(PURSUANT TO ARTICLES 13 and 14 OF THE (EU) REGULATION 2016/679 – GENERAL DATA PROTECTION REGULATION)
- Who is the data controller of my personal data?
The controller of your personal data is LC S.r.l., with registered office at via Tolstoj 10, 20146 Milan (MI) – Italy.
- How are my personal data processed and what are the purposes of the processing?
Your personal data will be processed, both by electronic and non-electronic means, to let you register to the event on the web site www.legalcommunityweek.com (hereinafter, the “Website”) and participate in the event, in compliance with the event terms and conditions (Section 23, paragraph 1, letter b) of the Legislative Decree of June 30th, 2003, n. 196 – the “Code”; Section 6, paragraph 1, letter b) of the Regulation (EU) 2016/679 – the “Regulation”). Should you optionally fill in the “message” field, we will process your personal data to reply to your message (Section 23, paragraph 1, letters b) of the Code; Section 6, paragraph 1, letter b) of the Regulation).
- Which categories of personal data are processed and how have you obtained such data?
In order to let you participate in the event, we will process the personal data requested in the registration form published on the Website.
- Is the provision of the data mandatory or optional?
Providing your personal data is optional but failure to provide them would imply the impossibility to participate in the event.
- Are photos taken and audio / video recorded during the event? For what purposes?
Yes, we take photos and record audio / video (collectively, the “Recordings”) during the event. The Recordings will be published on all websites and magazines published by LC S.r.l. and its subsidiaries, on the newsletters of these sites and on social media pages of these websites such as LinkedIn, Facebook, Twitter, Instagram and YouTube, for the legitimate interest of informing the public of the event (Annex A1 to the Code; Section 6, paragraph. 1, letter f) of the Regulation). Please do not attend the event if you do not want to appear in the Recordings under any circumstances. In case of personal interviews, you have the right to object to the publication of the relevant Recordings, by making an oral request to the interviewer or by written request to our receptionists; you also have the right to request their removal at any time after their publication, by contacting us as indicated in paragraph 14 below.
Do you process my personal data also for marketing purposes?
With your optional consent (Section 23, paragraph 1, of the Code and Section 6, paragraph 1, letter a) of the Regulation), we will process your data for marketing purposes (e.g., direct sale, sending advertising material, market research and commercial communication), and for sending you e-mail promotional communication related to other events, publications or initiatives of LC S.r.l. and its subsidiaries and / or to products or services offered by third parties. Should you do not give your consent, the possibility for you to participate in the event will not be in any way affected. You may freely withdraw your consent at any time, by clicking on the opt-out link contained in each promotional e-mail or by contacting us via mail or e-mail to the contact details indicated in paragraph 14 below.
- For how long will my personal data be stored?
Your data will be retained for the time necessary for fulfilling the purposes set forth in paragraph 2. Your image and your voice in the Recordings will be retained as long as the Recordings will be published on the media indicated in paragraph 5 above. Data processed for marketing purposes will be retained until you withdraw your consent to the processing.
- Who may have access to the personal data?
The following subjects may have access to your personal data: our employees and collaborators which are responsible for organizing the event and / or carrying out the marketing activities, as well as external service providers which, acting as external data processors, provide services for the management of the IT systems and communications network, advisors, companies providing marketing services, IT services providers and other support and management services providers. IT services providers and other support and management services providers are based within EU. You can obtain a list of our external data processors, by contacting us via mail or e-mail with the modalities indicated in paragraph 14 below.
- Will my personal data be communicated to third parties or disseminated?
Without prejudice to paragraph 5 above in relation to the use of the Recordings and paragraph 10 in relation to the possibility of communicating data to our Partners for marketing purposes, your personal data will not otherwise be communicated to third parties or disseminated. In any case, please consider that: (i) at the registration desk you will be given an identification badge (with indicates your name, surname and company/organization), which you can optionally put on during the event, so your identity can be known; and (ii) in case breach of contract or law or in the cases provided for by law, your data may be communicated to police and judicial authorities.
- Will my personal data be communicated to third parties for marketing purposes?
