DATA CONTROLLER

EV Soc. cons. a r.l., represented by its acting legal representative, registered office Via Trecchi, 20 - 26100 Cremona - Tel +39 0372 403500 e-mail info@evsrl.it as the data controller, (hereinafter, “Controller”),

INFORMS YOU

pursuant to (EU) regulation 2016/679 on the protection of natural persons with regard to the processing of personal data (hereinafter, “GDPR”) that your data will be processed in compliance with the aforementioned regulation and in the ways and for the purposes described below:

1  – OBJECT OF PROCESSING AND NATURE OF DATA

The Controller, as part of its work, processes your personal data (specifically, your full name, tax code, VAT number, e-mail, telephone number – hereinafter, “personal data” or also “data”) collected when you voluntarily entered the aforementioned personal data in the data collection form of this website.

2  – PURPOSES OF PROCESSING

Your personal data are processed for the following purposes, separated according to the legal basis of reference:

2.1  Performance of the contract – fulfilment of legal obligation (Article 6 lett. b, lett. c).

Your personal data are processed for the following purposes:

1. to fulfil pre-contract, contractual, and administrative-accounting obligations
2. to fulfil obligations established by law, by a regulation, EU regulations or an order by the

2.2  – Legitimate interests (Article 6 lett. f – recital 47).

We point out that if you are already one of our customers, we may send you, always respecting your interests and rights, communications regarding the Controller’s services and products similar to those you have already used, unless you disagree, which should be communicated to the contacts shown in part 8.

3  – DATA RECIPIENTS OR CATEGORIES OF RECIPIENTS

Personal data provided can be communicated to third party recipients, in order to fulfil contracts or for connected purposes. Specifically, such data can be communicated to recipients from the following categories:

• Professionals and consultants on legal, fiscal and labour matters
• Banks
• Competent authorities to fulfil legal obligations and/or provisions dictated by public bodies (Tax Agency etc.)
• External subjects that manage / support / assist, even if only occasionally, the Controller in the administration of the IT system and telecommunication networks (including e-mail);

Subjects from the aforementioned categories perform the function of Data Processor, or act in total independence as separate Data Controllers. The list of such processors is constantly updated and is available at the Controller’s offices.

If the Controller activates the StandVisit service for the event and if specific consent is received from the subject concerned, a QRCode will be generated on the recognition badge with some of the subject’s personal data, stored by the Controller, which can be read by means of an electronic device by the exhibitors. With the Controller’s consent to badge scanning, it will authorize the exhibitor to access personal data on the badge, but also to be able to access the other personal data for registering to the event.

4  – WAYS OF PROCESSING

Processing shall be carried out by means of manual and/or IT and data transmission instruments and by means of organization and processing approaches strictly related to the aforementioned purposes. These shall all ensure the security, integrity, availability, and confidentiality of personal data.

In compliance with the provisions of Article 5 paragraph 1 lett. e) of EU Reg 2016/679, personal data collected shall be kept in a form which permits identification of data subjects for no longer than is necessary for the purposes for which the personal data are processed.

5  – DATA SUBMISSION

We inform you that, taking into account the purposes of processing as specified in part 2.1, the submission of data is mandatory and their failed, partial, or incorrect submission may have, as a consequence, the impossibility to carry out the professional service.

The submission of data for the Stand Visit service is optional, but failure to consent will result in the failure to create the QRCode on the badge and, as a consequence, the inability to provide the specific service.

6  – DATA TRANSFER TO A THIRD COUNTRY AND/OR AN INTERNATIONAL ORGANIZATION

Personal data provided are not transferred outside the European Union.

7  – DURATION OF PROCESSING

Personal data are stored for the entire term of the contract relationship and, in case of cancellation and/or any other type of termination of the aforementioned relationship, pursuant to the terms established by law for fulfilling, for example, fiscal obligations.

For the purposes connected with the provision of the StandVisit service, data shall be stored for the time strictly necessary for providing the service.

8  – RIGHTS OF THE DATA SUBJECT

In any moment you can exercise your rights defined by Articles 15, 16, 17, 18, 19, 20, 21, 22 of EU Regulation UE 2016/679, and in particular:

• access to personal data
• obtain the rectification or erasure of the data or restriction of processing them
• object to processing; to data portability
• to withdraw your consent: withdrawing consent does not affect the lawfulness of processing based on consent granted before the withdrawal
• lodge a complaint with the Controlling Authority (Italian Garante Privacy)

You can exercise your rights by sending a request to the Controller regarding the aforementioned rights.