9-13 November 2019 in the Fair Center of Vicenza



Under the new GDPR - Privacy Regulation UE 679/2016 we hereby inform you on how Italian Exhibition Group SPA ("IEG" or “Data Conroller”) treats the personal data of:

a)    users of web services accessible starting from this website (attributable to the domain www.iegexpo.it and / or any other subdomain IEG);

b)    customers (eg exhibitors, buyers, other visitors), suppliers, journalists and representatives of communication organs, third-party partners;

c)     other general users of this website (which are the interested party and / or others per person you presum and that it has authorized after).


The rules hereby seth by for shall apply when you access our sites by navigating inside web pages without records r to you and without building or enter data into web forms. The rules do not apply to any websitesmanaged by third parties that could be reached by the user through links contained in the host sites.


Index of the topics (you can navigate between them by positioning the mouse on the list and clicking on the relative text )


-           Data types

-           Logics and forms of treatment. Security measures.

-           Purpose of the treatment

-           Legal bases of processing

-           Mandatory or optional consent

-           Does the data subject's consent to processing for direct marketing or profiling purposes also apply to the communication of data to third parties?

-           Legal derogations from the need for your consent for marketing purposes

-           Communication of data to third parties

-           Data dissemination

-           Mergers and other events involving automatic transfer.

-           Transfer of data abroad

-           Data retention period

-           Data controller

-           Rights of the interested party

-           Policy change


Data types

Through the web forms available on the Site we never ask you for "particular" personal data (personal data suitable to reveal the racial and ethnic origin, religious beliefs, philosophical or otherwise, political opinions, membership of parties, trade unions associations or organizations of a religious, philosophical, political or trade union nature, as well as personal data capable of revealing the state of health and sexual orientation) or "judicial" data (data relating to criminal records, or relating to the status of defendant or of suspect, etc.). The data we deal with can be of two general categories : navigation data, data actively provided by the interested party and data collected by thir parties.

For more in formayion about such categories of data collected see at this link www.iegexpo.it/Privacy policy/datacategories).


Navigation data

When you access (also via mobile) the website and use our services through this wibsite or via mobile (your smartphone, tablet), computer systems and software procedures used to operate this website acquire, during their normal operation, some information about you, named "personal data", whose transmission is implicit in the use of Internet communication protocols.

This kind of data includes the hardware model, the operating system and its version, the mobile network and country from which access occurs, the time of the request, the method used in submitting the request to the server, the access time, the size of the file obtained in response, the numerical code indicating the status of the response given by the server (good order, error, etc.), the details relating to the itinerary followed within the web pages with particular reference to the pages visited and other parameters relating to the operating < system and to the user's computer environment(browser used, version , geographical position, last page visited before accessing IEG Site services ) and unique device identifiers (eg the IP address or domain names of the computers used by the users, the address in URI notation - Uniform Resource Identifier, the MAC address - Media Access Control).e

There are also information collected by cookies and / or other tracking technologies, on which see hereinafter.

This information are not collected to be associated with identified data subject, but by their very nature could, in theory, through further processing and association with data held by third parties, allow users to be identified.

This data is however only used to derive statistical information in aggregate and anonimous form about the use of the Site, to better understand the user's browsing behavior in order to offer users a better browsing experience, to make possible functionality site techniques, to control and optimize the operations, to improve the quality of services offered by the site as well as ensuring the maintenance of the related database and supporting IT infrastructure. In such cases, the navigation data do not identify the affected users and are deleted within 12 months of collection after processing in anonymous form.

Navigation data may also be used to ascertain responsibility in the event of offenses committed against the Site or carried out through the Website (malware attempts , spamming, illegal access to computer systems, etc.).


IEG complies with the provision of the Garante per la protezione dei dati personali of May 8, 2014 that has implemented the European Directive 2009/136 / EC requiring the managers of web pages to publish an information related to the cookie policy of the Site that users navigate. IEG invites you to view and read the following (link: www.iegexpo.it / Privacypolicy / cookiepolicy); here find the information useful to understand, identify, use or delete the cookies used on our website and the legal obligations related to privacy and connected to the same.


Data actively provided by the user

It means:

• the information sent by users in a voluntary and optional way to the email addresses listed on the site or via any web form filling (eg. name and surname, date of birth, name or business name, physical address, home or work location, nationality, company organization or membership category, email , PEC account, mobile number, fax, industry and sector, VAT number or tax code, shipping or billing address, credit or debit card number, data on payment used) to access or register at, or use, services or contents or to purchase services and products accessible on the Site (eg participation in Events or campaigns , purchase of the VIORO magazine, purchase of the TrendBook , ect.) or to participate in initiatives promoted through the Site (eg business matching between exhibitors and buyers), through the functionalities used by the Website and / or third-party sites;

• personal data provided by users who send requests for news and / or information material ("newsletter");

• personal data provided by users who send online job applications to job positions ("curriculum vitae", etc.).


When you spontaneously send an email to one of the e-mail addresses indicated on our site, we acquire your address and any other personal data you have entered in the message and in the attachments. The e-mail boxes corresponding to the addresses indicated on our websites and every other IEG e-mail box, are not of a personal nature even when they bear the name and / or surname of an individual (always followed by the suffix @ iegexpo.it). They belong to the company organization and have the primary purpose of allowing the effective performance of the work activities within the companies of IEG Group. This means that messages forwarded to the IEG Group e-mail accounts can be known not only by the recipient, but also by other persons belonging to the organization. By sending e-mails to the other e-mail addresses indicated on our websites, you declare that you have read and accepted the treatment conditions contained in this policy.


