Pursuant to and for the purposes of Articles 13 of EU Regulation 2016/679 (“General Data Protection Regulation” or “GDPR”), Padova Hall S.p.A. and Imp-act S.r.l., in their capacity as “Joint Data Controllers”, hereby inform you of the methods and purposes of the processing of personal data that will be carried out by them.

Data Controllers – Joint Controllership Agreement

Pursuant to Article 26 of the GDPR, the Joint Data Controllers have undertaken to jointly define the methods and purposes of the processing of the personal data of Data Subjects; to clearly and transparently determine the procedures suitable for providing you with a timely response should you wish to exercise your rights as provided for by Articles 15 et seq. of the GDPR; and to define this Privacy Notice.

The following articles briefly identify the essential contents of the Joint Controllership Agreement.

1. Joint Data Controllers

The Joint Data Controllers are:

– Padova Hall S.p.A., with registered office in Padua, Via N. Tommaseo no. 59, represented by its President and legal representative pro tempore, VAT no. 00205840283, certified email: padovahall@legalmail.it; email: privacy@padovahall.com, hereinafter “Padova Hall”.

– Imp-act S.r.l., with registered office in Padua (PD), Via Venezuela 15/A, Tax Code/VAT no. 05628420282, certified email: impact@pecimprese.it; email: fiera@imp-act.it, hereinafter “Impact”.

2. Categories of personal data processed

The personal data collected, either independently or through third parties, are:

• personal identification data and contact details of the visiting subject, such as name, surname, company role, email address, telephone number, city, country, and any degree course, in the case of a student;
• browsing data, such as IP address, as better specified below;
• data collected through technical cookies.

Personal Data may be freely provided by the User or, in the case of Usage Data, collected automatically during the use of our websites.

Unless otherwise specified, all Data requested in the forms on our websites are mandatory. If the User refuses to provide them, participation in the Event may be impossible. In cases where Padova Hall and Impact indicate certain Data as optional, Users are free not to provide such Data, without this having any consequence on participation in the Event.

Users who have doubts as to which Data are mandatory are invited to contact the Joint Data Controllers. The Data Subject assumes responsibility for the Personal Data of third parties obtained, published or shared with Padova Hall/Impact and guarantees that they have the right to communicate or disclose them, releasing the Controller from any liability towards third parties.

2.1 Personal data of third parties voluntarily provided by you

The interested user acknowledges that any indication, on our commercial documentation and/or electronic forms via the internet, of personal data of third parties by the same user constitutes processing of personal data in relation to which the user acts as data controller of the personal data of those subjects.

Therefore, the interested user, in their capacity as data controller of the personal and contact data, guarantees that the personal and contact data of the above-mentioned subjects have been collected and communicated in compliance with the applicable privacy provisions.

To this end, the user undertakes to provide the data subjects with the notice required by Article 13 of the GDPR and to inform the above-mentioned subjects whose personal data are collected and communicated about the methods and purposes of the processing.

The personal data of the above-mentioned subjects will be communicated solely for the purpose of providing and managing our services.

3. Browsing data

The IT systems and software procedures used to operate this website acquire, during their normal operation, certain personal data whose transmission is implicit in the use of internet communication protocols.

This information is not collected in order to be associated with identified data subjects, but by its very nature could, through processing and association with data held by third parties, allow users to be identified.

This category of data includes the IP addresses or domain names of the computers used by users connecting to the website, the URI addresses (Uniform Resource Identifier) of the requested resources, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response given by the server, such as successful outcome, error, etc., and other parameters relating to the user’s operating system and IT environment.

These data are used solely for the purpose of obtaining anonymous statistical information on the use of the website and to check its correct functioning, and are deleted immediately after processing.

4. Purposes of personal data processing

Personal data will be processed, with the prior explicit consent of the Data Subject where necessary, by Padova Hall and Impact for the purposes pursued by them in their capacity as Joint Data Controllers, as described in greater detail below.

