Policy statement pursuant to Article 13 of Regulation (EU) No. 2016/679 (GDPR)
North America Beauty Events L.L.C. (hereinafter "NABE", the “Data Controller” or the “Company”) informs you that the personal data voluntarily transmitted by you will be processed in compliance with the current legal provisions governing the protection of personal data and in any event, in accordance with the confidentiality principles followed by the Company in its operations.
1. Purposes of processing
The personal data you provide to NABE may be utilized for:
(i) the establishment and conduct of contractual relationships, as well as fulfillment of all the regulatory, fiscal and administrative requirements essential for, related to and/or in any way useful the establishment and conduct of the contractual relationships (including the activities necessary for the ordinary management of the exhibition);
(ii) the compliance with the legal obligations incumbent upon the Company;
(iii) the preparation of studies and statistical and market research;
(iv) the organization and conduct of events and meetings of a promotional or other nature;
(v) the publication of data on your company in the catalog, on the website, and on the Exhibition Guide Map, in press releases, mail and promo mail communications related to the Exhibition (including any activitiesnecessary for managing the on-line and off-line publication);
(vi) the sending of informative and commercial messages (so-called “marketing”), promotional or otherwise, advertising material including that relative to past editions of the Exhibition or other exhibitions in general, offers of goods and services in connection thereof, by mail, the Internet, telephone, e-mail, MMS or SMS from Italy or from abroad (from EU and non-EU Member States) by the Company or individual or legal entities collaborating in the business activities of the Company, by companies specialized in telemarketing, or by parent companies, subsidiaries and/or affiliates of NABE, and/or partners of NABE.
The processing of the data for the purpose sub (i) does not require your consent as the processing is necessary for the execution of the contracts of which you are a part or for the adoption of pre-contractual measures adopted upon your request, pursuant to art. 6, c. 1, b) of the GDPR. The processing of data for the purpose of sub (ii) does not require your consent as it is necessary to fulfil the legal obligations to which the Company is bound, pursuant to art. 6, c. 1, c) of the GDPR. The processing of data for the purposes sub (iii), (iv), (v), (vi) requires your consent pursuant to art. 6, c. 1, a) of the GDPR.
2. Methods of processing
The personal data will be processed by suitable paper-based, electronic and/or Web-based instruments with logic strictly related to the aforesaid purposes and, in any case, such as to ensure data security and confidentiality.
3. Provision of data and consequences of refusal
The provision of the aforesaid data is voluntary and will in no way result in a change in prices and/or rates; refusal to convey them and/or providing incorrect and/or incomplete data may make it impossible to:
(i) institute and/or ensure the proper, timely execution of the contractual relationship and fulfill the legal, fiscal and administrative requirements essential or related to and/or useful to the purposes of establishing and conducting the contractual relationship (including activities necessary for the ordinary management of the exhibition);
(ii) organize, conduct and/or permit your participation in events and meetings, of a promotional or other nature;
(iii) publish data on your company in the catalog, on the website, on the Exhibition Guide Map, in any press releases, mail and promo mail communications related to the Exhibition;
(iv) contact you and/or deliver informative and promotional messages, of a commercial or other nature, advertising material and/or offers of goods and services.
Providing personal data is mandatory, however, in cases expressly required by law and/or fiscal and administrative regulations, and in that case failure to consent to the processing and transfer of the required personal data will make it impossible for NABE to fulfill the corresponding legal, administrative and/or fiscal obligations.
4. Disclosure of the data
Within the Company, the data provided may be disclosed to shareholders, members of the board of directors or other administrative body, members of the board of statutory auditors, Company’s personnel and, in any case, to the internal and/or external Data Processors and Persons in charge of processing personal data (“persons authorized to process”) designated by NABE in the performance of its duties.
