Privacy Policy

Data Holder

The Data Holder is Federlegno Arredo Eventi S.p.A., with legal headquarters in Milan, Foro Buonaparte n. 65, tax identification number and registration number in the Registry of the Enterprises in Milan: 06987590152 (hereinafter “FLA Events” or “Holder ”).

Data Protection Officer

TZ&A consultancy firm is the Data Protection Officer. Should you have inquiries about the collection and use of your data please contact TZ&A at dpoflaeventi@studiotza.it

Purposes

legal Base of the processing

Management of the supplied data for the registration to the Event and the purchase of the ticket, and implementation of all relative legal and fiscal obligations

(Art. 6, codicil 1, letter b), GDPR) Fulfilling a contractual obligation 
(Art. 6, codicil 1, letter c), GDPR) Processing is necessary to fulfil a legal obligation to which the Holder is subject

Management of the data supplied for the registration to the Website and the digital events, and to access the connected services

(Art. 6, codicil 1, letter b), GDPR) Fulfilling a contractual obligation

Storing and conserving data, sending information and communications, also electronic, that you requested through the Website, sending documents inherent to the relationship with FLA Events

(Art. 6, codicil 1, letter b), GDPR) Fulfilling a contractual obligation 
(Art. 6, codicil 1, letter c), GDPR) Processing is needed to fulfil a legal obligation to which the Holder is subject 
(Art. 6, codicil 1, letter f), GDPR) Processing is necessary for the pursuit of the legitimate interest of the Holder, connected to the organisation and administration of its own organization

Purposes

legal Base of the processing

Promotional and marketing activities with the supply of material and news regarding FLA Eventi and its activities, new services, products, promotions, initiatives, concessions and other information of interest to you, including sending of special material in paper and/or electronic format, by means of newsletters (e-mail, sms, mms, instant messaging) and/or telephone; invitations to trade fairs and initiatives organised and/or sponsored by FLA Eventi.

(Art. 6, codicil1, letter a), GDPR) Consent of the person concerned

Profiling and processing of your personal data, preferences and interests with automated methods to identify and offer the most appropriate services and products that meet your needs.

(Art. 6, codicil 1, letter a), GDPR) Consent of the party concerned

Transfer of your data to the subjects participating in the Event as exhibitors (hereafter, “Exhibitors”) for independent processing for promotional purposes and marketing activities, with the supply of material and news regarding the Exhibitors and their activities, services, products, promotions, initiatives, concessions and other information, including sending special material in paper and/or electronic format, by means of newsletters (e-mail, sms, mms, instant messaging) and/or telephone.

(Art. 6, codicil 1, letter a), GDPR) Consent of the party concerned 
The party concerned expresses consent by producing and having the Exhibitor scan the QR code affixed to the entrance ticket to the Event. 
Following the scanning of the QR code, the personal data will be transferred to the Exhibitor, who will process it as an independent data holder for promotional and marketing purposes.

Third party subjects or categories

Purposes

Note

IT Companies

Management, maintenance, and updating of the Holder’s systems and software

Suppliers of networks, electronic communication services and telecommunication and computer storage services, conservation and electronic management of the data

Hosting, housing, Cloud, SaaS, and other electronic remote services needed for the Holder’s activities; compliant services for the storage and conservation of electronic documents

Cloud services could involve data processing in Extra EU countries, that guarantee suitable confidentiality rights

Subjects that FLA Eventi uses for various reasons for the organisation of the Event and the services offered throughout the Website

Organization, administration, financial and accountancy management services

Consultants, professionals, legal offices, arbitrators.

Judicial, extrajudicial, and insurance activities in case of claims Organization, administration, financial and accountancy management

Vigilance and control authorities and bodies, and in general, public, or private subjects with publicist type functions

For compliance to laws and applicable legal proceedings and to answer the requests of the competent authorities

Personal data and documents

Period of storage or criteria to define it

Identification documents and those relative to the relationship with the Holder

For the time it takes to fulfil the purposes of the processing and subsequently, in the limits granted by the law, for administrative and book-keeping purposes, as well as to enforce or protect the rights of the Holder, when necessary

Contact data for promotional and marketing purposes, newsletters, invitations to events detailed above

For the time needed to fulfil the processing purposes and, in any case, for a period no longer than five years

Profiling

For the time needed to fulfil the processing purposes and, in any case, for a period no longer than five years

Rights

Description

Ways to make it effective

Consent revocation right (art. 13, codicil 2, letter c)

You have the right to withdraw your consent for the processing for which it was requested, without prejudice to the lawfulness of the processing based on consent prior to revocation

Communications should be sent to the email address privacy@salonemilano.it

Right of access to your data (art. 15)

You may request: a) the purposes of the processing; b) the categories of personal data concerned; c) the addressees or the categories of addressees to whom the personal data has been or will be shared, in particular third party countries or international organisations; d) when possible, the period of conservation of the personal data provided or, if it is not possible, the criteria used to determine this period; e) the existence of the right of the person concerned to ask the processing holder to rectify or cancel his/her personal data or the limitation of the processing of the personal data that concern this person or to oppose their processing; f) the right to lodge a complaint to a control body; g) all the information available concerning their origin if the data was not supplied by the person concerned; h) the existence of an automated decisional process, including the profiling according to article 22, paragraphs 1 and 4, and, at least in these cases, significant information on the logic used, as well as the importance and the consequences provided by this processing for the person involved. You have the right to request a copy of the personal data object of this processing

Communications should be sent to the email address privacy@salonemilano.it

Right to correction (art. 16)

You have the right to request the correction of incorrect personal data that concerns you and to obtain the correction of incomplete personal data

Use of the link on the side

Right to be forgotten (art. 17)

You have the right to request the cancelling of your personal data from the Holder if the personal data is no longer necessary regarding the purposes for which it was collected or otherwise processed

Use of the link on the side

Right to the limitation of the processing (art. 18)

You have the right to request the limitation of the data processing from the Holder when the individual disputed the exactitude of his/her personal data (for the period necessary for the Holder to verify the exactitude of this personal data) or if the processing is illegal, but you object to the cancelling of the personal data and request the limitation of its use instead, or if this data is necessary for the assessment, exercise or defence of a right in court, when it is no longer needed by the Holder.

Use of the link on the side

Right to data portability (art. 20)

You have the right to receive the personal data that was supplied to us, and that concerns you, in a structured and commonly used legible format from an automatic device and you have the right to transmit this data to another holder if the processing: (i) was based on consent, (II) on a contract and (III) if the processing is carried out with automated means, unless the processing is necessary to carry out a task of public interest or connected to the exercise of public power and that this transmission does not infringe on third party rights.

Use of the link on the side

Right to oppose (art. 21)

You have the right to object at any time, in whole or in part, to the processing of your personal data if the processing is carried out to pursue a legitimate interest of the Holder, that is in case the processing is carried out for direct marketing purposes.

Use of the link on the side

Right to lodge a complaint with the supervisory authorities (art. 77)

You have the right to lodge a complaint with the supervisory authorities if you believe that the processing that concerns you infringes the GDPR.