Information on the processing of personal data for Blastness events

Blastness S.p.A., with registered office in Milan, Piazza Castello 26, 20121, Tax Code and VAT number 01195440118, as data controller (hereinafter “Data Controller”), would like to inform you, in accordance with EU Regulation 2016/679 (“GDPR”) and the national data protection legislation in force that your data will be processed in the following ways and for the following purposes:

1. Purpose of processing and mandatory nature of conferment of data

The Data Controller processes the following personal data provided by you when registering for the event (hereinafter, “Data” or “Personal Data”). In particular, the data marked with an asterisk are mandatory for the purposes set out below and failure to provide them will make it impossible to proceed with registration for the event; however, the provision of data not marked with an asterisk is purely voluntary.

1. Purpose and legal basis of the processing

Your Personal Data are processed, without your prior consent, for the following purposes and on the following legal bases:

• the fulfilment of contractual obligations, i.e. to manage your requests to register for the event and to enable you to participate in the event;
• for the pursuit of the Data Controller’s legitimate interest, i.e. for the possible exercise of the Data Controller's rights in court and the management of litigation.

Your Personal Data may also be processed, only with your consent, for marketing purposes, i.e. to send you communications and/or newsletters regarding the Data Controller's activities, initiatives and commercial offers, as well as to conduct market research and activities aimed at detecting the quality of the services offered.

1. Data retention

The Data Controller processes Personal Data for the time necessary to fulfil the above purposes and in any case, unless otherwise provided for by law, for no longer than 12 months from the event for service purposes and for no longer than 24 months from the collection for marketing purposes.

1. Access to Data

Your data may be accessed for the above purposes by:

• the Data Controller’s employees and/or collaborators (e.g. human resources workers), in their capacity as data processors and/or internal data processors and/or system administrators;
• third parties (e.g. group companies, IT providers, etc.) who provide outsourcing services on the Data Controller's behalf and who process the Data in their capacity as data controllers.

The updated list of data processors and system administrators is kept at the Data Controller’s head office.

1. Data communication

Your personal data may be disclosed, without your prior consent, for the above purposes to Public Administrations or competent authorities, who will process the data at their request as independent data controllers.

1. Data Transfer

Your Data will not be transferred to countries outside of the EU.

1. Data subject's rights

The Data Controller informs you that, as a data subject, if the limitations provided for by law do not apply, you have the right to:

• to request confirmation from the data controller as to whether or not data relating to you are being processed and, if so, to obtain access to the data relating to you and to information on the processing, such as: the purposes, the categories of personal data, the recipients or categories of recipients to whom the data are disclosed, the retention period, the existence of an automated decision-making process and of the logics used, as well as the existence of adequate safeguards in case of transfer of data to a non-EU country;
• obtain the updating, rectification, integration or erasure of data, as well as the limitation of processing;
• fully or partly oppose: a) for reasons related to your particular situation, the processing of your data for the Companies' legitimate interests; b) the processing of personal data concerning you for the purposes of Direct Marketing and/or Soft Spam and/or Profiled Marketing carried out by automated contact methods (such as SMS, e-mail, social networks, instant messaging apps, push notifications) and traditional methods (such as telephone calls with an operator and traditional mail);
• to receive the data in a structured, commonly used and machine-readable format and, if technically feasible, to transmit them to another data controller without constraints (“right to data portability”);
• withdraw any consent given at any time;
• file a complaint with the Italian Data Protection Authority.

In the above cases, where necessary, the Data Controller will inform the third parties to whom your personal data are communicated of the possible exercise of your rights, except in specific cases (e.g. when this proves impossible or involves the use of means manifestly disproportionate to the protected right).

You may exercise these rights at any time by sending a registered letter with return receipt to the Data Controller's address or by sending an e-mail to privacy@blastness.com.