Pursuant to Article 13 of Regulation (EU) 2016/679 (hereinafter, the “Regulation” or the “GDPR”), we inform you that, when browsing the website blueconomy.com and/or other websites used to register for events managed by Blue Media – e.g. events.blueconomy.com – (hereinafter collectively referred to as the “Website”) and using the services offered therein, your personal data are processed by Blue Media S.r.l., with registered office at Piazza Dante 6/3, Genoa, Italy, tax code 02963780990, acting as the data controller (hereinafter also referred to as the “Data Controller” or “Blue Media”).
When you browse the Website, Blue Media may process your personal data, which may include an online identifier or browsing preferences, i.e. information about how you use the Website, which may enable you to be identified or identifiable.
Your personal data may also be collected simply by analysing your behaviour on the Website.
The personal data processed through the Website are as follows:
a. Browsing Data
The IT systems and software procedures used to operate the Website acquire, during their normal operation, certain personal data whose transmission is implicit in the use of Internet communication protocols.
This information is not collected for the purpose of associating it with identified individuals, but, by its very nature, may enable users to be identified through processing and association with data held by third parties.
This category includes IP addresses or domain names of computers used by users connecting to the Website, URI (Uniform Resource Identifier) addresses of requested resources, the time of the request, the method used to submit the request to the server, the size of the file received in response, the numerical status code returned by the server (success, error, etc.), and other parameters relating to the user’s operating system and IT environment.
This data is used solely to obtain anonymous statistical information on the use of the Website and to check that it is functioning correctly, as well as to identify anomalies and/or misuse.
While browsing the Website, additional information will also be collected through the use of reCAPTCHA v3 for the purpose of ensuring the security of the Website and preventing unlawful or fraudulent use.
b. Data Provided by You and Data for Event Registration
The optional, explicit and voluntary sending of messages to the Data Controller’s contact addresses, as well as the completion and submission of any forms available on the Website, entails the collection of the sender’s contact details, which are necessary to respond, together with any personal data included in the communications.
The Website also allows you to register for and attend various events organised by the Data Controller (e.g. themed conferences, buffets, gala dinners, etc.) and to purchase the services offered therein.
For these purposes, the following personal data relating to you may be processed, in particular:
General personal data: e.g. first name, surname, email address, telephone number, company, job title, city, tax code, document number, sector, vehicle registration number and vehicle model.
Invoice details: e.g. company name, VAT number, tax code if different from the VAT number, country, registered office, registered office address, ZIP code, municipality, certified email address (PEC) or SDI recipient code, email address and telephone number.
Sensitive data: e.g. health-related data such as food intolerances and allergies, where relevant.
Please note that information concerning your dietary requirements may be directly associated with you, particularly in catered settings (e.g. gala dinners). This information will be used solely to calculate the overall quantities of food required and to prepare refreshments suitable for people with different allergies or intolerances.
Your personal data are processed for the following purposes and on the following legal bases:
1. Performance of a Contract
To:
enable you to browse the Website;
register you for events;
allow you to purchase tickets for events (individual conferences or satellite events);
manage all activities connected with the organisation of the event (i.e. registration and the sending of event-related communications and information) and activities following the event (e.g. sharing presentations and related abstracts, photographs and videos);
allow you to purchase additional services offered from time to time (e.g. gala dinners and parking).
2. Your Prior Consent to the Processing of Special Categories of Personal Data (e.g. Allergies and Intolerances)
To ensure the safety and personalisation of the service.
Where data are collected and used exclusively in aggregated and anonymous form, no explicit consent will be requested.
3. Compliance with Legal Obligations
To comply with obligations arising from laws, regulations, legislation, orders and requirements issued by the competent authorities.
4. Pursuit of the Data Controller’s Legitimate Interests
To exercise the Data Controller’s rights and protect its legitimate interests, for example by managing complaints and disputes and exercising the right of defence in legal proceedings.
The Data Controller’s interest corresponds to the constitutionally guaranteed right to take legal action (Article 24 of the Italian Constitution) and, as such, is recognised as prevailing over the interests of the individual data subject.
5. Newsletter Subscription
With your consent, to inform you by email about Blue Media’s commercial and non-commercial initiatives.
Consent is deemed to have been given upon submission of the relevant newsletter subscription form.