Your personal data may be disclosed to any qualified parties that provide the Company with services essential to the purposes indicated in paragraph 1 above, including but not limited to: partners, parent companies, subsidiaries, investees and/or affiliates; individuals, entities and/or companies that manage and/or participate in the management and/or maintenance of the websites and electronic and/or Web-based instruments utilized by the Company; suppliers, contractors, subcontractors or other qualified parties that provide the Company’s services essential to the establishment and/or conduct of the contractual relationship with the Company (such as banks and/or parties charged to make collections and payments, insurance companies); parties that provide services consisting of or concerning the preparation of statistical and market research and the organization and conduct of events and exhibitions, of a promotional or other nature; the sending of informative and/or commercial messages, of a promotional or other nature, and advertising material and/or offers of goods and services in the methods indicated in paragraph 1 above; consultants that assist the Company in various ways, with particular reference to legal, tax, social-security, accounting, organizational and commercial aspects; auditing firms; any other parties to which the data must be disclosed based on a specific statutory provisions. Your personal data may be transferred abroad, in conformity with current regulations, even to non-EU Member States and other countries where the Company pursues its interests.
5. Transfer of data to third countries.
Your data will be transferred in countries belonging to the EU. Furthermore, the personal data may be transferred or communicated abroad, also in countries outside the European Union as the United States. Transfer in countries outside the European Union, in addition to cases where this is guaranteed by Adequacy Decisions of the Commission, is carried out in such a way as to provide appropriate and proper safeguards pursuant to Articles 46 or 47 or 49 of the GDPR.
6. Dissemination of the data
Your personal data will not be disseminated.
7. Period of the processing
Your personal data shall be processed only for the time necessary to achieve the purposes of the processing operations, and the personal data shall be stored for a maximum period of time equal to the statute of limitation of the rights, as applicable from time to time. In the case of processing for marketing purposes, the data shall be stored for a maximum period of 24 months.
8. Rights of the data subjects
With regard to the aforesaid processing, you may exercise your rights pursuant Article 15-22 of GDPR, and in particular:
a) to obtain confirmation as to whether or not Data concerning him or her are being processed;
b) if Data is being processed, to obtain access to the personal data and to the information relating to the processing as well as to request a copy of the personal data;
c) to obtain rectification of inaccurate personal data and to have incomplete personal data completed;
d) if any of the conditions under Article 17 of the GDPR exists, to obtain the erasure of the personal data concerning him or her;
e) in the cases provided for by Article 18 of the GDPR, to obtain restriction of processing;
f) to receive the personal data concerning him or her in a structured, commonly used and machine-readable format, and to transmit it to another controller, where technically feasible;
g) to object at any time to the processing of personal data concerning him or her carried out to pursue the legitimate interests of the Controller. In case of objection, personal data shall no longer be processed, unless there are legitimate grounds for processing that override the interests, rights and freedoms of the Visitor or when required for the establishment, exercise or defence of legal claims;
h) revoke at any time the consent already given, without prejudice to the lawfulness of the processing based on the consent given prior to the withdrawal.
i) To lodge a complaint with the lead data protection authority, i.e. the Garante per la protezione dei dati personali.
9. Data Controller. Data Processors.
The Data Controller is North America Beauty Events L.L.C., with headquarters in 15825 N 71st St 100, Scottsdale, AZ 85254, USA. Any request concerning personal data processed by PBA may be addressed by writing an e-mail to the address: firstname.lastname@example.org.
The updated list of Data Processors is available at NABE, or can be requested via email at: email@example.com.
Having read the foregoing policy statement, we expressly consent to the processing of our personal data in the methods indicated therein, for the purposes of:
a) preparing studies and statistical and market research
b) the organization and conduct of events and meetings of a promotional or other nature
c) permit the publication of your company data in the catalog, on the website, on the Exhibition Guide Map, in any press releases and mail or promo mail communications related to the Exhibition (including the conduct of activities necessary to manage on-line and off-line communications)
d) receive informative and commercial messages (so-called “marketing”), of a promotional or other nature, as well as advertising material including that relative to past editions of the Exhibition or other exhibitions in general, offers of goods and services in connection thereof, by mail, the Internet, telephone, e-mail, MMS, or SMS from Italy or from abroad (from EU and non-EU Member States) by the Company or by individual or legal entities that collaborate in the business activities of the Company, by companies specialized in telemarketing, or by parent companies, subsidiaries and/or affiliates of NABE, and/or partners of NABE.