Privacy

identity and contact details of the owner and DPO 

Riva del Garda Fierecongressi S.p.a.

Parco Lido n. 1 - Riva del Garda (TN), Italy

e-mail: [email protected] - tel: +39 0464 570100

The Data Protection Manager can be contacted at the following address: [email protected]

data categories processed

• personal identification details of the interested party;
• e-mail address;
• telephone number;
• reference company (if present);
• other information provided optionally by the interested party concerning the rapport relative to this form;
• other data entered by the data subject in the digital platform of the event, and shared with all the subscribers.

purpose of the processing carried out with the data collected 

1. to respond to the request made by the interested party by compiling this form
   
   and subject to the consent of the interested party: 
2. to send commercial communications, updates regarding the business and services offered by the owner and his partners to the e-mail address provided by means of a newsletter; 
3. to carry out personalised informative and commercial activities according to the profile of the interested party; 
4. the transfer of the data acquired through this form to third parties for commercial purposes;
5. sharing of the data subject’s data on the digital platform of the event to facilitate business dealings and industry networking among subscribers.

consequences of failure to provide data and/or failure to consent to the purposes referred to in points B. C. D. & E.

Failure to provide the afore-mentioned data will prevent the data controller from carrying out the purpose specified in point A.
The activities described in points B, C, D & E of this document (generic marketing activities, profiling and third party consent) can only be carried out with the consent of the interested party. These expressions of consent are separate  and optional and are always revocable without entailing any duty or damage to the interested party in relation to his/her position towards the Data Controller with regard to the purposes referred to in the aforementioned point A.

methods of processing the acquired data

The data is processed in compliance with the technical and organisational security measures provided for by EU Regulations through appropriate procedures to guarantee the confidentiality of the same. The profiling activity also involves  processing carried out through automated decision-making processes.

legal basis of the processing carried out

for each of the aforementioned purposes, the legal bases that legitimise the processing are indicated as follows:

1. to respond to the request made by the interested party by compiling this form; the need to execute the contract in which the interested party is involved as well as to fulfil specific contractual and/or legal obligations  deriving from the relationship itself;
2. to send commercial communications, updates regarding the business and services offered by the owner and his partners to the email address provided by means of a newsletter, with the consent of the interested party;
3. to carry out personalised informative and commercial activities according to the profile of the interested party, with the consent of the interested party;
4. the transfer of the data acquired through this form to third parties for commercial purposes, with the consent of the interested party;
5. sharing of the data subject’s data on the digital platform of the event to facilitate business dealings and industry networking among subscribers, with the consent of the interested party.

subjects involved and scope of dissemination

The data may seen by the Controller and by specially trained people employed to process the information. In addition to the subjects specified here, the data provided may be processed by third parties, appointed as data processors, to the extent that is necessary for the performance of activities carried out by them and subject to the authorisation of the Controller in order to carry out the aforementioned purposes and within the authorisation profiles identified for them (the list of which is available upon request to the Controller at the addresses provided above). Personal data will generally be stored within the European Union. Should any applications used to pursue the aforementioned purposes require the transfer of personal data to third countries, the Data Controller ensures that processing will be carried out in compliance with the conditions set out in Articles 44 and following of the GDPR. For all information in this regard, contact the Data Controller.

conservation period

For each of the above-mentioned purposes, the conservation period is as indicated below:

1. to respond to the interested party’s request: the data will be kept for the time necessary to execute/manage the relationship for a period consistent with the purposes and dynamics related to the nature of the relationship;
2. to send commercial communications, updates on activities and services provided by the Controller and his partners to the aforementioned e-mail address via the newsletter system: 60 months;
3. to provide personalised information  and carry out commercial activities following the profiling of the interested party: 60 months.

how to exercise your rights and make a complaint to the supervisory authority

The interested party may, at any time, exercise his/her rights under article 15 (and subsequent amendments) of EU Regulation no. 679/2016 and revoke his or her consent for the purposes outlined in points B, C, D & E by writing to the  following address:  [email protected].

Any complaint to the supervisory authority can be made by sending a communication to this e-mail address [email protected].