Event Privacy Notice

 

Notice concerning the processing of personal data of event participants
pursuant to Article 13 of Regulation (EU) 2016/679 (the “GDPR”)

 

 

The Data Controller is Mylia, a brand of Adecco Formazione S.r.l., which organises the event (the “Company”).

 

 

If you wish to contact the Data Protection Officer (DPO) of the Data Controller, you may send an email to globalprivacy@adeccogroup.com.

 

 

PURPOSES OF THE PROCESSING

LEGAL BASIS

a) To allow registration for the event and to send all communications necessary for participation, as well as to carry out the accreditation operations for the event itself

a) Performance of a contract to which you are a party

b) To comply with obligations laid down by applicable national and supranational legislation

b) Need to fulfil legal obligations

c) If necessary, to establish, exercise or defend the rights of the Data Controller in legal proceedings

c) Legitimate interest

d) Direct marketing: sending, using both automated contact methods, including without operator intervention, such as email, and traditional methods, such as telephone calls with an operator and postal mail, promotional and commercial communications relating to services offered and activities carried out by the Company; invitations to events and/or job offers; notices of corporate events; and carrying out market surveys and statistical analyses

d) Consent of the client/event participant, optional and revocable at any time

e) Communication to third parties for their own direct marketing purposes: sending, using both automated contact methods, such as SMS, MMS and email, and traditional methods, such as telephone calls with an operator and postal mail, promotional and commercial communications relating to services offered and activities carried out by the Company; invitations to events and/or job offers; notices of corporate events; and carrying out market surveys and statistical analyses

e) Consent of the client/event participant, optional and revocable at any time

 

 

The data is processed for the entire duration of the event and, after its conclusion, for the ordinary limitation period of 10 years. In the event of legal proceedings, the data will be retained for the entire duration of those proceedings, until the time limits for available remedies have expired.

For marketing purposes and for communication to third parties, the data will be processed until the relevant consent is withdrawn.

Once the retention periods indicated above have expired, the data will be destroyed, erased or anonymised, in accordance with the technical erasure and backup procedures.

 

 

Providing the data is mandatory in order to participate in the event. Refusal to provide the above-mentioned data therefore prevents registration for the event.

The consents to the processing of data for marketing purposes are entirely optional. Accordingly, in the case of an event for which data processing is envisaged for the above-mentioned purposes, the data will be processed for marketing purposes only if the data subject is required to provide such consent or, where only one consent has been given, only for the purpose for which it was given.

 

 

The data may be disclosed to third parties acting as independent data controllers or processing the data on behalf of the Company as data processors. Such parties may include, by way of example, supervisory and control authorities and any public body entitled to request the data; companies within the Group to which the Company belongs; credit institutions; accounting firms; law firms and consultancy firms; insurance companies; public bodies, only where required by law; suppliers; agents; business partners; and clients.

 

 

The data may be processed by employees of the relevant company functions responsible for pursuing the purposes indicated above, who have been expressly authorised to process the data and have received appropriate operating instructions.

 

 

The data subject may ask the Company for access to the data concerning the data subject, erasure of the data, rectification of inaccurate data, completion of incomplete data, restriction of processing in the cases provided for by Article 18 GDPR, and may object, on grounds relating to the data subject’s particular situation, to processing carried out in pursuit of the Data Controller’s legitimate interests.

If the data subject wishes to exercise any of the data subject’s rights, the data subject is invited to log in to the private area or, alternatively, contact the Company by email at diritti.privacy@adeccogroup.com or complete the online form at the following link. When exercising rights, the Company may ask the data subject to provide identification before proceeding with the request.

For any communication for which the data subject is invited to contact The Adecco Group, the data subject may write to mylia.team@mylia.com.

Furthermore, where the processing is based on consent or a contract and is carried out by automated means, data subjects have the right to receive the data in a structured, commonly used and machine-readable format and, where technically feasible, to transmit the data to another controller without hindrance.

Data subjects have the right to withdraw the consents given at any time and to object to the processing of data for marketing purposes, including profiling connected with direct marketing. Data subjects are reminded that the option of objecting to the receipt of communications through automated methods extends to traditional methods as well. However, a data subject who prefers to be contacted for that purpose exclusively through traditional methods may object only to receiving communications through automated methods.

Data subjects have the right to lodge a complaint with the competent supervisory authority in the Member State in which they habitually reside or work or in the State in which the alleged infringement occurred.

What does the right to restriction of processing consist of?

It consists of temporarily marking stored data for the sole purpose of restricting its processing in the following cases under Article 18 GDPR:

  • The data subject contests the accuracy of the personal data, for the period necessary for the Data Controller to verify the accuracy of the data;
  • The processing is unlawful and the data subject opposes the erasure of the data and requests restriction of its use instead;
  • The Data Controller no longer needs the personal data for processing purposes, but the data is required by the data subject for the establishment, exercise or defence of legal claims;
  • The data subject has objected to processing pursuant to Article 21(1) GDPR, pending verification of whether the legitimate grounds of the Data Controller override those of the data subject.