6. Anti-Spam Protection and Security (reCAPTCHA v3 / Fraud Defense)
With your prior consent, the Website uses advanced security solutions (Google reCAPTCHA v3 / Fraud Defense) to analyse user interactions (e.g. mouse movements, time spent on the Website, technical device data and IP address) for the sole purpose of preventing automated access, cyberattacks and spam in contact forms.
During events, photographs and video recordings may be taken. As these are public events, documenting the audience and the main moments does not require individual release forms, pursuant to Article 97 of Italian Law No. 633/1941 and Article 9(3) of the Code of Ethics for Journalists.
Providing personal data for contractual purposes is optional. However, since such data are strictly necessary for registration and participation, failure to provide them will make it impossible to register for and attend events.
Providing consent to the processing of special categories of personal data is optional. Failure to provide such consent will make it impossible to ensure the safety and personalisation of the service during refreshments or lunch.
Providing personal data for newsletter subscription purposes is optional. Failure to provide such data will not prevent you from using the services offered by the Data Controller, but you will not receive information about Blue Media’s commercial and non-commercial initiatives.
Providing personal data for anti-spam protection and security purposes (reCAPTCHA / Fraud Defense) is optional; however, without such data, it will not be possible to browse the Website. This processing is based on the Data Controller’s legitimate interest in protecting the integrity of the Website and preventing abuse or fraud.
Your personal data may be disclosed, for the purposes indicated above, to:
persons authorised by the Data Controller to process personal data pursuant to Article 29 of the GDPR and Article 2-quaterdecies of the Italian Privacy Code, in connection with the performance of their work duties and activities (e.g. employees, collaborators and system administrators);
third-party providers of payment platforms, acting as independent data controllers;
entities with which it is necessary to interact in order to provide the services;
third-party service providers carrying out outsourced activities on behalf of the Data Controller (e.g. hosting providers and suppliers performing activities directly connected with or instrumental to the organisation of the event), acting as data processors pursuant to Article 28 of the GDPR;
companies belonging to the same corporate group as the Data Controller, for the purposes indicated above;
persons, bodies or authorities to whom personal data must be disclosed pursuant to legal provisions or orders issued by the authorities.
Personal data are processed using paper-based, manual, IT and electronic tools for the purposes indicated above and, in all cases, in a manner designed to ensure the security and confidentiality of the data.
Your personal data will not be transferred outside the European Economic Area (EEA).
Should such transfers take place, the Data Controller will adopt appropriate safeguards to protect the data, including adequacy decisions and standard contractual clauses approved by the European Commission.
Personal data are retained in a form that allows data subjects to be identified for no longer than is necessary to achieve the purposes for which the data were collected or subsequently processed and, in any event, for no longer than the period specified by applicable law.
Data processed for marketing purposes will be retained until consent is withdrawn and, in any event, for no longer than 24 months from the date consent was given.
The Data Controller informs you that, as a data subject, provided that no legal restrictions apply, you have the right to:
Obtain confirmation as to whether or not personal data concerning you are being processed.
Access your personal data and obtain information about the purposes of processing, the categories of data concerned, the recipients to whom the data may be disclosed, the applicable retention period and the existence of automated decision-making processes.
Obtain, without undue delay, the rectification of inaccurate personal data concerning you and the notification of such rectification to any recipients to whom the data may have been disclosed.
Obtain the erasure of your personal data in the cases provided for by law and the notification of such erasure to any recipients to whom the data may have been disclosed.
Obtain the restriction of processing where applicable.
Object to the processing of your personal data, where permitted.
Withdraw your consent at any time, without affecting the lawfulness of processing carried out before the withdrawal.
Request and obtain the portability of your personal data in the cases provided for by law and in a structured, commonly used and machine-readable format, including for the purpose of transmitting the data to another data controller, subject to the practical feasibility and costs of the operation.
Lodge a complaint with the Italian Data Protection Authority (garanteprivacy.it).
Bring legal proceedings against a legally binding decision of the supervisory authority (Article 78 of the GDPR).
Bring legal proceedings if you believe that your rights have been infringed as a result of the processing of your personal data (Article 79 of the GDPR).
You may exercise your rights and withdraw any consent given (withdrawal does not affect the lawfulness of processing based on consent before its withdrawal) by writing to the Data Controller, Blue Media S.r.l., Piazza Dante 6/3, 16121 Genoa, Italy, or by emailing privacy@ilsecoloxix.it.
