Privacy Policy
INFORMATIVE PLATFORM
according to art. 13 of 2016/679 (EU) Regulations
INSTRUCTIONS
This text is available to any person who supplies their personal data to Federlegno Arredo Eventi S.p.A. using the platform of Salone del Mobile. Milano
INFORMATIVE
pursuant to Article 13 of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016
Pursuant to Article 13 of the General Data Protection Regulation – Regulation (EU) 2016/679 of the European Parliament and Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and the free circulation of such data (hereinafter “GDPR”), we here provide you with information regarding the processing of your personal data provided by filling in the form for registration at the trade fair “Salone del Mobile.Milano” (hereinafter, “Event”) or the various forms on the www.salonemilano.it website (hereinafter, “Site”)
Data Controller |
The Data Controller is Federlegno Arredo Eventi S.p.A., with registered office in Milan, Foro Buonaparte no. 65, tax code and registration number in the Milan Business Register: 06987590152, e-mail privacy@federlegnoarredo.it (hereinafter “Data Controller” or “FLA Eventi”). |
Data Protection Officer (hereinafter referred to as “DPO”) |
The Data Protection Officer is TZ&A Studio Associato (hereinafter also referred to as the “DPO”). |
Mandatory purposes for which the processing does not require your consent
Purpose | Legal basis for the processing |
Management of the data provided for the purpose of registering for the Event and purchasing the ticket, and compliance with the related legal and tax obligations | (Art. 6(1)(b) GDPR) |
Management of the data provided for the purpose of registering on the Site and digital events and the use of related services, including publishing | (Art. 6(1)(b) GDPR) |
Archiving and storing of data, sending of information and communications, including electronic communications, requested by you through the Site, sending of information and documents relating to the relationship with FLA Eventi | (Art. 6(1)(b) GDPR) |
Optional purposes for which the processing does not require your consent
Purpose | Legal basis for the processing |
Commercial and direct marketing activities through the transmission to the contacts provided by you of communications relating to services similar to those already supplied, provided that you do not refuse such use initially or in response to subsequent communications | (Art. 6(1)(f) GDPR) |
Anonymous surveys to measure the level of satisfaction with the digital experience on the Salone del Mobile.Milano website/app | (Art. 6(1)(f) GDPR) |
Anonymous surveys aimed at measuring the level of satisfaction with visitors’ trade fair experience | (Art. 6(1)(f) GDPR) |
Optional purposes for which your consent is required for processing
Purpose | Legal basis for the processing |
Transfer of your data to the subjects participating in the Event as exhibitors (hereinafter, “Exhibitors”) for their autonomous processing for promotional purposes and marketing activities, with the provision of material and news regarding the Exhibitors and their activities, services, products, promotions, initiatives, facilitations and other information, also through the sending of specific material in paper and/or electronic form (including by means of newsletters) and/or telephone. | (Art. 6(1)(a) GDPR) |
Promotional and marketing – with the provision of materials and editorial content concerning the Exhibitors and the commercial partners of the Event (such as institutional partners, official partners, media partners and official time keepers), their services, products, activities and initiatives, as well as promotional materials and content of FLA Eventi (including new services, products, promotions, trade fairs, initiatives organized and/or sponsored by FLA Eventi, concessions and other information), by telephone and/or by sending specific material in paper and/or electronic form, including by means of newsletters. | (Art. 6(1)(a) GDPR) |
Profiling and processing of your personal data, preferences, habits and interests (such as, for example, purchase data, including ticket data, visits and activities performed during the Event, monitoring of the newsletter, browsing data) with automated methods in order to identify and offer the most appropriate services, products and benefits that meet your needs, including by sending personalized communications, market research and/or surveys. | (Art. 6(1)(a) GDPR) |
Recipients of the personal data
In order to pursue the purposes indicated above, your personal data may be communicated to:
- employees and/or collaborators of the Data Controller, duly appointed as authorized subjects and instructed on the methods of processing such data;
- other companies of the Gruppo ‘Federlegno Arredo Eventi S.p.A.’ for the management of specific functions and/or services;
- third parties other than the Data Controller, such as:
Third parties or categories | Purpose | Notes |
IT companies | Management, maintenance, updating of the systems and software used by the Data Controller | |
Providers of networks, electronic communications services and IT and telematics services for the computer storage, storage and processing of data | Hosting, housing, Cloud, SaaS and other remote IT services essential for the provision of the Data Controller’s activities; archiving and preservation services in accordance with the law for electronic documents | Cloud services may involve data processing in non-EU countries; in this case we guarantee that the data will be suitably protected. |
Subjects that FLA Eventi uses in various capacities for the organization of the Event and the services offered through the Site | Organizational, administrative, financial and accounting management | |
Subjects used by FLA Eventi for managing surveys and market reserach | Survey management and market research | |
Consultants, professionals, law firms, arbitrators. | Judicial, extrajudicial and insurance activities in case of claims | |
Supervisory and control authorities and bodies and, in general, public or private entities with public functions | To comply with the relevant laws and legal processes and respond to requests from the competent authorities |
The companies of the Gruppo Federlegno Arredo Eventi S.p.A. and the third parties to whom your personal data may be communicated act as:
- data controllers, i.e. subjects who determine the purposes and means of the processing of personal data;
- data processors, i.e. subjects who process personal data on behalf of the Data Controller;
- joint data controllers who determine jointly with the Data Controller the purposes and means of the same.
