PRIVACY POLICY STATEMENT PURSUANT TO REGULATION (EU) 2016/679

1. INTRODUCTION

Pursuant to Art. 13 of Regulation (EU) 2016/679 on the protection of natural persons with regard to the processing of personal data (“GDPR”), we hereby provide you with the following information on the processing of your personal data (“Personal Data”) carried out, for the purposes specified below, by CremonaFiere S.p.A.:

1. through the following websites:

• cremonafiere.it;
• fierezootecnichecr.it;
• cremonamusica.com;
• ilbonta.it;
• cremonaebricks.it;
• japanshow.it; and
• petsfestival.eu]; or

1. during the event or exhibition organised by the company (“Exhibition(s)”).

2. DATA CONTROLLER AND PROCESSOR

The Data Controller is CremonaFiere S.p.A. (hereinafter, the “Company” or “Controller”), with registered office in Piazza Zelioli Lanzini 1 – 26100 Cremona, Italy. Within the scope of its activities and for the purposes of the following, the Company may use services rendered by third parties acting as data processors on its behalf and according to its instructions. These are subjects that provide the Company with processing or useful services (management and technical maintenance of the CRM, IT services for the operation of the site, etc.). The processing is carried out in such a way as to guarantee the security and confidentiality of the data, by adopting the measures provided for in Article 32 of the GDPR to preserve the integrity of the processed data and prevent access to it by unauthorised parties.

3. PERSONAL DATA PROCESSED

The Company will process the following “common” Personal Data that concern you: identification data, such as your name, surname, e-mail address, telephone no. and address; data concerning electronic communications, such as your IP address; images of you; and, if applicable, the product category you belong to or are interested in.

4. PURPOSES OF THE PROCESSING 

Your personal data are processed by the Controller for the following purposes, depending on your interaction with the website used among those listed above (“Website”) and/or your participation in the Exhibitions:

1. to enable you to use the Website, including through cookies. For information on cookies, please also refer to the policy available here;
2. to respond to your requests received through the contact section of the Website;
3. to allow you to purchase tickets for the Exhibition online and, consequently, to ensure the proper performance of the obligations arising from the purchase contract, such as, for example, electronically delivering the ticket or allowing you to access the Exhibition;
4. to fulfil any legal obligations incumbent on the Controller;
5. for marketing purposes, i.e. with the intention of transmitting marketing communications, as well as to conduct statistical analyses and market research. In the latter case, your personal data will be anonymised and aggregated;
6. to protect the company’s assets (physical locations, goods, archives) and private property (e.g. of the exhibitors) in the buildings hosting the Exhibition from possible damage, unauthorised intrusion, vandalism, theft, or similar wrongdoing, as well as to ensure the security of exhibitors, visitors and employees by means of a video surveillance system; and
7. where applicable, to ascertain, exercise or defend the Controller’s rights in extrajudicial and/or judicial proceedings.

In addition, during the Exhibition, the Controller reserves the right to film the event – also with the help of third parties – for future promotional purposes (e.g., posting on the Website or social channels). This activity may involve the processing of your personal data consisting of video recordings or photographs of you.

5. LEGAL BASIS OF PROCESSING

The legal basis of processing consists of:

• for the purposes of points (a), (b) and (c) of paragraph 4 above, the execution of pre-contractual and contractual measures taken at your request, as the data subject (Art. 6(1)(b) GDPR);
• for the purpose referred to in paragraph 4(d) above, the need to comply with legal obligations to which the Controller is subject (Art. 6(1)(c) GDPR);
• for the marketing purposes referred to under point e) of paragraph 4 above, your free consent which can be withdrawn at any time (Art. 6(1)(a) GDPR);
• for the purposes set out in points f) and g) of paragraph 4 above due to the Company’s legitimate interest, respectively, in ascertaining, exercising or defending its own right in legal proceedings and in protecting its own assets and those of third parties from possible damage, unauthorised intrusion, vandalism, theft, or the like, as well as in ensuring the safety of exhibitors, visitors and employees (Art. 6(1)(f) GDPR).

It is specified that videos and photographs taken during the Exhibition related to trade fair activities, which are to be understood as exhibitions or public events. Processing is carried out on the basis of the Company’s legitimate interest. If you do not wish to be photographed or filmed, we ask that you make this known to the staff in charge at the time of the photo or filming. You may, however, object to the processing and exercise the other rights recognised to you by the applicable legislation listed in paragraph 9 below by sending an e-mail to the address indicated therein. In such a case, if requested, the Company will promptly remove the material.

