PRIVACY NOTICE (Art. 13 and Art. 14 of European Regulation 2016/679 - GDPR)
Data subjects: Journalists registered with the Restricted Press Area of the websites www.cersaie.it, www.ceramica.info and www.confindustriaceramica.it
This privacy notice (hereinafter “Privacy Notice”) refers to your registration as a journalist in the RESTRICTED PRESS AREA of the websites www.cersaie.it, www.ceramica.info and www.confindustriaceramica.it and the issuance of your ticket for participation in Cersaie via registration with www.cersaie.it. It describes the procedures and methods adopted by Confindustria Ceramica and/or by its subsidiary Edi.Cer. S.p.a. in order to process your personal data in their capacity as autonomous controllers and in accordance with the consents you have granted.
We wish to inform you that to facilitate access to information contained in the RESTRICTED PRESS AREAS of the websites www.cersaie.it, www.ceramica.info and www.confindustriaceramica.it, once you have registered on one of these websites you will be able to access the other press rooms using the same credentials.
The personal data referred to on this Form are processed for purposes relating to your request to register with the restricted press area and, solely in the case of the website www.cersaie.it, for the issuance of a free electronic Press ticket for participation in the exhibition Cersaie organised by Edi.Cer. S.p.a. and promoted by Confindustria Ceramica.
The provision of data relating to your registration with the press area and for the issuance of the ticket for participation in Cersaie is optional, but in the event of failure to provide such data, it will not be possible to fulfil your request. The legal basis for the above-mentioned purposes is Art. 6.1.b.) of the GDPR as processing is necessary to fulfil your request.
In addition, with reference to ticket issuance, once your ticket has been generated and you have gained admission to Cersaie, individual exhibitors may ask to read the QR code on your ticket at the entrance to their physical stands using the Cersaie iBusiness Card app. When the iBusiness Card app reads your QR code, the personal data you provided during registration (in particular first name, last name, telephone number, company name, and any other data provided, including address and email address) will be communicated to the exhibitor who reads the code. The exhibitor will process the data in its capacity as independent controller for further purposes where permitted by the privacy notice he has provided. In his/hers capacity as a data subject, the user may exercise his/hers rights under Arts. 15 et seq. of the GDPR towards the individual Exhibitor. Sharing the QR code on your ticket with individual exhibitors and the consequent communication of personal data to the latter is optional and refusal to do so will not affect admission to Cersaie.
Once you have given your explicit consent, your personal data may be used by the autonomous Controllers (Edi.Cer. S.p.A. and Confindustria Ceramica) to inform you about the promotional or publishing activities, events or meetings they have organised, about products and/or services of other companies, organisations and/or its partner bodies. Provision of data for these purposes is optional and failure to submit said data will not affect admission to or participation in the event or registration with the Press area. The legal basis for the above-mentioned purposes is Art. 6.1.a.) GDPR, i.e. your consent.
We would like to inform you that if you have requested a ticket for Cersaie, your personal data will be processed in compliance with the principles of lawfulness, purpose limitation and data minimisation, pursuant to art. 5 of the GDPR for the duration of the event and for the organisation of the three editions following your participation (except in cases where shorter retention periods have been envisaged with reference to specific processing purposes, such as health) and will be retained after this period if necessary in order to comply with the obligations imposed by laws or regulations and for the legal protection of the rights of Edi.Cer S.p.A. For marketing purposes, your personal data will be processed until you decide to withdraw your consent or exercise your right to object to processing.
The Controllers may also process your data in order to carry out statistical, business and market analyses relating to their activities, areas of interest and events. In this context, the information is usually stored and processed in an anonymised and aggregated form and should therefore not involve data processing in terms of information that is traceable to you either directly or indirectly. If the analyses in question do involve data processing, appropriate measures will be implemented to ensure data security (e.g. pseudonymisation); in this case, processing will be carried out on the basis of the legitimate interest of the Controller pursuant to Art. 6.1.f), GDPR.
The personal data provided will also be processed to ensure compliance with the legal obligations imposed on the Controller and/or to comply with any requests from the authorities on the basis of the condition of lawfulness referred to in Art. 6.1.c), GDPR. In this connection, the Controller informs you that if any legal provisions requiring your personal data to be processed to combat the Covid-19 epidemic are in force at the time of any event organised by Edi.Cer. S.p.A. or Confindustria Ceramica, said personal data will be processed in full compliance with the principles of privacy and in any case will be retained only for the period necessary to comply with said legal provisions. The Controller reserves the right to provide you with further specific privacy information if necessary.
Your data will be processed in printed and/or computerised/telematic form for purposes that may include drawing up reports in accordance with the principles set out in Art. 5, GDPR, and adopting the appropriate security measures established in accordance with Art. 32, GDPR.
Your data will be processed only by personnel authorised to perform data processing. The Controllers may transmit your data to third parties used to carry out activities and/or services that are necessary or otherwise related to the aforementioned purposes. In particular, as an integral part of the processing activities, your data may be transmitted to third parties located in the territory of the European Economic Area that provide the Controllers with IT and administrative services, or, where appropriate, to external consultants who will perform the processing in their capacity as controllers pursuant to Art. 28, GDPR. The updated list of data processors is kept by the Controllers and is available upon request by e-mail at firstname.lastname@example.org (for Edi.Cer. S.p.a.) and at email@example.com (for Confindustria Ceramica).
The Controllers may also disclose your data to third parties in the event such disclosure is required by law (e.g., public authorities), has been requested by you (e.g., exhibitors) or is necessary due to organisational requirements (e.g. sharing some of your data with the exhibition organiser). These parties will process your data in their capacity as independent controllers (for a list of external parties, contact the Controller).
Your data will not be made publicly available.
Please note that, in accordance with the principles of lawfulness, purpose limitation and data minimisation set out in Art. 5 of the GDPR, your personal data will be processed for the duration of Cersaie and for 6 months following its conclusion, and will be kept for a further 6 years exclusively for purposes relating to the fulfilment of legal obligations or the protection of the rights or interests of Edi.Cer S.p.A.
For marketing purposes, your personal data will be processed for a period of time not exceeding the performance of the services provided, unless you exercise your right to opt out or (if applicable) to withdraw any consent you have previously given by clicking on the cancel link at the bottom of the newsletters or by writing to firstname.lastname@example.org or to email@example.com.
The autonomous Controllers are:
Edi.Cer. S.p.a., with registered offices in Viale Monte Santo n. 40 Sassuolo (MO), VAT registration no. 00853700367, email: firstname.lastname@example.org;
Confindustria Ceramica, with registered offices in Viale Monte Santo n. 40, Sassuolo (MO), TAX code 93004930363, email: email@example.com.
You have the right to obtain from each Controller access to your data, the erasure (“right to be forgotten”), restriction, information, rectification, portability, objection to processing of your personal data and withdrawal of any consent given, and in general you may exercise all the rights established by Arts. 15, 16, 17, 18, 19, 20, 21 and 22 of the European Regulation 2016/679 by writing to the respective e-mail addresses indicated above. This does not affect your right to lodge a complaint with the Data Protection Authority - Garante per la Protezione dei Dati Personali, Piazza Venezia, 11, 00187, Rome (RM).