NOTICE PURSUANT TO ART. 13 OF THE REG. (EU) 2016/679 (“GDPR”)

Veronafiere S.p.A. provides you with the information required by GDPR concerning the processing of personal data provided for the Vinitaly Plus subscription and use, as better set out in the relevant terms and conditions, referred to herein in their entirety (with special regard to the definitions in Art. 2).

• 1. Identity and contact details of the data controller

Data controller is Veronafiere S.p.A., VAT. n. 00233750231, Viale del Lavoro, 8, 37135 - Verona (VR), tel. 045 8298111, email info@veronafiere.it, PEC mail@pec.veronafiere.it (hereinafter referred to as “Veronafiere” or “Controller”)

• 2. Contact details of the data protection officer (DPO)

You can contact the DPO at the email address dpo@veronafiere.eu

• 3. Data processing purposes, legal basis and data retention

  WHY IS YOUR PERSONAL DATA BEING PROCESSED?	WHAT IS THE BASIS THAT MAKES THE PROCESSING LAWFUL?	HOW LONG DO WE KEEP YOUR PERSONAL DATA?
  To enable the User to use the Vinitaly Plus and the relative services, including that of "suggestions" (see Art. 6.2 of the terms and conditions), consisting of an automated profiling process, based on an algorithm and tracking tools (cookies). Thanks to this process Users are shown the Subscribers' Brandrooms / products / events that are more in line with their profile (created both with the data provided during the subscription and with the data deduced from their online behaviour, e.g. Companies allready visited). For further information on the cookies used on Vinitaly Plus, please refer to the relevant policy.	The performance of the contract to which data subject (i.e. the User) is party.	For 10 years after the termination of the contract, without prejudice to the right of withdrawal of the Parties.
  For the fulfilment of accounting, tax and other legal obligations.	The legal obligation to which the Controller is subject.
  If necessary, for the establishment, exercise or defence of legal claims.	The legitimate interest of the Controller.	For the duration of the Contract and, in case of dispute, for its length.
  In order to perform customer satisfaction surveys aimed at getting information on the quality of Veronafiere services.	The legitimate interest of the Controller to enhance its services based on customers’ feedback.	Until elaboration of the surveys’ anonymized results.
  In order to carry out direct marketing activities: performing market research and sending communications, information, advertising material, generally concerning exhibitions organised by Veronafiere and companies belonging to the same group or concerning third parties’ services or products related to the wine sector, using both automated (e-mail, apps, messaging, social networks) and traditional contact methods (paper mail, operator calls).	The User’s consent.	Until the withdrawal of consent.
  To disclose data to third parties acting in the wine sector for their own marketing purposes (commercial / advertising communications will be sent by third parties).	The User’s consent.	Until data are disclosed to third parties, without prejudice to the right to object of data subject against third parties.
  Once the above data retention terms have expired, data will be destroyed or anonymized, compatibly with the technical timing for erasure and backup.

• 4. The provision of data

Data highlighted with an asterisk in the online forms are required for the Vinitaly Plus subscription, as well as the subscribed Users’ data on his/her use of Vinitaly Plus are necessary for the operation of the automated profiling process specified above.

• 5. Categories of recipients to whom data may be disclosed

Data may be disclosed to parties acting as controllers, such as public authorities or professional firms.

If you have given your consent, data will be disclosed to third parties acting in the same field that will process them for their own marketing purposes.

Data can also be viewed by the Subscriber and the relevant Team Member/Chat Operator, when the User makes a contact request and/or exchanges the Business Card; moreover, if the User is a Team Member or a Chat Operator, the activities carried out by the same (i.e. the volume of exchanges in comparison with the other Team Members and the number of open chats, closed chats, chats on hold, average chat duration) can be viewed by Subscribers in their private area.

Data may be processed, on behalf of the Controller, by third parties, appointed as processors pursuant to art. 28 of the GDPR, carrying out activities that are functional to the services provided: e.g. IT services providers (for the Vinitaly Plus digital platform), marketing and communication companies, etc.

Furthermore, data are processed by Veronafiere employees who have been expressly authorised to process such data for the above-mentioned purposes and have received adequate operating instructions.

• 6. Data subjects’ rights

The data subject shall have the following rights:

• to obtain the confirmation as to whether or not personal data concerning him/her are being processed, and, where that is the case, access personal data and the information referred to in art. 15,
• to obtain the rectification of inaccurate data,
• to have incomplete data completed,
• to obtain the erasure of data in the cases provided for by Article 17 GDPR,
• to obtain restriction of processing in the cases provided for by Article 18 GDPR,
• to object, on grounds relating to his/her own particular situation, to the processing carried out in the legitimate interest of the Controller and, in any case, to processing for marketing purposes,
• where the processing is based on consent or contract and is carried out by automated means, to receive the data in a structured, commonly used and machine-readable format and to transmit those data to another controller without hindrance from the controller to which the personal data have been provided (the right to “data portability”),
• to withdraw the consent at any time, without prejudice for the processing lawfully carried out before such withdrawal.

In order to exercise their rights, data subjects can contact the Controller by sending an e-mail to privacy@veronafiere.it or using the contact details pointed out in par. 1.

Data subjects shall have the right to lodge a complaint with the competent supervisory authority in the Member State of his or her habitual residence, place of work or place of the alleged infringement.