Privacy Policy

This privacy notice is drafted in accordance with the provisions and for the purposes of Article 13 of the European Regulation of April 27, 2016, no. 679 (briefly also "GDPR"), concerning the protection of natural persons with regard to the processing of personal data, as well as the free movement of such data. It has been in force since May 4, 2016, and is directly applicable in all EU countries from May 25, 2018.

IDENTIFYING AND CONTACT DETAILS OF THE DATA CONTROLLER.

The Data Controller is GE.FI S.P.A., located in Milan, Via Achille Papa No. 30, email: privacy-visitatori-af@gestionefiere.com. The Data Controller has appointed a Data Protection Officer (“DPO”) who can be contacted at the following email: dpo@artigianoinfiera.it.

PURPOSES AND LEGAL BASIS OF PROCESSING.

The data provided by the Data Subject who intends to contact the Controller will be processed as provided by the GDPR for the execution and to fulfill the requests of the Data Subject himself and to offer and manage the requested services, for administrative operations, as well as to fulfill specific legal obligations or to carry out specific tasks provided by law. The data is also processed for statistical operations in an anonymous form. The legal basis of the treatments described above consists in the execution of the contract of which the data subject is part and in legal obligations.

RECIPIENTS OR CATEGORIES OF RECIPIENTS TO WHOM PERSONAL DATA MAY BE DISCLOSED.

Data may be communicated to third parties operating in aid and on behalf of the Controller. The communication to the above subjects will still occur with a guarantee of protection of the rights of the Data Subject as provided in the GDPR. The list of any data processors is available at the Controller.

POSSIBLE TRANSFER OF PERSONAL DATA TO A THIRD COUNTRY OR AN INTERNATIONAL ORGANIZATION WITH INDICATION OF ANY PRIVACY GUARANTEES.

Any transfer of data outside the European Union will occur in full respect of the protection and safeguard levels provided in the GDPR.

PERIOD OF CONSERVATION OF PERSONAL DATA OR CRITERIA USED TO DETERMINE SUCH PERIOD.

The data will be stored in a form that allows the identification of the Data Subject for a period of time not exceeding the achievement of the pursued purposes, compatibly with other legal obligations and in conformity with the data conservation procedure adopted by the Controller.

RIGHTS OF THE DATA SUBJECT

As provided by Art. 13 of the GDPR, the Data Subject may at any time exercise the following rights:

• - Right of access, rectification, erasure, restriction, opposition: the Data Subject can access their data at any time, request rectification if incorrect, request the deletion of excessive data but not those required by law to the Data Controller, can limit the access of data to certain figures;
• - Right to data portability: the Data Subject has the right to receive in a structured, commonly used and machine-readable format the personal data concerning them provided to a data controller and has the right to transmit such data to another data controller without impediment from the data controller to whom they were provided, exclusively in cases provided by Art. 20 of the GDPR;
• - Right to withdraw consent at any time: the Data Subject can withdraw consent at any time, assuming the consequences, provided that the Data Controller is obliged to continue to hold the personal data subject to this processing when this is necessary to fulfill a legal obligation of the Data Controller or for the execution of a task of public interest or connected to the exercise of public authority vested in the Data Controller;
• - Right to lodge a complaint with a privacy supervisory authority.

To exercise your rights, write to privacy-visitatori-af@gestionefiere.com.

MANDATORY OR OPTIONAL NATURE OF DATA PROVISION.

The provision of data in case of requests to the Controller is mandatory due to the nature of the contractual relationship established between the data subject and the Data Controller.

CONSEQUENCES OF A POSSIBLE REFUSAL TO RESPOND.

Any refusal to provide the data to fulfill the requests of the Data Subject would not allow the provision of the related service.

GE.FI S.P.A.