The provision of data for some specific purposes (eg subscription to the newsletter, registration to restricted areas, purchase of services/products, customer care, direct marketing, profiling ) will result in the inclusion of the data within the IT system of Custom Relation Management (CRM ) of IEG dedicated to the management of customers, suppliers and other contacts, accessed only by personnel authorized by IEG. CRM is based or on some cloud services subscribed to by IEG and provided by third-party providers (SALESFORCE, SUGAR, HubSpot), whose servers can be located either in the EU and/or other countries outside the EU (see "Data transfer abroad", following).


Logics and forms of treatment. Security measures.

The logics and forms of organization of treatment will be strictly related to the purposes indicated above. The treatments will take place electronically, telematically and / or on paper. The processing will be carried out in compliance with the principles of correctness, lawfulness, transparency and proportionality and of any relevant legislation.

To the processing of personal data and information of the data subject, appropriate security measures are applied to guarantee the integrity, security and availability of the same. We store all the personal information we receive in databases protected by an encrypted password that resides within our secure network, located behind the advanced firewall software. The data managed at the computerized level, can be consulted only by having access to the various processing or data entry programs, by entering mandatory personal passwords by the only personnel authorized by IEG who needs to have knowledge of them in the performance of their usual duties (eg legal, commercial and marketing, administrative, logistics, IT , management control, etc.). Staff must ralso espect written limitation of use the imposed by IEG (eg. confidentiality obligation). The data are subject to daily backup procedure and secure storage mode, with offsite replication.

Our Web Services support secure HTTP protocol (HTTPS) connections with 2048 bit encryption and TLS v1.x protocol (PCI DSS Compliance).

In the case of manual processing, the data are processed at the IEG operational headquarters and in any other place where the locations of any co-owners or external processors authorized by the IEG are located.

We reserve the right to conduct security checks at any time (eg. logs analysis) to validate your identity, age, the registration data provided by you and to verify your use of services and your financial transactions as well as the possible violation of the Terms of Use of the IEG website and the law in force.

To facilitate these security checks, the consented to provide such information or documentation at our request.

Our employees, agents and our suppliers can use your personal information and disclose personal data for the purposes of validating the information provided to us during the use of services.

Our software package - to access and use the services - contains certain features intended to detect the use of automated programs that allow the use of artificial intelligence (not human) to register on our Site. The use of such software of type 'bot' violates our Terms of Use, and IEG reserves any right to compensation for damages resulting from such behavior.

Purpose of the treatment

The navigation data relating to users are processed by IEG to manage access to the portal and the services it can reach, manage technical practices, carry out all the activities necessary or useful for the constant improvement of the service provided, and for the assessment of liability in case of offenses to the detriment of the Site and / or of offenses carried out through the Site. Specific further purposes related to the individual treatments can be identified in detail, through additional information, within the various services included in the Site .

The other data different are processed by IEG either primary purposes and/or secondary purposes.

The primary purposes are:

1) to satisfy pre-contractual requirements (eg verification of solvency and control of client risks as frauds, also through data from public registers, lists, deeds or documents, to instruct and process specific requests received from the data subject sending informative material such as  newsletters, answers to questions, notices, sending offers , specifications or price lists , etc.), and allowing users to register on the site and access services and/or purchase products/services;

2) to manage and contracts towards the data subject (supply or purchase of products and/or services such assignment of exhibition areas and sale of complementary optional services, sale of advertising spaces non-related to the fair, after-sales management of warranty claims, protection of IEG in litigations and to assert or defend a right in court) and /or obligations under the law, regulations or EU legislation (eg. keeping accounts, tax formalities, administrative and accounting management; fulfillment of obligations on electronic communications services under the Legislative Decree no. 9 April 2003 n. 70; management of the certification obligations by IEG towards the external competent bodies in relation to the fairs and other events organized by IEG);

3) to carry out all activities concerning the management of customers and suppliers, for a legitimate own interest of IEG or third party data recipients, such as: management of credit lines and risk control (illicit prevention, insolvency, etc.); management of litigation and assignment or credit insurance; financial and insurance services for the management of customers/suppliers; management of services orelettronic or surcharges; gestio it warehouse, logistics and transport; handle the extraguarantee after-sale assistance  (via phone, email and / or contact form on the Website); activation by registration, and subsequent management and technical and security maintenance of, the online account of the data subject connected to the IEG website for access to it and/or services made available to you (eg e-commerce) and password or similar authentication credentials; management and use of exhibitors' lists and personal data; sales management (pre-sale and sale of tickets online and on site, issue of free tickets);management relationship with customers , buyers, other visitors, journalists, VIP's (eg military, politicians, groups, others) such as eg. control and registration of accesses and accreditations; personnel management of security service providers; production and distribution of online and paper catalogs for exhibitors;

4) to carry out other organizational and production activities of IEG based on legitimate self-interest of IEG such as management quality system, management control, the overall planning of strategic marketing and operational activities, the management of VIPs (eg. for specific conditions such as discounts, card, quick access), the production, printing and dissemination of promotional materials on paper or on the web (eg house organ), the management of accreditation and involvement of communication organs, media and services referring to the carrying out of journalistic activities; video surveillance management;management of information points (info points) for exhibitors, buyers and visitors; the management of the certification obligations of the events and events organized by IEG towards the AEFI - Associazione Enti Fieristici Italiani; management of internationalization (organization of extra-EU events: read the "data transfer abroad" section of this document). In some cases, we also ask for your personal data (eg photographic images and video-audio) to allow you to participate in events, competitions and thematic initiatives of an extraordinary and temporary nature, which by their nature provide for the communication and disseminationof such data. In these cases we will notify you by asking you to give express and specific consent.

