PROMOEST version January 2021
PROMOEST CENTRO TRADUZIONI E CONGRESSI SRL (hereinafter referred to as Promoest) with registered office in 20126 - MILAN Via G.B. Moroni 33 - VAT No. and Tax Code: 03290101040107 - wishes to provide you with some information in order to illustrate the processing of your personal data.
We invite you to read the following information carefully.
1. DATA CONTROLLER
Promoest Centro Traduzioni e Congressi s.r.l. operates for the collection of registrations for events as the Data Controller and makes available its information on the protection of personal data on its website.
For all communications relating to the personal data provided, you may use the email address firstname.lastname@example.org.
PROMOEST will treat the personal data communicated by you for:
1. execution of the registration to the events (on physical locations or online) chosen by the interested party on the basis of the provision of art. 6.1.b of the GDPR;
2. pursuit of the legitimate interest of the owner according to the provisions of art. 6.1.f of the GDPR (by way of example only):
a. the communication of updates and news on selected events;
b. the security and safeguarding of its information systems;
c. the management of any disputes or litigation;
d. internal checks carried out by supervisory bodies and audits of management systems.
3. TYPE AND ORIGIN OF YOUR DATA
The data subject to processing (name, surname, e-mail, company, organizational role) are those provided by you in the context of the request to participate in an event advertised by PROMOEST and are necessary to guarantee your access to the event. There are not foreseen treatments of your data belonging to particular categories as per art. 9 and 10 of the GDPR. The Owner always proceeds to minimize the data collected.
4. COMMUNICATION AND DIFFUSION
The data provided by you may be communicated by PROMOEST, the Data Controller, to the following categories of subjects:
a. Company organizing the event as autonomous owner whose information can be retrieved on the websites of the organizing company;
b. Company managing the IT platform and the cloud platform as Data Processor;
c. Institutional authorities and judicial authorities following a specific request;
d. Subjects that manage the spaces used for the execution of the event;
e. Subjects who manage the physical security of the event spaces.
Your data may be managed by employees and collaborators who operate under the authority of the Data Controller as well as structures that perform, on behalf of the Data Controller, technical support tasks (business controls, maintenance and/or repair of computer equipment) appointed, where necessary, as Data Processors pursuant to art. 28 of the GDPR. The list of appointed Data Processors is always available upon request.
Your data will not be disclosed to other exhibitors (secondary exhibitors) attending the event, unless you give your explicit consent to do so;
5. MANDATORY NATURE OF DATA CONFERMENT
Failure to provide the requested data, or providing partial or incorrect data, will make it impossible to complete your request.
6. DURATION OF TREATMENT
Personal data collected by PROMOEST will be kept for 5 years from the last request of participation to an event made by you. In case of collection for the purpose of subscribing to the mail list the data will be kept for two years from the last consent received. It is always subject to the interruption of the treatment as a result of withdrawal of consent also using the opt-out function present on each email received by Promoest.
7. PLACE OF DATA PROCESSING AND METHODS OF PROCESSING
Your data are processed in the Italian territory or in countries permitted by the regulations of the European Union. The processing of personal data (for example, but not limited to, collection, processing, consultation, printing, archiving, modification, updating) takes place through the use of instruments and procedures suitable and adequate to guarantee security and confidentiality and can be carried out both with automated and non-automated methods.
automated. The web platforms, where used, are used with minimized data limited to the data strictly necessary (name, surname, email, company, organizational role) to make possible the provision of the service.
However, it is possible that the processing, even with minimized data, takes place on platforms that transport the data to the USA. These treatments are related to the use of cloud platforms chosen for the characteristics of stability and certifications
of security. The operators of the cloud platforms currently used, who are responsible for the processing, have all declared in their standardized contracts that they accept the Standard Contractual Clauses provided for transfers outside the European Union; however, it cannot be excluded that the personal data subjected to such processing
may be subject to "observations" made by the U.S. Authority for its own national security reasons. On these platforms, personal data are stored for the time strictly necessary (no more than one year) to consolidate the request for participation in the event and forward the request to the event manager. PROMOEST does not perform profiling of its data nor does it implement automated decision-making processes.
8. YOUR RIGHTS
With reference to the data you have provided and its processing by the Owner, where applicable, you may exercise your rights of access, rectification, cancellation, limitation, portability, opposition to the processing of data, pursuant to Articles 16 to 21 of the GDPR.
You may address any request regarding your rights directly to the Data Controller at email@example.com.
In addition, you always have the right to lodge a complaint with the supervisory authority in accordance with the provisions of Article 77 GDPR.
9. FURTHER NEWS
PROMOEST, maintaining constant attention to the treatment of personal data, reserves the right to proceed, at any time, to the updating of what is communicated in this informative report.
Processing: any operation or set of operations, carried out with or without the help of automated processes and applied to personal data or sets of personal data, such as collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, comparison or interconnection, restriction, erasure or destruction;
Data Controller: the natural or legal person, public authority, service or other body which, individually or jointly with others, determines the purposes and means of the processing of personal data;
Personal data: any information concerning an identified or identifiable natural person ("data subject"); an identifiable person is one who can be identified, directly or indirectly, by reference in particular to an identifier such as a name, an identification number, location data, an online identifier or one or more features of his or her physical, physiological, genetic, mental, economic, cultural or social identity;
Special data (also defined as sensitive): Special categories of personal data: Personal information relating to: racial or ethnic origin, political opinions, religious or philosophical beliefs, or trade union membership, as well as dealing with genetic data, biometric data intended to uniquely identify a natural person, data relating to health or sex life or sexual orientation of the person;
Data subject: an identified or identifiable natural person to whom the data refer, who requests Promoest to participate in an event organized by one of Promoest's sponsors.