PRIVACY POLICY

Table of Contents

1. Information on the processing of personal data

1) General Conditions and Identity of the Seller

The offer and sale of participation in the Digital Innovation Days, presented within the website available at digitalinnovationdays.com, is governed by these general conditions of online sales (hereinafter, for brevity, "General Conditions") governing the relationship between Premium Digital Marketing Italia S.r.l., P. IVA 09775660963, with registered office in Via Francesco Olgiati 26 - 20143 Milano (MI) , info@digitalinnovationdays.com, (hereinafter "Premium"), and the Client, as defined below. In the relationship with the Client the provisions set forth in the General Conditions, published within the Official Site, as defined below, available at the time of the conclusion of the Contract, will apply.

2) Definitions

The following terms and expressions shall have the meanings set forth below for each of them within the General Conditions, the Contract, and in the phases of its execution; terms defined in the singular shall also be understood to be defined in the plural, and vice versa;

• "Customer": means any user who purchases participation in Digital Innovation Days, accepting the General Terms and Conditions and the Contract;
• "Consumer" means any natural person acting for purposes unrelated to any entrepreneurial, commercial, craft or professional activity;
• "Contract": means the agreement between Premium and the Client aimed at regulating their legal relationship as governed by the General Conditions and Order Form and any other information rendered within the Ecommerce.
• "General Conditions": means this document;
• Event Venue: means the set of buildings and grounds that constitute the venues for the Digital Innovation Days.
• Order Form: means the supplementary document to the General Conditions;
• Parties: means jointly Premium and the Client;
• Participation: means the admission ticket to DIDAYS, purchased within the Official Site;
• Official Website: means the website within which Participation can be purchased;
• DIDAYS: means the event, Digital Innovation Days that will take place online or in-person on the dates that are planned from year to year, as defined within the Official Site.

3) Introduction

This information is related to the data processing carried out by Premium Digital Marketing Italia S.r.l., P. IVA 09775660963, with registered office in Via Francesco Olgiati 26 - 20143 Milano (MI), info@digitalinnovationdays.com (hereinafter the "Data Controller"), also in compliance with EU Regulation 2016/679 (hereinafter "GDPR").
The Data Controller, in fact, may process personal data related to customers and suppliers, whether interested parties and/or contractors, as defined by the current legislation on personal data.

4) Identity and contact details of the data controller.

PREMIUM DIGITAL MARKETING ITALIA S.R.L.

ADDRESS

Via Francesco Olgiati 26 - 20143 Milan

RECAP

info@digitalinnovationdays.com

Owner's Representative

Giulio Nicoletti

Regarding the processing of personal data carried out through this website, please refer expressly to the information notice.

5) Contact details of the data protection officer.

The Owner has appointed data protection officers who can be contacted at the addresses in the table.

6) Data of third parties

Should the client/supplier/consultant disclose to the Controller personal data of third parties, its own employees and/or collaborators, for the purpose of the execution of the contract, the client shall make the third party aware of this circumstance, as well as make the third party aware of this disclosure.

7) Purpose of processing and legal basis for processing

Personal data will be processed for the following purposes:

a) for contractual purposes and/or related to the execution of pre-contractual measures taken at your specific request, as well as to fulfill any legal obligations related to such purposes. In this case, the need to proceed with the processing in order to execute the contract and/or for the management of pre-contractual relations constitutes the legal basis;

b) to send direct marketing communications, newsletters, advertising material from the Owner or the sponsor/partner companies of the initiative (list available here), by means of traditional contact systems and automated computer systems, including commercial or promotional communications by email or SMS, or for market research and analysis. In this case, consent, expressed in accordance with this notice, is the legal basis; in the case of communications not directly related to the event, explicit consent is required

(c) for purposes related to related legal obligations where processing has been carried out for the purposes referred to in (a). A legal basis in this case is the legal obligation of the Controller to process such personal data in accordance with the applicable national legislation.