5)  Secondary purposes or direct marketing means:

i)       profiling.Profiling is a relevant activity for privacy purposes only if it specifically concerns natural persons, therefore when the same operations described here concern information of subjects other than natural persons, the privacy law does not apply and therefore these operations can be carried out by of IEG without constraints. For your profiling we use the data (example name and surname, company name to which you belong, brand, residence or location, country of origin, landline and mobile phone, e-mail address, website, type of distribution - store , department store, concept store, type of geographic market of origin and sale, economic or merchandising sector of activity, type of product / service, expected annual budget / advertising budget, markets of interest) that releases us when you use individual services (es to request the newsletter or to make purchases, or at the time of your registration or later) also associating them with your browsing data on IEG websites or the use of services provided by the site (eg cookies) or data collected through other communication channels (eg social media with which you interact linked from our site).

We process the data to analyze also in a predictive way and / or create groups of natural persons divided by market bands based on a minimum set of elements (eg profession, country and / or geographical area of ​​origin, merchandise or economic category of belonging), up to more advanced profiles based on age, sex, preferences declared by you concerning the professional areas of interest, online behavior and previous purchases. This activity has a dual purpose: to better understand customers, both as groups and as individuals, and analyze the effectiveness of marketing to develop and update products, services and offers in line with our target preferences.

Profiling aims to align the services and goods offered by IEG with current and potential demand, measure the results of specific promotions, take corrective actions aimed at improving business results (eg reducing the risk of investing resources towards marginal thematic areas for target) and the effectiveness of commercial processes (eg by ascertaining how many messages and promotional content we have sent you have been seen and clicked on), limit the sending of promotional communications not relevant to your probable expectations and needs or via channels that are not appreciated). This means that IEG does not send the same offers to all interested parties and will be able to send you advertising communications as close as possible to your tastes and interests or preferences, or through your favorite contact methods, improving your experience purchase, even to your own advantage.

The profiling by cluster allows us, among other things, to identify and manage the correct positioning of the exhibitor's stand within the various theme areas of the Event, to facilitate the meeting between buyers and exhibitors during the Event through the creation an agenda of meetings between operators based on the automated crossing between specific supply and demand.

IEG also, if you allow profiling, use the data to advertise social media services and products to other people who have a profile similar to yours and therefore may be more interested in what is offered,

Profiling does not imply your exclusion from specific advantages or the possibility to freely exercise your rights in relation to personal data processed by IEG; in particular, it does not prejudice the possibility for the data subject to participate in the Events and / or to use the ordinary services (eg online pre-registration, purchase of services) sold by IEG.

ii)     sending commercial and promotional communications and offers for the sale of IEG goods and services (eg invitations to events) and/or third party suppliers or other partners affiliated with it, through any means of electronic communication (eg email, phone calls with or without operator, text message, social network, etc.) and by traditional methods (eg ordinary mail);

iii)   studies and market research.

IEG will process the data for these purposes s olo c on the necessary with the specific consent of the interested party ( see below ) .

Legal basis of the processing

-        In the case of primary purposes, processing is necessary, as appropriate, for the implementation of pre-contractual measures to be taken at your request (eg your requests for clarification, sending of business information or commercial offers), for the execution of a contract of which you are a party, or to fulfill a legal obligation to which we are subject (eg to allow verification of the correct fulfillment of the legal obligations towards third parties by the administrative and fiscal authorities, the board of statutory auditors or the auditors, etc.) and/or to pursue our legitimate interest (prevailing over your interests or rights and fundamental freedoms) to process the data in order to manage the relationship with you and/or suppliers effectively and efficiently and to organize any related production, organizational and management processes (including relations with their own sub-suppliers and/or with our parent, subsidiaries or associated companies pursuant to Article 2359 of the Italian Civil Code or with companies subject to joint control).


-        In the case of secondary purposes (direct marketing, profiling) the treatment is based on your specific, free and duly informed consent (subsequently not revoked), and, with regard to profiling , also on our legitimate interest to promote own products and/or services to our target customers based on eventual more personal criteria.


Mandatory or optional nature of data communication and consequences of non-conferment of data

For primary purposes processing (above indicated at points from 1 to 4) IEG has a legitimate interest in processing. Therefore the processing will be possible also without your consent. In case of opposition to processing, we will be not able to process the pre-contractual relationships, your online registration to the Website and to provide the services or sale the products for which IEG requires registration and / or the provision of data.

The unregistered user can browse the Wesite and view only the content and materials available without registration.

In relation to secondary purposes processing (direct marketing and profiling, point 5) as well as for the communication of data from IEG to third parties for the same secondary purposes, your consent is optional (free and negable).

The consent must be given or denied by you, in a separate way, for i) the treatment operated by  IEG and respectively ii) the disclosure of information by IEG to third parties for the same purposes.

The lack of consent, if any, will prevent IEG to treat and/or  disclose data for such secondary purposes, while not interfer on any other pre-contractual and contractual relations between IEG and you and/or the organization to which you belong.


