Data Controller

The data controller is CVing S.r.l. (C.F. 02297530442, VAT no. 04681350270 | REA MI – 2515112, ANPAL Authorization n. 0000142 of 28/11/2023), with its registered office at via Tortona, 33, 20144 – Milan (MI), (hereinafter “CVing”), which can be contacted at privacy@cving.com.

Data Protection Officer (DPO)

CVing has appointed a Data Protection Officer (DPO), who can be contacted by writing to dpo@cving.com.

Purpose and Legal Basis of Processing

We will process the personal data collected solely for the following purposes:

1. To manage registration and participation in the event and related activities (e.g., sending information and/or updates related to the event, sending informational materials);
2. To respond to a request for information and/or contact regarding the presentation of the group companies and their services;
3. If you have expressed interest in our services, to manage and maintain contact with you or the company you work for, including sending communications for advertising, informational, and promotional purposes (e.g., newsletters).

For the purposes outlined in points 1 and 2, the legal basis is the execution of contractual/pre-contractual measures taken at the request of the data subject (Article 6, paragraph 1, letter b) of the GDPR). For the purpose outlined in point 3, the legal basis is consent (Article 6, paragraph 1, letter a) of the GDPR), and, where applicable, CVing’s legitimate interest (Article 6, paragraph 1, letter f) of the GDPR), which consists of managing and maintaining contact with potential clients of CVing, who may, however, object to such processing at any time, including by contacting us at privacy@cving.it.

In any case, the data of the data subject may also be processed to comply with specific legal obligations to which we are subject or to protect the rights of CVing and/or third parties.

Nature of Providing Data

Providing personal data is necessary to achieve the purposes and/or carry out the activities outlined in the previous section. Failure to provide personal data or refusal to provide it may prevent CVing from proceeding with the request and/or performing the activities mentioned in the previous section.

Data Retention Period

We will retain the collected data for the duration of the event. Once the event is over, the data will be kept for an additional ten years to manage and maintain contact with event registrants, unless the data subject objects. In any case, it is also necessary to retain the data of event participants for longer periods to comply with legal obligations and in accordance with applicable regulations, as well as at the request of an authority or for the protection of CVing’s and/or third parties’ rights.

Categories of Data Recipients

The data may be shared with third parties, whether they are independent data controllers or data processors. The categories of third parties to whom we may disclose data are:

• Service providers, particularly IT providers, that we rely on;
• Other companies in the CVing group, as well as companies controlled by it (CVing Middle East LLC-FZ);
• Consultants and freelancers.

If a third party located within the EU acts as a data processor, CVing will ensure that the processor processes the data in compliance with the specific processing requirements. To ensure this, CVing will verify that the third party has adequate measures for processing, will provide specific instructions, and will monitor their actions.

No personal data collected through the Site is disclosed to third parties.

Transfer of Data Outside the EU

CVing processes data primarily within the European Union and/or the European Economic Area; however, CVing may transfer personal data to third countries. In the event of such a transfer, CVing ensures that the transfer and processing of personal data comply with the conditions set forth by the GDPR (Article 44 et seq.), such as adequacy decisions by the Commission, standard contractual clauses, or other appropriate safeguards.

Rights of the Data Subject

At any time, in accordance with Articles 15-22 of the GDPR, where applicable, you have the right to:

• Request confirmation of whether or not your personal data exists;
• Obtain information about the purposes of the processing, the categories of personal data, the recipients or categories of recipients to whom the personal data has been or will be communicated, and, where possible, the retention period;
• Obtain the correction and deletion of data;
• Obtain the restriction of processing;
• Obtain data portability, i.e., receive data from CVing in a structured, commonly used, and machine-readable format, and transmit it to another data controller without hindrance;
• Object to processing, including for direct marketing purposes;
• Withdraw consent for the processing of the data provided;
• Object to automated decision-making, including profiling;
• File a complaint with the Privacy Authority or another competent supervisory authority.

You can exercise these rights by sending a written request to CVing at privacy@cving.com.