8) Ways of expressing consent

Consent, where required, may be expressed:

• By signing a computerized document, including through specific flagboxes;
• By signing a paper document.

9) Method of processing and logic

• In relation to the personal data processed and stored for the purposes referred to in point a), number 7 of this notice (contractual and pre-contractual purposes), point d), number 7 (legal purposes), the processing will take place by means of paper instruments, automated logics and use of CRM-type management software that will allow the best management of the fulfillment of contractual obligations;
• in relation to personal data processed for the purposes referred to in point b) number 7 of this policy (marketing purposes), the processing will be carried out by means of automated business information sending software.

10) Source from which personal data originates

Only data provided in accordance with this policy, collected at our office or by sending e-mails, will be processed. In connection with the processing carried out for the purpose of making personalized services available through profiling, such data may be correlated in order to derive additional profiled information. Personal data from publicly accessible sources will not be processed.

11) Recipients and possible categories of recipients of personal data

They may be recipients of personal data:

• communications companies that carry out commercial communications and profiling activities on behalf of the Controller, if the relevant consent has been given, which hold the status of data controllers;
• Companies offering information society services, including, in particular, those offering hosting services;
• companies conducting statistical and market surveys, if the relevant consent has been given;
• accounting firms;
• consulting and obtaining certification companies;
• tax and tax consulting companies;
• The company in charge of the corporate ICT service.

12) Data Categories.

Personal data will be processed.
Under no circumstances may data of belonging to the following categories be processed: special data, e.g. suitable for revealing health status.

13) Data Transfer

The Data Controller intends to transfer personal data to a third country or international organization. Such parties could be represented, by way of example, by:

• Communications companies that perform communications activities on behalf of the Holder;
• provider of communication society services;
• Controlled and/or controlling organizations.

The transfer of personal data to such subjects, when established in a third country or an international organization, is carried out in the presence of an adequacy decision by the European Commission, which has verified how the third country, the territory or one or more specific sectors within the third country, or the international organization in question guarantee an adequate level of protection of rights. In any case, the Data Controller - should the latter nevertheless deem it appropriate - reserves the right to enter into specific separate agreements obliging such parties to adopt adequate security measures, including organizational measures, aimed at providing appropriate guarantees regarding rights. Data may thus be transferred to the following countries: UK, United States of America. To obtain a copy of such data or the place where they have been made available, simply send the relevant request to the Data Controller, at the addresses in the epigraph.

14) Storage period of personal data

• Personal data processed and retained for the purposes set forth in point (a) number 7 of this policy statement (contractual and pre-contractual purposes) shall be processed for a period of time not exceeding, however, 10 years commencing from the termination of the effects of the contract, in the case of its conclusion, and, in the case of mere pre-contractual negotiations, for a period not exceeding 10 years from the termination of the negotiations.
• Personal data processed for the purposes set forth in item b) number 7 of this policy (marketing purposes) are processed and retained until the data subject requests their deletion and/or revocation.
• Personal data processed and retained for the purposes of point c) number 7 (fulfillment of legal obligations) shall be processed and retained for a period of not more than 10 years starting from the termination of the effects of the contract, in case of its conclusion, and, in the case of mere pre-contractual negotiations, for a period of not more than 10 years from the termination of the negotiations, subject, in any case, to different legal regulations.

15) Optionality of consent and consequences of non-consent

• In relation to personal data processed and stored for the purposes referred to in point (a) number 7 of this information (contractual and pre-contractual purposes), the disclosure of personal data is an obligation of a contractual nature and a necessary requirement for the performance of pre-contractual negotiations and the conclusion of the contract. The data subject has the option to provide personal data; however, in case of failure to provide such data, it will not be possible to conclude any contract or carry out any contractual negotiations.
• In relation to personal data processed for the purposes referred to in point b) number 7 of this notice (marketing purposes) the disclosure of personal data is not a contractual obligation. There is an option to provide personal data; however, in case of non-disclosure of such data, no marketing activities will be possible.
• In relation to personal data processed for the purposes referred to in point c) number 7 of this information (legal obligations) the disclosure of personal data is a legal obligation. There is an obligation in this case to provide personal data; in case of failure to provide such data, it will not be possible to conclude the contract.

