Privacy Policy on the Processing of Personal Data
Pursuant to Article 13 of Regulation (EU) No. 2016/679 (‘GDPR‘), Fiere Internazionali di Bologna S.p.A. – BolognaFiere, as data controller (‘BolognaFiere‘, the ‘Controller‘ or ‘Company‘), informs you that the personal data you voluntarily share with the Company will be processed in compliance with the applicable personal data protection legislation (‘Privacy Law‘).
- Controller and Data Protection Officer
The data controller is Fiere Internazionali di Bologna – BolognaFiere S.p.A., with registered office in Bologna, Viale della Fiera n. 20, tel. 051/282111, and can be contacted at the following e-mail address: privacy@bolognafiere.it.
The Data Protection Officer can be contacted at the e-mail address dpo@bolognafiere.it for any matter relating to the processing of personal data.
- Purposes and legal bases of the processing
The personal data you share through the website (e.g. your e-mail address, your name, free text, etc.) are processed for the following purposes:
- managing requests submitted through the “Contact Us” section or via the contact details published on the website Your personal data will be processed in order to respond to requests submitted by the data subject or for the adoption of pre-contractual measures. The legal basis is the Controller’s legitimate interest in managing contact requests and improving its services and, depending on your needs, the processing will be subject to a balancing between such legitimate interest and the data subject’s rights. Should the request result in the establishment of a contractual relationship between the data subject and the Controller, the legal basis will be Article 6(1)(b) of the GDPR.
- complying with legal rules and obligations and/or executing requests, orders and measures issued by competent authorities (including the Italian Data Protection Authority), pursuant to Article 6(1)(c) of the GDPR.
- Provision of data and consequences of failure to provide
The provision of data for the purposes referred to in the preceding paragraph is optional. Depending on your needs, the consequence of not sharing the above data may result in the Controller’s inability to process your request.
- Collection and use of personal data
Data are processed using IT tools and, where applicable, paper-based tools. The Controller has adopted appropriate security measures to ensure the confidentiality, security and integrity of your data.
- Recipients, disclosure and dissemination of data
Your personal data may be processed only by:
- Company staff, duly authorised and trained, who need to access such data in order to carry out their work duties, in accordance with the data minimisation principle;
- any external service providers supporting BolognaFiere in the management of your requests, acting as data processors bound, through the execution of appropriate agreements with the Controller pursuant to Article 28 of the GDPR, to comply with the same standards of data protection and safeguarding of your rights as guaranteed by BolognaFiere.
The complete list of entities appointed as data processors pursuant to Article 28 of the GDPR is available at the Controller’s registered office and may be requested by sending a communication to the e-mail address privacy@bolognafiere.it.
Without prejudice to the foregoing, the Controller may communicate your data to competent authorities, where required by binding measures or by applicable legal provisions. Your personal data will not be disseminated to the public.
- Data retention periods
Your personal data will be retained for the time strictly necessary to process your requests or to comply with applicable legal obligations. Upon expiry of that period, your data will be deleted. BolognaFiere may process your data for a period longer than that indicated above solely where permitted or required by applicable law.
- Transfer of data to Third Countries
Your personal data will not be disseminated or transferred to countries outside the European Union.
- Rights of the data subject
We inform you that at any time you may exercise the rights provided, within the limits and under the conditions set out in Articles 7 and 15–22 of the GDPR, in relation to your data. To exercise such rights, please contact the data controller at the e-mail address privacy@bolognafiere.it; your request will receive an appropriate and timely response.
In particular, you have the right to:
– obtain confirmation as to whether or not personal data concerning you are being processed;
– where processing is taking place, obtain access to the personal data and information relating to the processing, as well as to request a copy of the personal data;
– obtain the rectification of inaccurate personal data and the completion of incomplete personal data;
– obtain, where one of the conditions set out in Article 17 of the GDPR is met, the erasure of personal data concerning you;
– obtain, in the cases provided for in Article 18 of the GDPR, the restriction of processing;
– receive the personal data concerning you in a structured, commonly used and machine-readable format, and to request their transmission to another controller, where technically feasible.
Furthermore, you have the right to object at any time to the processing of your data carried out in pursuit of a legitimate interest of the Controller. In the event of an objection, your data will no longer be processed, unless there are compelling legitimate grounds for the processing that override your interests, rights and freedoms, or for the establishment, exercise or defence of legal claims.
You may at any time withdraw any consent you may have given or object to the processing of your data by writing an e-mail to privacy@bolognafiere.it. The withdrawal of your consent shall not affect the lawfulness of processing based on consent given prior to its withdrawal.
Finally, pursuant to Article 77 of the GDPR, we remind you that you have the right to lodge a complaint with the Data Protection Authority, should you consider that your rights under the GDPR have been violated, in accordance with the procedures indicated on the website of the Italian Data Protection Authority, accessible at www.garanteprivacy.it.