The data provided to IYO (hereinafter “IYO”) in the web pages accessible at the address www.iyo.it (“Website”) at the moment of sending a contact request will be processed in compliance with the provisions of Legislative Decree 196/2003 on the Data Protection (“Privacy law”). Pursuant to article 13 of the Privacy law, IYO informs the user of the following.
A. THE PROPRIETOR OF THE PROCESSING
The proprietor of the processing of the personal data is IYO SRL, with legal and operative headquarters in Via Piero della Francesca, 74 – 20154 Milan (hereinafter “Proprietor”).
B. NATURE OF THE DATA PROCESSED AND THE PURPOSES OF THE PROCESSING
B.1 Data are collected and used exclusively for responding to requested contacts or for purposes directly connected and instrumental to the activity of the exhibition IYO, to fulfil the obligations provided by the law, by a regulation or by community legislation and for the practice of its own rights in the legal office.
B.2. Furthermore, the email address the user conferred at the moment of forwarding the contact form could be used by the Proprietor to promote their own services, to send public material exclusively related to these products or services or to fulfil market research or commercial communication. The user can prevent the aforementioned processing either at the outset – by ticking the appropriate box during registration – or afterwards, by sending an email to firstname.lastname@example.org. Opting out will not affect the provision of services.
B.3 By sending the contact form, the user agrees to receive from IYO to the email provided at the time of registration: notifications, newsletters and proposals pertinent and/or linked to IYO services. The user can prevent the aforementioned processing either at the outset – by ticking the appropriate box during the contact form submission – or afterwards, by sending an email to email@example.com.
C. MANDATORY NATURE OF THE CONFERRAL OF DATA
The conferral of the requested data during the forwarding of the contact module, for the purposes outlined in section B.1, is obligatory, since they are necessary in order to receive a response.
Any refusal to provide data means that IYO cannot respond to the contact request.
D. COMMUNICATION OF DATA
The communication of personal data by IYO is for the purposes and with the procedure described in this policy in the above Articles 2.4 and 3, in accordance with the consent to the processing of personal data.
Personal data can be passed on to third parties, and even outside the national territory – by way of example but not limited to – companies linked or connected to IYO and/or its trading partners, for the purposes outlined in Articles B.1 and B.2.
In this case, third-party subjects who will be able to carry out these operations will be appropriately selected according to their experience, abilities and reliability and will have to fully respect the current provisions on processing, including data protection.
The data provided can also be processed by those responsible for individual services. The categories of staff who will carry out these activities could be, by way of example but not limited to, riggers, transporters, couriers and any person who cooperates with IYO (within or outside of the national territory) capable of providing services to meet the User’s requests.
The user data are not subject to distribution.
E. THE PROCESSING PROCEDURE
The data are collected by electronic means and processed through procedures of registration, consultation, communication, retention and deletion, predominantly carried out by electronic means, ensuring the use of appropriate measures for the security of the processed data and guaranteeing its confidentiality.
IYO adopts appropriate security measures with the purpose of reducing to a minimum the risks of loss or deletion – even accidentally – of data, unauthorized access or processing which is unauthorized or non-compliant with the purposes of the collection indicated in this Policy.
However, IYO cannot guarantee to its Users that the security measures adopted for the Website and the data and information transmission on the Website limit or exclude any risk of unauthorized access or data-dispersal by the User’s own devices. It is therefore advised that a computer connected to the Internet has the appropriate software installed for the protection of online data transmission, whether incoming or outgoing (by installing, for example, updated anti-virus software). It is also advised that the Internet service provider has adopted appropriate measures for the security of online data transmission (by activating, for example, firewalls and anti-spam filters).
F. RIGHTS OF THE DATA SUBJECT
Pursuant to Article 7 of the Privacy Law, the user is entitled to be informed, at any time, as to whether data relating to him/her are being processed and the purposes for which they are being used. They also have the right to ask to update or rectify, erase or block the data or prevent, either in whole or in part, its processing.
In order to exercise the aforementioned rights, as well as to receive information related to the subjects whose data are filed or communicated, namely, on the responsible or appointed subjects who may become aware of their data, the user can address the Proprietor.
Article 7 of Legislative Decree 196/2003 stipulates:
Right to access personal data and other rights
1. The data subject is entitled to be informed as to whether or not data relating to him/her are being processed and to be informed of said data in an intelligible form.
2. The data subject is entitled to be informed of:
a. the source of personal data;
b. the processing purposes and procedure;
c. the logics of processing if electronic means are used;
d. the name of the Proprietor, processors and representative appointed pursuant to article 5, section 2;
e. the parties or categories of parties which personal data may be disclosed to, or which may acquire this data as appointed representative in State territory, data controllers or processors.
3. The data subject is also entitled to:
a. have data updated, rectified or integrated, if desired;
b. have data erased, made anonymous or blocked if unlawfully processed, including data which do not need to be retained for the purposes they were obtained and processed for;
c. receive certification stating that operations as of letters a) and b) have been notified to parties which data have been disclosed or disseminated to, including the contents of data, except when this is impossible or requires means that are clearly disproportionate in relation to the right of the data subject.
4. The data subject is entitled to prevent, either in whole or in part:
a. the processing of personal data for legitimate reasons, even though said data are relevant to the purposes they were acquired for;
b. the processing of personal data concerning the transmission of advertising or direct sales materials or performance of market surveys or marketing.
In order to exercise the aforementioned rights, as well as to receive information related to the subjects whose data are filed or communicated, namely, on the responsible or appointed subjects who can know about your data, you can address the Proprietor by sending an email to firstname.lastname@example.org.
The Website uses a technology called “cookies”. These are small data files that are stored on a user’s computer when they access a website or its sections.
In the event that the user does not accept the cookies, these can be disabled by following the browser manufacturer instructions. For example, in Internet Explorer it is possible to change the settings for cookies by going to the section Tools/Internet Options/Privacy.
H. DURATION OF PROCESSING
The processing will last no longer than necessary for the purposes for which the data were collected, in accordance with applicable civil law, fiscal and tax requirements.