Information on the processing of personal data of its users

(Code for the protection of personal data art. 13 D.L.gs 196/2003 – EU Regulation 2016/679)

Data Controller
Lux eventi Srl
Via Canino 21, 00191
Owner’s email address: info@luxeventi.com

Introduction
The purpose of this Information Notice is to inform the user about the methods of processing of personal data concerning him/her. In line with Legislative Decree 196/2003 (hereinafter the “Privacy Code”) and Regulation (EU) 2016/679 (hereinafter the “GDPR”), we intend to guarantee the privacy and security of each visitor’s personal data in accordance with the provisions of this Policy. This Privacy Policy is intended as information pursuant to Article 13 of the Privacy Code and Articles 13 and 14 of the GDPR.

Type of data processed
The website offers content of an informative and sometimes interactive nature. While browsing the site. we may, therefore, acquire information about the visitor in the following ways:

Navigation data: The computer systems and software procedures used to operate this website acquire, during their normal operation, some personal data whose transmission is implicit in the use of Internet communication protocols. This category of data includes: IP addresses, the type of browser used, the operating system, the domain name and the addresses of the websites from which access was made, information on the pages visited by users within the site, the time of access, the length of time spent on each page, internal path analysis and other parameters relating to the user’s operating system and computer environment.
Additional categories of data: These are all those personal data provided by the visitor through the site, for example, by registering and/or accessing a reserved area and/or a service and/or participating in one of the initiatives alone or in partnership with third parties, to request information, or by calling one of our telephone numbers to have direct contact with customer service.

Purposes of processing
PURPOSE
To provide the good and/or service requested by the user, to manage the contracts finalised by the user, to carry out the relative administrative, accounting, fiscal and legal fulfilments, and to process the requests forwarded by the user. To measure your experience in using our platforms, the products and services we offer and to ensure the correct functioning of the web pages and their contents. To send you commercial communications relating to promotions and/or offers for which you may be entitled to benefit, in the interests of the Data Controller or other associated companies. Carry out profiling activities, i.e. the analysis and processing of information relating to the user, his/her preferences, habits, consumption choices and/or browsing experiences. This activity is also carried out through the use of technologies such as cookies (for more information see paragraph 14 of this “Cookie Policy”).
LEGAL BASIS
The processing operations carried out for these purposes are necessary for the performance of contractual obligations and do not require specific consent from the data subject. The processing operations carried out for these purposes are based on a legitimate interest of the Controller. The processing operations carried out for these purposes are carried out with the specific consent provided by the user, except for commercial communications relating to products and/or services similar to those already purchased and/or subscribed to by the user, for which the processing is based on a legitimate interest of the Controller. Processing for these purposes is carried out with the specific consent provided by the user, with the exception of an activity of analysis of elementary information relating to his/her consumption preferences.

Scope of data circulation
For administrative purposes, we inform you that your data may be communicated by the Controller to other companies related to us. Furthermore, subject to your consent, your data may be communicated to third party companies with whom we may enter into partnership agreements: social networking and interactive platforms, consumer goods, distribution, financial, insurance, automotive, services and humanitarian and charitable organisations, as well as telecommunications, for commercial and/or promotional purposes.

Extra EU data transfer
Pursuant to art. 43 of the Privacy Code and art. 44 of the GDPR, our company may transfer your personal data to Third Parties located in countries outside the European Union or the European Economic Area. In this circumstance, we ensure the adoption of appropriate safeguards (such as the signing of standard contractual clauses approved by the EU Commission) with the foreign company receiving the data; these clauses guarantee a level of data protection corresponding to that set out in European legislation.

Privacy roles and responsibilities
Your personal data is processed by our company, as Data Controller. More detailed information on the names of the Data Processors can be requested by sending an email.

Methods of data processing
The processing of personal data is carried out mainly using electronic procedures and supports (DB, CRM platforms, etc.) for the time strictly necessary to achieve the purposes for which the data were collected and, in any case, in accordance with the principles of lawfulness, correctness, non-excessiveness and pertinence provided for by current privacy legislation.

