Information document pursuant to Article 13 of Regulation (EU) 2016/679 (GDPR)
According to the General Data Protection Regulation (GDPR), we provide you with the following information regarding the processing of the personal data that you will provide us in our registration form for those taking part in our events. his notice, dedicated to those who wish to register, through our site, for our events, is integrated with the privacy policy for navigation on the website. With specific reference to the purpose of direct marketing through electronic means, this information is also intended for legal persons, in accordance with the provisions of Directive 2002/58/EC (e-Privacy Directive) as transposed into Italian law within the Privacy Code.
1. DATA CONTROLLER Molteni & C S.p.A., with registered office in Rossini 50 - Giussano (MB), duly represented by its legal representative. You can reach the Data Controller at the following contacts: T +39 0362 3591 - F +39 0362 354448 - email address: privacy@molteni.it
2.CATEGORIES OF PERSONAL DATA PROCESSED
Personal Data: any information concerning an identified or identifiable natural person (“data subject”); An identifiable natural person is one who “can directly or indirectly be identified, in particular by reference to an identifier such as a name, an identification number, a location data, an online identifier or to one or more specific factors to the physical, physiological, genetic, mental, economic, cultural or social identity” (article 4 par. 1.1 GDPR). In particular, we will process your following personal data: Data indicated in the registration form on the site (e.g. name, surname, e-mail address). The data needed for registration will be indicated as “mandatory”. For information on the processing carried out on our website, you can consult the related privacy policy here. For information on the cookies used by this website, you can read our cookie policy here.
3. HOW WE USE YOUR PERSONAL INFORMATION: PURPOSES OF PROCESSING | LEGAL BASIS | DATA RETENTION PERIOD | PROVISION OF PERSONAL DATA
| PROCESSING PURPOSE | LEGAL BASIS | DATA RETENTION PERIOD | PROVISION OF DATA |
|---|
| A) Registration to the event through the dedicated form. | Performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract. Art. 6 par. 1, lett. b) GDPR | Up to 12 months after the event | Needed to enable registration and participation in the event. Failure to provide Your data will prevent you from registering for the event and you will not be able to take part. |
| B) Direct marketing, i.e. direct sale of products and services, market research, sending of communications and promotional, commercial and advertising material or relating to initiatives and events through automated means (e-mail / newsletter, SMS messages or through social networks and sponsorships) and traditional means (paper mail). Communications may contain third parties’ promotional activities and/or third parties’ logo(s) (our partners belong to the following sectors: no profit; agriculture, forestry and fishing; manufacturing; suppliers of electricity, gas, steam and air conditioning; construction; wholesale and retail; repair of motor vehicle and warehousing; accommodation and food services; information and communication activities; financial and insurance activities; real estate activities; professional, scientific and technical activities; rental, travel agencies, support services to businesses; public administration; instruction; artistic, sports, entertainment activities; other service activies). For the complete list of the abovementioned third parties, please contact Molteni at privacy@molteni.it. We will not share any personal data with third parties for this purpose of processing. The Data Controller, in order to compare and eventually implement the results of communications, uses systems to send newsletters and promotional communications with reports. Through these reports, the Data Controller may eventually know, for instance: number of readers, openings, unique "clickers" and clicks; the devices and operating system used to read the communication; details concerning the activity of single users; details of emails sent, received and forwarded; All these Data are used in order to compare and eventually implement the results of communications. | You will be subject to the aforesaid direct marketing activities only with your prior consent. Your consent (art. 6, par 1 letter a GDPR – Recitals 42 and 43 GDPR). | Until consent withdrawal | opt-out (by contacting us as described in par. 7 of this Privacy Policy) | Optional and free. Failing this, you can still register and take part in the event. |
| C) Profiling: your personal data will be stored in our CRM/platforms for internal analysis. We will also cluster personal data in homogeneous groups according to your data and preferences in order to ensure a better organization of Molteni’s services and for sending you tailored promotional communications. | We will proceed with profiling activities if you allow us to do so by giving your express consent. Your consent (art. 6, par 1 letter a GDPR – Recitals 42 and 43 GDPR). | Until consent withdrawal | opt-out (by contacting us as described in par. 7 of this Privacy Policy) | Optional and free. Failing this, you can still register and therefore participate to the event. |
| D) Transfer of personal data to the companies within Molteni Group (parent company, controlled companies, linked or affiliated companies) for direct marketing and profiling purposes. For more details on such transfers, please contact Molteni at privacy@molteni.it. | The processing is based on consent to the processing of personal data; (C42, C43) art. 6 par. 1 letter A) of the GDPR | Until revocation of consent. Please also refer to the information for the processing of personal data of each company of the Molteni Group, which is acting as an independent data controller | Optional and free. Failing this, you can still register and therefore participate to the event. |
4.RECIPIENTS OF PERSONAL DATA
We share your personal information with employees and/or staff acting under the Data Controller’s authority (duly instructed for the former purposes, also according to article 29 GDPR), as well as third parties contractually linked to Molteni, in order to fulfill contractual obligations and achieve one or more of the aforesaid purposes of processing. In particular, we disclose personal information to the following categories of recipients: - companies within Molteni Group (only upon your consent, as indicated under purpose D of this privacy policy); - subjects providing services to manage the information system used by the controller and communication networks (including e-mail, web platforms, cloud and software); - offices or companies in the context of assistance and consultancy relationships; - social networks; - relevant authorities in order to comply with legal obligations and/or provisions of public bodies, upon request. The abovementioned recipients could act as Data Processor (appointed pursuant to art. 28 GDPR) or as independent Data Controller(s). The complete list of the recipients is regularly updated and available upon request at the contact details indicated paragraph 1. of this Privacy Policy.
5.TRANSFERS OF PERSONAL DATA TO THIRD COUNTRIES
Personal data provided will not transferred outside the European Economic Area (EEA).
6. AUTOMATED PROCESS
Personal data will be subjected to paper, traditional manual, electronic and automated processing. It should be noted that, with reference to the profiling activity, it will be carried out through the intervention of an operator who, with the consent of the data subject, will process his/her data for the purpose of internal analysis and to divide them into homogeneous groups for specific characteristics (e.g. profession and origin), for better management of services and for sending tailored promotional communications. We do not take any decision based solely on automated processing, including profiling since our profiling activity will take place - upon data subject’s consent - with the intervention of a human operator.
7.RIGHTS OF DATA SUBJECTS
You have the right, at any time, to obtain from Molteni the access to your personal data (article 15 GDPR), request their rectification (article 16 GDPR), their erasure (article 17 GDPR) or restriction of their processing (article 18 GDPR). Furthermore, you have the right to object anytime to your personal data processing (article 21 GDPR), as well as the right not to be subject to automated processing, including profiling, without your prior consent (article 22 GDPR) voluntarily provided. Finally, you have the right to data portability, if applicable (article 20 GDPR). Furthermore, you have the right to lodge a complaint with the Italian Data Protection Authority (https://www.garanteprivacy.it/), or to take legal action according to art. 78 and 79 GDPR. To withdraw consent to non-automated profiling, it will be sufficient to write an e-mail at any time to the address privacy@molteni.it with the subject “no profiling”. To stop receiving direct marketing (both automated and traditional means) you can write an e-mail at any time to the address privacy@molteni.it with the subject "unsubscribe from direct marketing" or use our automatic unsubscribe systems (only for email) and you will no longer be disturbed.
8. CHANGES TO THE PRIVACY POLICY
We may revise this privacy policy from time to time. We will notify you of changes by posting the effective date of the latest version here below or at the top of this privacy policy.
Effective date: July 27th, 2021
Molteni & C. S.p.A.
