Privacy notice addressed to customers and business partners
This privacy notice is provided, pursuant to articles 13 and 14 of the EU Regulation 2016/679 (hereinafter “Regulation“), by Diennea S.r.l. (“Diennea” or “Data Controller“), with registered office in Faenza (48018 – RA), Viale G. Marconi n. 30/14, VAT No. 02243600398, to its customers and business partners whose personal data (only so-called “common” personal data, such as name, surname, e-mail address, company role, telephone number, Tax Code and VAT No. and, in specific circumstances, data falling within the so-called “special categories of personal data” should you communicate any food intolerances, allergies, or medical conditions to us in the context of organizing in-person events) may be:
(i) provided directly by the data subject in direct interactions with Diennea at physical or digital events (e.g. fairs, events, webinars). In such cases, your personal data is processed for pre-contractual purposes and, if applicable, for the management and execution of the contract entered into directly with you or with your company (or the company you represent) to perform the requested services; Diennea therefore, will process your personal data for the provision of the services and the execution of a contract. This processing takes place pursuant to Article 6(1)(b) of the Regulation (“[…] processing is necessary for the performance of a contract […] or the performance of pre-contractual measures […]”). The provision of your personal data for this purpose (“Performance the contract”) is optional, but without it Diennea may be unable to enter into or perform a contract with you (or the company you represent). Please note that during the registration phases for in-person events (e.g., fairs), you may be asked to voluntarily provide:
– the personal data (first and last name) of any third party attending the event with you. In such cases, you act as an independent data controller, ensuring—by assuming full responsibility—that this specific data processing is based on an appropriate legal basis pursuant to Article 6 of the Regulation that legitimizes the processing of the data in question. In this regard, you provide full indemnification against any claims, demands, or compensation requests for damages resulting from the processing, etc., that may be brought against Diennea by third parties whose personal data you have communicated to Diennea, in violation of applicable data protection laws;
– your ‘dietary preferences,’ should you wish to report any intolerances, allergies, or dietary requirements. This information may be useful to Diennea for the procurement of consumables goods(food and beverages) and will only be requested when strictly necessary (e.g., if the event includes a buffet). The processing of such special categories of personal data (as this information may reveal allergies or medical conditions, such as celiac disease), if provided by you, will take place under Article 9(2)(a) of the Regulation (“the data subject has given explicit consent […]”). The provision of your personal data for this specific purpose (“Catering Service Organization”) is optional, but in its absence, you may be unable to benefit from the catering service offered by Diennea.
(ii) collected from third parties other than the data subject, and more specifically collected by our business partners, on the occasion of physical or digital events (e.g. trade fairs, events, webinars) in which you have decided to participate and at which you have provided your personal data. Should you wish to receive more detailed information about the processing of your personal data by the business partner who has provided us with your personal data, the identity of which was indicated to you in the separate communication you received, please contact the partner directly or send us a specific request to privacy@diennea.com. By virtue of the information provided by our business partner and as better specified in the first direct contact with Diennea, your personal data may be processed by Diennea for the purpose of executing the contract referred to in point (i) above, as well as, in the event of your specific consent given to our business partner, to carry out marketing activities, such as conducting surveys and market research, sending you information and promotional material regarding Diennea’s activities, products and services (“Marketing“), by e-mail, sending text messages and using social networks. Processing for Marketing purposes is based on your consent – given to our business partner – which you can revoke at any time without any formality by modifying and/or updating your privacy preferences from the ‘Edit/update profile’ page accessible via the link at the foot of the page in business emails or by writing to privacy@diennea.com, without affecting the lawfulness of processing based on the consent given before revocation.
The personal data provided by you or obtained from third parties may also be processed in order to comply with legal or regulatory obligations (“Compliance“), such as those relating to tax and fiscal matters, and in order to comply with any requests from the authorities pursuant to Art. 6(1)(c) of the Regulation (“[…] processing is necessary for compliance with a legal obligation to which the controller is subject”).
Your personal data may be shared, for the above purposes, with:
1. subjects that typically act as data processors, i.e.: persons, companies or professional firms that provide assistance and consultancy to Diennea in accounting, administrative, legal, tax, financial and debt collection matters, or providers of technological solutions (such as, for example, CRM employed for the management of the contractual relationship, hosting providers);
2. subjects, entities or authorities to whom it is mandatory to communicate your personal data by virtue of provisions of law or orders of the authorities;
3. persons authorised by Diennea for the processing necessary to carry out activities strictly related to the above purposes, who have committed themselves to confidentiality or have an adequate legal obligation of confidentiality (e.g. employees and/or collaborators of Diennea).
Your personal data may be shared with some recipients located outside the European Economic Area, namely in the Republic of San Marino. The Controller ensures that any transfer is carried out by means of appropriate safeguards, such as adequacy decisions, Standard Contractual Clauses adopted by the European Commission or others. Further information may be requested by writing to privacy@diennea.com.
Personal data processed for the purpose of Performance the contract shall be retained by Diennea for the time strictly necessary to achieve that purpose and for as long as permitted by Italian law to protect its interests (art. 2946 of the Italian civil code and following).
Personal data processed for the purpose of the Catering Service Organization will be retained by Diennea for the time strictly necessary for the event organization for which you have given the information and they will be deleted at the end of the event.
If the processing is necessary for the purpose of Compliance your data will be kept until the time foreseen by the specific obligation or applicable law.
Personal data processed for Marketing purposes will be kept until your consent is revoked.
Further information regarding the data retention period and the criteria used to determine this period may be requested by writing to Diennea’s Data Protection Officer, who can be reached at the following address: dpo@diennea.com.
This is without prejudice, in any case, to the possibility for Diennea to retain your personal data for the period of time envisaged and permitted by Italian law to protect its interests (Art. 2947(1)(3) of the Italian Civil Code).
Pursuant to articles 15 et seq. of the Regulation, we remind you that you have the right to ask Diennea, at any time, for access to your personal data, to rectify or delete them or to object to their processing pursuant to article 21 of the Regulation. Furthermore, you have the right to request the restriction of processing in the cases provided for by article 18 of the Regulation, as well as to obtain in a structured, commonly used and machine-readable format the data concerning you, in the cases provided for by article 20 of the Regulation. Consent for Marketing purposes can also be revoked at any time by using the functionality at the bottom of our commercial emails.
The aforementioned requests can be made in writing to the following address: privacy@diennea.com.
In any case, you always have the right to lodge a complaint with the competent Supervisory Authority (Personal Data Protection Authority), in accordance with Article 77 of the Regulation, if you consider that the processing of your personal data is contrary to the legislation in force.
Privacy notice B2B_Customers-Partners, version n.1.1. of 27/09/2024