pursuant to arts. 13 and 14 of EU Regulation 679/2016 (the "GDPR")

1. Subject of this communication
 

MADE Eventi S.r.l., a company with its registered office in Rho, Milan (MI), S.S. del Sempione 28, tax code and VAT number 05656450961 will process your personal data, collected directly or indirectly on the occasion of trade fair events and professional meetings (for example through the exchange of business cards, social profiles, catalogues, gadgets and merchandising, etc.), for: (i) transmitting communications regarding previous and future events organized by MADE Eventi; (ii) inviting you to subsequent events organized by MADE Eventi; as well as (iii) evaluating the opportunity to develop commercial and business relationships in general; this in compliance with current legislation on the protection of applicable personal data and the obligations of confidentiality by which our activity is bound.

2. Data controller

The Data Controller is MADE Eventi S.r.l. with headquarters in Rho, Milan (MI), S.S. del Sempione 28,, tax code and VAT number 05656450961 (hereinafter referred to as “MADE Events”, the “Company” or the “Owner”).

In case of any doubts as to how the Company processes personal data, it can always be contacted:

• at the e-mail address: privacy@madeexpo.it
• at the postal address: MADE eventi S.r.l. S.S. del Sempione 28 - 20017 Rho - Milan - Italy

3. Data collected

The personal data collected by the Data Controller will only be that considered relevant, that which does not exceed the purposes of the processing and which is summarized at the beginning of this Information document (see Paragraph 1); for example: name, surname, job position, e-mail and telephone number. These are mainly data needed to create a point of contact and evaluate the opportunity to develop commercial and business relationships in general (the "Data");

We would also like to inform you that your data may have been communicated by a third party, by virtue of your potential interest in participating in events organized by the Data Controller or more generally, in starting a business relationship with the latter.

The interested party undertakes to provide this information to its own employees and collaborators should there be a communication of the relative personal data during the establishment of the relationship.

4. Legal basis and purpose of the processing

The developing of potential and future business relationships

The Data will be processed to create a point of contact, establish relationships and evaluate the opportunities for developing potential commercial and business relationships of any nature (including for example the sending of information and commercial communications, sharing quotations/estimates etc.) .

Such processing is legally based on the legitimate interests of the Company in developing business relationships and is compatible with its position in that it is reasonable to believe that you, having provided your Data, have a reciprocal interest in being updated about - and involved in - the activities of the Data Controller, and that, having communicated such Data, you expect to receive information on possible opportunities.

It is possible that your Data may have been given to us by third parties who already had access to it (for example, subjects with whom you have already developed business relationships). In such cases, the Company still considers contacting you a legitimate interest by virtue of the specific activity performed by yourselves. MADE Eventi believes that with regard to the nature of such activities there is a reciprocal interest in receiving information regarding business opportunities to be developed with the Data Owner and that sending such communications does not violate your rights and freedoms as an interested party.

Sending of communications regarding previous events

The Data will also be processed for the sending of communications regarding previous events organized by the Data Controller, to inform you of their media coverage and possible further opportunities that may emerge from the latter.

Such processing is legally based on the legitimate interests of the Company in promoting its own activities and developing business relationships and is compatible with its position in that it is reasonable to believe that you, having provided your Data, have a reciprocal interest in being updated about further activities related to the events organised by the Data Controller and potential opportunities that may derive from them.

It is possible that your Data may have been given to us by third parties who already had access to it (for example, subjects with whom you have already developed business relationships). In such cases, the Company still considers contacting you a legitimate interest by virtue of the specific activity performed by yourselves. MADE Eventi believes that with regard to the nature of such activities there is a reciprocal interest in receiving information regarding business opportunities to be developed with the Data Owner or deriving from the activities carried out by the latter and that the sending of such communications does not violate your rights and freedoms as an interested party.

Invitations to future events organised by MADE Eventi

The Data will also be processed for the purpose of sending of invitations to future events organised by the Data Owner.

Such processing is legally based on the legitimate interests of the Company in promoting its own activities and developing business relationships and is compatible with its position in that it is reasonable to believe that you, having provided your Data, have a reciprocal interest in being updated about further activities related to the events organised by the Data Controller and the potential opportunities for you that may derive from them.

