This Privacy Policy is provided in accordance with Article 13 of Legislative Decree 196/03, Personal Data Protection Code and EU Regulation 20016/679 (GDPR). By carrying out the registration procedure, users voluntarily provide Cerexpo S.r.l., the Data Controller, with their personal data. Personal data sent by users through the registration procedures for our services will be processed in compliance with the principles of personal data protection established by the Privacy Code (Legislative Decree 196/2003) and other applicable regulations. The provision of data is optional; however, failure to provide the data deemed mandatory (and marked with *) will prevent proper registration to the site and the possibility of using the services provided by the portal and reserved for registered users.
Data controller
The data controller is Cerexpo S.r.l., with registered office in Via Emilia Romagna, 70/74 - 41049, Sassuolo (MO) Italy.
Object of processing
The Controller processes personal, identifying and non-sensitive data (in particular, name, surname, tax code, VAT number, email address, telephone number - hereinafter 'personal data' or 'data') communicated when registering on the Controller's website and/or when subscribing to the newsletter service offered by the Controller and/or when concluding contracts for the Controller's services.
Purpose of processing
The personal data collected with this registration are processed in order to allow access to the services provided by the portal and reserved for registered users. In the event that the user has given his/her consent at the time of activation of the service or expresses it subsequently and until such time as the consent is revoked, personal data may be processed by Cerexpo S.r.l. for the purpose of sending advertising and commercial communications on its own products and services or those of third party companies, including by automated means, for the purposes of direct sales, as well as for sending market research and surveys. In addition, if the user consents, personal data may also be processed by Cerexpo S.r.l. to identify, including by means of electronic processing, specific behaviours and consumption habits in order to improve the services provided and to direct commercial proposals of interest to the user, and to offer third party advertisers the opportunity to optimise advertising campaigns. This is without prejudice to the possibility for Cerexpo S.r.l. to process the aforesaid data in aggregate form, in compliance with the measures prescribed by the Privacy Guarantor and by virtue of the specific exemption from consent provided for by the same Authority, for electronic analysis and processing (e.g.: classification of the entire clientele into homogeneous categories according to service levels, consumption, expenditure, etc.) aimed at periodically monitoring the development and economic performance of Cerexpo S.r.l.'s activities, guide the related industrial and commercial processes, improve services, design and implement commercial communication campaigns. Cerexpo S.r.l. will also use personal data for administrative and accounting purposes and for the performance of contractual obligations; for the same purposes, personal data will be disclosed to affiliated or associated companies. The e-mail address will also be used, pursuant to Art. 130, paragraph 4 of Legislative Decree 196/03, for the direct sale of products or services similar to those already purchased by the user/customer. Personal data shall be processed:
A) Without express consent (art. 24 lett. a,b,c Privacy Code and art. 6 lett. b, e GDPR), for the following Service purposes:
- Allow registration to the website;
- Managing and maintaining the website;
- To allow subscription to the newsletter service provided by the Controller and any further Services requested;
- Fulfil pre-contractual, contractual and tax obligations arising from existing relationships;
- Fulfil obligations required by law, regulation, EU legislation or an order of the Authority;
- Preventing or detecting fraudulent activity or abuse harmful to the website;
- Exercise the holder's rights, e.g. the right of defence in court.
B) Only after specific and separate consent (Articles 23 and 130 Privacy Code and Article 7 GDPR), for the following Marketing purposes:
- Send email newsletters, commercial communications and/or advertising material on products or services offered by the Controller
Data Controller, Data Processors and Modalities
Personal data sent through the registration procedures for our services are processed by Cerexpo S.r.l. using automated tools and for the time strictly necessary to achieve the purposes for which they were collected. Specific security measures are observed by the data controller to prevent data loss, illicit or incorrect use and unauthorised access. Personal data are recorded and stored on electronic databases owned by Cerexpo S.r.l., with registered office in Via Emilia Romagna, 70/74 - 41049, Sassuolo (MO), Italy. It is the data controller and will be stored on servers in the territory of countries belonging to the European Union (EU) or outside the EU in compliance with data protection regulations. Personal data are processed by Cerexpo S.r.l.. The list of all data processors is available on request to users of the site.
Right of access to personal data and other rights pursuant to Article 7 of the Privacy Code (Legislative Decree 196/2003) and EU Regulation 20016/679 (GDPR)
Users may at any time exercise their rights under art. 7 of Legislative Decree 196/2003 and EU Regulation 2016/679 (GDPR), including the right to access their data and obtain their update or deletion for violation of the law, to object to the processing of their data for the purposes of sending advertising material, direct sales and commercial communications, and to request the updated list of data processors, by written communication to be sent to: Cerexpo S.r.l., with headquarters at Via Emilia Romagna, 70/74 - 41049, Sassuolo (MO) Italy.