Are there cases of simplified consent or treatment for direct marketing purposes possible without consent?

As permitted by current legislation and for the purpose of fulfillment of privacy obligations by IEG in accordance with the principles of simplification (including the General Authority Provision Privacy of 15.5.2013 - "Consent to the processing of personal data for "direct marketing" purposes through tools contact traditional and automated"), the consent required by IEG on secondary purpose is unitary for all possible means used for processing for marketing purposes (electronic / telematic , paper), as well as for all possible direct marketing purposes (ie without multiplying the formulas of consent for each distinct marketing purpose pursued).


NB: IEG may process personal data, through the use of phone calls with operator and  ordinary mail, for the secondary purposes, without your prior consent (without prejudice to your right to object to the processing with simplified procedures and also electronically by signing up your telephone number and other personal data which area contained in print and electronic public directories, in the public Registry of the Opposition - http://www.registrodelleopposizioni.it/ - which has been established to this aim by Presidential Decree n. 178/2010).

In the event that we directy requires you - for direct marketing purposes - the telephone number and you give us the optional and specific consent to its use, we can handle it even if you are registered with the Public Registry of the Opposition: as your telephone number in this case not taken by us from public telephone directories.


Legal derogations from the need for your consent for marketing purposes

The Italian Privacy Code allows the so-called "soft spam": it means that without having to obtain your consent, we may use the email address you provided as part of a previous purchase of our services and/or product, to sent you email commmercial comunication and offers of sale related to products and services similar to those already purchased by you. Togheter with each email promotional communication so made, it will comes the informed of the possibility of oppos at all times to the processing for didrect marketing purposes, in an easy and free way (by notifying your choice of opt-out through our "MAGNEWS" platform).


Does the data subject's consent to processing for profiling and direct marketing purposes also apply to the communication of data to third parties?

IEG communicate some data to other companies belonging to the IEG Group or to third parties who by contract and as "data processors” are delegated to to process the data (eg transmit commercial communications) on behalf of IEG. In this case the third parties process the data based on the same specific marketing consent (including that to the communication to third parties for such purposes) already provided by you in favor of IEG.

IEG can also, only with your further consent, separate[3], additional, documented, optional, communicate or transfer of data to third parties that treat them either as “co-data controllers” or “independent data controllers” (as a rule they area partners in the promotion of the Events), which use them for direct marketing or profiling purposes).


Withdrawal of consent

Even after having given your consent to the data processing for purposes of direct marketing and/or profiling, you may in any time notify IEG a different will, preferaby through one of the following alternative methods:

-         by clicking on the button  unsubscribe", made available to you at the bottom of the promotional e-mail sent to you, an email alert will be automatically sent to IEG and your name will be recorded in a special black-list (managed through our software MagNews), so preventing any further email direct marketing by IEG towards you;

-        transmitting IEG by regular mail or email your declaration that consent is revoked (which in this case will come a manually adjusted within our MagNews software and CRM). This method of communication is always necessary if you want to express a more analytical, selective will, for the reception, with the consent,, of IEG marketing communications, with regard either to the use of certain means of markeging communication and not others (eg by choosing to receive only paper communication, electronic, whilst refusing that sent by utomated systems, etc. ), or to only certain marketing purposes among those that are actually possible (by choosing, for example, to receive only newsletter and not invitation to out Events, etc.;

-        sending without formalities a clear telephone communication revoking consent to IEG. Upon receipt of this opt-out request, we will proceed to the removal and deletion of data from any database used for processing for direct marketing purposes and, where possible, will inform of such cancellation any third parties to whom the data have been communicated for the same purposes. 

Simply receiving the cancellation request will automatically be deemed as confirmation of such removal and cancellation.

-       In the event that the interested party wants to revoke his consent to any advertising that comes from social channels (eg Facebook, Twitter, etc.), he must directly communicate the revocation to the individual social platform, according to the methods available from time to time. from the same browser and / or from the browser in use (as IEG is technically unable to influence this purpose on third party social platforms).


The aforementioned opposition will not produce any consequence on the provision of any contract work in progress.


Communication of data to third parties

IEG report your personal information to third parties recipients only when it is necessary and appropriate to achieving the purpose of data processing pursued according to the service or product you requested, and in any case proceed to communication only after having informed you, and if necessary , have collected your consent to do so . The communication to third parties will always be limited to the data strictly necessary for the respective purposes.

The third recipient of the data - following better identified - will process the data, as appropriate, a) as an "external managers" (ie ns. Account , and based on our. Directives direct written to ensure respect of privacy rules during treatment and under our. supervision ), or b) in the role of the co-owners (ie booby basis of a written agreement that regulates their activities and responsibilities in relation to personal data), or in his capacity as independent data (in this hypothesis will provide the interested party with all the necessary legal information on the respective treatment).