16) Right of opposition

The person concerned, has the right to object in the following terms:

• The right to object at any time, on grounds relating to his or her particular situation, to the processing of personal data concerning him or her pursuant to Article 6(1)(e) or (f) of the GDPR, including profiling on the basis of these provisions. The Data Controller shall refrain from further processing personal data unless the Data Controller demonstrates the existence of compelling legitimate grounds for processing which override the interests, rights and freedoms of the data subject or for the establishment, exercise or defense of legal claims.
• Where personal data are processed for direct marketing purposes, there is a right to object at any time to the processing of personal data about you carried out for such purposes, including profiling insofar as it is related to such direct marketing.
• In case of opposition to processing for direct marketing purposes, personal data are no longer processed for such purposes. It is specified how the data subject's right to object to the processing of his or her personal data for the aforementioned purposes may also be exercised only in part, i.e. by objecting, for example, only to the sending of promotional communications carried out through automated and/or digital means, or to the sending of paper communications.
• Where personal data are processed for scientific or historical research purposes or for statistical purposes pursuant to Article 89(1) of the GDPR, the data subject, on grounds relating to his or her particular situation, has the right to object to the processing of personal data concerning him or her, except where the processing is necessary for the performance of a task carried out in the public interest.

17) Other rights

The Holder would also like to inform you of the existence of the following rights:

• Right of access: the data subject has the right to obtain confirmation from the Controller that personal data concerning him or her is or is not being processed, and if so, to obtain access to personal data and specific information, in accordance with Article 15 of the GDPR.
• Right of rectification: the data subject has the right to obtain from the Controller the rectification of inaccurate personal data concerning him/her without undue delay. Taking into account the purposes of the processing, the data subject has the right to obtain the integration of incomplete personal data, including by providing a supplementary declaration, in accordance with Article 16 of the GDPR.
• Right to erasure of data, including the right to withdraw consent: the data subject has the right to obtain from the Data Controller the erasure of personal data concerning him or her without undue delay, and the Data Controller has the obligation to erase without undue delay the personal data, or to withdraw his or her consent, if the grounds defined in Article 17 of the GDPR exist. Regarding the right of revocation, the data subject also has the right to revoke consent at any time without affecting the lawfulness of the processing based on the consent given before revocation.
• Right to limitation of processing: the data subject has the right to obtain from the Data Controller the limitation of processing when the hypotheses defined in Article 18 of the GDPR apply.
• Right to data portability: the data subject has the right to receive in a structured, commonly used, machine-readable format the personal data concerning him or her provided to the Data Controller and has the right to transmit such data to another data controller without hindrance from the Data Controller in the cases and under the conditions specified by Article 20 of the GDPR.
• Contractor's right to object to commercial communications: the contractor has the right to object at any time, free of charge, to receiving commercial communications.

18) Exercise of rights

Instances of the exercise of the rights set forth in this notice, including, in particular, the right to cancellation and the right to revoke the consent given should be addressed directly to the Holder at the e-mail address indicated in the introduction.

19) Accessibility of disclosure

The information is accessible at the Controller's offices. If expressly requested, the information may also be provided orally, provided the identity of the requester is proven, by a telephone request addressed to the addresses of the Holder.

2. Information on the processing of personal data (initiatives)

1) Introduction

This information notice is related to the data processing carried out by Premium Digital Marketing Italia S.r.l., P. IVA 09775660963, with registered office inVia Francesco Olgiati 26 - 20143 Milano (MI), info@digitalinnovationdays.com (hereinafter the "Data Controller"), also in compliance with the EU Regulation 2016/679 (hereinafter "GDPR").
In fact, the Data Controller may process personal data related to individuals who join the initiatives and competitions related to the Digital Innovation Days, in compliance with the respective offers to the public. The information is also accessible at the Holder. If expressly requested, the information indicated herein may also be provided orally, provided that the identity of the applicant is proven, by means of a telephone request.

