Data Protection Notice for Visits or Open Access Events

Pursuant to Article 13 of EU Regulation 2016/679

We inform you that SPICI S.r.l., in order to properly manage visits to its premises or open access events, will process the data you provide in accordance with the methods and purposes described below. Should these events be organized and managed jointly – as announced in the event news or via email – also by FABBRICA ITALIANA DELL’INNOVAZIONE S.C. A R.L., the two companies will act as joint controllers, sharing methods and purposes for managing personal data. We therefore invite you to consult the specific notice of the latter available on their website www.fabbricaitalianainnovazione.it.

Data Controller

The Data Controller is SPICI S.r.l. represented by the legal representative Vincenzo Lipardi, located at Via Ponte dei Granili, 24 – Napoli (NA), and email: segreteria@spici.eu.

Nature of the Data

Only personal data consisting of images and video recordings collected during the event and/or possible visits to the company's premises are subject to processing.

Purpose of the Processing

The data are processed by SPICI s.r.l. as the Data Controller, in order to document the initiative and promote activities through:

• Publications on the website and social channels of the Controller, printed media and/or any other means of dissemination;

• Newsletters or corporate communications.

Legal Basis of Processing and Nature of Provision

The legal basis of the processing is identified in the necessity to ensure the Controller's legitimate interest (ex. art. 6, paragraph 1, letter f, Reg. EU 2016/679) to document and promote its institutional and professional activities, provided that the interests or fundamental rights and freedoms of the Data Subject do not prevail. Participation in the event implies the possibility of being captured in photos or videos, which may depict participants in a recognizable way. Photographic and video recordings are an integral part of the event and are essential for the communication and promotion of the Controller's activities. Attendance at the event, therefore, implies awareness of such activities.

Data Retention Period

The Data Controller retains and uses the images and personal data acquired during events and/or visits to company premises solely for the time strictly necessary to fulfill documentation and business promotion purposes (including publication on the company’s social media channels). At the end of the retention period, internal copies of the data held by the Controller will be permanently and irreversibly deleted. Publication on the company's social profiles and pages is subject to the policies of the individual platforms: once online, the images may remain accessible until removed according to each social network's procedures or upon specific request by the interested party.

Processing Methods

In relation to the indicated purposes, your data will be processed by individuals within SPICI s.r.l properly appointed as authorized to process personal data (art.29 of Reg. EU 2016/679). These individuals will operate under the direct supervision and subordination of the Data Controller, will be duly instructed, and will process the data legally, fairly, and with the utmost confidentiality, mainly using electronic and IT tools, stored both on electronic media and any other suitable media, in compliance with the security measures pursuant to art. 32 of Reg. EU 2016/679. All the aforementioned data constituting the state of the visit of the Data Subject will also be archived following the complete execution of the visit for the performance of any related or resulting obligations.

Data Communication

Your personal data, for the purposes indicated above, may be disclosed to internal individuals operating under the direct subordination of the Data Controller and who, for this reason, have been identified by the Controller as authorized for processing (ex art.29 of Reg. EU 2016/679) and may also be disclosed to external entities, identified by the Data Controller and duly appointed as Data Processors (ex art.28 of Reg. EU 2016/679) by the Controller itself.

Data Subject Rights

Pursuant to articles 15 to 22 of Reg. EU 2016/679, SPICI S.r.l. informs you that you have the right to request, by sending an email to: segreteria@spici.eu, access to your personal data, the rectification or deletion of the same or the limitation of processing concerning you, or to object to their processing, where applicable. Moreover, if you believe that the processing concerning you violates the provisions of Reg. EU 2016/679, you can always lodge a complaint with the Supervisory Authority for the protection of personal data using the form and procedure indicated on the website www.garanteprivacy.it and accessible via the link https://www.garanteprivacy.it/home/docweb/-/docweb-display/docweb/4535524.

The Data Subject, acknowledging the information contained in this document pursuant to art. 13 of the Regulation (EU) 2016/679, declares to have been adequately informed about the purposes and methods of processing their personal data by SPICI S.r.l. and is aware of the potential use of their images during the event and/or visit to the company.