Within the primary purposes, and without prejudice to the data disclosure to third parties (eg. Tax authorities) made in pursuance of legal obligations or pursuant to regulations or other Community legislation, the data may be shared by IEG to all subjects whose intervention in the processing it is necessary depending on the performance required by the data subject and/or regulatory obligations, by way of example and not exhaustive: other companies, subsidiaries or affiliates of the group IEG and/or third parties partners who perform functional activities or complementary to the provision of products or services requested by the interested party (es. organizational secretarial services, management of requests for information, estimates, orders, contracts, post-sales), third parties in charge of carrying out activities connected and/or instrumental to the processing (such as commercial agents, banks for the management of payments and receipts, commercial information companies, debt collection companies, disposal of loans companies, credit insurance companies, companies providers of electronic payment services, couriers, carriers and freight forwarders, bagging companies and shipping of correspondence, factoring companies, insurance companies, lawyers and law firms, chartered accountants, accounting experts, auditors and auditing firms, members of the supervisory body pursuant to Legislative Decree no. 231/2001 in relation to organizational models aimed at preventing the commission of certain categories of crimes, statutory auditors, third parties responsible for conducting web hosting services and/or maintaining this website and / or the IT systems used by it and/or electronic archives connected to the site ; carriers and shippers responsible for the carriage of goods; call center services company that guarantee customer support during the Events); public security authorities and computer forensics companies in case of suspected crimes or other crimes committed against IEG and/or third parties.


To make a payment on the website , you can use the online Paypal service provided by the third supplier. To complete the purchase, you must enter the data requested through the video screen of interest (eg. credit card). Such data will be processed by the payment service provider ( P aypal Inc . - click on the linkhttps://www.paypal.com/it/webapps/mpp/ua/privacy-full ) who will act as independent data controller, without passing through the IEG server, which will only receive notification of payment.


In the sole case of processing for secondary purposes (direct marketing, profiling), pursuant to the General Provision of the Guarantor of July 4, 2013 containing the "Guidelines to combat spam" we inform you that we will also communicate data – if you will give us your specific prior consent, on which you see further - also to the following merchandise or economic categories of third parties: advertising agencies and PR, companies responsible for carrying out marketing researchs, advertising, communication and/or public relations agencies, companies responsible for the design, printing and maintenance of advertising or promotional editorial materials and/or their management, website production companies, web marketing companies, direct e-mailing service companies (eg. Mail-up or the like), call center service company with registered and operational centers in Italy, consultants and/or other entities who are entrusted of activities functional to said purposes; company who maintain the IT systems maintenance on which our database reside or through which they are processed; providers of electronic and ICT communication services; third-party business partners - even if they operate in production sectors not included in the e-shop , for example other trade fair organizations or trade associations - with whom IEG activates co-marketing or event management actions. IEG can also share some data (name, surname, email) with third social media platforms (eg Facebook , Google) that use them for the sole purpose of identifying other similar persons to the user who might be interested in IEG services and/or products, in order to advertise them through social media platforms.

The data are processed within the IEG Custom Relation Management (CRM) information system dedicated to managing customers, suppliers and other contacts. Our CRM is based on some cloud platform used by IEG and made available by third party providers (SALESFORCE.COM Inc., SugarCRM Inc., HubSpot Inc.), whose servers can be located in the EU or other countries outside the EU (see section "Transfer of data abroad", below).

For the privacy policy of the third provider SALESFORCE, see the URL: https://www.salesforce.com/eu/campaign/gdpr/. SALESFORCE.COM INC. is an American company registered with the US competent institution under the EU-US convention called "Privacy Shield " (see URL:https://www.salesforce.com/content/dam/web/en_us/www/documents/legal/Privacy/privacy-shield-notice.pdf ) , which guarantees the third party's compliance with the security requirements of the personal data processed by it.

For the privacy policy of the third provider S ugarCRM INC. see the URL: https://www.sugarcrm.com/legal/privacy-policy. Also S ugarCRM INC. is an American company registered with the US competent institution under the EU-US convention called "Privacy Shield " (see https://www.sugarcrm.com/legal/privacy-shield-notice ).

For the privacy policy of the third provider HubSpot INC. see the URL: https://legal.hubspot.com/privacy-policy . Anch and S ugarCRM INC. is an American company registered with the US competent institution under the EU-US convention called "Privacy Shield " (see https://www.privacyshield.gov/participant?id=a2zt0000000TN8pAAG ).

IEG has also signed either with SALESFORCE. COM INC. and HubSpot Inc. specific agreement for the management of personal data by which that third party suppliers are committed to IEG to compliance with rules that essentially guarantee that processing takes place in accordance with data controller’s legal requirements provided for the protection of data subject.


Data dissemination

The data will not be disseminated, except in cases where - contractually and by law - it is scheduled to be published on the IEG website (eg publication of online or paper catalogs of exhibitors participating in an Event, publication list of winners of competitions or prize operations with a list of names).


Mergers and other events involving automatic transfer

In the event that IEG enters into a bankruptcy procedure (bankruptcy, arrangement, etc.) or transfers all or part of its company or business branch to which the personal data belong, or its share, to third parties, or a merger with third parties or the substantial transfer of all our goods or part of them to third parties occurs, the third parties having the right will automatically acquire the availability of personal data and all other information provided by the interested party to IEG. By operating the use of this Website, you consent, if necessary, you to such transfer of data, if it is deemed to be required by applicable law.


Transfer of data abroad

The data are stored on our servers located at the our headquarters and/or servers in EU countries of third party companies that provide us with IT outsourced services (eg storage, back-up and/or disaster recovery).

The d ata from IEG may be transferred to EU countries and from non-EU countries in case IEG makes use of web site management, email and / email service direct marketing provided by third party suppliers with headquarters or servers in these countries. In such cases the transfer to Third Countries will take place in compliance with the GDPR ( EU Regulation P revacy 679/2016 ) and therefore on the basis of a decision of the European Commission declaring the adequacy of the level of personal data protection guaranteed by the third country, of an interstate convention, ex. US-Privacy Shield agreement ) Or, in the absence of that decision, on the basis of adequate safeguards consist of agreements written ad hoc between IEG and the third party vendor, or in the absence, on the basis of your consent possible . Further information will be provided to you via the appropriate personal data collection form.

