Information for customers regarding the processing of personal data
pursuant to art. 13 of the General Data Protection Regulation (GDPR 2016/679)
In compliance with art. 13 of EU Regulation 2016/679, E.S.A. Engineering Srl, Via Mercalli 10/6, 50019 Sesto Fiorentino (FI), data controller, provides you with the following information regarding the processing of personal data collected in the event registration form (the “Event”), also in order to send you new invitations to future events and/or emails/newsletters and commercial or marketing communications, also from third parties.
1. Collection of personal data – type of personal data collected
As part of the Event, the Data Controller may collect and process personal data, such as name, surname, email address, telephone number, as well as additional personal data released in the optional and mandatory fields, which may concern you, the company or the professional firm you are part of or collaborate with and which are necessary to be able to invite you to the events that could be most interesting for you also based on your professional activity and your interests. Such data are communicated by you during the completion of the event registration form.
Furthermore, during the Event (or other events you may participate in), your photographic/video images taken during the Event itself (or other events you may participate in) may also be collected and used – subject to specific authorization – which may be disseminated, in whole or in part, individually or together with other material, also through publication on the website of the data controller and through profiles on the main social media (Linkedin, Instagram, etc.). For technical reasons and given the high number of participants, it will not be possible to remove your images from those that will eventually be disseminated: therefore, if you want to participate in the Event, your authorization is required for the collection and use of your photographic and/or video images.
Some of the personal data collected may also be used by the Data Controller for sending emails/newsletters and commercial or marketing communications, also from third parties.
2. Purpose and legal basis of the processing
The personal data communicated by you through the completion of the event registration form will be processed as specified below:
i) to fulfill the obligations arising from the applicable legislation, including the execution of communications to the competent authorities and supervisory bodies and to comply with requests coming from them;
ii) for the legitimate interest of the Data Controller in the management of the customer archive and statistical processing, in aggregate form, for internal purposes, as well as in relation to the sending of the first invitation to participate in the Event;
iii) by virtue of your consent (optional and revocable at any time):
iv) use by the Data Controller of your personal data to be able to accredit you to the Event and in relation to the activities connected to it as well as for the sending of emails, also in the form of newsletters, to keep you updated on initiatives and events organized by the Data Controller, on the latest news in the categories chosen by you (news, corporate, finance, legal), as well as to invite you to other events that may be of interest to you;
v) use of your photographic or video images collected during the Event or during other events you will participate in;
vi) transfer of your personal data to third parties, such as sponsors or partners of the Event, who may use said data, as independent data controllers, for their own purposes, including for marketing and market research purposes.
3. Nature of data provision
We inform you that the provision of your personal data for the purposes referred to in paragraph 2 (i), (ii), (iii) (iv) and (v) is necessary to be able to accredit and participate in the Event, any refusal to provide it may compromise participation in the Event. In relation to the purposes referred to in paragraph 2 (vi) (third party marketing), the provision of your personal data is purely optional and the related processing is based on consent, optional and revocable at any time. Failure to provide consent will not result in any consequence, except for the inability to receive advertising material from third parties. In any case, you can revoke your consent at any time. It is understood that any subsequent revocation of consent does not affect the lawfulness of the data processing carried out in the period prior to such revocation. The revocation of consent can be made by sending a communication to the data controller at the address events@esa-engineering.com, or by clicking on the cancellation link (opt-out) present in each email of the newsletters.
4. Processing methods
The personal data communicated by you through the completion of the event registration form will be processed as specified below: The processing of data will take place using tools and procedures suitable to guarantee security and confidentiality and can be carried out both on paper and through electronic tools.
5. Scope of processing and communication of data
Personal data will be processed by our staff authorized to process and by our consultants, within the limits necessary to carry out their professional assignment on behalf of our Company, identified as data processing managers. To have a complete list of data processing managers, you can contact the data controller at any time at the addresses we have provided at the end of this document. Your personal data will not be “disseminated”, i.e., they will not be made known to indeterminate subjects; instead, they can be “communicated” by us, to subjects, public and private, who can access the data by virtue of provisions of law or regulation and within the limits imposed by these rules.
6. Transfer of personal data to third countries
Your personal data will be processed by the Data Controller within the territory of the European Union.
7. Data retention times
The personal data collected will be stored until you renounce the service or revoke your consent, and in any case for a maximum period of 5 years from the moment of collection, except for cases where storage for a subsequent period is required for possible disputes, requests from the competent authorities or under applicable legislation.
8. Rights of the interested party
As an interested party, a natural person, you can assert your rights as per articles 15 to 21 of the GDPR 2016/679, briefly reported below, by contacting the data controller at any time. Specifically, you can have access to the personal data that concern you, obtain the rectification or cancellation of the same, the limitation of the processing, the portability of the data or oppose the processing.
9. Right to complain
Those concerned who believe that the processing of personal data referring to them takes place in violation of the provisions of the Regulation have the right to lodge a complaint with the Guarantor, as provided for by art. 77 of the Regulation itself, or to take legal action (art. 79 of the Regulation).
10. Contact details for the activation of rights by the interested party
Data controller, E.S.A. Engineering Srl, Via Mercalli 10/6, 50019 Sesto Fiorentino (FI) Tel. 055 373949, Fax 055 9029994, email: info@esa-engineering.com
nternal data processing manager, Human resources and general affairs manager, Via Mercalli 10/6, 50019 Sesto Fiorentino (FI) Tel. 055 373949, Fax 055 9029994, email: privacy@esa-engineering.com