PRIVACY INFORMATION NOTICE FOR REQUEST INFORMATION
Privacy information Notice for the processing of your personal data pursuant to and for the effects of art.13 of the Reg (EU) 2016/679
WHY THIS INFORMATION?
Pursuant to Regulation (EU) 2016/679 (hereinafter “GDPR”), this page describes how personal data is processed. This is a disclosure that is made pursuant to art. 13 GDPR. The information is not to be considered valid for other third-party websites, which may be consulted via links on this website, for which no responsibility is assumed.
Personal data that can be processed
Personal data: any information concerning an identified or identifiable natural person («interested party»); the natural person who can be identified, directly or indirectly, shall be considered identifiable with particular reference to an identifier such as his or her name, an identification number, location data, an online identifier or one or more characteristic elements of his or her physical, physiological, genetic, psychological, economic, cultural or social identity (C26, C27, C30 GDPR).
Data of contractors/users.
Data Protection Officer (RPD/DPO) The company has proceeded to appoint a DPO pursuant to articles 37 and 39 of Reg. UE 2016/679. You can contact the DPO sending an e-mail to: [email protected].
Navigation data: the computer systems and software procedures responsible for the operation of this site acquire, in the course of their normal operation, certain personal data whose transmission is implicit in the use of Internet communication protocols. This category of data includes the IP addresses or domain names of computers and terminals used by users, the addresses in URI/URL (Uniform Resource Identifier/Locator) notation of the requested resources, the time of the request, the method used in submitting the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response given by the server (good purpose, error, etc.) and other parameters relating to the user’s operating system and computer environment.
Voluntarily communicated data: the optional, explicit and voluntary sending of messages to the contact addresses indicated on this site and/or the completion of data collection forms involves the subsequent acquisition of the sender’s address, necessary to respond to requests, as well as any other personal data entered.
Information about the processing of personal data carried out through Social Media platforms
Regarding the processing of personal data carried out by the operators of the Social Media platforms used by the Owner, please refer to the information they provide through their respective privacy policies. The Owner processes the personal data provided by the user through the pages of dedicated social media platforms, to manage interactions with the user (comments, public posts, etc.) and in compliance with current legislation.
Specific information may be present on the pages of the Site in relation to particular services or processing of the data provided.
COOKIES AND OTHER TRACKING SYSTEMS. WHAT ARE THEY? WHAT ARE THEY FOR?
For Cookies and other tracking systems, see the cookies policy on the site’s footer and at the following link.
1.WHO IS THE DATA CONTROLLER? HOW TO CONTACT HIM?
The Data Controller is EFIM–ENTE FIERE ITALIANE MACCHINE SPA, with registered office at Viale Fulvio Testi 128, 20092 – Cinisello Balsamo (MI), in the person of the legal representative pro tempore. The contact details of the Data Controller are as follows: email: [email protected] Tel. 02/262551.
HAS THE DATA PROTECTION OFFICER BEEN APPOINTED? WHAT ARE YOUR CONTACT DETAILS?
The Owner has appointed its Data Protection Officer (DPO/DPO – Data Protection Officer) pursuant to Articles 37, 38 and 39 of the GDPR. The DPO can be found at the Owner’s office indicated above and by email by writing to: [email protected].
PURPOSE OF PROCESSING, LEGAL BASIS, DATA RETENTION PERIOD, NATURE OF THE GRANT
Browsing this website. The data required to use web services is also processed for the purpose of: • obtaining statistical information on the use of services (most visited pages, number of visitors per time or daily slot, geographical areas of origin, etc.); • monitoring the correct functioning of the services offered. The data will be used to establish liability in the event of hypothetical cybercrimes against the site.Processing is necessary for the pursuit of the legitimate interest of the controller or third parties, provided that the interests or fundamental rights and freedoms of the data subject requiring the protection of personal data do not prevail, taking into account the reasonable expectations held by the data subject and the activities strictly necessary for the operation of the site and for navigation itself.(Art. 6, par. 1 lit. f and C47 of the GDPR) The storage of navigation data will take place until the duration of the navigation session. In any case, they do not persist for more than seven days (except for any need for the detection of crimes by the Judicial Authority).The provision of data is necessary for browsing the website.
Using cookies and comparable technologies. See the cookies policy in the site’s footer.For the necessary non-technical comparable cookies and technologies, the processing is based on consent to the processing of personal data (art. 6 para. 1 lit. a and C42, C43 of the GDPR).Consent is given through the site’s banner and cookie policy.See the cookies policy in the footer of the site.See the cookies policy in the footer of the site.
