Privacy Policy
INFORMATION ON THE PROCESSING OF PERSONAL DATA
(pursuant to Article 13 of EU Regulation 2016/679 – GDPR)
(pursuant to Article 13 of EU Regulation 2016/679 – GDPR)
(1) Purpose and regulatory framework
EU Regulation 2016/679 ("GDPR") protects personal data by ensuring that their processing takes place in respect of the fundamental rights and freedoms of natural persons, with particular reference to confidentiality and the protection of personal identity.
(2) Data controller and data processed
The Data Controller is Action Agency S.r.l., with registered office in Milan (MI), Via Seprio n. 2, Tax Code and VAT number 12141670963. You can request the updated list of Data Processors by writing to privacy@action-agency.com.
The data processed includes those necessary for registration and participation in the event (name, surname, contacts, company, role, any information entered in the reserved area).
Where required by the event program, the Controller may also collect information on any allergies or food intolerances, processed exclusively for safety and health protection purposes.
(3) Purposes, legal bases and consents
Your personal data will be processed for:
a) management of registration and participation in the event
Legal basis: execution of the contract (art. 6.1, lett. b) GDPR).
Legal basis: execution of the contract (art. 6.1, lett. b) GDPR).
b) administrative, organizational and security obligations
Legal basis: legitimate interest of the Controller (art. 6.1, lett. f).
Legal basis: legitimate interest of the Controller (art. 6.1, lett. f).
c) processing of data relating to allergies or food intolerances
Legal basis: Your consent (art. 6.1, lett. a and art. 9.2, lett. a GDPR). Failure to provide consent may prevent us from providing you with specific services (e.g. personalized catering).
Legal basis: Your consent (art. 6.1, lett. a and art. 9.2, lett. a GDPR). Failure to provide consent may prevent us from providing you with specific services (e.g. personalized catering).
d) sending commercial and promotional communications by the Controller (marketing)
Legal basis: Your optional consent (art. 6.1, lett. a GDPR).
Legal basis: Your optional consent (art. 6.1, lett. a GDPR).
e) communication or transfer of data to selected partners
Partners will act as independent controllers for their commercial or informational purposes. Legal basis: Your specific and separate consent.
Partners will act as independent controllers for their commercial or informational purposes. Legal basis: Your specific and separate consent.
Failure to provide consent referred to in lett. d) and e) does not in any way prejudice participation in the event.
(4) Provision of data
The provision of data necessary for event registration is optional, but failure to provide it prevents proceeding with participation. The provision of data relating to allergies/intolerances is optional, but their absence may prevent the provision of dedicated services.
(5) Recipients of personal data
Your data may be communicated to:
- subjects who act as Data Processors on behalf of the Controller, on the basis of contractual agreements;
- internal authorized subjects strictly necessary for the management of the event;
- public entities, within the limits provided by law;
- third-party partners, only with Your consent to the communication/transfer of data, acting as independent controllers.
Your data will not be further or differently disseminated.
(6) Processing methods
Processing will be carried out through electronic tools and organizational procedures suitable to ensure security, confidentiality and integrity of information, in compliance with the principle of data minimization.
(7) Retention period
Data will be retained for:
- event management: for the time necessary to provide the service and for the related administrative obligations;
- data relating to allergies/intolerances: only for the time strictly necessary for the event;
- marketing: until revocation of consent and in any case no longer than 24 months;
- transfer to partners: until revocation of consent;
- legal obligations or legal defense: for the period provided by applicable regulations.
(8) Rights of the data subject
You can exercise at any time the rights provided by articles 15-22 GDPR, including: access, rectification, deletion, limitation of processing, opposition, data portability, withdrawal of consents given.
(9) Right to object
You can object at any time to processing carried out on the basis of legitimate interest, as well as to receiving marketing communications.
(10) Contacts and complaints
To exercise Your rights you can write to privacy@action-agency.com. In case of violation of the regulations, you can file a complaint with the Italian Data Protection Authority (www.garanteprivacy.it).