For exhibitors

Ecod Srl Unipersonale under Articles 13 and 14 of REG. EU 679/2016, provides the following information:

1) Categories of data processed
ECOD processes the following data provided by you: 
- personal data (name, surname, company name), residence address or company domicile and contact details (telephone, email address); 
- data on your professional position; 
- bank or payment data.

2) General processing purpose and provision of data
Personal data will be processed to meet your requests, administrative and legal requirements and allow the exercise of business operations closely related to the corporate purpose. Personal data made available to ECOD may be used for the following purposes:
a) fulfilling regulatory, tax and administrative requirements instrumental, functional, related or useful for the organisation and performance of the relationship (including the activities necessary for the ordinary management of the exhibition)
b) fulfilling legal obligations to which the Company is subject
c) publication in the catalogue, website, social media, guide map and exhibition material, press releases, periodicals and/or specialized magazines; 
d) data processing for statistical and market studies;
e) sending newsletters, information, advertising and promotional material relating to the official and commercial activities carried out by ECOD for establishing and completing the relationship between ECOD and the trade fair visitor.
The provision of data is mandatory for points a) and b); if there is a refusal it will be impossible to establish any relationship with the interested party.

3) Data processing methods
Data will be processed using methods and tools that guarantee confidentiality and may be carried out by electronic or automated means (networked computers not accessible to the public) and non-automated means (paper-based archives). These are provided with adequate security measures, such as customised passwords with exclusive access and control over access to the archives, under Art. 32 REG. EU 679/2016.

4) Data disclosure and dissemination
Personal data may be disclosed within the Company to shareholders, governing bodies’ members, personnel, external Data Processors and Company-appointed Data Processors. Personal data may be disclosed to any qualified parties that provide the Company with services or facilities instrumental to the purposes specified in Art. 2, for example, parent, subsidiary, affiliated or associated companies; suppliers, contractors, subcontractors, banking or insurance institutions or other parties or entities that provide the Company with services instrumental to the establishment or performance of the contractual relationship with the Company or that (on behalf of the Company or independently)
(i) manage or maintain the websites and electronic tools used by the Company;
(ii) process statistical and market research data;
(iii) organise and hold events and exhibitions, including promotional events;
(iv) send information or promotional or commercial notifications, advertising material or offers of goods and services as specified in Art. 2;
(v) provide legal, tax, social security, accounting, organisational and commercial assistance
(vi) carry out auditing.
Your data may not be transferred abroad. Please note that “abroad” means a place other than the Italian Republic or the country in which the event takes place.

5) Processing duration
Your data will be processed for the time necessary to achieve the purposes for which it was processed and maximum 10 (ten) years.

6) Data subject rights
As data subject, you have rights set out in Art. 15 GDPR and specifically:
- obtain confirmation on the existence in our databases of your data;
- obtain information: a) on the origin of the personal data; b) processing purposes and methods; c) logic applied if processing is carried out using electronic means; d) details of the data controller, data processors and appointed representative under Art. 3, paragraph 1, GDPR; e) parties or categories of parties to whom or which personal data may be disclosed or become aware of data in their capacity as appointed representative(s) in the State, data processor(s) or person(s) in charge of the processing;
- obtain a) right to update, rectify and integrate data; b) delete, make anonymous or block data processed unlawfully, including data retained unnecessarily for the purposes for which the data was collected or processed;
- Legitimately object in whole or in part to: a) your data processing, even if relevant to the collection purpose; b) your data processing for sending advertising materials or direct sales or market or commercial communication surveys (even if you have previously given your express consent by signing this policy). Where applicable, you have the rights set out in Articles 16-21 GDPR (right to rectification, to be forgotten, restriction of processing, portability of contractual and browsing data, and oppose. 

7) Data Controller
The Data Controller is ECOD Srl Unipersonale - Via Don G.B. Riva, 38 - 20028 San Vittore Olona (MI) - ITALY, telephone: +39 0331518056, in the person of its pro tempore legal representative. You may contact the data controller to assert your rights as provided for in Articles 15 to 22 inclusive and 34 of REG. EU 679/2016 and request the list of Data Processors at the email address: privacy@ecod.it