(version 2.0 - April 2023)

This Privacy Policy is designed to provide information on the processing of personal data by Serviceplan Group Italia S.r.l. with regard to the "Best Brands" event (as specified below)

 

1. INTRODUCTION - WHO WE ARE

Serviceplan Group Italia S.r.l., with registered office in Milan, via Roncaglia 12, Tax code/VAT No. 08618840964 (hereinafter, the "Controller" or "Serviceplan Group Italia"), is a company operating in the communications sector.

This privacy policy explains how the personal data of individuals (hereinafter referred to as "Users") who register for and, where applicable, participate in the "Best Brands" event organized by the Controller (hereinafter referred to as the "Event") will be processed.

Serviceplan Group Italia, as the data controller of the personal data of the Users, therefore provides this privacy policy pursuant to Article 13 of EU Regulation 2016/679 of April 27, 2016 (hereinafter referred to as the "Regulation" or "Applicable Legislation"), which is published on the website dedicated to the Event (hereinafter referred to as the "Site").

 

2. HOW TO CONTACT US

The Controller attaches utmost importance to the right to privacy and the protection of personal data of its Users. For any information in relation to this Privacy Policy, Users may contact the Controller at any time, by sending:

• A registered letter with return receipt to the Controller's place of business: via Roncaglia 12, Milano;
• An email to: info@best-brands.it

Within the group of companies in Italy of which Serviceplan Italia Group S.r.l. is the holding company, a Data Protection Officer (DPO) has been appointed, whom Users can contact using the contacts below: dpo@serviceplan.com

 

3. WHAT WE DO - PURPOSES OF PROCESSING 

If the individuals invited to the Event by Serviceplan Group Italia and/or one of the other partners, as specified on the Site, confirm their participation to the Controller through the registration channel indicated in the invitation and made available on the Site by Serviceplan Group Italia, the latter collects the personal data related to the Users.

In particular, Users' personal data will be lawfully processed by the Controller for the following purposes:

a) Event registration: the personal data of the Users are collected and processed by the Controller to record the request for participation in the Event by the User and/or to transmit logistical information related to the Event to the User (for example, but not limited to, confirming the receipt of the User's registration request, transmitting details for accessing the Event, etc.). The personal data of the Users collected by the Controller for this purpose may include, in addition to the information regarding the confirmation of participation in the Event by the User the name, surname, email address, company, and role within the company, and/or other data possibly and voluntarily communicated by the same through the channels indicated in the invitation or on the Site.

b) Management of any interactions regarding the Event and/or regarding the materials that can be requested through the Site: the personal data of the Users who contact the Controller to request information about the Event and/or the personal data of the Users who ask the Controller for access to materials related to the Event and/or the activities of the Controller, through the channels indicated in the invitation and/or on the Site, are collected and processed by the Controller for the purpose of providing the information about the Event that the User has requested and/or allowing the User to download the material they wish to use.

c) legal obligations, i.e. to fulfil obligations laid down by law, authority, regulation or European law.

Personal data that are necessary for the processing purposes described in this paragraph 3 are indicated with an asterisk in the registration form for the Event or, where applicable, within the form for downloading materials. In such cases, the provision of data is necessary, as failure to provide it will result in i) the inability for the Users to register and thus participate in the Event and/or ii) the inability for the Users to request access to the material of their interest.

 

4. FURTHER PROCESSING PURPOSES

Marketing (sending of advertising material, direct sales, commercial communications, newsletters)

Subject to Users’ free and optional consent, some personal data concerning them (name, surname, email address) may also be processed by the Controller for marketing purposes (to send advertising material, direct sales, commercial communications or newsletters containing information on sector news relating to Website activities and services offered by the Controller), or to contact Users by email to offer products and/or services sold by the Controller itself and/or third-party companies (such as, for example, other companies in the group of companies to which the Controller belongs and/or the Partners of the Event), to present offers, promotions and commercial opportunities, invitations to events (presentations, new editions of the Event, etc.), research materials or similar.

If consent is not given, the possibility of browsing the Website and contacting the Controller will not be affected in any way.

If consent is given, Users may withdraw it at any time by sending a request to the Controller in the manner indicated in paragraph 8 below.

Users may also easily object to further promotional email communications by clicking on the appropriate link to withdraw their consent, which is indicated in each promotional e-mail. Once consent has been withdrawn, the Controller will send the User an email confirming that consent has been withdrawn.