The data are stored on the server of the Owner located at the latter's headquarters and / or taken servers in EU countries of companies that provide the owner with IT outsourced services (eg disaster recovery).

In the case of Events that take place in the U.S.A. organized by IEG and / or to which IEG participates with its own initiatives, the data can be communicated by IEG to third recipients located in one or more of the United States of America; the transfer will be founded:

a) on the bilateral "Privacy Shield" convention in force between the EU (European Union) and the U.S.A., which provides for companies and other entities that import such data in the U.S.A. and that the obligation to apply a series of protections and measures to protect the personal data of the data subject so received or otherwise acquired and processed is adapted to the agreement;

b) if the data importer in the U.S. does not adhere in advance to the Privacy Shield mechanism, in accordance with the rules provided by the Privacy Shield itself, the transfer of data by IEG to the importer will take place only against the prior stipulation by the third importer in the U.S.A. of a specific contractual agreement with IEG, containing standard contractual clauses that comply with the text adopted by the EU Commission, through which the third recipient, for the treatments under its jurisdiction, commits to IEG, for itself and its employees, and to the final benefit of the concerned, to comply with privacy obligations substantially equivalent to those provided for by the EU regulations for IEG.

Only in the denied case where such a contractual transfer agreement with the third data importer in the U.S.A is not possible or excessively burdensome. IEG shall only transfer data to the USA if: i) it is necessary for the execution of a contract concluded between the data subject and IEG or the execution of pre-contractual measures taken at the request of the data subject; ii) the transfer is necessary for the conclusion or execution of a contract concluded in favor of the interested party between IEG and another natural or legal person (that other natural or legal person of rwgola is a subsidiary or commercial partner of IEG having based in the USA). As an alternative, IEG reserves the right to ask the interested party for a specific consent to transfer data to the U.S.

In the case of events held in the People's Republic of China, United Arab Emirates, Colombia, Hong Kong, organized or participated by IEG, the transfer of data from IEG to third recipients based in these countries shall take place, for the sole purposes disclosure, in the face of adequate guarantees; such guarantees (in the absence of any decision of the European Commission declaring the adequacy of the level of protection of personal data guaranteed by the third country), is constituted by the prior stipulation by the third importer of a specific written contractual agreement with IEG, consisting of standard contractual clauses that comply with the text adopted by the EU Commission, through which the third party ("importer"), for the treatments for which it is responsible, commits itself to IEG, for itself and its employees, to comply with privacy obligations substantially equivalent to those envisaged by the EU regulations for IEG;

only if it is not possible or excessively burdensome the stipulation of such a contractual transfer agreement, IEG transfers data to the non-EU country because this i) is necessary for the execution of a co ntratto concluded between the interested party and IEG or the execution of pre-contractual measures taken at the request of the interested party; ii) it is necessary for the conclusion or execution of a contract signed in favor of the interested party between IEG and another natural or legal person of the interested party (eg an IEG subsidiary or partner established in the non-EU country), or, based on a specific consent requested by IEG for the transfer of data to the non-EU country, whose request is as a rule contained in the registration forms for the Event.

Other transfer cases

IEG uses web site management services, e-mail and / or e-mail direct marketing services provided by third-party suppliers based or servers abroad, in which case the data are transferred from IEG to the servers of such third party suppliers foreign, in compliance with the guarantees established in this regard by the GDPR (EU Regulation Privacy 679/2016) and therefore:

- on the basis of a decision of the European Commission declaring the adequacy of the level of protection of personal data guaranteed by the third country, of an interstate convention, eg US-Privacy Shield) or,

- in the absence of such a decision, on the basis of appropriate guarantees consisting of ad hoc written agreements between IEG and the third supplier, or, only if it is not possible or excessively burdensome the stipulation of such a contractual transfer agreement, IEG transfers data to the non-EU country because this i) is necessary for the execution of a co ntratto concluded between the interested party and IEG or the execution of pre-contractual measures taken at the request of the interested party; ii) it is necessary for the conclusion or execution of a contract signed in favor of the interested party between IEG and another natural or legal person of the interested party (eg an IEG subsidiary or partner established in the non-EU country), or, based on a specific consent requested by IEG for the transfer of data to the non-EU country, whose request is as a rule contained in the registration forms for the Event.

The list of third parties in other countries UE and/or Extra-UE to whom the transfer is transferred (so-called " data importers") is available on the website www.iegexpo.it/information ("data importers" section)


Data retention period

IEG will process the data for the time necessary respectively to pursue the related purposes as stated above, in particular:

-       10 years from the date of cessation of the Event in the case of direct marketing purposes (eg promotion) to exhibitors and other third parties organizing Events, as well as to visitors, buyers, conventions, journalists, etc.;

-       the longest period between the term of 10 years and that of termination of office in relation to the purpose of direct marketing (eg promotion ) towards so called VIP's;

-       10 years from the date of termination of the Event in the case of promotion and accreditation of the Event to the media, as well as the purpose of preserving and using lists of exhibitors , other subjects that organize events, visitors, buyers, journalists and users of internet services;

