Privacy Policy (GDPR)

1. Data Controller

The Data Controller for personal data processing is Emmeci Meeting e Congressi s.r.l., with registered office at Via V. Monamì 10, 00133 Rome and operational headquarters at Via F. Antolisei 19, 00173 Rome - Italy.

For any communication, request for clarification, or to exercise the rights provided by EU Regulation 2016/679, you may contact the Data Controller at:

• Email: info@emmecicongressi.it / sito@emmecicongressi.com
• Telephone: +39 344 276 0018 / +39 347 592 9479

2. Types of Data Processed

In the course of normal browsing and use of contact services offered by this website, the following categories of personal data may be collected:

• Data voluntarily provided by the user: First name, last name, email address, affiliated institution or company, telephone number, and any other information freely entered by the user in the text fields of the contact form or direct email communications.
• Browsing data: The IT systems and software procedures operating this website acquire, during their normal operation, some personal data whose transmission is implicit in the use of Internet communication protocols (IP addresses, browser type, operating system, timestamp of request).

3. Purpose and Legal Basis of Processing

The personal data provided will be processed for the following purposes:

• Handling contact and quotation requests: To respond to inquiries sent by the user via the online form or email regarding the organization of congresses, scientific events, and logistical services. The legal basis is the execution of pre-contractual or contractual measures taken at the request of the data subject (Art. 6, par. 1, let. b GDPR).
• Legal compliance: To fulfill obligations required by law, regulation, EU legislation, or an order from the Authority. The legal basis is compliance with a legal obligation (Art. 6, par. 1, let. c GDPR).
• Website security and abuse prevention: The legal basis is the Data Controller's legitimate interest in safeguarding the technical security of its IT systems (Art. 6, par. 1, let. f GDPR).

4. Processing Methods and Retention

Data processing is carried out using electronic, telematics, and, where necessary, paper tools, with logic strictly related to the stated purposes and through the adoption of appropriate technical and organizational security measures to prevent data loss, illicit or incorrect use, and unauthorized access.

Data provided for information requests will be retained for the time strictly necessary to fulfill the request and, subsequently, for a maximum period of 24 months, unless a contractual relationship is established or different statutory tax/accounting retention periods apply.

5. Data Sharing and Transfer

Collected data will not be disseminated to the public. They may be disclosed, exclusively for operational needs strictly related to the aforementioned purposes, to:

• Authorized employees and collaborators of Emmeci Meeting e Congressi s.r.l., bound by confidentiality obligations.
• Technical service providers, hosting providers, and email service managers (configured on proprietary servers or certified providers), designated, where necessary, as Data Processors under Art. 28 GDPR.

There is no transfer of personal data to third countries outside the European Economic Area (EEA).

6. Rights of the Data Subject

As a data subject, pursuant to Arts. 15 to 22 of the GDPR, you have the right at any time to:

• Request access to your personal data and obtain a copy thereof.
• Request the rectification or integration of inaccurate or incomplete data.
• Request data erasure ("right to be forgotten") under the conditions set forth in Art. 17 GDPR.
• Obtain the restriction of processing.
• Object to data processing for reasons related to your particular situation.
• Request data portability in a structured, commonly used, and machine-readable format.

To exercise these rights, you may send a written communication to: info@emmecicongressi.it.

You also have the right to lodge a complaint with the Italian Data Protection Authority (www.garanteprivacy.it) or your local supervisory authority if you believe your data processing violates current legislation.