Privacy Policy

Pursuant to Legislative Decree No. 196/2003 and Regulation (EU) 2016/679 (hereinafter the “Regulation”), this page describes the methods of processing the personal data of users who visit the website accessible electronically at the following address: https://www.privilege-events.it/.

We inform users that, as a result of consulting this website, data relating to identified or identifiable persons may be processed.

This information does not concern other websites, pages or online services that may be reached through hyperlinks possibly published on the site.

Identity of the Data Controller

The Data Controller is Privilege Events Srl, in the person of its pro tempore legal representative, with registered office in Pescara (PE), Via Giuseppe Mazzini No. 130 – postal code 65122 (e-mail: info@privilege-events.it; PEC: privilegeevents@legalmail.it; Tel.: 0858963241) (hereinafter also referred to as “the Controller”).

Source of Data and Categories of Data Collected

1) Data provided by the User

The Controller collects the personal data provided by users:

1. when sending a message using the contact channels and/or contact forms available on the site.

The optional and voluntary sending of messages to the contact addresses, as well as the completion and submission of the forms available on the site, entails the acquisition of the sender’s contact data necessary to provide a reply, as well as of all personal data included in the communications.

2) Browsing data

The Controller collects data relating to the user’s use of the website.

The IT systems and software procedures used to operate this website acquire, in the course of their normal operation, certain personal data whose transmission is implicit in the use of internet communication protocols.

This category of data includes IP addresses or domain names of the computers and terminals used by users, the URI/URL (Uniform Resource Identifier/Locator) addresses of the requested resources, the time of the request, the method used to submit the request to the server, the size of the file received in response, the numerical code indicating the status of the response from the server, and other parameters relating to the user’s operating system and IT environment.

Such data, which is necessary for the use of web services, is also processed for the purpose of:

• obtaining statistical information on the use of the services (most visited pages, number of visitors per time slot or day, geographical areas of origin, etc.);
• checking the proper functioning of the services offered.

Browsing data does not persist for more than seven days and is deleted immediately after aggregation (without prejudice to any need to ascertain offences by the Judicial Authority).

3) Cookies and other tracking systems

In order to make its services as efficient and user-friendly as possible, this Site uses cookies.

Therefore, when visiting the Site, a minimum amount of information is placed on the User’s device, in the form of small text files called “cookies”, which are saved in the directory of the User’s web browser. There are different types of cookies, but essentially the main purpose of a cookie is to make the Site work more effectively and to enable certain functionalities.

For further information on the cookies used by this website, please refer to the cookie policy at the following link.

Purposes of the Processing

Depending on the type of processing to be carried out, the Data Controller uses the data collected and/or provided by the User for the following purposes:

1. to respond to any communications, requests for information and/or services from users by sending a message using the contact addresses and/or contact forms available on the site;
2. to manage and control risks, prevent possible fraud, insolvency or default; prevent and manage possible disputes, and take legal action where necessary.

Legal Basis of the Processing

With reference to the purposes indicated in the previous paragraph, the legal basis for each is, respectively:

1. the necessity of performing a contract to which the data subject is a party or in order to take steps at the request of the data subject prior to entering into a contract;
2. the necessity of pursuing the legitimate interest of the Data Controller (in particular with regard to the prevention of fraud and insolvency).

Data Recipients

The personal data processed by the Data Controller is not disseminated; that is, it is not made known to unspecified parties in any possible form, including by being made available to or simply consulted by them.

The data may, however, be communicated to employees working under the authority of the Data Controller. On the basis of their roles and the duties they perform, such employees have been authorised to process personal data, taking into account their respective competences and in accordance with the instructions given to them by the Data Controller.

The Data Controller has engaged third-party service providers in connection with the operation of the website, such as hosting service providers, IT maintenance service providers, as well as service providers that allow the integration into the website of further functions which the user may use at his/her discretion.

Such service providers, designated as Data Processors, are provided only with the personal data necessary to deliver the corresponding services, and they are not allowed to use or disclose data subjects’ personal data for other purposes without the prior authorisation of the data subject.