-       10 years from the termination of the relationship in the case of sale of exhibition spaces and complementary services, as well as sales of advertising space not connected to the Events;

-       10 years from the termination of the relationship in the case of internationalization purposes (organization of Events in non-EU partnerships with transfer of personal data);

-       10 years from the termination of the contractual relationship with the interested party in the case of profiling purposes and 3 months from the date of termination of the Event in relation to profiling data relating to the service called "business matching";

-       5 years after publication in the case of publishing and promotional purposes (production, printing and distribution of printed promotional materials or web publishing, house organ, the magazine VOplus, etc.);

-       12 months after the end of the Event in case of purpose of pre-sales and selling tickets online and onsite visitors and free invitations, the purpose of visitors control and registration and VIP's access  as well as of registration of security personnel of any Event;

-       10 days (at the Vicenza Fairgrounds) and 24 hours - subject to special requirements relating to police and judicial investigations (at the Rimini / Palacongressi Exhibition Center ) from the registration date in case of management of the videosurveillance system;

-       60 days from the end of the Event in the case of purpose of support for exhibitors and visitors (after the aforementioned term of 12 months or 60 days IEG will proceed to the anonymisation of personal data);

-       the online and printed catalog of exhibitors created for promotional purposes is kept for the last two editions of the same;

-       until obtaining the administrative certification of the Event, in case of certification purposes of the same.

-       In the case of personal data for which the specific consent of the data subject is necessary, and such consent is optional and revocable, the processing of data after the said deadline may continue upon collection of a new consent of the data subject by the Data Controller and for a new period of time equal to the aforesaid one.

-       In the event that personal data are processed for IT security purposes (eg logs ), the data will be kept long enough to exhaust the related security checks and evaluate the results; normally within a maximum of 1 year from the time of collection.

-       In case of occurrence of disputes out of court or by the court with the data subject and/or with third parties, the data will still be processed for the most time necessary to exercise the relevant instance of the protection of the IEG’s rights.

-       The duration of storage of the data collected through cookies is illustrated in the "Cookie Policy" - (link www.iegexpo.it/ Privacy policy / cookies policy) .


Data Controller

The holder of the processing of personal data (so called “Data Controller”) is Italian Exhibition Group SpA, with registered office in Via Emilia, 155 – RIMINI - ITALIA. Internal authorized persons of IEG belong to corporate functional areas that need to process data for the purposes indicated in this information, such as Office Purchasing, Administration, IT, Logistics,  Operations, Marketing, Sales, Legal, HR). WE have also appointed as Data Processors some categories of external entities to which the Company shall communicate personal data for the aforementioned purposes (unless they take the direct role of independent Data Controllers due to the scope of management autonomy due to them in relation to the processing entrusted to them). In the case of Data Processors, their processing of yout data will take place on the basis of our written directives and under our general periodic supervision of the security measures taken by the third party.


Rights of the interested party

We inform that you (the data subject) will have the right to:

- ask IEG to confirm whether or not personal data processing is being processed and, in this case, to obtain access to personal data and the following information: a) the purposes of the processing; b) the categories of personal data in question; c) the recipients or categories of recipients to whom the personal data have been or will be communicated, in particular if recipients of third countries or international organizations; (d) where possible, the retention period of the personal data provided or, if not possible, the criteria used to determine this period; e) the existence of the right of the interested party to request the data controller to rectify or delete personal data or limit the processing of personal data concerning him or to oppose their treatment; f) the right to lodge a complaint with a supervisory authority; g) if the data are not collected from the data subject, all information available on their origin; h) the existence of an automated decision-making process, including profiling and, at least in such cases, significant information on the logic used, as well as the importance and expected consequences of such processing for the data subject.

- if the personal data are transferred to a third country or to an international organization, the right to be informed of the existence of adequate guarantees regarding the transfer;

- to request, and obtain, without undue delay, the correction of inaccurate data; taking into account the purposes of the processing, the integration of incomplete personal data, also by providing an additional declaration;

- to request the deletion of data if a) personal data are no longer necessary with respect to the purposes for which they were collected or otherwise processed; b) you revoke the consent on which the treatment is based and there is no other legal basis for processing; c) you oppose the processing, and there is no legitimate overriding reason to proceed with processing, or oppose the processing performed for direct marketing purposes (including functional profiling for such direct marketing); d) personal data have been processed unlawfully; e) personal data must be deleted to fulfill a legal obligation under Union or Member State law to which the controller is subject; f) personal data have been collected with regard to the provision of information society services.

- to request the limitation of processing that concerns the data subject, when one of the following hypotheses occurs: a) you dispute the accuracy of personal data, for the period necessary for IEG to verify the accuracy of such personal data; b) the processing is illegal and yoy oppose the cancellation of personal data and asks instead that its use is limited; c) although IEG no longer needs it for processing purposes, personal data are necessary for the data subject to verify, exercise or defend a right in court; d) you object to the processing performed for direct marketing purposes, pending verification of the possible prevalence of the legitimate reasons of IEG with respect to those of the data subject;

- to obtain from IEG, upon request, the communication of the third recipients to whom the personal data have been transmitted;

- to revoke at any time the consent to the processing where previously communicated for one or more specific purposes of your personal data, it being understood that this will not affect the lawfulness of the treatment based on the consent given prior to the revocation;

- to receive by IEG, in a structured format, in common use and readable by automatic device, personal data concerning the data subject previously provided to the data controller by the data subject, and/or, if technically feasible, to have such data transmitted by IEG directly to another data controller without impediments on the part of IEG, if the following (cumulative) condition occurs: a) the processing is based on the consent of the interested party for one or more specific purposes, or on a contract of which the party is a party and whose execution of the treatment is necessary; and b) the processing is carried out by automated means (software) (total right to the so-called "portability"). The exercise of the right to the portability is without prejudice to the abovementioned right to cancellation;

- not to be subjected to a decision based solely on automated processing, including profiling, which produces legal effects that concern you or who has a similar impact on you;

- to lodge, at any time, a complaint with the competent Supervisory Authority on the basis of the GDPR or to the civile Cpurt of your place of residence or domicile.