2) Identity and contact details of the data controller.

PREMIUM DIGITAL MARKETING ITALIA S.R.L.

ADDRESS

Via Francesco Olgiati 26 - 20143 Milan

RECAP

info@digitalinnovationdays.com

EMAIL DPO

info@digitalinnovationdays.com

Regarding the processing of personal data carried out through this website, please refer expressly to the information notice.

3) Purpose of processing, legal basis of processing, optionality of consent and consequences of non-consent

Personal data will be processed for the following purposes:

a) For contractual purposes and/or related to the execution of pre-contractual measures taken upon specific request and, in particular, to enable participation in the initiatives of the Digital Innovation Days, in accordance with the relevant offers to the public, to which this notice accesses. In this case, the need to proceed with the processing in order to execute the contract and/or for the management of pre-contractual relations constitutes the legal basis. In relation to the personal data processed and stored for the said purposes, the disclosure of personal data is an obligation of a contractual nature and a necessary requirement for the conduct of pre-contractual negotiations and the conclusion of the contract. The data subject has the option to provide personal data; however, in case of failure to provide such data, it will not be possible to conclude any contract or carry out any contract negotiations or allow participation in initiatives.

(b) For purposes related to related legal obligations where processing has been carried out for the purposes referred to in (a). A legal basis in this case is the legal obligation of the Controller to process such personal data in accordance with the applicable national legislation. The disclosure of personal data is a legal obligation. There is an obligation, in this case, to provide personal data; in case of failure to provide such data, it will not be possible to conclude the contract or participate in the initiative.

c) To send direct marketing communications, newsletters, advertising material, by means of traditional contact systems and automated computer systems, including commercial or promotional communications by email or SMS, or for market research and analysis. In this case, the legal basis is consent, expressed in accordance with this notice. The disclosure of personal data is not a contractual obligation, so there is the option to provide personal data; however, in case of failure to provide such data, no marketing activities will be possible.

d) To send emails of a commercial nature in relation to goods and services similar to those being sold in accordance with the Italian Guarantor's order on Soft-spam and the relevant European legislation. This processing will be carried out until the data subject unsubscribes or the legitimate interest of the Data Controller to continue the communications ceases to exist.

4) Ways of expressing consent

Consent, where required, may be expressed by signing a computerized document, including by means of specific flagboxes;

5) Processing mode and logic

In relation to the personal data processed and stored for the purposes referred to in point a), number 4 of this notice (contractual and pre-contractual purposes), point b), number 4 (legal purposes), the processing will take place by means of paper tools, automated logics and use of CRM-type management software that will allow to better manage the fulfillment of obligations. Additional personal data may, in addition, be collected during the course of the initiative itself, including through technologies suitable for audiovisual filming. In this case, personal data may be disseminated within telematic communication networks, including the Internet and social networks.

In relation to personal data processed for the purposes mentioned in point (c) number 4 of this policy (marketing purposes), the processing will be carried out by means of software for sending commercial information, as well as paper-based tools.

6) Source from which personal data originated.

Only personal data provided in accordance with this notice, collected through a specific form, or data collected during the course of the initiative accessed by this notice, will be processed. Collection may also take place by audiovisual means. Personal data from publicly accessible sources will not be processed.

7) Recipients and possible categories of recipients of personal data.

They may be recipients of Personal Data:

• Communications companies that carry out business communication activities, which hold the status of data controllers;
• Companies offering information society services, including, in particular, those offering hosting services;
• Initiative partner companies;
• Audit firms.

8) Data Categories.

Personal data will be processed: under no circumstances will data of belonging to the category of special data, such as data disclosing health status, be processed.