Redirection to external sites
The website may use external components such as social plug-ins. Social plug-ins are special tools that make it possible to incorporate social network functions directly into the website (e.g. the Facebook “like” function). All social plug-ins on the website are marked with the respective logo of the social network platform (e.g. Facebook, Google, Twitter, Linkedin). When you visit a page on our website and interact with the plug-in (e.g. by clicking the “Like” button) or leave a comment, the corresponding information is transmitted from your browser directly to the social networking platform and stored there. For information on the purposes, type and manner of collection, processing, use and storage of personal data by the social network platform, as well as on how to exercise your rights, please consult the privacy policy adopted by the individual social network.

Links to/from third party sites
From this website it is possible to connect, by means of specific links, to other websites or it is possible from third party websites to connect to our website. The Owner declines any responsibility regarding the possible request and/or release of personal data to third party sites and regarding the management of authentication credentials provided by third parties.

Data retention
We inform you that data relating to navigation logs, if recorded, will be kept by the Data Controller for a period of 3 months. We also inform you that the data you have provided will be processed for the entire duration of the contractual relationship between us and will be further stored only for the period required to fulfil legal obligations, provided that it is not necessary to store it further to defend or enforce a right or to fulfil any further legal obligations or orders of the Authorities.

Rights of the interested parties
The subjects to whom the above-mentioned personal data refer (so-called “interested parties”), have the right to exercise their rights in the manner and within the limits provided for by current privacy legislation. In relation to the processing of your personal data, you have the right to request from our company

access: you may request confirmation as to whether or not data concerning you are being processed, as well as further clarification of the information set out in this Policy, and to receive such data, within the limits of reasonableness;
rectification: you may ask us to rectify or supplement the data you have provided to us or which are in our possession, if they are inaccurate;
deletion: you may request that your data be deleted if they are no longer necessary for our purposes or if there are no disputes or controversies in existence, if you withdraw your consent or object to their processing, if they are unlawfully processed, or if there is a legal obligation to delete them;
limitation: you may request the limitation of the processing of your personal data, when one of the conditions set out in Article 18 of the GDPR applies; in this case, your data will not be processed, except for storage, without your consent except as explained in the same article in paragraph 2.

objection: you may object at any time to the processing of your data on the basis of a legitimate interest of ours, unless there are legitimate grounds for processing which override your own, for example for exercising or defending ourselves in court; your objection will always override our legitimate interest in processing your data for marketing purposes;
portability: you may request to receive your data, or have it transmitted to another data controller indicated by you, in a structured, commonly used and machine-readable format.
Furthermore, pursuant to Article 7(3) GDPR, we inform you that you may exercise your right to withdraw your consent at any time, without affecting the lawfulness of the processing based on your prior consent. Finally, we inform you that you have the right to lodge a complaint before the Supervisory Authority, which in Italy is the Garante per la Protezione dei Dati Personali. To exercise these rights, report problems or ask for clarification on the processing of your personal data, you can send an email to the contacts on this page. You can also send your request by post, specifying the subject of the request.

Right to be forgotten
We would like to inform you that this Information Notice exclusively concerns the processing of personal data that you have provided or will provide on our website – possibly also by purchasing our products and/or services provided against payment or by taking part in our promotions and/or offers – and those that we will possibly acquire during the course of the present relationship and/or of further relationships between you and us. If you wish, however, to assert your right to be forgotten with reference to your personal data, we would like to remind you that the Data Controller is available, whom you can contact, for the purposes of exercising this right under Article 17 of the GDPR, by writing an email to the email address on this page.

Changes to the Policy
The possible entry into force of new industry regulations, as well as the constant review and updating of services to the user, may require changes to the procedures and terms described in this Policy. It is therefore possible that this document may change over time. We therefore encourage you to periodically consult this page. We will post any changes to this Policy on this page and, if the changes are material, we will provide you with a more prominent notice. Previous versions of this Policy will, however, be archived for your reference.