INFORMATION ON THE PROCESSING OF PERSONAL DATA 

PURSUANT TO ART. 13 OF EUROPEAN REGULATION 2016/679 

The company ESPOSIZIONE INTERNAZIONALE CICLO E MOTOCICLO S.p.A. (hereinafter, for the sake of  brevity, also "EICMA. S.p.A.") informs that the personal data collected during the registration phase for the  purchase of the ticket (s) to participate as a Visitor to the Event will be processed in compliance with the  legislation on the protection of personal data. That said, pursuant to Article 13 of European Regulation 2016/679, E.I.C.M.A. S.p.A. provides the following information.

1. CONTACT DETAILS OF THE DATA CONTROLLER.

The Data Controller is E.I.C.M.A. S.p.A., with registered office in Via Fabio Filzi 25/A, 20124, Milan, VAT no. 04145450153- e-mail: [email protected]. 

The Data Controller has not currently appointed a Data Protection Officer (DPO).

2. PURPOSE AND LEGAL BASIS OF THE TREATMENT.

a) The data provided by the user/visitor, hereinafter also referred to as the "Interested Party" (name, surname,  email, date of birth, telephone number, address, personal details; vehicle license plate) are processed in order  to allow the same to purchase a ticket as well as book any parking space for your vehicle for entry to the  EICMA event and to offer and manage the services requested in connection with such purchase (e.g.:  customer assistance, sales and after-sales service, replies to requests for information, product evaluation,  payment management,communications in case of emergency measures etc.) The legal basis for the  processing described above is the execution of the relationship of which the interested party is a part and in  legal obligations for the purposes of the services required related to the purchase of the ticket. 

b) If the user/visitor requests to remain in contact with the Data Controller in order to receive information about  promotional initiatives (promotions, discounts, competitions, surveys and other marketing activities), including  those connected with the activities of the EICMA exhibition, he/she must provide his/her email address and  any further data requested, which will then be used for this purpose, without prejudice to the user/visitor's right  to communicate at any time his/her wish to no longer receive such communications. The legal basis for the  processing described above is the manifestation of consent expressed by the user/visitor. 

c) The data provided by the user/visitor to the Data Controller collected in consideration of his/her interests  and purchasing preferences will be processed for purposes related to marketing and personalized commercial  and promotional communications in order to better enjoy the experience arising from the EICMA event. The legal basis for the processing described above is the manifestation of consent expressed by users/visitors. 

Please note that the data legitimately collected in accordance with the regulations may also be used for statistical extrapolation in anonymous form.

3. RECIPIENTS OR CATEGORIES OF RECIPIENTS TO WHOM THE PERSONAL DATA MAY BE  COMMUNICATED.

The data may be communicated to third parties who operate in aid and on behalf of the  Owner only for the purposes listed above for contractual and legal obligations. The secretarial staff as well as  the persons in charge of the management and maintenance of the elaboration systems may become aware of  the data. Communication to the aforementioned subjects will take place in any case with a guarantee of  protection of the rights of the interested party as provided for in the GDPR. The list of eventual persons in  charge of the treatment is available from the Owner. It should be noted, however, that for the issue of tickets  through this sales channel, the company Platinium Group S.A.M., registered in Monaco under the number 06S04539 Address: 2 Rue du Gabian, 98000 Monaco, is to be considered as the external Data Processor. It is responsible for the management of the technological infrastructure that enables the acquisition of tickets  and the processing of data collected through these technological tools.

The data provided for marketing purposes may also be communicated or transferred to third party partners of  the Event (reference is made, by way of example and without limitation, to the main partners listed on the  website of E.I.C.M.A. S.p.A.: https://www.eicma.it/) so that they may be used directly for sending their commercial communications, only with the specific consent of the user/visitor.

4. POSSIBLE TRANSFER OF PERSONAL DATA TO A THIRD COUNTRY.

Any transfer of data outside the EU will take place in full compliance with the levels of protection and safeguards provided in the GDPR.

5. RETENTION PERIOD OF PERSONAL DATA OR CRITERIA USED TO DETERMINE SUCH PERIOD.

The  data will be stored in a form that allows the identification of data subjects for a period of time not exceeding  the achievement of the purposes of processing, consistent with other legal obligations, and in accordance with the data retention procedure adopted by the Data Controller. The interested party may at any time request the  retention period of their personal data by writing to the following address: [email protected]. 

6. RIGHTS OF THE INTERESTED PARTY.

As provided for by art. 13 of the GDPR, the interested party may exercise the following rights at any time: 

a) Right of access, rectification, cancellation, limitation, opposition: the Data Subject may at any time access  his data, request its rectification if incorrect, request the cancellation of data that is excessive but not those  required by law from the Data Controller, may limit access of data to certain figures; 

b) Right to data portability: the Data Subject has the right to receive in a structured, commonly used and  machine-readable format the personal data concerning him/her provided to a Data Controller and has the right  to transmit such data to another Data Controller without hindrance from the Data Controller to whom he/she  provided them exclusively in the cases provided for by Article 20 of the GDPR; 

c) Right to withdraw consent at any time: the Data Subject may withdraw consent at any time, assuming the  consequences thereof without prejudice to the obligation of the Data Controller to continue to hold the personal  data subject to this processing when this is necessary to comply with a legal obligation of the Data Controller  or for the performance of a task carried out in the public interest or in connection with the exercise of public  powers vested in the Data Controller. 

d) The right to lodge a complaint with a privacy control authority.

e) With regard to the marketing purposes referred to in paragraph 2 b) and 2 c), the interested party who has  given his or her consent may: i. request, at any time and free of charge, the Data Controller to receive  communications exclusively through traditional methods of contact such as paper mail or operator calls; ii.  object, at any time and free of charge, to the processing of his or her personal data for the aforementioned  purposes. In this case, the data subject's right to object to the processing of his/her personal data through  automated contact methods (e.g. e-mail, mms or sms messages and social networks, etc.) extends to  traditional contact methods; iii. to object, at any time and free of charge, to the processing of his/her personal  data for the above-mentioned purposes only in part, i.e. by expressing a choice as to the contact methods

f) With regard to the marketing purposes referred to in paragraph 2 b) and 2 c), the data subject has the right to object, at any time and free of charge, to the processing of personal data for said purposes. 

To exercise your rights write to [email protected].

7. OBLIGATORY OR OPTIONAL NATURE OF THE PROVISION OF DATA.

The provision of data indicated  with an asterisk is compulsory given the nature of the contractual relationship that is established between the  user/visitor and the Data Controller with regard to the services requested, including those related to the  purchase of tickets. The conferment of data for the purposes of marketing and analysis of purchasing  preferences (personalized marketing) is optional.

8. CONSEQUENCES OF A POSSIBLE REFUSAL TO ANSWER

If the user/visitor refuses to provide the compulsory data requested in relation to the services requested, also  connected to the purchase of the ticket, the Owner will not be able to provide the service. No consequences are foreseen for the non-submittal of optional data, except for the impossibility of receiving personalized and/or generic promotional communications.

9. EXISTENCE OF PROFILING ACTIVITIES OR AUTOMATED DECISION-MAKING PROCESSES, LOGIC USED AND CONSEQUENCES FOR THE INTERESTED PARTY.

Within the limits indicated in this information  notice, the Data Controller performs profiling activities on the data subject in connection with marketing activities: these will be carried out in accordance with the GDPR and the data subject may object at any time  by writing to [email protected].

EICMA S.p.A.