9) Data Transfer

The Data Controller intends to transfer personal data to a third country or international organization. Such parties could be represented, by way of example, by:

• Communications companies that perform communications activities on behalf of the Holder;
• Provider of communication society services;
• Controlled and/or controlling organizations.

The transfer of Personal Data to such entities, when established in a third country or an international organization, is carried out in the presence of an adequacy decision by the European Commission, which has verified how the third country, the territory or one or more specific sectors within the third country, or the international organization in question guarantee an adequate level of protection of rights. In any case, the Data Controller - should the latter nevertheless deem it appropriate - reserves the right to enter into specific separate agreements obliging such entities to adopt adequate security measures, including organizational measures, designed to provide appropriate guarantees regarding rights. Data may thus be transferred to the United States of America. To obtain a copy of such data or the place where it has been made available, simply send the relevant request to the Data Controller, at the addresses in the epigraph.

10) Retention Period of Personal Data

The personal data processed and stored for the purposes referred to in point a) and b) of number 4 of this policy statement (contractual and pre-contractual purposes and fulfillment of legal obligations) shall be processed for a period of time not exceeding, however, 10 years starting from the termination of the effects of the contract, in the case of its conclusion, and, in the case of mere pre-contractual negotiations, for a period not exceeding 10 years from the termination of the negotiations, subject, in any case, to different legal regulations;

Personal data processed for the purposes set forth in paragraph (c) number 4 of this policy (marketing purposes) are processed and retained until the data subject requests their deletion and/or revocation.

11) Right of Opposition

The person concerned, has the right to object in the following terms:

• The right to object at any time, on grounds relating to his or her particular situation, to the processing of Personal Data concerning him or her pursuant to Article 6(1)(e) or (f) of the GDPR, including profiling on the basis of these provisions. The Data Controller shall refrain from further processing Personal Data unless the Data Controller demonstrates the existence of compelling legitimate grounds for processing that override the interests, rights and freedoms of the data subject or for the establishment, exercise or defense of legal claims;
• Where Personal Data is processed for direct marketing purposes, there is a right to object at any time to the processing of Personal Data relating to you carried out for such purposes, including profiling insofar as it is related to such direct marketing;
• In case of opposition to the processing for direct marketing purposes, Personal Data are no longer processed for such purposes. It is specified how the data subject's right to object to the processing of his or her Personal Data for the aforementioned purposes may be exercised even in part, i.e. by objecting, for example, only to the sending of promotional communications carried out through automated and/or digital means, or to the sending of paper communications;
• Where Personal Data are processed for scientific or historical research purposes or for statistical purposes pursuant to Article 89(1) of the GDPR, the data subject, on grounds relating to his or her particular situation, has the right to object to the processing of Personal Data concerning him or her, except where the processing is necessary for the performance of a task carried out in the public interest.
• Where personal data are processed for direct marketing purposes, there is a right to object at any time to the processing of personal data about you carried out for such purposes, including profiling insofar as it is related to such direct marketing;
• In case of opposition to processing for direct marketing purposes, personal data are no longer processed for such purposes. It is specified how the data subject's right to object to the processing of his or her personal data for the aforementioned purposes may also be exercised only in part, i.e. by objecting, for example, only to the sending of promotional communications carried out through automated and/or digital means, or to the sending of paper communications.

12) Other rights

The Holder would also like to inform you of the existence of the following rights:

• Right of Access: the data subject has the right to obtain confirmation from the Data Controller that personal Data concerning him or her is or is not being processed, and if so, to obtain access to Personal Data and specific information, in accordance with Article 15 of the GDPR;
• Right of rectification: the data subject has the right to obtain from the Data Controller the rectification of inaccurate Personal Data concerning him/her without undue delay. Taking into account the purposes of the processing, the data subject has the right to obtain the integration of incomplete Personal Data, including by providing a supplementary declaration, in accordance with Article 16 of the GDPR;
• Right to data erasure, including the right to withdraw consent: the data subject has the right to obtain from the Data Controller the erasure of Personal Data concerning him/her without undue delay, and the Data Controller has the obligation to erase without undue delay the Personal Data, or to withdraw his/her consent, if the grounds defined in Article 17 of the GDPR exist. Regarding the right of revocation, the data subject also has the right to revoke consent at any time without affecting the lawfulness of the processing based on the consent given before revocation;
• Right to limitation of processing: the data subject has the right to obtain from the Data Controller the limitation of processing when the hypotheses defined in Article 18 of the GDPR apply;
• Right to data portability: the data subject has the right to receive in a structured, commonly used and machine-readable format the Personal Data concerning him or her provided to the Data Controller and has the right to transmit such data to another data controller without hindrance from the Data Controller in the cases and under the conditions specified by Article 20 of the GDPR;

13) Exercise of rights

Requests for the exercise of the rights indicated in this notice, including, in particular, the right to cancellation and the right to revoke the consent given should be addressed directly to the Data Controller at the email address info@digitalinnovationdays.com Alternatively, you can exercise your rights by sending the relevant communication by registered letter with return receipt to the address via Nicola Palmieri n.65 Milan

14) Contact details of the data protection officer.

The Owner has appointed its own data protection officer, who can be contacted at the same addresses as the Owner or, alternatively, info@digitalinnovationdays.com

3. Information on the processing of personal data (call)

1) Introduction

This information is related to the data processing carried out by Premium Digital Marketing Italia S.r.l., P. IVA 09775660963, with registered office in Via Francesco Olgiati 26 - 20143 Milano (MI), info@digitalinnovationdays.com (hereinafter the "Data Controller"), also in compliance with EU Regulation 2016/679 (hereinafter "GDPR"). The Data Controller, in fact, may process personal data related to individuals who request to be able to participate, as speakers, moderators or workshop presenters, within the event (hereinafter "Digital Innovation Days").
The information is also accessible at the Data Controller. If expressly requested, the information indicated herein may also be provided orally, provided the identity of the applicant is proven, by means of a telephone request.

2) Identity and contact details of the data controller.

PREMIUM DIGITAL MARKETING ITALIA S.R.L.

ADDRESS

Via Francesco Olgiati 26 - 20143 Milan

RECAP

info@digitalinnovationdays.com

EMAIL DPO

info@digitalinnovationdays.com

Regarding the processing of personal data carried out through this website, please refer expressly to the information notice.

3) Information regarding data processing carried out through website and third party data

With regard to the processing of personal data carried out through this website, express reference is made to the information notice in the appropriate section.
Before providing materials containing personal data of third parties, it is necessary to provide the third party with this information notice and inform him/her that his/her personal data will be processed in accordance with what is provided herein, requesting the relevant consent, within the terms provided by the current regulations.

4) Purpose of processing, legal basis of processing, optionality of consent and consequences of non-consent

Personal data will be processed for the following purposes:

a) For purposes related to participation as a speaker, moderator or workshop presenter at the Event. In this case, the consent of the data subject is the legal basis. In relation to personal data processed and stored for the said purposes, the disclosure of personal data is not a contractual obligation. The data subject has the option to provide personal data; however, in case of non-disclosure of such data, it will not be possible to allow participation in the Event as a speaker, moderator or workshop presenter.

(b) For purposes related to related legal obligations where processing has been carried out for the purposes referred to in (a). A legal basis in this case is the legal obligation of the Controller to process such personal data in accordance with the applicable national legislation. The disclosure of personal data is a legal obligation. There is an obligation, in this case, to provide personal data; in case of failure to provide such data, however, it will not be possible to allow participation in the event as a speaker, moderator or workshop presenter.

c) To send direct marketing communications, newsletters, advertising material, by means of traditional contact systems and automated computer systems, including commercial or promotional communications by email or SMS, or for market research and analysis. In this case, the legal basis is consent, expressed in accordance with this notice. The disclosure of personal data is not a contractual obligation, so there is the option to provide personal data; however, in case of failure to provide such data, no marketing activities will be possible.

d) To send emails of a commercial nature in relation to goods and services similar to those being sold in accordance with the Italian Guarantor's order on Soft-spam and the relevant European legislation. This processing will be carried out until the data subject unsubscribes or the legitimate interest of the Data Controller to continue the communications ceases to exist.

