Privacy Notice

The Data Controller is E4 Computer Engineering S.p.A. VAT No. 02005300351 Via Martiri della Libertà 66, 42019-Scandiano (RE) e-mail: privacy@e4company.com tel. 0522 991811

The Data Protection Officer is Michele Moscatelli c/o E4 Computer Engineering S.p.A. located at Via Martiri della Libertà 66, 42019-Scandiano (RE) e-mail: dpo@e4company.com tel. 0522 991811

• registration and participation of the data subject in the Event and related activities;
• fulfilment of tax and accounting obligations;
• compliance with obligations incumbent on the company and required by applicable legislation (including, by way of example and without limitation: anti-money laundering, insurance, occupational health and safety);
• protection of a right in court or before judicial authorities exercising judicial functions;
• protection of company assets (video surveillance);
• creation and/or publication on the company website of names or personal images (photographs and audio/video recordings);
• creation and/or publication of photographs and audio/video recordings on the company’s LinkedIn, X and YouTube social channels;
• creation and/or publication of photographs and audio/video recordings in the company’s printed or multimedia materials;
• organisation of refreshment areas available during the event, involving the processing of personal data pursuant to Article 9 of Regulation (EU) 2016/679 concerning health information relating to any food allergies or intolerances.

The processing is lawful because it is:

• necessary for registration and participation in the Event;
• necessary for compliance with a legal obligation to which the Data Controller is subject (for example, keeping and retaining accounting records under tax legislation and compliance with anti-money laundering, privacy, insurance, occupational hygiene and safety regulations);
• necessary for the purposes of the legitimate interests pursued by the Data Controller, including the protection of its rights in court or before judicial authorities;
• necessary for the protection of company assets (video surveillance).

Processing of personal data is based on the data subject’s explicit consent (Article 6(1)(a) of Regulation (EU) 2016/679) with regard to:

1. creation and/or publication on the company website of names or personal images (photographs and audio/video recordings);
2. creation and/or publication of photographs and audio/video recordings on the company’s LinkedIn, X and YouTube social channels;
3. creation and/or publication of photographs and audio/video recordings in the company’s printed or multimedia materials;
4. organisation of refreshment areas available during the event, involving the processing of personal data pursuant to Article 9 of Regulation (EU) 2016/679 concerning health information relating to any food allergies or intolerances.

The personal data processed for registration for the event may include:

• first name, surname, e-mail address and contact details;
• personal data pursuant to Article 9 of Regulation (EU) 2016/679 concerning health information relating to any food allergies or intolerances, for the purpose of properly managing the refreshment areas available during the event;
• photographs and/or audiovisual images.

Personal data is processed only to the extent strictly necessary to achieve the purposes indicated above, by means of one or more of the operations referred to in Article 4(2) of Regulation (EU) 2016/679. These operations may be carried out with or without the aid of electronic, telematic or otherwise automated tools. Personal data is processed in compliance with the security measures provided for by Regulation (EU) 2016/679 and the Italian Personal Data Protection Code.

Providing personal data is not a legal obligation, but it is a necessary requirement for registration and participation in the event.

With regard to the following data processing activities:

1. a)publication of photographs/audiovisual recordings on the LinkedIn and X pages, on the YouTube channel and/or in the company’s promotional materials and/or on the company website for the company’s promotional purposes;
2. b)organisation of refreshment areas available during the event, involving the processing of personal data pursuant to Article 9 of Regulation (EU) 2016/679 concerning health information relating to any food allergies or intolerances; failure to give consent does not affect registration or participation in the event.

Your personal data will be retained, unless you object, as described below.

Personal data relating to registration and participation in the event will be retained for one month from the date of the event. In the event of legal obligations or disputes, personal data will be retained in accordance with the ordinary limitation periods established by the Italian Civil Code or by specific legal provisions, for administrative purposes and/or for the protection of a right in court or before judicial authorities, and in any case until the expiry of the applicable limitation period for the pursuit of the Data Controller’s legitimate interest.

