pursuant to Art. 13 of Regulation (EU) 679/2016 (the "GDPR")
1 Data controller and contact details
This page describes the characteristics of the processing of personal data of visitors and users of the http://www.madeexpo.it web site (the “Site”), as well as those who decide to take part in events, activities and ventures advertised through the Site (collectively, the "Users"), by Made Eventi S.r.l., a company with registered office in Rho, Milan (MI), S.S. del Sempione 28, Fiscal Code and VAT No. 05656450961, ("MADE"), as data controller.
In case of doubts regarding the characteristics of data processing, it is always possible to contact us:
Please note that the information on this page does not apply to sites, apps and content from third parties in general, even if accessible from the Site. In these cases the provisions on data protection by such third parties may be applicable, which may be different from those present and which you are advised to consult before the communication of any data.
MADE may modify this information in order to adapt it to future extensions or changes to the Site or services offered. In the case of substantial changes, MADE shall publish a notice on the Site and/or send an e-mail notification to the registered Users reporting the changes and indicating a possible request to exercise the rights recognized by legislation regarding the protection of personal data.
2 Method of data collection and types of data processed
Navigation data automatically collected by the Site: access and navigation data
Whenever Users access the Site, the computer systems and software procedures used to operate the Site acquire access and navigation data during their normal operation (for example: information on the browser used by the User, pages visited, date, time and duration of each visit as well as other parameters relating to the User's operating system and IT environment - the "Navigation Data").
The information is automatically collected by the Site and does not require any action by the User; it does not lead to identification of visitors in that it simply allows a better understanding of the visits received, how often the Site is visited and which parts of the Site are of greatest interest.
Data communicated by Users: e-mail for the Newsletter
Users can provide MADE with their e-mail by filling out a special newsletter subscription form (Newsletter Data), aimed at allowing the user to benefit from this service and therefore to receive e-mail updates regarding MADE's activities and those related to the Event.
The communication of Newsletter data is necessary: any refusal will make it impossible for MADE to send the newsletter to the user.
3 Purposes of the data processing and the relative legal basis
Navigation Data will be used: (i) in order to monitor the proper functioning of the Site, (ii) in an anonymous and aggregate format for statistical purposes related to the understanding of how the Site is used by Users, to improve ease of access and increase its attractiveness, as well as (iii) to detect any technical problems as soon as possible.
Such processing has a legal basis in the legitimate interest of MADE to improve its products and digital services and is compatible with the position of those concerned inasmuch as (a) monitoring the operation of the Site and the statistical data related to its use does not involve identification and the outcomes of these activities are not shared with subjects other than MADE and (b) MADE's interest appears to be correct within reason also for the interested parties who shall be able to benefit from a better performing and more optimized Site.
The Newsletter Data will be used in order to send e-mails to the User related to MADE activities and the Event.
This processing has a legal basis in the need to execute a specific request on the part of the User.
4 Addressees of data communication
Navigation Data, Personal Data and Newsletter Data (jointly, the "Data") will be communicated and may be made known to (i) MADE employees and collaborators, duly trained and designated for processing; and (ii) by third parties who provide ancillary or instrumental services to MADE's activities in relation to the development, provision and operational management of the Site and the transmission of newsletter services (ContactLab company), specifically appointed as data processors on behalf of MADE.
This communication, which constitutes a processing of personal data is based on the need to carry out pre-contractual and contractual measures at the request of the User, as well as to comply with the related and relevant legal obligations.
5 Place of processing and transfer of data abroad
The processing of User Data will take place at the aforementioned MADE head office and the Data will be stored at servers and/or physical archives located within the European Union.
Any further transfer of data abroad will occur, if towards countries that do not benefit from an adequacy decision from the European Commission and therefore do not offer an adequate level of protection for personal data, only (i) after the adoption of appropriate guarantees such as , by way of example, the signing of the standard clauses approved by the European Commission, or (ii) the use of an exemption from the prohibition of transfers outside the European Union and therefore, always by way of example, subject to the collection of explicit and informed consent from the User, or only to the extent necessary for the execution of a contract concluded between the User and MADE, or between MADE and a third party for the benefit of the User, or the execution of pre-contractual measures taken on behalf of the User.
6 Processing methods, security measures and data retention times
The Data will be processed with and without the aid of electronic, computerized or automated tools, which ensure data protection by design and default and which are guaranteed to ensure security and confidentiality, and with logic protocols strictly related to the purposes. Furthermore, specific and adequate logic, legal, organizational and technical security measures have been adopted by MADE to prevent the loss of data, the illicit or unauthorized use of the same and unauthorized access.
Data will be stored in a form that allows identification for a period of time no longer than necessary to achieve the purposes of the treatment and, in particular:
Data will be stored for longer periods of time where necessary in order to fulfil statutory and/or legal obligations as well as to ensure judicial protection of MADE's rights, in compliance with the standard limitation periods.
7 User rights
Users, as interested parties (i.e. subjects to whom the Data refers) are the holders of rights conferred by the GDPR.
In particular, Users have the right to request and obtain at any time access to their personal data, information on the processing carried out, the correction and/or updating of personal data, the deletion and limitation of processing. Furthermore, they also have the right to oppose the processing and to request data portability (i.e. to receive personal data in a structured and commonly available format readable by automatic devices). Furthermore, where applicable the parties concerned always have the right to withdraw their consent at any time and to appeal to the Judicial Authority or present a claim to a supervisory authority (in Italy: the Guarantor for the Protection of Personal Data). Finally, at any time the complete list of recipients of personal data may also be requested.
Such rights may be exercised by writing:
For any other information or clarifications regarding the rights mentioned, you can contact us at the same addresses.
Information updated on 7th February 2020