Pursuant to EU Regulation no. 679/2016 (so-called GDPR), this section provides information on the processing of personal data of those registered for the “Saudi-Italian Business Council Meeting”, to be held in Rome, on Thursday 9 May, 2024, (hereinafter: “Event”).

Data Controller

Confindustria, with registered office in Viale dell’Astronomia, 30 – 00144 Rome, email: privacy@confindustria.it.

Types of Personal Data processed

Within the limits of the purposes and methods defined in this Information, may be processed:

a) the identification and contact data of those registered for the Event;

b) a) the data provided by the data subject to take part in the work of the Event in an interactive manner (e.g. interventions, questions). To this end, Confindustria invites Data subjects not to provide personal data that the GDPR defines as "special", i.e. suitable for revealing racial ethnic origin, political opinions, religious or philosophical beliefs, or trade union membership or personal data concerning health.

Purposes and legal basis for the processing of Personal Data

Personal data is processed for the following purposes:

a) to manage the request to participate in the Event and carry out the consequent activities of an organizational nature, including the sending of service communications (e.g., logistical communications, possible program changes, useful materials, other notices) and the organization of B2B meetings.This processing is based on the need to comply with and/or to following up with the request for participation in the Event and, therefore, pursuant to and for the purposes of Article. 6 (1) (b) of the GDPR, does not require the consent of the data subject;

b) to comply with legal obligations, as well as with the provisions issued by the legitimate Authorities. The processing is necessary to comply with the legal obligations to which the Data Controller is subject and, therefore, pursuant to and for the purposes of Article 6 (1) (c) of the GDPR, does not require the consent of the data subject.

In addition, the Data Controller informs that during the Event photographs and videos may be taken, which may also include participants. Confindustria will use, reproduce, publish and disseminate the photographs and videos for promotion purposes and, in any case, for activities connected to its institutional mission, via any communication system, including but not limited to, the Data Controller's corporate website and social media pages, newspapers, brochures, magazines, newsletters, events, presentations and workshops. The processing is based on the legitimate interest of the Data Controller to promote the Event and, therefore, does not require the consent of the data subject. Moreover, pursuant to Article 97 of Law No 633/1941, "The consent of the person portrayed is not required when the reproduction of the image is justified by the reputation or the public office held, (...), for scientific, educational or cultural purposes, or when the reproduction is related to facts, events or ceremonies that are of public interest or held in public".

The Data Controller also informs that the Event will be recorded and that Confindustria will use, reproduce, publish and disseminate the recording for promotion purposes and, for activities connected to its institutional mission, via any communication system, including but not limited to, the Data Controller's corporate website and social media pages. By taking the floor during the Event, the data subject expressly consents to the recording, for the uses indicated above, of his/her image, voice, references and statements made during the Event. Please note that the data subject has the right to withdraw his or her consent at any time. The withdrawal of consent shall not affect the lawfulness of processing based on consent before its withdrawal.

The Data Controller informs that the recording of Event, the photographs and the videos will not be used in any way that would adversely affect the personal dignity, honour, reputation and/or decency of the portrayed person.

Nature of the provision of Personal Data

The provision of personal data is optional, but necessary for participation in the Event and, in particular, in B2B meetings. Any refusal to provide such data will prevent the registration from being carried out.

Methods, purpose and duration of the processing of Personal Data

The processing is carried out mainly by means of computerised and telematic procedures.

Personal data are processed by the staff of Confindustria, which acts based on specific instructions provided regarding the purposes and methods of processing.

Personal data may be communicated to: i) external bodies, which carry out support tasks on behalf of Confindustria (e.g. IT services), in their capacity as Data Processors; ii) public entities for the fulfilment of legal obligations, which carry out their respective processing activities as independent data controllers.

Furthermore, Personal Data will be communicated to:

a) Federation of Saudi Chamber of Commerce and Industry, as co-organizer of the Event, who will carry out their processing activities as independent data controller. The Data Controller informs that this communication of personal data involves a transfer of personal data to Third Countries. This transfer will take place subject to the specific consent of the data subject. Please note that the data subject has the right to withdraw his or her consent at any time. The withdrawal of consent shall not affect the lawfulness of processing based on consent before its withdrawal. In any case, Confindustria is not responsible for the use of personal data by the co-organizers;

b) the subjects with whom they will carry out the B2B meetings. The Data Controller informs that such communication involves a transfer of personal data to Third Countries. The transfer is made pursuant to Article 49 (1) (b) of the GDPR.

Photographs and video recordings can be published and distributed on the web. In relation to this processing, it should be noted that personal data and images could be extracted from common search engines in the case of online searches carried out by third parties.

Personal data will be processed for the time strictly necessary for their pursuit and will be stored for a period of 1 (one) year from the date of the Event, except for longer terms established by law.

For personal data disseminated on the web, it is not possible to define an absolute and certain period of retention.

Data subjects' rights

At any time, data subjects have the right to access their personal data, to request correction, updating and deletion. Restriction of processing and data portability may also be requested. Such requests may be addressed to Confindustria, Viale dell'Astronomia, 30 - 00144 Rome, e-mail: privacy@confindustria.it

Moreover, if the processing is deemed to be carried out in violation of personal data protection legislation, it is recognized the right to lodge a complaint with the Italian Data Protection Authority, Piazza Venezia, 11 - 00187 - Rome.