The data may also be communicated, to the extent strictly necessary, to entities that, for purposes of order fulfilment or other requests or service provision relating to the transaction or contractual relationship with the Data Controller, must supply goods and/or perform services on behalf of the Data Controller.

Finally, the data may be communicated to entities entitled to access it pursuant to legal provisions, regulations or EU legislation.

Data Transfer

Under no circumstances does the Data Controller transfer personal data to third countries or international organisations.

Data Retention

The Data Controller stores and processes personal data for the time necessary to fulfil the purposes indicated. Subsequently, personal data will be retained, and not further processed, for the period established by the applicable civil law and tax provisions.

• Data provided for commercial promotion purposes for services other than those already obtained by the Data Subject, for which he/she initially gave consent, will be retained for 24 months, unless consent is withdrawn.
• Data provided to the Data Controller for profiling purposes will be retained for 12 months, unless consent is withdrawn.
• Data collected upon the creation of an account will be retained for the entire duration of the registration and, in any event, for a maximum period of 12 (twelve) months of inactivity, that is, where, within such period, no Services are associated with, or products purchased through, the registered account.
• Data collected when using the form in the “Work with us” section and/or sending a CV to the indicated address will be retained for the time necessary to fulfil the purposes indicated and, in any event, for a period not exceeding 12 months from the receipt of the data.
• In the event of any litigation, the data collected will be retained for its entire duration, until the time limits for bringing actions for challenge have expired.

It should also be added that, where a user provides the Data Controller with personal data that has not been requested or that is not necessary for the performance of the requested service or for the provision of a service strictly connected to it, Privilege Events Srl cannot be considered as the controller of such data, and shall delete it as soon as possible.

Rights of the Data Subject

In relation to the data subject to processing under this notice, the data subject is granted the right at any time to:

• request that the Data Controller provide access to his/her personal data and the information relating thereto (Art. 15 GDPR); the rectification of inaccurate data or the completion of incomplete data (Art. 16 GDPR); the erasure of the personal data concerning him/her (where one of the conditions set forth in Art. 17(1) GDPR is met and subject to the exceptions provided for in paragraph 3 of the same article); the restriction of the processing of his/her personal data (where one of the cases set forth in Art. 18(1) GDPR applies);
• request and obtain from the Data Controller – where the legal basis of the processing is contract or consent, and the processing is carried out by automated means – his/her personal data in a structured and machine-readable format, also for the purpose of communicating such data to another data controller (the so-called right to data portability – Art. 20 GDPR);
• object at any time to the processing of his/her personal data where particular situations concerning him/her arise (Art. 21 GDPR);
• withdraw consent at any time, limited to the cases in which the processing is based on his/her consent for one or more specific purposes. Processing based on consent and carried out before its withdrawal nevertheless retains its lawfulness (Art. 7(3) GDPR).

The relevant request is to be submitted by contacting the Data Controller by PEC at the address: privilegeevents@legalmail.it; by e-mail at the address: info@privilege-events.it; or by registered letter with return receipt to the address: Pescara (PE), Via Giuseppe Mazzini No. 130 – postal code 65122.

The data subject, where he/she considers that the processing of his/her data takes place in breach of the provisions of the Regulation, may lodge a complaint with a supervisory authority (Italian Data Protection Authority – Garante per la protezione dei dati personali – www.garanteprivacy.it), as provided for in Art. 77 GDPR, or take legal action before the competent courts (Art. 79 GDPR).

Refusal to Provide Data

In the event that the Data Subject does not provide the data identified as necessary for the performance of the requested service, the Data Controller will not be able to proceed with the processing operations connected to the management of the said service, nor with the obligations arising therefrom.

In the event that the Data Subject does not give consent to the processing of personal data for activities that require it, such processing will not take place for the same purposes, without this affecting the provision of the other services requested or those for which he/she has already given his/her consent. In the event that the Data Subject has given consent and subsequently withdraws it or objects to the processing, his/her data will no longer be processed for such activities, without this entailing any consequences or prejudicial effects for the Data Subject and for any other services requested.

Automated Decision-Making

The Data Controller does not carry out processing consisting of automated decision-making on the data of natural persons.