With this document, drawn up under Article 13 of EU Regulation no. 679/2016 (hereinafter also "Regulation") Fincantieri S.p.A. informs you, as the data subject for the processing of personal data, of the following:


1. Data controller for personal data processing


The data controller for the personal data requested from you (i.e. name, surname, email address, tax code) is Fincantieri S.p.A., VAT no. 00629440322, with registered office in Trieste, Via Genova 1, (hereinafter also referred to as just the "Controller"), email , tel. +39 040 3193111 fax +39 040 3192305.


The Data Protection Officer ("DPO") of Fincantieri S.p.A. can be contacted at the following e-mail address: .


2. Purpose and legal basis of the processing of personal data


Your personal data will be processed by the Controller, with the support of automated and/or paper means, solely for the following purposes and on the following legal basis:


a)    communication purposes relating to events: for the performance, by way of example, of the following processing operations: (i) sending of communications relating to events; (ii) publishing of information or panoramic photos on sites. Such processing is carried out on the basis of the legitimate interest of the Controller aimed at ensuring effective management of events and enhancement of the company's image.


b)    event management purposes: processing, carried out on the basis of your consent, relating to accreditation and access to the event. If you are a minor, consent will be given or authorized by the holder of parental responsibility.


It should also be noted that your data will be communicated and processed within Fincantieri S.p.A. by personnel duly appointed and instructed by the Controller.


3. Recipients of personal data


Your personal data may be communicated, strictly in relation to and in line with the purposes set out above, to the following categories of subjects:


  • suppliers involved in event management;

  • any other parties, who must be informed under the current legal and/or contractual regulations, in compliance with the provisions of the regulations for employers.

The contact data of the processors that carry out activities in the Data Controller's interest may be requested by you from the following email: .


4. Transfer of personal data to a third country or an international organisation


The Data Controller does not intend to transfer your personal data to countries outside the European Union.


5. Period of retention of personal data


Your data will be stored for the purposes indicated above up to 24 months from their last update.


6. Rights of the data subject


We inform you that as the data subject you have the right to obtain from the Data Controller:



Right of access:

(Article 15 of the Regulation)

confirmation as to whether or not personal data concerning you are being processed, and, where that is the case, the right to obtain, among other things, access to your personal data and information regarding the purposes of the processing, the categories of personal data concerned and the recipients or categories of recipient to whom the personal data have been or will be disclosed.

Right to rectification:

(Article 16 of the Regulation)


(i) rectification without undue delay of inaccurate personal data concerning you and (ii) completion of your personal data, where incomplete.

Right to erasure ("right to be forgotten"):

(Article 17 of the Regulation)

erasure of personal data concerning you without undue delay (the Data Controller has the obligation to erase personal data without undue delay in the cases set out in Article 17 of the Regulation).

Right to restriction of processing:

(Article 18 of the Regulation)

restriction of processing in the cases set out in Article 18 of the Regulation.

Right to data portability:

(Article 20 of the Regulation)

receipt in a structured, commonly used and machine-readable format of personal data concerning you; the right to transmit those data to another controller without hindrance from the controller to which the personal data have been provided, in the cases set out in Article 20 of the Regulation.

Right to object for processing carried out under Article 6(1)(e) or (f):

(Article 21 of the Regulation)

objection, at any time, on grounds relating to your particular situation, to the processing of personal data relating to you under Article 6(1)(e) or (f), including profiling on the basis of such provisions.


At any time you will be able to exercise the above-mentioned rights by sending a request to the following e-mail address: .


You also have the right to withdraw your consent at any time, as well as to lodge a complaint with the Data Protection Authority if you believe that the processing of your personal data breaches the provisions of EU Regulation no. 679/2016.


7. Nature of consent for the processing of data and consequence of failure to give consent


For the processing of personal data relating to the purposes referred to in paragraph 2 above and related to the legitimate interest of the Controller, objection to the processing of data may make it impossible to send you communications relating to events.


The second processing of personal data relating to the purposes referred to in paragraph 2 above is optional and failure to consent to the processing will make it impossible for you to participate in the event.