The Controller informs Users that, following their exercise of the right to object to the sending of promotional communications by email, Users may continue to receive further promotional messages for technical and operational reasons (e.g. contact lists completed shortly before the Controller’s receipt of Users’ objection). Should Users continue to receive promotional messages 24 hours after exercising the right to object, they may report the problem to the Controller, using the contact details indicated in paragraph 8 below.

 

5. LEGAL BASIS

Event Registration (as described in par. 3(a)): The legal basis is Article 6(1)(b) of the Regulation, as the processing is necessary for the performance of a contract and/or for the execution of pre-contractual measures.

Management of any interactions regarding the Event and/or materials available on the Site (as described in par. 3(b)): The legal basis is Article 6(1)(b) of the Regulation, as the processing is necessary for the performance of a contract and/or for the execution of pre-contractual measures.

Legal obligations (as described in paragraph 3(c) above): the legal basis is represented by Art. 6(1)(c) of the Regulation, since processing is necessary for compliance with a legal obligation to which the Controller is subject.

Further processing purposes: for processing relating to marketing activities (as described in paragraph 4 above), the legal basis is represented by Art. 6(1)(a) of the Regulation, i.e. the data subject has given consent to the processing of his or her personal data for one or more specific purposes. For this reason, the Controller asks Users to give their specific, free and optional consent to pursue this processing purpose.

 

6. DATA PROCESSING METHODS AND STORAGE PERIODS 

The Controller will process Users' personal data using manual and computerised tools, with logics strictly related to the purpose of processing and otherwise in such a way as to ensure data security and confidentiality.

The personal data of the Users will be retained for the time strictly necessary to fulfill the primary purposes (as described in the previous par. 3), or as required for the protection of the legal interests of the Controller and the Users in civil matters.

In the case set out in paragraph 4 above, Users' personal data shall be kept for the time strictly necessary to fulfil the purposes set out therein and, in any case, until consent is withdrawn. However, any retention periods provided by law or regulations are preserved.

7. SCOPE OF COMMUNICATION AND DISSEMINATION OF DATA

Users’ personal data may be transferred outside the European Union. In this case, the Controller shall ensure that such transfer is carried out in compliance with Applicable Law and, in particular, in accordance with Arts. 45 (Transfer on the basis of an adequacy decision) and 46 (Transfer subject to appropriate safeguards) of the Regulation. 

The Controller's employees and/or collaborators may become aware of the latter’s personal data. Such persons, who have been duly instructed by the Controller pursuant to Art. 29 of the Regulation, will process Users' data exclusively for the purposes indicated in this Policy and in compliance with Applicable Law.

Users' personal data may also be acquired by third parties processing personal data on behalf of the Controller in their capacity as Data Processors, such as suppliers of IT and logistics services, suppliers of outsourcing or cloud computing services, professionals and consultants.

Users have the right to obtain a list of any data processors appointed by the Controller, by sending a request to the Controller in the manner indicated in paragraph 8 below.

 

8. RIGHTS OF DATA SUBJECTS

Users may exercise the rights granted to them by Applicable Law by sending:

• A registered letter with return receipt to the Controller's place of business: via Roncaglia 12, Milano;
• An email to: serviceplan-group-italia@house-of-communication.com

Within the group of companies in Italy of which Serviceplan Italia Group S.r.l. is the holding company, a Data Protection Officer (DPO) has been appointed, whom Users can contact using the contacts below: dpo@serviceplan.com

Pursuant to Applicable Law, Users have:

a. the right to withdraw consent at any time, if processing is based on their consent;

b. the right of access to personal data;

c. (where applicable) the right to data portability (the right to receive all personal data concerning them in a structured, commonly used and machine-readable format), the right to restriction of processing of personal data, the right to rectification and the right to erasure ('right to be forgotten');

d. the right to object:

i. in whole or in part, on legitimate grounds, to the processing of personal data concerning them, even if pertinent to the purpose of collection;

ii. in whole or in part, to the processing of personal data concerning them for the purpose of sending advertising or direct sales material or for carrying out market research or commercial communications;

e. if they consider that the processing concerning them infringes the Regulation, the right to lodge a complaint with a supervisory authority (in the Member State of their habitual residence, place of work or place of the alleged infringement). The Italian supervisory authority is the Garante per la protezione dei dati personali, based in Piazza Venezia, no. 11, 00186 - Roma (RM) (www.garanteprivacy.it).

***

The Controller is not responsible for updating all the links displayed in this Policy; therefore, whenever a link is not working and/or updated, Users acknowledge and accept that they shall always refer to the document and/or section of the websites referred to by that link.