NOTIFICATION PURSUANT TO ARTICLE 13 OF EU REGULATION 2016/679 ("GDPR") CONCERNING PERSONAL DATA PROCESSING - JOURNALISTS

Veronafiere S.p.A. provides the information required by the GDPR concerning the processing of your personal data provided for accreditation as a journalist at the event (hereafter, “Event”).

1. Data Processing Controller

The data controller is Veronafiere S.p.A., VAT n. 00233750231, Viale del Lavoro 8, 37135 – Verona (hereafter, “Veronafiere” or “Data Controller”).

2. Data Protection Officer (DPO)

The DPO can be contacted at the following e-mail address: dpo@veronafiere.it.

3. Purposes, legal bases for processing and data storage periods

WHY ARE PERSONAL DATA PROCESSED?	WHAT CONDITION MAKES SUCH PROCESSING LEGITIMATE?	HOW LONG DO WE KEEP PERSONAL DATA?
To allow accreditation as a journalist at the Event.	The legal basis is the execution of a contract involving the data subject (processing is necessary to fulfil the request for accreditation of the data subject).	Data will be stored until the end of the event.
To allow verification of accreditations.	The legal basis is the legitimate interest of the Data Controller to obtain timely verification of accreditations.	Data will be stored until the end of the next edition of the event.
To allow verification of actual access to the Event	The legal basis is the legitimate interest of the Data Controller to notify only those operators actually in attendance of any significant unplanned activities or events.	Data will be stored until the end of the event.
To send informative communications about future editions of the Event and/or other initiatives organized by Veronafiere pertaining to the sector covered by the Event in question and/or in any case related to the areas and/or territories where the journalist operates.	The legal basis is the legitimate interest of the Data Controller regarding appropriate communication of its initiatives given work in journalism of the data subject in the spheres and/or territories covered by Veronafiere initiatives. Data subjects will be informed by e-mail that they have been included in the list of recipients of such communications, not the least in order to allow them to oppose data processing by clicking on the "unsubscribe" link.	Data will be stored until the data subject withdraws consent.
Once the foregoing storage terms have elapsed, data will be destroyed, deleted or made anonymous, in compliance with technical cancellation and backup timing.

4. Conferment of data

Conferment of data marked with an asterisk in the registration form is necessary for the purposes of accreditation for the Event. Data not marked with an asterisk is optional and does not preclude consideration of accreditation requests.

5. Categories of recipients.

Data may be disclosed to third parties operating as independent Data Controllers, such as: public authorities, supervisory and control bodies and professional firms.

Data may also be processed, on behalf of the Data Controller, by third parties, designated as Data Processors pursuant to Article 28 of the GDPR, who carry out tasks required for or related to the service provided (e.g. IT service providers, organising secretariats, ticketing companies, etc.).

In addition, data are processed by Veronafiere's employees - in the company departments responsible for pursuing the foregoing purposes - who are expressly authorized to process such data and who have received appropriate operating instructions.

6. Scope of dissemination

For events organized in virtual form, data that the data subject uploads in his/her personal profile, including any image if added, will consequently be disseminated online and accessible to all subscribers to the Event.

7. Transfer of personal data to countries outside the European Union

Data may be transferred to countries outside the European Union (e.g. as part of the data controller's collaboration with selected technological partners). Whenever data is transferred to countries outside the European Union (EU) or the European Economic Area (EEA) that have not been deemed suitable by the European Commission, and where transfer is not necessary for the execution of the contract, the "transfer tools" referred to in Article 46 of the GDPR will be applied, evaluating the possible provision of "additional measures" intended to ensure a level of protection substantially equivalent to that required by European Union law.

8. Rights of data subjects

Data subjects can obtain confirmation from Veronafiere as to whether or not personal data concerning them are being processed and, in this case, access them and the information as per Article 15, the correction of inaccurate data, integration of incomplete data, deletion of data in the cases envisaged by Article 17, the limitation of processing in the cases envisaged by Article 18 of the GDPR, as well as to object, for reasons related to individual situations, to processing performed in the legitimate interest of the data controller, including by using, in relation to information communications, the "unsubscribe" function included at the end of each email.

Furthermore, in the cases envisaged by Article 20 of the GDPR, data subjects have the right to receive data in a structured and commonly used format that can be read by an automatic device, as well as, if technically feasible, to transmit said data to another data controller without impediments ("right to data portability").

To exercise these rights, interested parties may contact the Data Controller by email to privacy@veronafiere.it. 

Data subjects are entitled to lodge complaints with the competent Oversight Authority (Ombudsman) in the Member State where they normally reside or work or in the State where the alleged violation occurred.

 

Latest up-date: december 2025