Itema privacy notice

Dear User
Itema S.p.A (hereinafter “Itema”) wishes to give you the following information in pursuance of Legislative Decree no. 196/2003 (Italian Privacy Code).

  1. Data processing, purposes and manner
    1. The data communicated by registering into the ITM 2018 event (hereinafter “the Event”) Virtual Check-in system (Name, Surname) will be processed solely in connection with your participation at the Event.
    2. The remaining data (Company, Products, Interest in the Event, E-mail) communicated with the above-mentioned system will be processed for the purposes of including you in Itema newsletter/mailing-list and of sending you commercial offers, advertisement, invitations to future events and, on a more general note, for marketing purposes.
    3. The processing will be carried out by means of digital and paper archives in such a way that guarantees the utmost security and confidentiality in accordance with the above mentioned applicable legislation and the duties connected thereto and according to the purposes described above. The data will be processed in accordance with the relevant legislative provisions and, in any case, only for the purposes described above. The data will be stored at Itema premises and/or on the server of Itema (located in EU) for the time necessary for the purposes indicated above and in any case for no longer than 24 months.
  2. Nature of data communication and consequences
    1. The communication of data for the purposes stated in clause 1.1 is necessary and refusal to provide such data will result in it making your participation in the Event impossible. In addition, even during the performance of the Event, a request to erase the required data or any refusal to supply such data, may result in the impossibility to participate in the Event. The communication of data for the purposes stated in clause 1.2 is facultative and refusal to provide such data will have the only result of making impossible for Itema to fulfil the purposes indicated in point 1.2 itself and therefore Itema will not perform the data processing described thereof.
  3. Subjects to whom the data may be communicated
    1. Your personal data will not be circulated. In addition to the Data Controller and the Data Processor the data may be communicated to and processed by, where necessary, the employees of the Company in charge of the operations connected to the Event and, in case of consent the data processing under point 1.2, the employees of the Company in charge of marketing function and connected activities. Personal data may also be communicated to and processed by, where necessary, the consultants and/or professionals used by the Company in carrying out its activities; such persons have been given all the specific instructions needed and are contractually bound to guarantee adequate data processing as appropriate for the proper performance of their duties.
  4. Data Controller and Processor details
    1. The Data Controller is Itema S.p.A., with legal premises in Colzate (BG), Italy, via Cav. G. Radici 4, 24020 Colzate (BG), and the Data Processor is ITEMA SpA. You may contact Itema and the Data Processor at contact@itemagroup.com
  5. Rights pursuant to Art. 7 Legilsative Decree no. 196/2003
    1. The User may exercise his/her rights against the Data Controller at any time, as per art. 7 of Legislative Decree n. 196/2003 and in particular:

      A data subject shall have the right to object, in whole or in part:A data subject shall have the right to object, in whole or in part:

      1. on legitimate grounds, to the processing of personal data concerning him, even though they are relevant for the purpose of the collection;
      2. to the processing of personal data concerning him, where it is carried out for the purpose of sending advertising materials or direct selling or else for the performance of market or commercial communication surveys.

      A data subject shall have the right to obtain:

      1. the updating, verification or, when interested therein, the supplementation of the data;
      2. the deletion to request that such data be rendered anonymous or the block of the data that have been processed unlawfully, including data whose retention is unnecessary for the purposes for which they have been collected or subsequently processed;
      3. certification to the effect that in the event of the exercise of the rights in sub-sections a) and b) the entities to whom or which the data were communicated or distributed, have been notified of the changes, as well as their contents unless this requirement proves impossible or involves manifestly disproportionate effort compared with the right that is to be protected.

      A data subject shall have the right to obtain confirmation as to whether or not personal data concerning him exist, regardless of their being already recorded, and communication of such data in intelligible form.

      A data subject shall have the right to be informed:

      1. of the source of the personal data;
      2. of the purposes and methods of the processing;
      3. of the logic applied to the processing, if the latter is carried out with the help of electronic means;
      4. of the indentifying data of the owner, Managers and the Delegated Officers according to article 5, paragraph 2;
      5. of the entities or categories of entity to whom or which the personal data may be communicated or may have access to such data in their official capacity as delegated by the State, managers or person(s) in charge of the processing.