to Article 13 of Regulation (EU) No. 2016/679 (“GDPR”)
Fiere Internazionali di Bologna - BolognaFiere S.p.A. (hereinafter also called “BolognaFiere”) and UBM India Pvt. Ltd. (hereinafter also called “UBM”) (hereinafter also called the “Companies” or the “Joint Controllers”) hereby inform you that the personal data voluntarily submitted by you will be processed in compliance with the current legal provisions governing the protection of personal data and, in any event, in accordance with the confidentiality principles followed by the Companies in their operations.
1. Categories of processed data
The Companies shall process the following categories of data submitted by you: (a) Personal data: first name, family name, date of birth; (b) Contact data: home or professional address and contact details (telephone number, email address); (c) Bank and/or payment details; (d) Data regarding your professional position.
2. Purposes of data processing
In relation to the data processing, BolognaFiere and UBM are Joint Controllers under art. 26 of the GDPR. The personal data made available to BolognaFiere and UBM may be used for the following purposes:
a) to comply with the contractual obligations regarding the purchase of the ticket for the event held at the Companies facilities, or to take steps at your request prior to purchasing the ticket;
b) to comply with the legal obligations incumbent upon the Companies, including for administrative and accounting purposes;
c) to carry out promotional activities, conduct statistical surveys and market research, send marketing communications on products and services of the Companies, their affiliates and joint venture partners, that are also exhibition organisers, via postal service, telephone, SMS, telefax, e-mail – including newsletter and direct mail – or other distance communication means;
d) to transfer/communicate personal data to third parties – that are companies of the BolognaFiere Group or the UBM Group, exhibition organisers or Companies’ Partners involved in the organisation of Cosmoprof India – for the sending by the latter of marketing communications on their own products and services;.to send marketing communications related to products or services similar to the ones already brought (so-called “soft spamming”), subject to your right to object at any time to such processing.
The processing of the data for the purpose sub a) does not require your consent as the processing is necessary for the execution of the contracts of which you are a part or for the adoption of pre-contractual measures adopted upon your request, pursuant to art. 6, para. 1, b) of the GDPR.
The processing of data for the purpose sub b) does not require your consent as it is necessary to fulfil the legal obligations to which the Joint Controllers are bound, pursuant to art. 6, para. 1, c) of the GDPR.
The processing of data for the purposes sub c) and d) requires your consent pursuant to art. 6, para. 1, a) of the GDPR.
3. Submission of personal data. Consequences for failure to supply data
Provision of personal data for the purposes indicated under points a) and b) of Article 2 above is mandatory. Any refusal to submit and/or the submission of inaccurate and/or incomplete data may have the following consequences:
- our inability to stipulate the contract for the purchase of the ticket for the trade show event and/or to ensure the regular and timely execution of the contractual obligations and hence, not being allowed access to the above-mentioned event;
- failure of the personal data processing outcomes to comply with current statutory obligations, including tax requirements.
However, provision of personal data for the purposes indicated under points c) and d) of Article 2 above is optional and the only consequence of failure to submit data shall be the Companies’ inability to send you communications regarding the sales of similar services to those purchased, develop statistical reports and carry out research as well as send you promotional and advertising communications.
4. Personal data recipients or categories of recipients
The following persons within the Companies may become cognisant of your personal data: Companies’ shareholders, members of the Board of Directors or other administrative bodies, members of the Statutory Board of Auditors, Companies’ personnel, the Data Protection Officer, and, in any event, those persons serving as data processors or personnel in charge of the processing / persons authorized to process personal data as appointed by the Companies in the exercise of their functions.
Personal data may be communicated to persons providing the Companies with services, including ancillary services, necessary to meet the purposes described in paragraph 2 above, such as, by way of example but not limited to these, parent companies, subsidiaries, associate and/or related companies, persons, bodies and/or companies that manage and/or participate in the management and/or maintenance of the Internet website and the computer and/or IT-enabled tools used by us. Upon your consent, personal data could also be transferred to third parties, such as companies of the BolognaFiere Group or the UBM Group, exhibition organisers or Companies’ Partners involved in the organisation of Cosmoprof India.
Your personal data may be communicated and/or transferred in countries outside the European Union, whenever the recipients listed in the present clause are located therein. In all such cases, the transfer is necessary for the performance of the agreement between you and the Companies, or to exercise or defend a legal claim and, in general, consistently with contractual clauses and appropriate safeguards providing an adequate level of protection for data subjects, pursuant to Articles 46, 47 or 49 of the GDPR.
5. Period of the processing
Your personal data shall be processed only for the time necessary to achieve the purposes of the processing operation, and the personal data shall be stored for a maximum period of time equal to the statute of limitation of the rights, as applicable from time to time. In the case of processing for marketing purposes, the data shall be stored for a maximum period of 24 months.
6. Rights of the data subject
We hereby confirm that you are entitled at any time to exercise the rights regarding your personal data within the limits and in accordance with the conditions indicated in Articles 15-22 of the GDPR, and in particular:
a) to obtain confirmation as to whether or not data are being processed;
b) if data are being processed, to obtain access to the personal data and to the information relating to the processing as well as to request a copy thereof;
c) to obtain rectification of inaccurate personal data and to have incomplete personal data completed;
d) if any of the conditions under Article 17 of the GDPR exists, to obtain the erasure of the personal data;
e) in the cases provided for by Article 18 of the GDPR, to obtain restriction of processing;
f) in the cases provided for by Article 20 of the GDPR, to receive the personal data in a structured, commonly used and machine-readable format, and to transmit them to another controller, where technically feasible;
g) to object at any time to the processing of personal data carried out to pursue the legitimate interests of the Joint Controllers. In case of objection, personal data shall no longer be processed, unless there are legitimate grounds for processing that override your interests, rights and freedoms or when required for the establishment, exercise or defence of legal claims;
h) to object at any time to the processing of personal data carried out for marketing purposes, by sending an e-mail to email@example.com or cosmoprof-India@ubm.com; the objection exercised through such means extends to commercial communication by postal service or call center operators, without prejudice to the possibility to exercise said right in part, objecting by way of example only to processing by means of automated communications systems;
i) to withdraw at any time the consent already given, without prejudice to the lawfulness of the processing based on the consent given prior to the withdrawal;
j) to lodge a complaint with the lead data protection authority.
Should you wish to exercise any of the rights listed below, please contact either:
– BolognaFiere by sending an e-mail to: firstname.lastname@example.org; or
– UBM by sending an e-mail to: cosmoprof-India@ubm.com
Your request will be answered no later than one month following receipt of your request.
7. Data Controllers, data Processors and Data Protection Officer
The Joint Controllers are:
– Fiere Internazionali di Bologna - BolognaFiere S.p.A., in the person of its pro tempore President, with its headquarters in Bologna, Italy, Viale della Fiera No. 20.
The updated list of data processors is available at BolognaFiere headquarters, or may be requested by email at: email@example.com.
The Data Protection Officer may be contacted at the following email address: firstname.lastname@example.org.
– UBM India Pvt. Ltd., in the person of its pro tempore President, with its headquarters in Times Square, Unit No.1 & 2, B Wing, 5th Floor, Andheri-Kurla Road, Marol, Andheri (E), Mumbai 400059.
The updated list of data processors is available at UBM headquarters or may be requested by email at cosmoprof-India@ubm.com.