Information on the processing of personal data (Exhibitors)

Information pursuant to Articles 12, 13 and 14 of European Regulation No. 2016/679 personal data
(last update: 19/02/2025)

In compliance with the requirements of Article 13 of European Regulation No. 2016/679, we wish to provide you with information on the processing of the data you provide us with. In particular, below we provide you with information on:

1. Who the Data Controller is
2. Designation of the Data Processor
3. What data we process and the nature of the provision of the data
4. For what purposes we process your data and what legal basis justifies such processing
5. To whom we may communicate your data
6. In what geographical area your data may circulate
7. How long we will keep your data
8. What are your rights in relation to the personal data we process

1. Who is the data controller
The data controller is the company Artissima srl
Should you wish to contact the company, we provide you with the following contact details: Corso Vittorio Emanuele II, 12, Turin / [email protected] / 011 197 44106

2. Designation of the Data Processor
The company has designated a Data Protection Manager, who can be reached at [email protected].

3. What data do we process and what is the nature of the provision of the data
The data controller acquires the data necessary to identify the data subjects and to manage the contact aimed at assessing their candidacy and managing their possible participation in the activities promoted by Artissima. The data processed include identification data, address data, data to manage payments connected to the activities promoted by the Owner. In particular, a copy of the identity document is collected in order to manage the documentation required to deal with participants in the initiatives promoted by the owner. Artissima uses the contact details provided during the application phase to create the private area and the public area on the Artissima website.

We would like to draw your attention to the fact that the data subject to processing by our company may at times consist of photographic images, video footage, collected for institutional purposes, public relations and commercial communications, relating to exhibitions, conventions, fashion shows, museum settings and events in general. This data may be processed by us in printed and/or audiovisual form through any means of dissemination such as the web or social networks.

The requested data are provided voluntarily by the interested parties, and failure to provide them will make it impossible for us to properly manage relations with them. There are no automated decision-making processes based on the use of the personal data provided.

4. For what purposes we process your data and what legal basis justifies such processing
The data you provide will be processed for the following purposes:

A) Contractual, accounting, administrative, management and tax purposes.
Within the scope of these purposes, the data processed shall be related to the fulfilment of the obligations provided for by law, as well as to allow effective administrative management of the contractual relationships established. The data will be processed for the management of applications to participate in the events organised by Artissima and for activities connected to actual participation for the creation of accounts for access and the sending of invitations, as well as for activities connected to the event with the issuing of badges and for all activities connected to the organisation of activities during the event as well as for actions planned after the event itself has closed. The data will be used to facilitate, in the event of confirmation of candidature, the compilation of documentation relating to participation and ancillary services.
In order to properly represent and publicise the works, we will process and share information on the artists who are the authors of the exhibited works.

Legal basis of the processing: execution of requests by the data subject for pre-contractual or contractual activities.

B) Commercial purposes relating to the sending of newsletters and for marketing, advertising and other related activities.
Within the scope of these purposes, the data processed will concern advertising communications and communications relating to events organised and/or participated in by us. Specifically, this includes, among other things: the sending of informative, promotional and advertising material, as well as the sending of newsletters and other promotional and commercial communication initiatives, including through the use of e-mail or telephone.

Legal basis of the processing: consent of the data subject

C) Purposes of analysis on choices and preferences.
Within the scope of these purposes, the data processed will concern the analysis of the choices and preferences made by our customers/users regarding the services we offer and/or following participation in the events we organise and/or attend. Specifically, we would like to remind you that it is our prerogative to contact our customers without intrusiveness, and for this reason we only want to send communications that are of interest to them. Through profiling we get to know our customers/users better and this allows us to improve our relationship. The profiled marketing activities that we carry out are, therefore, always for the benefit of our customers/users, as they are instrumental in proposing to them communications relating to the services and initiatives that best suit their interests.
In compliance with the regulations and in order to protect your rights, we will only process the data strictly necessary for each of the purposes indicated in this notice.