In addition to navigation, personal data will be processed for:
PURPOSE OF PROCESSING LEGAL BASIS PERIOD DATA RETENTION NATURE OF THE GRANT
A)CONTACTS/INFORMATION REQUEST, sending contact requests, information in relation to trade fair activities, or similar industry events, Processing is necessary for the performance of a contract to which the interested party is a party or for the performance of pre-contractual measures adopted at the request of the same (C44).Art. 6 par. 1 lit. b) of the GDPR.Maximum 12 months.
The conferral is necessary.
Failure to provide the necessary data will make it impossible to be contacted and receive the requested information
B) MANAGEMENT OF HIS REQUESTS and requests from other interested parties, pursuant to Articles 15 et seq. of the GDPR (rights of the interested party).Processing is necessary to fulfil a legal obligation to which the controller is subject (C45). Art. 6 par. 1 lit. c) of the GDPR. 5 years from the closure of the request, except in litigation.The provision of personal data is mandatory, as it is essential to be able to implement legal obligations.
C) PREVENTION AND CONDUCT OF DISPUTES AND OTHER LEGAL AND DEFENSE ISSUES IN THE EVENT OF A TRIAL.Processing is necessary for the pursuit of the legitimate interest of the controller or third parties, provided that the interests or fundamental rights and freedoms of the data subject requiring the protection of personal data do not prevail (C47-C50). Art. 6 par. 1 lit. f) GDPR. 10 years, unless opposed and except for the time necessary for the defense in court. The provision of data is necessary. Failure to confer will prevent the achievement of the legitimate interest of the Holder indicated in the purposes of this point. The denial shall be balanced against the legitimate interest of the Holder indicated in the purposes of this point
WHO WILL BE COMMUNICATED PERSONAL DATA TO? DATA RECIPIENTS
Personal data will be communicated to entities that will process the data as independent Data Processors, or Data Processors (art. 28 GDPR) and treated by natural persons (art. 29 GDPR) which act under the authority of the Owner and the Managers on the basis of specific instructions provided in order to the purposes and methods of processing. The data will be communicated to recipients belonging to the following categories:
entities that provide services for the management of the information system used by the Data Controller and telecommunications networks;
freelancers who collaborate with the Data Controller;
entities dedicated to maintenance and/or updating activities of this website;
competent authorities for fulfilling obligations of laws and/or provisions of public bodies, upon request.
The list of Appointed Managers is available by contacting the Data Controller at the contact details indicated above.
The list of Data Processors art. 28 is available by writing to [email protected] or the other contact details indicated above.
WILL THE DATA BE TRANSFERRED TO NON-EEA COUNTRIES?
The personal data provided will not be transferred outside the European Economic Area (EEA).
IS THERE AN AUTOMATED PROCESS?
Personal data will be subjected to traditional manual, electronic and automated processing. It should be noted that fully automated decision-making processes are not carried out.
WHAT ARE HIS RIGHTS? HOW CAN HE PRACTICE THEM?
Interested parties may assert their rights as expressed in Articles 15 et seq. GDPR, by contacting the DPO/RPD at e-mail: [email protected] or by contacting the Data Controller at e-mail: [email protected] or by writing to the above contacts.
The Data Controller guarantees data subjects the possibility to request, at any time, access to their personal data (art. 15), rectification (art. 16), erasure of the same (art. 17), restriction of processing (art. 18). The controller shall communicate (art. 19), to each of the recipients to whom the personal data have been transmitted, any corrections or cancellations or limitations of the processing made. The controller shall notify the data subjects who so request.
The holder guarantees the right to portability (art.20) and, in the event of requests under art.20, will provide data subjects in a structured, commonly used and machine-readable format.
Data subjects are granted the right to object (art.21), at any time, to the processing of data based on legitimate interest, by writing to the above contacts with object “opposition”. In the event of the exercise of the right to object to processing based on legitimate interest, the holder shall grant interested parties the opportunity to obtain, upon request, information on the balancing test carried out.
Data subjects shall be granted the right to withdraw the consent given, without prejudice to the lawfulness of the processing based on the consent given before the withdrawal.
In the event that the data subjects consider that the processing of personal data carried out by the Data Controller takes place in violation of the provisions of Regulation (EU) 2016/679, they are free to lodge a complaint with the National Supervisory Authority, in particular in the Member State where they usually reside or work, or in the place where the alleged violation of the Regulation (Privacy Guarantorhttps://www.garanteprivacy.it/), occurred or to bring the matter before the appropriate judicial bodies.
CHANGES TO THE DISCLOSURE
The holder may change, modify, add or remove any part of this Privacy Policy. In order to facilitate the verification of any changes, the disclosure will contain an indication of the date of update of the disclosure.
Update date: July 28, 2026