Information notice pursuant to Art. 13 of EU Regulation 2016/679 (“GDPR”)

 

INTRODUCTION

“CEU – CENTRO ESPOSIZIONI UCIMU S.P.A.” and “EFIM – ENTE FIERE ITALIANE MACCHINE SPA” (hereinafter the “Parties”), intend to jointly manage the services and organizational activities of trade fairs and exhibitions, both in Italy and abroad, aimed at the machine tool sector and production systems. Se desidera ricevere una copia dell’accordo di controllo congiunto, si prega di scrivere al punto di contatto indicato di seguito.
1. JOINT CONTROLLERS AND CONTACT POINT

-CEU – CENTRO ESPOSIZIONI UCIMU S.P.A., with registered office in Viale Fulvio Testi 128, 20092 – Cinisello Balsamo (MI), in the person of its pro-tempore legal representative (hereinafter, “CEU”)

e

-EFIM–ENTE FIERE ITALIANE MACCHINE SPA, with registered office in viale Fulvio Testi 128, 20092 – Cinisello Balsamo (MI), in the person of its pro-tempore legal representative (hereinafter, “EFIM”)

 

The data subjects may exercise their rights towards each joint Controllers; however, the Parties have identify the contact point at the following addresses: [email protected] and Data Protection Officer: r[email protected]
Data Protection Officer and contact point for data subjects

For CEU E-mail: [email protected]

For EFIM E-mail: [email protected]
2.MAIN DEFINITIONS

Personal data: any information relating to an identified or identifiable natural person (‘data subject’); an identifiable natural person is one who can directly or indirectly be identified, in particular by reference to an identifier such as a name, an identification number, a location data, an online identifier or to one or more specific factors to the physical, physiological, genetic, mental, economic, cultural or social identity.

 

  1. PURPOSES OF THE PROCESSING | LEGAL BASIS OF THE PROCESSING | DATA RETENTION | NATURE OF PROVIDING
PURPOSES OF THE PROCESSING

 

 LEGAL BASIS OF THE PROCESSING DATA RETENTION  NATURE OF PROVIDING
A) Sending newsletters and institutional e-mail, regarding trade exhibitions organized by the joint Controllers (such as BI-MU, LAMIERA, and EMO MILANO). Legitimate interest Art. 6 par. 1 lett. f) GDPR.

For more information, write to [email protected]

 

 

 

 

 Until objection The provision of personal data is necessary.

Failure to provide the necessary data will result in the ability to receive informational and promotional emails regarding trade exhibitions organized by the joint controllers.
B) subscribe to the newsletter Processing is based on consent to the processing of personal data (Rec. 42, Rec. 43).

Art. 6 par. 1 lett.a) GDPR.

  Until consent is revoked  The provision is optional.

Failure to provide the necessary data will result in the impossibility of receiving newsletter
C) Management of requests regarding personal data protection and requests from other data subjects, pursuant to articles 15 and following of the GDPR (data subjects’ rights). The processing is necessary to comply with a legal obligation to which the data controller is subject (C45) Art. 6 par. 1 lett. c) of the GDPR. 5 years from the closure of the request, except in case of disputes.  The provision of personal data is mandatory, as it is necessary to fulfill legal obligations. 

 

  1. TO WHOM WILL PERSONAL DATA BE COMMUNICATED? RECIPIENTS OF THE DATA

Personal data will be communicated to entities that process the data as independent data controllers or as data processors (Article 28 GDPR) and will be handled by individuals (Article 29 GDPR) acting under the authority of the data Controller and the processors based on specific instructions provided regarding the purposes and methods of processing. The data will be communicated to recipients belonging to the following categories: 

  • Subjects who provide services for the management of the information system used by the Joint Controllers and telecommunications networks;
  • Subjects and organizations who collaborate with the Joint Controllers for the organization, planning, development, and execution of the activities related to BI-MU;
  • Freelancers who collaborate with the Joint Controllers for the purposes above indicated;
  • Competent authorities for fulfilment of legal obligations and / or provisions of public bodies, upon request.

The list of the processors is available by contacting the joint Controllers using the contact details provided above.

The list of the processors art. 28 is available writing to the contact point above.

 

  1. WILL DATA BE TRANSFERRED TO NON-EEA COUNTRIES?

Personal data will not transferred outside of the EEA.

  1. IS THERE AN AUTOMATED PROCESS?

Personal data will be processed manually, electronically, and automatically. It is clarified that no fully automated decision-making processes are carried out. 

 

  1. WHAT ARE YOUR RIGHTS? HOW CAN YOU EXERCISE THEM?

The data subjects may exercise their rights as expressed in articles 15 and following of the GDPR, writing to the contact point at [email protected] or writing to the DPO [email protected].

The Joint Controllers guarantee to data subjects the possibility to request, at any time, the access to their personal data (art. 15), the rectification (art. 16), the erasure (art. 17), the restriction of processing (art. 18). The Joint Controllers communicate(art. 19), to each of the recipients to whom the personal data were transmitted, any rectification or erasure or restriction of processing. The Joint Controllers will disclose such recipients to data subjects who request it.

The joint Controllers guarantee the right to data portability (Art. 20) and, in the event of requests pursuant to Art. 20, will provide data subjects with their data in a structured, commonly used, and machine-readable format

It is recognised to the data subjects the right to object (art. 21), at any moment, to the data processing based on the legitimate interest, writing to the above-mentioned contacts with the object “objection”. In case of exercise of the right to object to the processing based on the legitimate interest, the joint Controllers recognize to the data subjects the possibility to obtain, upon request, information regarding the performed balancing test.

It is recognized the right to withdraw the given consent, without prejudice to the lawfulness of the processing based on the consent given before withdrawal.

In order to not receive newsletter, data subjects can write an e-mail to [email protected] with the object “erasure from automated” or to use our automatic erasure systems provided for e-mails only (opt-out).

In the case where the data subjects consider that the processing of personal data executed by the joint Controllers occur in violation of what is provided by the Regulation (EU) 2016/679, they are free to present a claim to the National Supervisory Authority, particularly in the member State where they reside or work, or in the place where the presumed violation of the Regulation occurred (Italian Supervisory Authority https://www.garanteprivacy.it/), or to take legal action before the competent judicial authorities.

                                          

  1. CHANGES TO THE NOTICE

The Joint Controllers may change, modify, add, or remove any part of this privacy notice. To facilitate the review of any changes, the notice will include the date of the last update.

 

Last update: 04/05/2026

CEU – CENTRO ESPOSIZIONI UCIMU S.P.A. EFIM–ENTE FIERE ITALIANE MACCHINE SPA,