Padova Hall/Impact will process your personal data for the following purposes:

• purposes and fulfilments connected with the performance of a contract and/or the provision of services, in particular in order to guarantee participation in the Event, pursuant to Article 6, paragraph 1, letter b) of the GDPR;
  – to fulfil and execute a request for information made by the Data Subject through the contact form available in the specific section of the website, pursuant to Article 6, paragraph 1, letter b) of the GDPR;
• to comply with a legal obligation for tax and reporting purposes, pursuant to Article 6, paragraph 1, letter c) of the GDPR;
• to produce statistics through aggregated data, pursuant to Article 6, paragraph 1, letter f) of the GDPR;
• to provide services through the website by using technical cookies, pursuant to Article 6, paragraph 1, letter f) of the GDPR;
• subject to your explicit consent, for marketing purposes in a broad sense, namely to send, by email and paper mail, advertising and informational material, of a promotional nature or in any case of a commercial proposal nature, relating to services and products of Padova Hall and Impact.

5. Legal basis for the processing of personal data

The legal bases for the processing of personal data, as detailed in the previous paragraph, are:

• the performance of the contract and/or pre-contractual measures relating to the commercial initiative to which the Data Subject is a party, pursuant to Article 6, paragraph 1, letter b) of the GDPR;
• compliance with a legal obligation to which the Joint Data Controllers are subject, pursuant to Article 6, paragraph 1, letter c) of the GDPR;
• the legitimate interest of the Joint Data Controllers, pursuant to Article 6, paragraph 1, letter f) of the GDPR, in producing statistics through aggregated data and in providing services through the website by using technical cookies;
• consent, with regard to promotional and marketing initiatives launched by Padova Hall and Impact, pursuant to Article 6, paragraph 1, letter a) of the GDPR.

The provision of personal data for the purposes referred to in points a) and b) is mandatory, and failure to provide the personal data will make it impossible to guarantee participation in the Event.

The provision of personal data for the purposes referred to in point c) is optional, and failure to provide them may result in the Joint Data Controllers being unable to offer services through the website.

The provision of personal data for the purposes referred to in point d) is optional, and failure to provide them will result only in Padova Hall and Impact being unable to send you advertising and promotional messages and to carry out market research.

We further specify that, where you have given consent to authorise Padova Hall/Impact to pursue the above-mentioned purposes, you will remain free at any time to withdraw your consent by sending, without any formal requirements, a clear written communication to the contact details specified in greater detail in paragraph 11, “Contacts for exercising the rights of the Data Subject and for further information”, below.

With specific regard to the withdrawal of consent for marketing purposes, we inform you that, if exercised by the Data Subject, it will apply to all electronic, automated and traditional contact methods, without prejudice to the right to object only to certain contact channels.

Following receipt of such withdrawal request, Padova Hall/Impact will promptly remove and delete the Data Subject’s personal data from the databases and, where possible, inform any third parties to whom the data have been communicated of the same deletion purposes.

6. Methods of processing personal data

The processing of personal data will be carried out using manual, IT, telematic and paper-based tools, only for the time necessary to achieve the purposes for which they were collected.

The Joint Data Controllers adopt appropriate security measures aimed at preventing unauthorised access, disclosure, modification or destruction of Personal Data.

The processing is carried out using IT and/or telematic tools, with organisational methods and logic strictly related to the purposes indicated.

8. Transfer of personal data outside the EU

Your personal data and those of other subjects will not be transferred outside the European Union.

It is possible that some suppliers of the Joint Data Controllers, in their capacity as Data Processors, may also store data in third countries, which nevertheless guarantee an adequate level of protection of the Data Subject’s rights by complying with one or more of the conditions provided for by Articles 45–47 of the GDPR.

10. Further information on processing

Legal defence

The Personal Data of the Data Subject may be used by the Joint Data Controllers in court or in the preparatory stages for possible legal proceedings in order to defend against misuse of our websites or related Services by the Data Subject.

The Joint Data Controllers may be required to disclose the Data by order of public authorities.

Specific notices

At the request of the Data Subject, in addition to the information contained in this Privacy Policy, additional and contextual notices concerning the Services may be provided to the Data Subject.

Information not contained in this policy

Further information relating to the processing of Personal Data may be requested at any time from the Joint Data Controllers using the contact details provided in point 11 below.