Information pursuant to Articles 13 and 14 of European Regulation 2016/679.
1) Data Controller and Data Protection Officer (DPO)
The Data Controller is Viabizzuno S.p.a. (hereinafter also referred to as Viabizzuno), represented by its current legal representative, with registered office at Via Romagnoli 10, Bentivoglio (BO), Italy, privacy@viabizzuno.com. Viabizzuno S.p.A. has appointed a Data Protection Officer (DPO), who can be contacted at the e-mail address dpo@viabizzuno.com.
2) Purposes of data processing and legal bases.
Personal data and contact information
The personal data and contact information provided by the data subject through the completion of the registration form to participate in events organized by Viabizzuno are subject to processing. With the data subject’s consent, such data may also be used for sending promotional communications, newsletters, and updates on Viabizzuno’s initiatives and products via post, e-mail, telephone, and/or SMS and instant messaging. The legal bases for the processing are, respectively, the necessity to perform a contract to which the data subject is a party, to respond to specific requests made by the data subject, as well as the data subject’s consent to the sending of promotional communications and newsletters.
Image
During audiovisual or photographic recordings that may take place in the course of events organized by Viabizzuno, the data subject may be recorded. The image of the data subject will be used for illustrative and promotional purposes related to the events organized by Viabizzuno and, more generally, for communication initiatives and the presentation of its business activities. It may be reproduced and disseminated by any means and in any form, including brochures and other media, as well as on the internet and social media platforms. The legal basis for this processing is the data subject’s consent, which also serves as an authorization pursuant to Articles 96 et seq. of Italian Law No. 633/1941, obtained through the data subject’s conduct, namely by accessing the premises where the events take place. In the event that audiovisual or photographic recordings are carried out during events organized by Viabizzuno, appropriate notices containing first-layer information will be displayed at the entrance.
3) Recipients of data and disclosure.
For the purposes set out above, the data subject’s personal data will not be disclosed to third parties. The data subject’s personal data may be accessed by persons appointed by the Data Controller as data processors or sub-processors pursuant to Article 28 of the GDPR. As previously stated, the data subject’s image may also be disseminated.
4) Retention period.
The data is used for the time necessary to fulfil the contract or the data subject’s request and is then retained on the basis of the Data Controller’s legitimate interest in maintaining its business contacts. Data processed for the purpose of sending promotional communications and newsletters is retained until the data subject withdraws their consent or objects to such processing.
5) Transfer of data to a non-European country.
The data is processed within the European Union. In the event that personal data is transferred to a non-EU country, the Data Controller will implement all the safeguards required by the GDPR to ensure adequate protection.
6) Rights of the data subject.
Articles 15 to 22 of the GDPR grant the data subject specific rights. Article 15 grants the data subject the right to access their personal data and to obtain a copy thereof. The right to obtain a copy of the data shall not adversely affect the rights and freedoms of others. By submitting a request for access, the data subject is entitled to receive confirmation from the Data Controller as to whether their personal data is being processed, and to be informed of the purposes and categories of data processed, the third parties to whom the data is disclosed, and whether the data is transferred to a non-EU country with adequate safeguards. The data subject is also entitled to know the retention period for their personal data.
With regard to their personal data, data subjects have the right to request the rectification of inaccurate data and the completion of incomplete data, as well as erasure (the right to be forgotten) under the conditions set out in Article 17 of the GDPR, the restriction of processing, data portability, and the right to object or withdraw consent, including by using the dedicated unsubscribe link included in every email sent.
You may exercise your rights by sending an email to the Data Controller’s address dpo@viabizzuno.com, or by post to the address of the registered office at Via Romagnoli, 10, Bentivoglio 40100 (BO), Italy. The Data Controller may need to verify the identity of the data subject by requesting a copy of their identity document. A response will be provided without delay and in any event within one month of the request.
7) Complaint to a supervisory authority.
If the data subject considers that the processing of their personal data infringes the provisions of the Regulation, they have the right to lodge a complaint with the Italian Data Protection Authority, based in Rome. Alternatively, they may bring the matter before the competent judicial authority.