PRIVACY NOTICE PURSUANT TO ARTT. 13 AND 14 OF THE REG. (EU) 2016/679

Veronafiere S.p.A. (“Veronafiere” or “Controller”) provides you with the information required by GDPR concerning the processing of Your personal data provided for the subscription to the Veronafiere online services (“Services”), as better set out in the relevant terms and conditions. Such subscription enables the user to access to the Veronafiere platforms, with the same credentials, both on the web and in the app.

• 1. Identity and contact details of the data controller

Data controller is Veronafiere S.p.A., VAT. n. 00233750231, Viale del Lavoro, 8, 37135 - Verona (VR), tel. 045 8298111, email info@veronafiere.it, PEC mail@pec.veronafiere.it

• 2. Contact details of the data protection officer (DPO)

You can contact the DPO at the email address dpo@veronafiere.eu

• 3. Categories and sources of data

The data – i.e., name, surname and e-mail - are provided directly by You by filling in the online form or communicated, in case of the so-called "social login", by the social networks / providers: LinkedIn, Facebook, Google, Apple.

• 4. Data processing purposes, legal basis and data retention

  WHY IS YOUR PERSONAL DATA BEING PROCESSED?	WHAT IS THE BASIS THAT MAKES THE PROCESSING LAWFUL?	HOW LONG DO WE KEEP YOUR PERSONAL DATA?
  To enble the User to use the Services.	The performance of the contract to which data subject is party.	For 10 years after the termination of the contract, without prejudice to the right of withdrawal of the parties, as specified in the terms and conditions.
  Once the above data retention terms have expired, data will be destroyed or anonymized, compatibly with the technical timing for erasure and backup.

• 5. The provisioning of data

Data highlighted with an asterisk in the online forms are required for the Services subscription; therefore, failure to provide them does not allow such subscription.

• 6. Categories of recipients to whom data may be disclosed

Data may be disclosed to parties acting as controllers, such as public authorities or professional firms.

Data may be processed, on behalf of the Controller, by third parties, appointed as processors pursuant to art. 28 of the GDPR, carrying out activities that are functional to the services provided (e.g. IT services providers).

Furthermore, data are processed by Veronafiere employees who have been expressly authorised to process such data for the above-mentioned purposes and have received adequate operating instructions.

• 7. Data subjects’ rights

The data subject shall have the following rights:

1. to obtain the confirmation as to whether or not personal data concerning him/her are being processed, and, where that is the case, access personal data and the information referred to in art. 15;
2. to obtain the rectification of inaccurate data,
3. to have incomplete data completed;
4. to obtain the erasure of data in the cases provided for by Article 17 GDPR;
5. to obtain restriction of processing in the cases provided for by Article 18 GDPR;
6. vi) to object, on grounds relating to his/her own particular situation, to the processing carried out in the legitimate interest of the Controller;
7. vii) where the processing is based on consent or contract and is carried out by automated means, to receive the data in a structured, commonly used and machine-readable format and to transmit those data to another controller without hindrance from the controller to which the personal data have been provided (the right to “data portability”);

In order to exercise their rights, data subjects can contact the Controller by sending an e-mail to privacy@veronafiere.it or using the contact details pointed out in par. 1.

Data subjects shall have the right to lodge a complaint with the competent supervisory authority in the Member State of his or her habitual residence, place of work or place of the alleged infringement.