Privacy notice under articles 13-14 of Regulation (EU) 2016/679 (General Data Protection Regulation)
Data subjects: Participants in events, webinars and trade fairs.
LIODRY FOODS S.P.A. as Data Controller of the subject’s personal data, pursuant to and for the purposes of EU Regulation 2016/679 hereinafter ‘GDPR’, hereby informs that the aforementioned regulation provides for the protection of data subjects with respect to the processing of personal data and that such processing will be based on principles of lawfulness, fairness, transparency and protection of data subject’s privacy and rights.
Personal data will be processed in accordance with the legislative provisions of the aforementioned regulation and the confidentiality obligations provided for therein.
Purpose and legal basis of the processing: in particular, personal data will be processed for the following purposes related to the implementation of measures deriving from contractual or pre-contractual duties:
- User interaction management;
- Event registration management and email invitations to initiatives and promotional campaigns
- Planning of the activities
Personal data will also be processed for the following purposes necessary for the pursuit of the legitimate interest of the data controller:
Distribution of informative and promotional communications relating to the company’s activities, including publications and reports on trade fairs and events, sharing of photos and product news, presentations of collaborations with partners, workshops and training courses.
Personal data will also be processed for the following purposes, prior to the data subject’s consent:
Whenever necessary, for statistical market surveys and promotional activities also relating to the distribution of advertising and promotional material.
The provision of data is optional for the data subject with regard to the above-mentioned purposes. Any refusal to allow processing does not compromise the continuation of the relationship or the appropriateness of the processing itself.
Processing methods. Personal data will be processed in the following ways:
manual processing (paper-based records)
digital processing (PC-based);
Data processing shall comply with the methods set out in articles 6, 32 of the GDPR and through the adoption of the appropriate security measures provided for.
Data will be processed exclusively by personnel expressly authorised by the Data Controller and, in particular, by the following categories of authorised personnel:
Persons in charge of processing personal data
Communication: data may be communicated to third parties for the correct management of the relation and in particular to the following categories of Recipients including all duly appointed Data Processors:
Marketing consultant appointed as external data controller
Consultants and freelancers, including in association
Social security and welfare institutions
Suppliers of technical services for events and webinars
IT, hosting and system management suppliers
Subcontractors
Dissemination: personal data will be disseminated as follows:
Publication on the Internet via the LinkedIn company page
Retention period. We hereby inform that, in compliance with the principles of lawfulness, purpose limitation and data minimization, pursuant to art. 5 of the GDPR, the retention period of personal data:
With reference to marketing activities, shall not exceed a maximum period of 24 months from data registration, except in case the right of objection to the processing of personal data is exercised.
Shall not exceed the period of time necessary for the company communication purposes.
Data Controller: the Data Controller, pursuant to legislation in force, is LIODRY FOODS S.P.A. (Via E. Mattei n. 8/a , 42043 GATTATICO (RE), P. IVA01898550353, to be reached at the following addresses: e-mail info@liodryfoods.com, phone 0522908725 in the person of its pro tempore legal representative.
The Data subject shall have the right to obtain from the Controller the erasure (right to be forgotten), restriction, updating, rectification, portability, objection to the processing of personal data, as well as in general to exercise all the rights provided for by articles 15, 16, 17, 18, 19, 20, 21, 22 of the GDPR.
An updated version of this privacy notice is available on the Internet address
https://www.privacylab.it/informativa.php?19478428644.
Regulation EU 2016/679: Articles 15, 16, 17, 18, 19, 20, 21, 22 – Data subject’s rights
- The data subject shall have the right to obtain from the controller confirmation as to whether or not personal data concerning him or her are being processed, even in case data have not been registered yet, and communication of data in an intelligible form, and the possibility to lodge a complaint with a supervisory authority.
- The data subject shall have the right to obtain:
- the source of subject’s data;
- purposes and methods of data processing;
- details on the logics applied in case of data processing through electronic devices;
- IDs of the Controller, processors, and appointed Representative pursuant to article 5, paragraph 2;
- the indication of subjects or subject categories to whom personal data can be disclosed or who may receive such data as appointed representatives within the State territory, of persons in charge or appointed individuals.
- The data subject shall have the right to obtain:
- updating, rectification or, whenever required, integration of personal data;
- erasure, anonymisation or blocking of data unlawfully processed, including data for which retention is not required for the purposes for which it was collected and then processed;
- a statement that the operations referred to in letters a) and b) have been brought to the attention, also with regard to their contents, of those to whom the data have been communicated or disseminated, except when such fulfilment proves impossible or involves the use of means manifestly disproportionate to the right protected;
- data portability.
- 4. The data subject shall have the right to object, in all or in part:
- on legitimate grounds, to the processing of personal data concerning him or her, although consistent with the purposes of the data collection;
- to processing of personal data concerning him or her for marketing purposes, direct sale, market survey or commercial communication.