5) Ways of expressing consent

Consent, where required, may be expressed by signing a computerized document, including by means of specific flagboxes;

6) Processing mode and logic

In relation to the personal data processed and stored for the purposes referred to in point a, number 4 of this policy and point b, number 4, the processing will take place by means of paper-based tools, automated logic and use of CRM-type management software that will allow the best management of the processing of personal data. Personal data may also be disseminated within telematic communication networks, including the Internet and social networks.

In relation to personal data processed for the purposes mentioned in point (c) number 4 of this policy (marketing purposes), the processing will be carried out by means of software for sending commercial information, as well as paper-based tools.

7) Source from which personal data originated.

Only personal data provided in accordance with this policy, collected through a specific form, will be processed. Personal data from publicly accessible sources will not be processed.

8) Recipients and possible categories of recipients of personal data

They may be recipients of personal data:

• Companies offering information society services, including, in particular, those offering hosting services;
• Initiative partner companies;
• Audit firms.

9) Categories of data

Personal data will be processed: under no circumstances will data of belonging to the category of special data, such as data disclosing health status, be processed.

10) Data Transfer

The Data Controller intends to transfer personal data to a third country or international organization. Such parties could be represented, by way of example, by:

• Communications companies that perform communications activities on behalf of the Holder;
• Provider of communication society services;
• Controlled and/or controlling organizations.

The transfer of personal data to such entities, when established in a third country or an international organization, is carried out in the presence of an adequacy decision by the European Commission, which has verified how the third country, the territory or one or more specific sectors within the third country, or the international organization in question guarantee an adequate level of protection of rights. In any case, the Data Controller - should the latter nevertheless deem it appropriate - reserves the right to enter into specific separate agreements obliging such entities to adopt adequate security measures, including organizational measures, aimed at providing appropriate guarantees regarding rights. Data may thus be transferred to the United States of America. To obtain a copy of such data or the place where it has been made available, simply send the relevant request to the Data Controller, at the addresses in the epigraph.

11) Storage period of personal data

The personal data processed and retained for the purposes under (a) and (b) in number 4 of this notice shall be processed for a period of time not exceeding, however, 10 years starting from the day of mailing, subject, in any case, to different legal regulations.

Personal data processed for the purposes set forth in paragraph (c) number 4 of this policy (marketing purposes) are processed and retained until the data subject requests their deletion and/or revocation.

12) Right of Opposition

The person concerned, has the right to object in the following terms:

• The right to object at any time, on grounds relating to his or her particular situation, to the processing of personal data concerning him or her pursuant to Article 6(1)(e) or (f) of the GDPR, including profiling on the basis of these provisions. The Data Controller shall refrain from further processing personal data unless the Data Controller demonstrates the existence of compelling legitimate grounds for processing which override the interests, rights and freedoms of the data subject or for the establishment, exercise or defense of legal claims;
• Where personal data are processed for direct marketing purposes, there is a right to object at any time to the processing of personal data about you carried out for such purposes, including profiling insofar as it is related to such direct marketing;
• In case of opposition to processing for direct marketing purposes, personal data are no longer processed for such purposes. It is specified how the data subject's right to object to the processing of his or her personal data for the aforementioned purposes may also be exercised only in part, i.e. by objecting, for example, only to the sending of promotional communications carried out by automated and/or digital means, or to the sending of paper communications;
• Where personal data are processed for scientific or historical research purposes or for statistical purposes pursuant to Article 89(1) of the GDPR, the data subject, on grounds relating to his or her particular situation, has the right to object to the processing of personal data concerning him or her, except where the processing is necessary for the performance of a task carried out in the public interest.
• Where personal data are processed for direct marketing purposes, there is a right to object at any time to the processing of personal data about you carried out for such purposes, including profiling insofar as it is related to such direct marketing;
• In case of opposition to processing for direct marketing purposes, personal data are no longer processed for such purposes. It is specified how the data subject's right to object to the processing of his or her personal data for the aforementioned purposes may also be exercised only in part, i.e. by objecting, for example, only to the sending of promotional communications carried out through automated and/or digital means, or to the sending of paper communications.

