NOTICE PURSUANT TO ARTICLES 13 AND 14 OF EU REGULATION 2016/679 (GDPR) FOR THE PROCESSING OF PERSONAL DATA RESULTING FROM THE MANAGEMENT OF EVENTS AND THE CREATION OF IMAGES, VIDEOS, AND PROMOTIONAL MULTIMEDIA MATERIAL

The European regulation on the protection of personal data requires the Data Controller (i.e., the company/organization that decides the "why" and "how" of personal data processing) to inform individuals when their personal data is collected and used.

The Data Controller is CB Trafilati Acciai S.p.A., VAT no. 05822680962, with registered office in Via Laghi no. 64, 36056, Tezze Sul Brenta (VI), Italy.
Data subjects may submit requests to the Controller using the following contacts:
Phone: +39 0424 560005
Email: This email address is being protected from spambots. You need JavaScript enabled to view it.
PEC: This email address is being protected from spambots. You need JavaScript enabled to view it. 

Personal data processed

The personal data that may be processed includes:
For event management: name, surname, and other identifying data of the individual, contact details, and information relating to the individual’s occupation (e.g. organization/company affiliation, position held, etc.).

For the creation of images, videos, and promotional multimedia material: the individual’s portrait and other personal aspects identifiable from photos/videos.

For the management of any supporting services, such as accommodation: name, surname, and other identifying data, contact details (e.g. email address, phone number), and any preferences related to the requested service (e.g. room type, additional services, or specific requests).

Any special categories of personal data processed:

• Information on any food intolerances or allergies in the case of events involving food or drink.
  
  
• Health data or other personal needs of the individual necessary for the planning and management of the event.
  
  

Legal basis for processing

The legal basis for processing personal data is as follows:

• For event management and the creation of images, videos, and promotional multimedia material: processing is lawful as it is necessary for the performance of a contract to which the data subject is a party, or for the implementation of pre-contractual measures taken at the data subject’s request.
  
  
• For data relating to food intolerances, allergies and/or health or other personal needs: any consent provided by the data subject.
  
  
• For the management of any supporting services, such as accommodation: processing is lawful as it is necessary for the performance of a contract to which the data subject is a party, or for the implementation of pre-contractual measures taken at the data subject’s request.
  
  

Data sharing

Within the limits relevant to the release form and the processing purposes indicated, personal data related to images and audiovisual recordings may be communicated, published, and/or disseminated.

Personal data concerning food intolerances, allergies, and/or health or other personal needs will not be shared unless necessary for the purposes for which they were collected.

Personal data processed for the management of any supporting services, such as accommodation, may be shared with hospitality facilities or third-party providers involved in the delivery of the requested services, strictly for purposes related to the organization and operational management of the service.

Data retention

The Controller will retain personal data for the time necessary to fulfill the above-mentioned purposes.
Preparatory material will be retained for a maximum of 6 months.
There is no time limit for the retention of published videos and release forms.
Any information relating to allergies or health data will be deleted as soon as it is no longer necessary, unless retention is required by law or for judicial defense or insurance purposes.

Data subject rights

Data subjects have the right to request from the Controller, at any time:

• Access to their data pursuant to Article 15 GDPR;
  
  
• Rectification of inaccurate data and integration of incomplete data pursuant to Article 16 GDPR;
  
  
• Erasure of data under one of the conditions set out in Article 17 GDPR, including the withdrawal of consent where processing is based on it;
  
  
• Restriction of processing in the cases provided for in Article 18 GDPR;
  
  
• Data portability pursuant to Article 20 GDPR;
  
  
• Objection to processing based on the Controller’s legitimate interests, pursuant to Article 21 GDPR.
  
  

To exercise these rights, data subjects may send a request to the following email address: This email address is being protected from spambots. You need JavaScript enabled to view it. 

Further information on how CB Trafilati Acciai S.p.A. processes your data is available at:
https://www.steelgroup.com/en/privacy-policy/cb 

Data subjects also have the right to lodge a complaint with the competent supervisory authority in the Member State where they habitually reside or work, or where the alleged violation of the Regulation has occurred.