oppose to the treatment of said data. You also have the right to revoke the consent to processing at any time, for one or more specific purposes of your personal data, it being understood that this will not affect the lawfulness of the treatment based on the consent given prior to revocation.
We hereby inform you that the party involved will have the following rights:
- To request confirmation by the Data Controller of whether or not your personal data is being processed, and, should that be the case, to obtain access to your personal data and to the following information: a) Purposes of processing; b) Categories of the personal data involved; c) Recipients or categories of recipients to whom the personal data have been or will be transmitted, in particular if recipients are based in third countries or are international organisations; d) Wherever possible, the retention period of the personal data provided, or, if not possible, the criteria based upon which this period was determined; e) The existence of the right of the party involved to request the Data Controller to rectify or delete any personal data whatsoever, or to limit the processing of personal data concerning them, or to oppose to the treatment of said data; f) The right to lodge a complaint with a supervisory authority; g) If the data are not collected from the Data Subject, any information available on their origin; h) The existence of an automated decision-making process, including profiling, and, at least in such cases, any significant information on the logic applied, as well as the entity and expected consequences of such processing for the Data Subject;
- If personal data is transferred to a third country or an international organisation, the Data Subject will have the right to be informed of the existence of adequate guarantees concerning said transfer;
- To request and obtain the correction of any inaccurate data without any undue delay, taking into account the purposes of the processing, the completion of incomplete personal data, also by providing an additional statement;
- To request the erasure of data if: a) Personal data are no longer necessary for the purposes for which they were collected or otherwise processed; b) The party involved revokes the consent underlying treatment and no other legal basis for treatment remains in place; c) The party involved opposes to treatment, and no legitimate overriding reason to extend treatment remains in place, or the party involved opposes to treatment performed for direct marketing purposes (including functional profiling for the purposes of direct marketing); d) Personal data have been processed unlawfully; e) Personal data must be deleted to fulfil a legal obligation under the European Union or any Member State’s laws affecting the Data Controller; f) Personal data have been collected in connection with the provision of information services;
- To request the limitation of treatment concerning the party involved, in the event that one of the following circumstances occur: a) The interested party disputes the accuracy of personal data, for a period required by the Data Controller to verify the accuracy of said personal data; b) The data treatment is unlawful and the affected party opposes to the cancellation of personal data and requests instead that said use is limited; c) Although the Data Controller no longer needs the personal data for processing purposes, they are required by the Data Subject in connection with the verification, exercise or defence of a right in court; d) The party involved previously objected to the processing performed for direct marketing purposes, pending verification of the possible prevalence of the Data Controller’s legitimate reasons as opposed to those of the party involved;
- To obtain from the Data Controller, upon request, the details of the third recipients to whom the personal data have been transmitted;
- To revoke at any time the consent to processing, when previously given for one or more specific purposes of their personal data, it being understood that this will not affect the lawfulness of processing based on the consent given prior to revocation;
- To receive, in a structured, automated format of common use, the personal data concerning the Data Subject provided by the Data Controller, and, if technically feasible, to have said data transmitted directly to another data controller, without impediments on the part of the owner to whom they have transmitted them, provided that the following (cumulative) condition is in place: a) Treatment is based on the consent by the party involved for one or more specific purposes, or on a contract also subscribed by the party involved, and to whose execution the treatment is required; and b) Processing is carried out by (software) automated means (comprehensive right to so-called “portability”). The exercise of the right of portability is subjected to the aforementioned cancellation right;
- The Data Subject has the right not to be subjected to any decision solely based on automated processing, including profiling, producing legal effects for them or significantly affecting their person in similar ways;
- The party involved can also at any time file a complaint to the competent Supervisory Authority as per GDPR (of their place of residence or domicile).
The party involved may exercise their rights by notifying to Italian Exhibition Group SpA, with registered office in Via Emilia, 155 - 47921 Rimini (Italy) -- or by email at email@example.com . A list of co-owners, autonomous holders and external managers may be also requested.
In order to ensure compliance with the GDPR and any other laws applicable to the processing of personal data, IEG has specifically appointed an independent third party for the function of Data Protection Officer. IEG’s Data Protection Officer is solicitor Dr Luca De Muri, domiciled for this position at the premises of Italian Exhibition Group S.p.A.