Events Information

Policies \ Events Information

INFORMATION ON THE PROCESSING OF PERSONAL DATA OF GUESTS AT FINCANTIERI S.P.A. EVENTS

Dear Guest,

With this document, drafted pursuant to Article 13 of EU Regulation No. 679/2016 (hereinafter also "Regulation"), Fincantieri S.p.A. informs you, as an interested party, about the processing of your personal data collected during events.

1. Data Controller

The data controller of the personal data requested from you (e.g., name, surname, email address, identity document) is Fincantieri S.p.A. (hereinafter also referred to as the "Controller" or the "Company"), headquartered in Trieste, Via Genova 1, VAT No. 00629440322, email privacy@fincantieri.it, tel. +39 040 3193111 fax +39 040 3192305.

 

The Data Protection Officer ("DPO") of Fincantieri S.p.A. can be contacted at the following email address: privacy@fincantieri.it.

2. Types of Data Processed

The Controller collects and processes your common data, such as:

  • Personal data, such as name, surname, company position;
  • Contact data, such as phone number or email;
  • Image data, such as photographs and video recordings.


In some particular cases, with your consent, the Controller may also collect special data, such as information on food allergies or intolerances, for the purpose of proper management and organization of meals. In such cases, the data will be processed exclusively for the aforementioned purposes and will be deleted immediately after the event.

3. Purposes and Legal Basis for Processing Personal Data

Your personal data will be processed by the Controller, with the support of IT and/or paper means, limited to the following purposes and based on the following legal bases:

a) Event management purposes: such as event planning, catering and meal management, administrative and accounting purposes for event realization, accreditation and event access purposes, necessary to carry out activities to allow your registration and participation in the event. This processing is based on the execution of the contract/service, in case you request to participate in the event;

b) Communication and updates related to further events: your data may also be used to send communications related to invitations to new events. The processing will be based on your consent. In the case of a minor, consent must be provided by a parent or legal guardian;

c) Promotion of the Controller's image on websites and social media: your image data may be used to promote the Controller's image on websites or social profiles, for temporary and occasional publication of articles or essays or for internal archiving. This processing is based on your consent in case of publication on websites or social media of individual or small group photos, or, in other cases, on the legitimate interest of the Controller (e.g., in case of internal publications on the company intranet, group photographs, etc.) for internal archiving or occasional publication of articles or essays;

d) Litigation management purposes: processing is necessary for the management of complaints and/or disputes, for the prevention and repression of unlawful acts, and, in general, for the protection of the rights and legitimate interests of the Controller and/or third parties, including in court. The legal basis for processing is legitimate interest (the Controller's interest corresponds to the right of action and defense enshrined in Article 24 of the Constitution).

It is noted that your data will be processed within the Company by personnel duly appointed and instructed by the Controller.

4. Recipients of Personal Data

Your personal data may be communicated, in close relation and compatibility with the above purposes, to the following categories of subjects:

  • Suppliers involved in event management;
  • Public administrations and Italian and/or foreign supervisory authorities;
  • Any other subjects to whom current legal and/or contractual regulations require communication, in compliance with legal obligations incumbent on the Controller.


The contact details of the responsible parties who carry out activities in the interest of the Controller can be requested from you at the following email address: privacy@fincantieri.it.

5. Transfer of Personal Data to a Third Country or International Organization

The Controller does not intend to transfer your personal data outside the European Economic Area ("EEA"). Should this occur, the Controller will adopt appropriate safeguards to protect your personal data in the context of international transfers, namely adequacy decisions of the European Commission pursuant to Article 45 of the Regulation, standard contractual clauses approved by the European Commission, and contractual instruments that offer adequate safeguards (Article 46 of the Regulation); alternatively, transfers will take place in the presence of the derogations provided for by Article 49 of the Regulation (i.e., consent of the data subject, necessity of the transfer for contractual/pre-contractual measures, overriding public interest, right of defense in court, vital interests of the data subject or other persons, data entered in a public register).

6. Retention Period of Personal Data

Your data will be retained for the above purposes for a maximum period of 24 (twenty-four) months from their collection, unless certain needs justify retention for a further period, such as the emergence of disputes. In the latter case, the data will be retained until the expiration of the terms for the exercise of appeal actions.

With reference to any special data processed for the purpose of providing catering, the data will be retained for a maximum period of 60 days following the event.

In case of consent, the data will be processed until the consent is revoked. The processing carried out before the revocation of consent remains valid.

7. Rights of the Data Subject

We inform you that, as a data subject, you have the right to obtain from the Controller:

Right of access:

(art. 15 of the Regulation)

or confirm whether or not personal data concerning you are being processed and, if so, the right to obtain, inter alia, access to your personal data and information regarding the purposes of the processing, the categories of personal data in question, the recipients or categories of recipients to whom the personal data have been or will be disclosed.

Right to rectification:

(art. 16 of the Regulation)

 

(i) rectification of inaccurate personal data concerning you without undue delay and (ii) completion of your personal data, if incomplete.

Right to erasure ('right to be forgotten'):

(art. 17 of the Regulation)

deletion of personal data concerning you without undue delay.

Right to restriction of processing:

(art. 18 of the Regulation)

limitation of processing in the cases referred to in Article 18 of the Regulation.

Right to data portability:

(art. 20 of the Regulation)

receipt in a structured, commonly used and machine-readable format of the personal data concerning you and in our possession; the right to transmit such data to another data controller without hindrance from the data controller to whom they have been provided in the cases referred to in Article 20 of the Regulation.

Right to object to processing carried out pursuant to Article 6(1)(e) or (f):

(art. 21 of the Regulation)

object, at any time, on grounds relating to your particular situation, to the processing of personal data concerning you pursuant to Article 6(1)(e) or (f), including profiling on the basis of these provisions.

 

At any time, you will have the opportunity to exercise the aforementioned rights by sending a request to the email address: privacy@fincantieri.it.


You also have the right to withdraw your consent at any time, as well as to lodge a complaint with the Data Protection Authority if you believe that the processing concerning you violates the provisions of EU Regulation No. 679/2016.

8. Nature of Data Provision and Consequences of Failure to Provide Data

The processing of personal data related to the purposes referred to in paragraph 3(a) above is necessary to allow you to participate in the event.

If the processing is based on consent, the provision of such consent is optional, and the lack of consent will not affect your ability to participate in the event.