Personal data relating to photographs and audiovisual recordings will be retained for five years from the date of the event. In the event of legal obligations or disputes, personal data will be retained in accordance with the ordinary limitation periods established by the Italian Civil Code or by specific legal provisions, for administrative purposes and/or for the protection of a right in court or before judicial authorities, and in any case until the expiry of the applicable limitation period for the pursuit of the Data Controller’s legitimate interest.

Personal data may be disclosed to, or become known by, the following parties for the purposes set out above:

• persons authorised to process data;
• data processors and their further processors and authorised persons, such as, by way of example and without limitation: consultants, suppliers and their appointed technical staff, and appointed collaborators, all designated as Data Processors by the Data Controller;
• public bodies, judicial or administrative authorities, for compliance with legal obligations or the performance of assigned duties;
• banks and insurance institutions;
• other parties that process data in fulfilment of specific legal obligations.

Personal data may be subject to fully automated decision-making processes, including profiling.

Your personal data may be transferred to countries outside the European Union, as the Data Controller uses the following services:

• “Microsoft Office 365”, “Outlook”, “Teams”, “One Drive”, headquartered in Redmond, Washington 98052, provided by Microsoft Corporation;
• “Google LLC”, which uses offices located in the United States;
• “Zoom Meetings”, headquartered in San Jose, California.
• “Jira” and “Confluence”, provided by Atlassian Pty Ltd c/o Atlassian, Inc., 350 Bush Street, Floor 13, San Francisco, CA 94104;
• “YouTube”, headquartered at 901 Cherry Avenue, San Bruno, CA 94066, United States, provided by
• “LinkedIn”, headquartered at 1000 W. Maude Avenue, Sunnyvale, CA 94085, United States, provided by LinkedIn Corporation, which uses offices located in the United States;
• “X”, provided by X Holding Corp, which uses offices located in the United States;
• "MailUp", provided by Growens S.p.A., with registered office at Via Pola 9, 20124 Milan (Italy), which may use offices located outside the European Union;
• “Monkey Survey”, provided by SurveyMonkey Inc., with registered office in San Mateo, CA 94403, United States.

Any transfer of your personal data to the United States is, in any case, compliant with the GDPR by virtue of the EU-US Adequacy Decision adopted through the “Data Privacy Framework” decision of 10 July 2023.

Pursuant to Articles 15-18 and 20-21 of Regulation (EU) 2016/679, you have the right to obtain confirmation as to whether or not personal data concerning you exists, even if not yet recorded, and to receive such data in an intelligible form. You have the right to obtain information on: a) the source of the personal data; b) the purposes and methods of processing; c) the logic applied in the event of processing carried out with the aid of electronic tools; d) the identification details of the Data Controller and any processors; e) the parties or categories of parties to whom the personal data may be disclosed or who may become aware of it in their capacity as processors or authorised persons. You also have the right to obtain: a) updating, rectification or, where interested, integration of the data; b) erasure, anonymisation or blocking of data processed unlawfully, including data whose retention is not necessary in relation to the purposes for which it was collected or subsequently processed; c) certification that the operations referred to in points a) and b) have been notified, including as regards their content, to those to whom the data has been communicated or disclosed, except where this requirement proves impossible or involves a manifestly disproportionate effort compared with the right being protected. You have the right to object, in whole or in part: a) on legitimate grounds, to the processing of personal data concerning you, even if relevant to the purpose of collection; b) to the processing of personal data concerning you for the purposes of sending advertising material or direct selling, carrying out market research or commercial communications. You have the right to data portability, namely to receive personal data concerning you in a structured, commonly used and machine-readable format and to transmit such data to another controller without hindrance. You also have the right to lodge a complaint with a supervisory authority (in Italy, the Garante per la Protezione dei Dati Personali: www.garanteprivacy.it). You may exercise your rights by sending a written request to the Data Controller at the addresses (registered office, e-mail) indicated in point 1.

With regard to any infringements arising from the transfer of data abroad, you may exercise your rights as provided for by the Data Privacy Framework of 10 July 2023.

The list of persons appointed to process data, in relation to limited sectors and operations, is constantly updated and is available upon request to the Data Controller, including through the contact details indicated in point 1.