The interested party can exercise his rights by writing to Italian Exhibition Group SpA, Data Protection Function Officer, based in Via Emilia, 155 - 47921 Rimini (Italy) or e-mail address: privacy@iegexpo.it. You can also request us a list of the Data Processors, Joint Data Controllers and Controllers.

IEG has appointed an independent third party, responsible to supervise compliance with the GDPR and the laws applicable to the processing of your personal data (DataProtection Officer): Avv. Luca De Muri, domiciled for the position at Italian Exhibition Group SpA


Policy change

This privacy policy from the date of publication replaces any previous version of the same. Unless otherwise specified, the previous privacy policy will continue to apply to personal data up to that time collected. IEG reserves the right to make changes to this privacy policy at any time by giving notice to users on this page. Please consult this page often, referring to the last modification date indicated at the bottom. In case of non-acceptance of the future changes, you must stop using the website or the features to which the privacy modification refers, and in the absence of such abstention the changes will be deemed accepted (except those that modify the conditions for obtaining the consent, where mandatory, to our data processing)


PRIVACY POLICY – ver. 12.11.2018


[1] the treatment includes operations of: - collection (by hard copy, IT and telematic, by telephone - also through apps made available to the data subject by the Data Controller - and / or by e-mail, or by public registers, lists of documents and / or public databases and / or private (business information company), - registration, organization, storage and processing on paper, magnetic, automated or telematic media, processing of data collected by third parties, modification, selection, extraction, comparison, use, interconnection also to data of other subjects on the basis of qualitative, quantitative and temporal criteria , recurring or definable from time to time, temporary treatment aimed at rapid aggregation or transformation of the data, - profiling (this means an automated processing of personal data consisting in the use of personal data to evaluate certain personal aspects relating to a natural person, in particular to analyze or predict aspects concerning (...) the economic situation, (...) preferences personal, interests, reliability, behavior, location (…) of that physical person; - communication, dissemination, erasure and destruction of data, or combinations of two or more of the aforementioned transactions. The treatment does not under any circumstances involve the adoption of fully automated decisions by IEG)

[2] It constitutes personal data any information concerning an identified or identifiable natural person "interested"; an identifiable natural person can be identified, either directly or indirectly, with particular reference to an identifier such as a name, an identification number, location data, an online ID or one or more characteristic elements of his physical identity, physiological, genetic, psychological, economic, cultural or social. In the event that the user or organization, to which the personal data refer, is a natural person or sole proprietorship, the same is an "interested party" for privacy purposes. In any other case (for example if you are a joint-stock company) the information referring to the user or organization, are in any case equated to personal data to the limited effects of the application of the substantive rules on the obligations of disclosure and obtaining the prior consent to treatment, only if processed for profiling and direct marketing purposes).


[3] As indeed clarified in the General Provision of the Guarantor of July 4, 2013 containing the "Guidelines to combat spam":

• the communication or transfer to third parties of personal data for marketing purposes in general can not be based on the acquisition of a single and general consent by the data subject for such purposes;

• the data controller must acquire a specific consent for the communication (and / or transfer) to third parties of personal data for promotional purposes, as well as separate from that required by the same data controller to carry out the promotional activity itself; if the data subject releases this consent, the third parties may carry out promotional activities against him, even with the modalities automated systems referred to in art. 130, paragraph 1 and 2 of the Italian Privacy Code without having to acquire a new consent for the promotional purpose;

• the data controller who intends to collect the personal data of the data subjects also to communicate (or transfer them) to third parties for their marketing purposes must first issue to them the appropriate information that also indicates each of the third parties or, alternatively, indicat the categories (economic or merchandise) belonging to the same.

Latest news

23 october 2017


Buy your online ticket, skip the line and visit Cosmofood. Ticket option: Ticket €7 Ticket + glass for wine tasting €10. You can bring the glass in the stand "RITIRO BICCHIERI" indicated on the planfloor that you will find in the entrance.   BUY YOUR TICKET HERE  ...

go to detail

05 august 2016

Would you like your bar/restaurant achieve success? I show you how!

During the 4°th edition of Cosmofood, Bargionale will hold a seminar concerning how to make your bar/restaurant successful. During the 3 hours seminar Andrea Mongilardi and Stefano Nincevich will show formats and strategies about how to reach a turning point for our business with the collaboration of architects, marketing experts, seo and d...

go to detail

20 july 2016

Bio and Vegan Area: more attention to new lifestyle and diet

Today nutrition is seen from differents point of view and the fair with the presence of company with bio and vegan products can talk with all different types of public. For this reason we have created a bigger area dedicated to Bio and Vegan products. Professionals will find here lots of ideas for their menus while consumer can disfrute this oc...

go to detail