It is possible that your Data may have been given to us by third parties who already had access to it (for example, subjects with whom you have already developed business relationships). In such cases, the Company still considers contacting you a legitimate interest by virtue of the specific activity performed by yourselves. MADE Eventi believes that with regard to the nature of such activities there is a reciprocal interest in receiving information regarding business opportunities to be developed with the Data Owner as well as taking part in events organised by the latter and that the sending of such communications does not violate your rights and freedoms as an interested party.

In any case, you will always be able to refuse the receipt of such communications or the use of one or more of the contact details provided by contacting the Data Owner:

• at the e-mail address: privacy@madeexpo.it  
• at the postal address: MADE eventi S.r.l. S.S. del Sempione 28 - 20017 Rho - Milan - Italy

The processing of the Data described above is not necessary for the establishment of a commercial contact and for the negotiation of a potential contract with the Owner. Any opposition to the receipt of such communications will in no way affect the relationship with the Company.

5. Data communication and data recipients

The Data will be processed by the Data Controller and by subjects designated by the same (for example, subjects in charge of the management of information systems, legal functions and administrative functions) and may be disclosed to third parties only where necessary in relation to the aforementioned purposes.

Third party recipients of the Data, autonomous data controllers or data processors, are individuals who perform tasks of a technical or organizational nature (for example, IT service provider) for or on behalf of the Data Controller, as well as providing professional assistance / consulting and provision of services (in particular administrative-accounting and legal services, shippers, carriers and fitters/stagers), or possible contacts of customers and suppliers with reference to whom the activities performed by you may be useful.

The complete list of those responsible for data processing is kept at the Data Controller's headquarters and can be consulted via requests sent to the addresses indicated in the following Paragraph 10.

6. Place of data processing

The data will be processed at the Company's offices and the Data will be stored on servers and/or archives located within the European Union. Transfers outside the European Union will only and exclusively take place to countries that offer protection of personal data similar to that guaranteed by EU law or, in any case, subject to the adoption of the necessary measures required to guarantee a level of data protection similar to that guaranteed within the European Union (e.g. signing of the so-called Standard Clauses as established by the European Commission.

7. Data distribution

Data will not be distributed

8. Data Retention Period

The Data will be processed both in paper form and by electronic, computer or automated means, using systems that ensure protection, security and confidentiality.

Furthermore, the Data Controller has adopted specific and adequate logical, legal, organizational and technical security measures to prevent the loss of Data, its unlawful or unauthorized use and unauthorized access to it.

The Data will only be processed for the time strictly necessary to achieve the purposes for which it was collected. In light of the predominantly biennial nature of the events organized by the Data Controller, in particular, the Data will be kept for up to 36 months from the last contact for commercial purposes with the latter, which may be extended for subsequent 36 month periods if the interested party accepts it by responding positively to the request that will be sent with one month's notice with respect to this deadline.

The Data may be stored for a longer period in the event that a contractual relationship is established with the Company: in this case, the Data will be processed as described in the information that will be provided at the time of the establishment of the contractual relationship.

9. Rights of the interested party

The interested parties are holders of rights conferred by the GDPR. In particular, pursuant to articles 12-23 of the GDPR, the interested parties have the right to request and obtain at any time access to their personal data, information on the processing, rectification and/or updating of the same, deletion and limitation of the processing. Furthermore, they also have the right to oppose the processing and to request data portability (i.e. to receive personal data in a commonly available and used structured format, readable by automatic devices). Finally, interested parties always have the right to withdraw their consent at any time (in any case this will not affect the lawfulness of the processing carried out based on the consent given prior to revocation) and to lodge a complaint with a supervisory authority ( in Italy: the Guarantor for the Protection of Personal Data)

10. Contact data

• at the e-mail address: privacy@madeexpo.it
• at the postal address:MADE eventi S.r.l. S.S. del Sempione 28 - 20017 Rho - Milan - Italy

For other information or clarifications of the aforementioned rights, the Data Controller may be contacted at the same addresses.