Dear Visitor,

simply browsing the site does not involve any provision of personal data if we exclude data collected through technical cookies that are immediately active. Information about cookies can be found in the appropriate statement.

PROMOEST s.r.l. processes personal information in accordance with the provisions on the protection of personal data and the principles of fairness, lawfulness, transparency, integrity and confidentiality and invites you to read this policy carefully.

1. THE DATA CONTROLLER

The Data Controller is PROMOEST CENTRO TRADUZIONI E CONGRESSI SRL (PROMOEST in the following) with registered office in 20126 – MILAN Via G.B. Moroni 33 – VAT No. and Tax Code: 03291040107 -whom you can contact through the email address congressi@promoest.com.

2. CATEGORY OF DATA PROCESSED – FILALITY AND LEGAL BASIS OF THE PROCESSING – mandatory or optional nature of the processing.

The personal data being processed are those automatically uploaded during browsing.

Purpose and Legal Basis	Notes to the processing /Conservation of data	Category of Data
To navigate the site our showcase illustration of the services that can be provided (GDPR, Art. 6(1)(B))	Site visit with collection of technical or statistical cookies all configured to minimize invasiveness. Data collection is for statistical purposes only, and storage is limited to one day before anonymization. (Technical-statistical cookies see cookie policy)	IP address, request origin, date and time; Operating system and browser version.
For the pursuit of the legitimate interest of the owner to exercise and develop its business activities for the purpose of offering services of interest to customers (GDPR, Art. 6(1)(f))	Case of verification of the quality of the service performed–the security and safeguarding of its information systems and site–management of any complaints, disputes or controversies on services provided. The data will be kept for 10 years.	IP address, request origin, date and time; Operating system and browser version.

RECIPIENTS

Promoest Ltd. discloses your data Company to which we have entrusted support for Information Technologies including website manager.

The individuals indicated are identified as Data Processors when not autonomous controllers. All within the European Economic Area. Personal data may also be disclosed to jurisdictional authorities in the exercise of their functions when necessary under the Privacy Regulations.

PLACE AND MANNER OF PROCESSING PERSONAL DATA

Personal data will be processed automatically and manually within the European Economic Area.

RIGHTS OF INTERESTED PARTIES

Promoest srl, the Data Controller, also informs you, that you may exercise the rights provided by current legislation:

• Right of access to personal data concerning you, (Art. 15 GDPR);
• Right to rectification of your personal data, (Art. 16 GDPR);
• Right to erasure of your personal data (Art. 17 GDPR);
• Right to restriction of processing of your personal data (Art. 18 GDPR);
• Right to object to the processing of your personal data (Article 21 GDPR).

Addressing each request to the e-mail address: congressi@promoest.it.

You also have the right to file a complaint with the supervisory authority in accordance with Art. 77 GDPR.

DISCLOSURE UPDATE

The owner reserves the right to update this page according to regulatory developments and updates in the way the site is used. The customer is encouraged to always review the updated policy.

3. ORIGIN OF YOUR DATA AND TYPE OF DATA PROCESSED

The personal data collected are IP address, requested origin, date and time, operating system and browser version.

4. INFORMATION COLLECTED WHILE BROWSING THE SITE-COOKIES

Please refer to the Cookie Policy for an extended description of cookies. On the site there are technical session cookies, which allow better navigation and are deleted at the end of the visit, and Google Analytics cookies, configured to collect in an anonymized manner and with minimized datasets on page views in order to make possible aggregate statistics for the analysis of certain aspects of navigation (e.g. information about the most visited pages, most used browsers, anomalies on the display).

5. PURPOSE AND LEGAL BASIS FOR PROCESSING

Promoest srl processes your personal data for
the pursuit of the legitimate interest of the owner
(GDPR, art. 6, para. 1, letter f). By way of example only:

• The advertising of new services;
• The security and safeguarding of its information systems and site;
• fraud prevention;
• Protection of the company’s rights in and out of court;
• Statistical analysis of visits made and the most visited pages.

