PRIVACY NOTICE ON THE PROCESSING OF PERSONAL DATA

Pursuant to Article 13 of Regulation (EU) 2016/679 (hereinafter "GDPR"), A151 S.r.l. hereby informs data subjects about how their personal data will be processed and how photographs and/or video recordings in which they may appear during trade fair events organized by the Company, also in collaboration with partner organizations (hereinafter referred to as the "Event"), will be used.

  1. Data Controller
    The Data Controller is A151 S.r.l., with its registered office at:
    Strada Luigi Carlo Farini, 34
    43121 Parma (Italy)

  2. Data Protection
    The Company is not required to appoint a Data Protection Officer pursuant to Article 37 of the GDPR. However, it has established a Privacy Office, which can be contacted at: privacy@a151.eu
  3. Personal Data Processed
    The personal data processed for participation in the Event include personal identification details and business contact information. Photographs and video recordings may also be processed within the limits and according to the conditions specified below.

  4. Purposes of Processing – Legal Basis – Retention Period
    The personal data provided through the registration form will be processed for the following purposes:
    1. Management of Event Participation
      Management of the participant's registration and participation in the Event, including all accounting, administrative, logistical and organizational activities, including the sharing of data with co-organizers.
      Legal basis: Performance of pre-contractual and contractual obligations (Art. 6(1)(b) GDPR) and compliance with legal obligations (Art. 6(1)(c) GDPR).
      Retention period: For the entire duration of the Event and thereafter for the period required by applicable laws and industry regulations.
    2. Promotional and Marketing Communications
      Sending promotional and marketing communications by A151 S.r.l., co-organizers and partners, subject to the data subject's explicit consent.
      Legal basis: Consent of the data subject (Art. 6(1)(a) GDPR).
      Retention period: Up to 24 months from registration.
    3. Disclosure of Personal Data to Exhibitors and Investor Sponsors
      Disclosure of personal data to exhibitors and investor sponsors for promotional and marketing purposes.
      Legal basis: Consent of the data subject (Art. 6(1)(a) GDPR).
      Retention period: Up to 24 months from registration.
    4. Photographic and Video Material
      Management and use of photographs and/or video recordings in which participants may appear, whether in person or online during the Event, for information, promotional and commercial purposes, in accordance with applicable laws.
      Legal basis: Consent of the data subject (Art. 6(1)(a) GDPR).
      Retention period: Up to 24 months from registration.

  5. Processing Methods
    The collected data are processed both in paper form and, primarily, by electronic means. Processing is carried out in compliance with the principles set out in Article 5 of the GDPR.
    For the purposes referred to in Section 4(A), the data may also be processed by Ethos Academy S.r.l., with its registered office at Via Pier Luigi da Palestrina 6, 20124 Milan (Italy), as well as by other co-organizers, whose list is available from the Data Controller.

  6. Communication and Disclosure of Data
    Personal data processed for the management of participation in the Event may be disclosed to companies providing IT services, banks handling payments and collections, consultants and professionals appointed by the Company. In all cases, the disclosure of personal data will be strictly limited to what is necessary for the performance of the assigned tasks.
    Personal data processed for promotional and/or marketing purposes may also be disclosed, subject to the data subject's explicit consent, to investor sponsors.
    Authorized personnel operating under the direct authority of the Data Controller or appointed processors, in accordance with the instructions received, may also have access to the personal data.

  7. Data Recipients
    Recipients of the collected data include, in addition to the entities to whom the data are disclosed, the Data Controller's authorized personnel and suppliers providing development, operational management and support services for the technological platforms used.

  8. Mandatory or Optional Nature of Data Provision
    With reference to the processing purposes described in Section 4:
    1. The provision of personal data necessary for managing participation in the Event is mandatory. Failure to provide, or incorrect provision of, such data will make it impossible to process the request for participation.
      Participants may unsubscribe from the Event newsletter at any time by clicking the "unsubscribe" link included at the bottom of every email.
    2. The provision of personal data for promotional purposes is optional. Refusal to give consent will not affect participation in the Event.
    3. The provision of personal data for communication to exhibitors and investor sponsors for promotional and/or marketing purposes is optional.
      Such data may only be disclosed upon the participant's explicit consent.
      Refusal to provide consent will not affect participation in the Event, either in person or through the online platform.

  9. Rights of Data Subjects
    Data subjects have the right, where applicable, to obtain from A151 S.r.l. access to their personal data and to request their rectification, erasure, restriction of processing or to object to the processing, in accordance with Articles 15 and following of the GDPR.

    Requests may be submitted:
    By email: privacy@a151.eua151@legalmail.it

    By registered mail to:
    A151 S.r.l.
    Strada Luigi Carlo Farini, 34
    43121 Parma (Italy)

  10. Right to Lodge a Complaint
    If a data subject believes that the processing of personal data has been carried out in violation of Regulation (EU) 2016/679 (GDPR), he or she has the right to lodge a complaint with the competent Supervisory Authority in accordance with Article 77 of the GDPR, or to seek judicial remedy pursuant to Article 79 of the GDPR.