Legal basis of the processing: consent of the data subject

D) Purpose of communication of data to Press Offices and partners.
The data may be communicated to Press Offices (Italian and International) and to Partners of the initiative (whose updated list can be consulted here) in order to promote awareness of the event organised by Artissima and give greater visibility to participants

Legal basis for processing: legitimate interest without prejudice to the data subject’s right to object to such processing

5. To whom we may disclose your data
A) Your personal data may be communicated to external data processors appointed by us, such as: Labour Consultants, Tax Consultants, Data Processing Centres, Associated, Subsidiary or Controlling Companies, Retailers, Banks and Credit Institutions, Financial and Credit Insurance Companies. They may also be communicated to public and private entities (Foundations, Social Security, Welfare and Insurance Institutions), Doctors in charge of hygiene and safety at work, Chambers of Commerce, Armed Forces and Police, Customs and Tax Offices at national level, by virtue of legal provisions.

B) Your data may be disseminated in catalogues, leaflets or other printed matter and/or also, via the Internet, on websites and/or social networks and/or other forms of computerised dissemination.
Your data will not be disclosed to third parties other than the aforementioned subjects.

It is understood that the publication of the list of participants in the event organized by Artissima is only for the purpose of making the list of participants known to the public and does not authorize the use of such data for purposes other than those for which the data are published

6. In what geographical area your data may be circulated
Your personal data will only be processed in a national or European context.

7. How long we will keep your data
Your personal data will be stored
– for the purposes expressed in point 4) letter A), your data will be kept for a period of time sufficient to ensure the proper performance of contractual obligations and the fulfilment of related administrative and tax obligations: 10 years.
– for the purposes expressed in point 4) letter B), Commercial and Marketing, i.e. collected for purposes relating to the sending of informative, promotional and advertising material, as well as the sending of newsletters and other promotional and communication initiatives, without prejudice to your right to exercise revocation of your consent at any time: 24 months
– for the purposes expressed in point 4) letter C), Profiling, without prejudice to his right to exercise the revocation of the consent given, at any time: 24 months.

It should be noted that in the event of non-acceptance of the application, essential data will be retained for a period of 5 years in order to inform users of subsequent events of potential interest

8. What are your rights with regard to the personal data we process
You may exercise these specific rights by contacting the Data Controller:

A) Right of access: the right to obtain from the Controller confirmation as to whether or not personal data relating to you are being processed and, if so, to obtain access to the data and detailed information relating to you, such as the origin of the data, the purposes of processing, the categories of data processed, the recipients of communications and/or transfer, and anything else concerning you.

B) Right to rectification: the right to obtain from the Controller the rectification of inaccurate personal data, without undue delay, as well as the integration of incomplete personal data, also by means of a supplementary declaration.

C) Right to erasure (‘right to be forgotten’): the right to obtain from the Data Controller the erasure of data in cases where:
– The data are no longer necessary in relation to the purposes for which they were collected;
– Consent has been withdrawn and there is no other legal basis that makes the processing lawful;
– The data have been processed unlawfully;
– The data must be deleted due to a legal obligation;

D) Right to restriction: the right to obtain from the Controller the restriction of processing in cases, among others, where the accuracy of the data has been disputed. This limitation will allow the Controller to verify the accuracy of the data. And again, if the processing is unlawful and the data subject has objected to the erasure.

E) Right to object: the right to object, at any time, to the processing of data that have as their legal basis a legitimate interest of the Controller and/or to the processing for direct marketing purposes, including profiling.

F) Right to data portability: the right to receive, in a structured, machine-readable and commonly used format, one’s own personal data and to transmit such data to another data controller. This right can only be exercised where the processing is based on consent or contract and for electronic data only.

G) Right of revocation of consent given: the right to revoke at any time the consent previously given, without prejudice to the lawfulness of the processing based on the consent given before revocation.

To exercise these rights, write to the Data Controller at [email protected]. The Data Protection Officer can be contacted at [email protected]. In cases provided for by law, a complaint may be lodged with the Garante per la protezione dei dati personali.