The information required by the GDPR regarding the processing of personal data provided by the User for the purpose of registering on the Platform and while using it is set out below, as further described in the relevant contractual terms and conditions, which are fully incorporated herein by reference (with particular regard to the definitions in art. 2).
The data controller is Veronafiere S.p.A., tax code and VAT no. 00233750231, Viale del Lavoro 8, 37135 Verona (VR), Italy (hereinafter also the “Controller”).
The DPO can be contacted at the following e-mail address: dpo@veronafiere.it
| WHY ARE PERSONAL DATA PROCESSED? | WHAT IS THE CONDITION THAT MAKES THE PROCESSING LAWFUL? | HOW LONG ARE PERSONAL DATA RETAINED? |
|---|---|---|
| To allow the use of the Platform and the related services. For further information on the cookies used in the Platform, please refer to the relevant policy. | Performance of a contract to which the data subject, i.e. the User, is party. | Until the expiry of 10 years after the date of termination of the contract, without prejudice to the right of withdrawal of the User and of Veronafiere. |
| To fulfil administrative-accounting, tax and other legal obligations, in accordance with applicable law. | Compliance with a legal obligation to which the Controller is subject. | |
| In the case of registration of approved self-hosted buyers, to allow the use of the Buyers’ Club Platform and the enjoyment of the related services. | Performance of a contract to which the data subject, i.e. the User, is party. | Until the expiry of 6 months after the date of termination of the contract (account closure), without prejudice to the right of withdrawal of the User and of Veronafiere. |
| After the above retention periods have expired, the data will be destroyed, erased or anonymised, compatibly with technical timescales for deletion and backup. | ||
The provision of the data marked with an asterisk (*) in the online form is mandatory for registration on the Platform, and the data relating to the registered User’s use of the Platform are necessary for the functioning of the automated profiling process described above.
Data may be disclosed to third parties acting as independent controllers, such as public authorities and professional firms.
Data can also be viewed by the User and by the relevant Team Staff / Chat Manager where the User makes a contact request and/or exchanges a Business Card. In addition, where the User is a Team Staff member or a Chat Manager, the activities carried out by such User (that is, the volume of exchanges compared with other Team Staff members and the number of chats opened, chats closed, chats pending, average chat duration) can be viewed by Users in their reserved area.
In the case of approved self-hosted buyers, within the Buyers’ Club Platform the data are also visible to other users according to the profile settings and/or depending on the User’s activity on the platform (e.g. registration for events, etc.).
Data may also be processed, on behalf of the Controller, by third parties designated as processors pursuant to art. 28 GDPR, such as natural or legal persons performing functions related to the Platform and/or related services, including, by way of example: marketing and communication companies; companies providing IT services (e.g. for the digital platform).
Moreover, data are processed by Veronafiere employees - belonging to the corporate functions responsible for pursuing the above purposes - who have been expressly authorised to process the data and have received appropriate operational instructions.
Data may be transferred to countries outside the European Union as part of the Controller’s collaboration with selected technology partners. Where data are transferred to countries outside the European Union (EU) or the European Economic Area (EEA) that have not been deemed adequate by the European Commission, the “transfer tools” referred to in art. 46 GDPR will be used, assessing the possible adoption of “supplementary measures” designed to ensure a level of protection that is essentially equivalent to that required under European Union law.
The User may obtain from Veronafiere confirmation as to whether or not personal data concerning him or her are being processed and, where that is the case, access to the data and to the information referred to in art. 15 GDPR, the rectification of inaccurate data, the completion of incomplete data, the erasure of data in the cases provided for by art. 17 GDPR, the restriction of processing in the cases provided for by art. 18 GDPR, as well as object, on grounds relating to his or her particular situation, to processing carried out on the basis of the Controller’s legitimate interest.
Where processing is based on consent or on a contract and is carried out by automated means, the User also has the right to receive the data in a structured, commonly used and machine-readable format and, where technically feasible, to have them transmitted to another controller without hindrance (right to data portability).
The User has the right to withdraw consent at any time and to object to the processing of data carried out for direct marketing purposes. The data subject who prefers to be contacted for marketing purposes exclusively through traditional means may express opposition only to the receipt of communications through automated means.
To exercise these rights, the User may contact the Controller by sending an e-mail to: privacy@veronafiere.it.
The User has the right to lodge a complaint with the competent supervisory authority in the Member State of his or her habitual residence or place of work, or in the Member State where the alleged infringement occurred.