6. PROVISION OF DATA

The provision of your personal data for the purposes set out in points a), b), c) and d) of paragraph 4 above is necessary for the fulfilment of contractual and legal obligations, depending on the case, and is therefore mandatory. If you do not provide your personal data, you will not be able to use the Website, receive feedback on your requests or complete your ticket purchase. With reference to the marketing purposes referred to in paragraph 4(e), on the contrary, the provision of Personal Data is entirely optional. If you do not provide your data, your will not receive any marketing communications from us. For the purposes referred to in points f) and g) as well as for the creation and use of video recordings and photographs, the provision of your Personal Data is not mandatory, but the Controller may process the information in order to pursue its legitimate interest, without prejudice to the data subjects.

7. STORAGE OF PERSONAL DATA

Your personal data will be kept for a period of time strictly necessary to achieve the purpose for which they were collected, in accordance with the storage limitation principle set out in Article 5(1)(e) GDPR. Specifically, your personal data will be processed:

• for a maximum of 13 months after collection, in connection with the purpose referred to in paragraph 4(a);

• for a maximum of 6 months after the processing of your request, in relation to the purpose set out in paragraph 4(b);
• for a maximum of 10 years from your purchase, in accordance with Article 2220 of the Italian Civil Code, in relation to the purpose set out in paragraph 4(c);
• for as long as is necessary to comply with the legal obligation to which the Controller is subject, in connection with the purpose set out in paragraph 4(d);
• for a maximum of 24 months, in connection with the purpose referred to in paragraph 4(e);
• until the settlement of the proceedings and thereafter until the end of the statute of limitations, in relation to the purpose of paragraph 4(f); and
• for a maximum of 10 days, in connection with the purpose referred to in paragraph 4(g). In this regard, in the Company’s opinion, this storage period is necessary and proportionate in relation to the purpose, in light of the principles of economy and simplification, having taken into account the special requirements for protecting the assets (as well as the safety of persons) located in the large spaces where the Exhibitions are set up – during which objects of significant value are also exhibited in some cases – as well as the frequency of the events organised (which also entail activities related to setting up/disassembling the stands), and the need to protect the Company’s assets and fixed structures.

The storage of video recordings and/or photographs taken during the Exhibition, insofar as they contain Personal Data, is limited to 5 years. The Company reserves the right to store for a longer period of time any images that it considers to be part of its historical archive, subject to assessment and removal of any Personal Data contained therein.

To see details of the deletion periods of cookies, subject to the above-mentioned maximum storage periods, please refer to the Cookie Policy

At the end of the above-mentioned periods, your Personal Data will be deleted or, in any event, will cease to be stored in a form that allows for your identification or identifiability.

8. TRANSFER OF PERSONAL DATA

Your personal data will not be transferred to countries outside the European Union or to international organisations. However, should the Controller need to carry out such transfers, the processing will take place after updating this notice, which will be duly communicated to you in one of the ways permitted under Articles 44-49 of the GDPR. You may request a copy of the appropriate safeguards for the transfer at the address in paragraph 9 below.

9. RIGHTS OF THE DATA SUBJECT

At any time, and where the conditions of the GDPR are met, you may exercise your right to:

• access your Personal Data, obtaining evidence of the purposes pursued by the Controller, the categories of data involved, the recipients to whom the data may be communicated, the applicable storage period, and whether there are automated decision-making processes;
• obtain without delay the rectification of inaccurate Personal Data concerning you;
• obtain the erasure of your personal data, in the cases provided for;
• obtain the restriction of processing, when possible;
• withdraw consent at any time, without prejudice to the lawfulness of the processing carried out prior to the withdrawal;
• request portability of the Personal Data you have provided to the Controller, i.e. to receive them in a structured, commonly used and machine-readable format, also for the purpose of transmitting such data to another data controller, without any hindrance from the Controller.

You also have the right to object, at any time, to the processing of your Personal Data based on the legitimate interest of the Controller (see paragraph 5 above), on grounds relating to your particular situation. In the event of an objection, the Controller shall refrain from further processing your Personal Data unless it can prove that there are compelling legitimate grounds for processing that override your interests, rights and freedoms or that the processing is to establish, exercise or defend legal claims.

You can exercise the above rights by sending an e-mail to privacy@cremonafiere.it. In addition, if you believe that the Controller has processed your Personal Data in breach of the provisions of the General Data Protection Regulation, you have the right to lodge a complaint with the Italian Data Protection Authority, as provided for in Article 77 GDPR, or to take appropriate legal action pursuant to Article 79 GDPR.

10. CATEGORIES OF RECIPIENTS TO WHOM THE DATA MAY BE COMMUNICATED AS DATA CONTROLLERS OR WHO MAY BECOME AWARE OF THEM AS DATA PROCESSORS

Within the limits relevant to the stated purposes, your Personal Data may be disclosed to the following categories of recipients:

• external parties acting as data controllers, such as, by way of example, supervisory authorities and control bodies and, in general, public or private parties entitled to receive Personal Data;
• external parties designated as data processors, who are given appropriate operational instructions. These subjects essentially fall into the following categories:
  • companies offering e-mail or business contact services;
  • companies offering website maintenance services; and
  • companies offering support in carrying out market research.