6. COMMUNICATION AND DISSEMINATION

Your data may be processed in paper and electronic form will not be disseminated in any way, but may be transmitted to the relevant bodies for administrative or institutional purposes, as required by current regulations. More specifically, data may be disclosed to recipients in the following categories:

• consultants, freelancers, credit institutions and banks, lawyers etc…
• External parties delegated to manage and maintain the company’s IT systems including cloud-based systems and technical equipment;
• External tax consultants;
• Authorities and Public Bodies competent by legal obligation;
• Banking and insurance institutions;
• Judicial and/or public security authorities in cases expressly provided for by law.

Only the minimum personal data necessary for the performance of their part of the service will be disclosed to these individuals. These individuals, where applicable, will be appointed as data controllers pursuant to Art. 28 GDPR. The list of Data Processors is available upon simple request.

Data may be processed by personnel authorized by Promoest who are specially trained and sensitized on the subject, respect for data confidentiality, and protection of the dignity of all data subjects.

PROMOEST does not engage in data profiling of its suppliers.

7. MANDATORY NATURE OF THE PROVISION OF DATA

Failure, partial or inaccurate provision of the data required at the time of employment, which are necessary for the pursuit of the purposes outlined in the appropriate section of this policy, does not make it possible to finalize the employment contract because it prejudices its proper execution.

8. DURATION OF TREATMENT

Personal data will be retained for as long as is strictly necessary to carry out the processing for which it is collected or to fulfill obligations under the law or regulations or for as long as is necessary to ensure the right of defense in court.

9. PLACE OF DATA PROCESSING AND MODE OF PROCESSING

Your data is processed within the European Union or in countries permitted by the GDPR. The Owner informs that some of the IT systems use cloud platforms that provide for the transfer of data to the US based on standard contractual clauses. For contractual needs, they may be transferred to third countries outside the European Union, but in that case they will be appropriately minimized and appropriate measures will be taken to ensure their protection.

10. THE TWO RIGHTS.

With reference to the data you provide and its processing by the Data Controller, where applicable, you may exercise your rights of access, rectification, deletion, restriction, portability, and objection to the processing of data, pursuant to Articles 16 to 21 of the GDPR.

You may address any requests regarding your rights directly to the Data Controller at congressi@promoest.it.

In addition, he always has the right to file a complaint with the supervisory authority in accordance with Art. 77 GDPR.

11. MORE NEWS.

PROMOEST, maintaining constant attention to the processing of personal data, reserves the right to proceed, at any time, to update what is communicated on this notice.

DEFINITIONS

Privacy regulations: Set of regulations referring to personal data protection represented, where applicable, by: Regulation (EU) 2016/679 (GDPR); Dlgs 196/2003 (Privacy Code); Directive (EU) 2016/680; Dlgs 101/2018; Dlgs 51/2018; EDPB Guidelines (European Data Protection Board, formerly WP29); deontological rules; general authorizations and measures of the Data Protection Authority; international scope regulations; e-privacy Guidelines; technical standards on security of processing, etc.

Treatment: any operation or set of operations, whether or not involving automated processes, applied to personal data or sets of personal data, such as collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, comparison or interconnection, restriction, erasure or destruction;

Data controller: the natural or legal person, public authority, service or other body which, individually or jointly with others, determines the purposes and means of the processing of personal data;

Personal data: any information relating to an identified or identifiable natural person (“data subject”); an identifiable person is one who can be identified, directly or indirectly, by reference in particular to an identifier such as a name, an identification number, location data, an online identifier, or to one or more features of his or her physical, physiological, genetic, mental, economic, cultural or social identity;

Special data (also referred to as sensitive data): Special categories of personal data: Personal information relating to: racial or ethnic origin, political opinions, religious or philosophical beliefs, or trade union membership, as well as dealing with genetic data, biometric data intended to uniquely identify a natural person, data relating to a person’s health or sex life or sexual orientation;

Data Subject: an identified or identifiable natural person to whom the data relates, who applies to Promoest for participation in an event organized by one of Promoest’s sponsors.