Consultation Request Notice

PRIVACY NOTICE ON THE PROCESSING OF PERSONAL DATA – EVENT REGISTRATION

(pursuant to Article 13 of EU Regulation 2016/679)

 

This privacy notice is provided to describe the methods of processing the personal data of individuals registering for the event organised by Industree Hub s.r.l., which, in its capacity as data controller (hereinafter the “Controller”), issues this notice to the data subject in compliance with European and Italian legislation on the protection of personal data.
This notice supplements the website navigation policy in order to explain to the User how the Controller will specifically process the data entered into this contact form. The processing of your personal data will be based on the principles of lawfulness, fairness and transparency, protecting your confidentiality and your rights.

 

1. IDENTITY AND CONTACT DETAILS OF THE CONTROLLER

The Data Controller, hereinafter also referred to as the “Data Controller” or simply the “Controller”, is Industree Hub s.r.l., represented by its legal representative pro tempore, VAT no. 02909990356, with registered office at Via Benedetto Croce no. 15, 42123 Reggio Emilia, and may be contacted, in addition to the aforementioned registered office, using the following details: tel. +39 0522325270, email: privacy@industree.it and certified email: industreehub@pec.industree.it;

 

2. DATA PROTECTION OFFICER (DPO)

The Controller has appointed Piramis S.r.l. as Data Protection Officer, whose contact details are: email: dpo@easygdpr.it, tel.: +39 0309658901.

 

3. CATEGORIES OF PERSONAL DATA PROCESSED

For the purposes indicated below, the Controller will process the following categories of personal data:

Common personal data: first name, surname, telephone contact details, email address, job position.

 

4. PURPOSES OF PROCESSING AND LEGAL BASIS

Your personal data will be processed for the following purposes:

a) Management of contact requests and preliminary consultation:

Your personal data are processed in order to follow up on your contact request and provide you with the information, clarifications or preliminary consultation requested regarding the services offered by the Controller.

Legal basis: performance of pre-contractual measures adopted at your request (Art. 6(1)(b) GDPR);

b) Direct marketing purposes

Subject to your free and optional consent, your contact details (email, telephone) may be used to send you promotional communications, newsletters and informational material regarding activities, services, courses and future events of the Controller, through automated channels (e.g. email, SMS) and traditional channels (e.g. telephone calls with an operator).

Legal basis: Your consent (Art. 6(1)(a) GDPR), which may be withdrawn at any time.

 

5. PROCESSING METHODS AND DATA RETENTION PERIOD

The processing will be carried out using manual and/or IT and telematic tools, with organisational and processing logics strictly related to the purposes themselves and in any case in such a way as to guarantee the security, integrity and confidentiality of the data.

Personal data will be retained in compliance with the principle of “storage limitation” (Art. 5(1)(e) GDPR):

for the purpose referred to in point 4.a (management of contact requests and preliminary consultation), the data will be retained for the time strictly necessary to process your request. Should the request not result in any contractual relationship, the data will be deleted within 24 months from the last contact, a period considered appropriate for managing any follow-up contacts and in compliance with the principle of data minimisation;

for marketing purposes (point 4.b), the data will be retained until you withdraw your consent. In the absence of withdrawal, and following periodic verification of your interest, the data will be retained for a maximum period of 24 months from the granting of consent, a period considered appropriate in view of the specific nature of the Controller’s activities;

 

6. NATURE OF THE PROVISION OF DATA

The provision of common data (point 4.a) is necessary in order to follow up on your request for consultation. Failure to provide such data will make it impossible to provide the requested response.

The provision of consent for marketing purposes (point 4.b) is optional. Your refusal will in no way affect your participation in the event.

 
7. RECIPIENTS OF THE DATA

Your personal data may be disclosed to:

  • employees and collaborators of the Controller, duly authorised and trained in data processing;

  • third parties providing services instrumental to the Controller’s activities (e.g. IT service companies, event management platform providers, tax consultants), appointed, where necessary, as Data Processors pursuant to Art. 28 GDPR.

  • public authorities or bodies, where required for compliance with legal obligations.

Your data will not be disseminated.

You may request the list of data processors by writing to the Data Controller.

 
8. TRANSFER OF DATA OUTSIDE THE EU

For the provision of certain services (e.g. email management, webinar platforms), your personal data may be transferred to suppliers located in countries outside the European Union (e.g. the United States). In such cases, the Controller ensures that the transfer will take place in compliance with the conditions set out in Articles 44 et seq. of the GDPR, namely in the presence of an adequacy decision by the European Commission or on the basis of appropriate safeguards such as the Standard Contractual Clauses (SCCs) adopted by the European Commission, ensuring the data subject an adequate level of data protection. You have the right to obtain a copy of such safeguards upon request to the Controller.

 
9. RIGHTS OF THE DATA SUBJECT

As a data subject, you may exercise at any time the rights provided for in Articles 15 to 22 of the GDPR, including:

  • Right of access: obtain confirmation as to whether or not personal data concerning you are being processed and, where that is the case, access to the data.

  • Right to rectification: obtain the correction of inaccurate personal data concerning you.

  • Right to erasure (“right to be forgotten”): obtain the deletion of personal data concerning you in the cases provided for by law.

  • Right to restriction of processing: obtain restriction of processing where certain conditions apply.

  • Right to data portability: receive the personal data concerning you in a structured, commonly used and machine-readable format and transmit those data to another controller.

  • Right to object: object at any time to the processing of your personal data for reasons related to your particular situation. In particular, where your data are processed for direct marketing purposes, you have the right to object at any time and without providing any reason to such processing, including profiling insofar as it is related to such direct marketing.

  • Right to withdraw consent: withdraw at any time the consent given (for the purposes referred to in point 4.b), without affecting the lawfulness of processing based on consent before its withdrawal.

Requests to exercise your rights may be sent to the Controller using the contact details indicated in point 1.

The Controller will respond without undue delay and, in any event, no later than one month from receipt of the request. This period may be extended by two months where necessary, subject to notification.

 

10. RIGHT TO LODGE A COMPLAINT

If you believe that the processing of your personal data is carried out in violation of the GDPR, you have the right to lodge a complaint with the competent supervisory authority (in Italy, the Italian Data Protection Authority), as provided for by Art. 77 GDPR, or to bring proceedings before the competent judicial authorities pursuant to Art. 79 GDPR.

 

 

Place, date

The Data Controller

Industree Hub s.r.l.