The list of the subjects identified as controllers, processors or joint controllers and updated information about them is available from the Data Controller.
Period of storage of personal data
We explain below the period for which personal data will be stored or, if this is not possible, the criteria used to determine this period.
Personal data and documents | Retention period or criteria for determining it |
Personal data and documents relating to the relationship with the Data Controller. | For as long as is necessary to fulfil the purposes of the processing and, in any case, for a period not exceeding five years from your last interaction with the Data Controller. Events that identify this "interaction" may include but are not limited to, accessing the personal area of the Website, purchasing a ticket to the Event, or taking part in a survey. |
Data collected and processed as part of satisfaction surveys | For the duration necessary to pursue the purposes of the processing. |
Contact details for promotional and marketing purposes, newsletters, invitations to events detailed more fully above | For the duration necessary to pursue the purposes of the processing and, in any case, for a period not exceeding five years from your last interaction with the Data Controller. Events that identify this “interaction” may include, but are not limited to, accessing your personal area of the Site, purchasing a ticket to the Event, or participating in a survey. |
Profiling | For the duration necessary to pursue the purposes of the processing and, in any case, for a period not exceeding 18 months. |
Rights of the data subject
We inform you of the existence of certain rights provided by the GDPR in relation to personal data and related processing that you may request from the Data Controller.
Right | Description |
Right to withdraw consent | You have the right to withdraw consent for processing for which it is requested, without affecting the lawfulness of processing based on consent before its withdrawal |
Right of access to data (art. 15) | You may request: a) the purposes of the processing; (b) the categories of personal data concerned; (c) the recipients or categories of recipients to whom the personal data have been or will be disclosed, in particular recipients in third countries or international organizations; (d) where possible, the period envisioned for which the personal data will be retained or, if this is not possible, the criteria used to determine that period; e) the existence of the right of the data subject to request from the controller the rectification or deletion of personal data or the restriction of the processing of personal data concerning him or her, or to object to its processing; f) the right to lodge a complaint with a supervisory authority; g) if the data is not collected from the data subject, all available information on its source; (h) the existence of automated decision-making, including profiling as referred to in Article 22(1) and (4), and, at least in such cases, meaningful information about the logic used, as well as the significance and expected consequences of such processing for the data subject. |
Right to rectification (Art. 16) | You have the right to request the rectification of inaccurate personal data concerning you and to obtain the completion of incomplete personal data |
Right to be forgotten (Art. 17) | You have the right to obtain from the Data Controller the deletion of personal data concerning you if the personal data are no longer necessary in relation to the purposes for which they were collected or otherwise processed |
Right to restriction of processing (Art. 18) | You have the right to obtain from the Data Controller the restriction of processing when you have contested the accuracy of the personal data (for the period necessary for the Data Controller to verify the accuracy of such personal data), or if the processing is unlawful, but you oppose the deletion of the personal data and instead request that its use be restricted or if it is necessary for the establishment, the exercise or the defense of a right in court, while the Data Controller no longer requires it. |
Right to portability (art. 20) | You have the right to receive the personal data that supplied to us concerning you in a structured, commonly used and machine-readable format and you have the right to transmit it to another controller if the processing: (i) was based on consent, (ii) on a contract, and (iii) if the processing is carried out by automated means, unless the processing is necessary for the performance of a task carried out in the public interest or in the exercise of an official authority, and such disclosure does not adversely affect the rights of a third party. |
Right to object (Art. 21) | You have the right at any time to object, in whole or in part, to the processing of your personal data if the processing is carried out in the pursuit of a lawful interest of the Data Controller or if the processing is carried out for direct marketing purposes. |
To exercise your rights, you may send a communication to the address privacy@salonemilano.it.
If you believe that the processing of your Personal Data is in violation of the provisions of the GDPR, you have the right to lodge a complaint with the Supervisory Authority (Article 77 of the GDPR).
The exercise of the above rights is subject to the limits, rules and procedures provided by the GDPR, which the Data Subject must be aware of and comply with. Furthermore, in accordance with the provisions of Article 12, paragraph 3, the Data Controller will provide the data subject with information relating to the action taken without undue delay and, in any case, at the latest within one month of receipt of the request. This deadline may be extended by two months, if necessary, taking into account the complexity and number of requests. The Data Controller shall inform the data subject of such extension, and of the reasons for the delay, within one month of receipt of the request.
Amendments and updates
This policy may be subject to amendments and/or additions, also as a consequence of the applicability of the GDPR and any future changes and/or regulatory updates.
The updated information is constantly available on the Data Controller’s website.
The personal data provided may be processed by the Data Controller with or without the use of IT instruments.
We also inform you that the communication of your personal data for the mandatory purposes indicated is a legal or contractual obligation or a necessary requirement for the performance of contractual obligations; therefore, you are obliged to provide personal data, because otherwise it would not be possible to manage the relationship with FLA Eventi.
Finally, we inform you that, during the Event, you may be portrayed in photographs and/or video recordings, or be the subject of area photographs taken at the trade fair site (collectively the “Images”). The Images, for promotional and advertising purposes of FLA Eventi, are intended for publication and dissemination on various communication channels including the Site, on social network pages (such as, by way of example, Facebook®, Instagram®, Twitter® and Linkedin®) and in printed magazines and catalogues also in the form of advertising. The right to use and exploit such Images is understood to be free of charge.