With your optional consent (Sections 23, paragraph 1, and 130 of the Code and Section 6, paragraph 1, letter a) of the Regulation), we will communicate your data (name, surname, e-mail, company/organization, copy of consent form) to those Partners who sponsor the event you wish to attend, that are indicated in the invitation you received or in the promotional material relating to the event (hereinafter, the “Partners”). Such Partners will send you their offers, promotions and commercial offers via e-mail. Should you do not give your consent, the possibility to participate in the event will not be in any way affected. You may freely withdraw your consent at any time, by contacting us via mail or e-mail to the contract details indicated in paragraph 14 below or by contacting the Partners at the contacts details indicated in the privacy notice that they will provide to you.
- Which are my rights?
Pursuant to Section 7 of the Code, you have the right to obtain confirmation as to whether or not personal data concerning you exist, regardless of their being already recorded, and communication of such data in intelligible form. You have the right to be informed of a) the source of the personal data; b) the purposes and methods of the processing; c) the logic applied to the processing, if the latter is carried out with the help of electronic means; d) the identification data concerning data controller and data processors; e) the entities or categories of entity to whom or which the personal data may be communicated and who or which may get to know said data in their capacity as data controllers or persons in charge of the processing. You have the right: a) to obtain updating, rectification or, where interested therein, integration of the data; b) to obtain erasure, anonymization or blocking of data that have been processed unlawfully, including data whose retention is unnecessary for the purposes for which they have been collected or subsequently processed; c) to obtain certification to the effect that the operations as per letters a) and b) have been notified, as also related to their content, to the entities to whom or which the data were communicated or disseminated, unless this requirement proves impossible or involves a manifestly disproportionate effort compared with the right that is to be protected. In addition, you have the right to object, in whole or in part, a) on legitimate grounds, to the processing of personal data concerning you, even though they are relevant to the purpose of the collection; b) to the processing of personal data concerning you, where it is carried out for the purpose of sending advertising materials or direct selling or else for the performance of market or commercial communication surveys.
- Which are my rights under the (EU) Regulation 2016/679?
As from 25 May 2018, the Regulation will become effective and you will be able to exercise the rights set forth in Sections from 15 to 22 of the Regulation, including the following rights: the right to request the access to personal data (i.e. the right to obtain from us confirmation as to whether or not personal data concerning you are being processed, and, where that is the case, to obtain access to the personal data, by obtaining a copy, and the information set forth in Section 15 of the Regulation) and the rectification (i.e. the right to obtain the rectification of inaccurate personal data concerning you or the integration of incomplete data) or the erasure (i.e. the right to obtain the erasure of personal data concerning you, where one of the grounds listed in Section 17 of the Regulation applies) or the restriction of processing concerning you (i.e. the right to obtain, in the cases set forth in Section 18, that the data are marked in a way to limit the processing in the future), as well as the right to data portability (i.e. the right, in the cases set forth in Section 19, to receive from us the personal data concerning you, in a structured, commonly used and machine-readable format and the right to transmit those data to another controller without hindrance). You have the right to withdraw your consent at any time. The consent withdrawal will not affect the validity of the processing based on your consent before the withdrawal.
- Do I have the right to object to the processing under the Regulation?
Yes, you have the right to object, on grounds relating to your particular situation, at any time to the processing of personal data concerning you pursuant to Section 6, paragraph 1, letter e) or f) of the Regulation, including profiling based on these provisions. Should your personal data be processed for direct marketing purposes, you have the right to object to the processing of personal data concerning you at any time, including the profiling to the extent that it is linked to such direct marketing.
- How can I exercise my rights?
The above-mentioned rights can be exercised by mail to the address “LC S.r.l., via Tolstoj 10, 20146 Milano (MI)” or via e-mail to the e-mail address firstname.lastname@example.org. In addition, you have the right to lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali) (www.garanteprivacy.it). Moreover, LC has appointed a Data Protection Officer (DPO), who can be contacted by mail to the LC’s address above (to the DPO’s attention) or via e-mail at email@example.com.