13) Other rights

The Holder would also like to inform you of the existence of the following rights:

• Right of access: the data subject has the right to obtain confirmation from the Controller that personal data concerning him or her is or is not being processed, and if so, to obtain access to personal data and specific information, in accordance with Article 15 of the GDPR;
• Right of rectification: the data subject has the right to obtain from the Controller the rectification of inaccurate personal data concerning him/her without undue delay. Taking into account the purposes of the processing, the data subject has the right to obtain the integration of incomplete personal data, including by providing a supplementary declaration, in accordance with Article 16 of the GDPR;
• Right to data erasure, including the right to withdraw consent: the data subject has the right to obtain from the Controller the erasure of personal data concerning him/her without undue delay, and the Controller has the obligation to erase without undue delay the personal data, or to withdraw his/her consent, if the grounds defined in Article 17 of the GDPR exist. Regarding the right of revocation, the data subject also has the right to revoke consent at any time without affecting the lawfulness of the processing based on the consent given before revocation;
• Right to limitation of processing: the data subject has the right to obtain from the Data Controller the limitation of processing when the hypotheses defined in Article 18 of the GDPR apply;
• Right to data portability: the data subject has the right to receive in a structured, commonly used, machine-readable format the personal data concerning him or her provided to the Data Controller and has the right to transmit such data to another data controller without hindrance from the Data Controller in the cases and under the conditions specified by Article 20 of the GDPR;

14) Exercise of rights

Requests to exercise the rights set forth in this policy, including, in particular, the right to cancellation and the right to revoke the consent given should be addressed directly to the Owner at the email address info@digitalinnovationdays.com Alternatively, it is possible to exercise one's rights by sending relative communication by registered letter with return receipt to the address Via Francesco Olgiati n. 26 - Milano

15) Contact details of the data protection officer.

The Owner has appointed its own data protection officer, who can be contacted at the same addresses as the Owner or, alternatively. info@digitalinnovationdays.com

4. Cookies policy

Our portal or the "Site" uses Cookies to make its services simple and efficient for the users who view the pages of positioning-seo.
Users who view the Site, will see minimal amounts of information inserted into the devices in use, whether computers or mobile devices, in small text files called "cookies" saved in the directories used by the User's web browser.
There are various types of cookies, some to make the use of the Site more effective, others to enable certain features.
Analyzing them in detail, our cookies allow:

• store the preferences entered
• Avoid re-entering the same information multiple times during the visit such as user name and password
• Analyze the use of services and content provided by our portal to optimize the browsing experience and services offered

1) Types of Cookies used on our portal.

Following are the various types of cookies used by positioning-seo according to the purposes of use

2) Technical Cookies

This type of cookie allows certain sections of the Site to function properly. They are of two categories: persistent and session:

• persistent: once the browser is closed, they are not destroyed but remain until a preset expiration date
• Of sessions: they are destroyed each time the browser is closed

These cookies, always sent from our domain, are necessary to properly display the site and in relation to the technical services offered, will therefore always be used and sent, unless the user does not change the settings in their browser (thus affecting the display of pages on the site).

3) Analytical cookies

Cookies in this category are used to collect information about the use of the Site. Positioning-seo will use this information with regard to anonymous statistical analysis in order to improve the use of the Site and to make the content more interesting and relevant to the user's wishes.
This type of cookie collects data anonymously about user activity and how users arrived at the Site. Analytical cookies are sent by the Site itself or by third-party domains.

4) Analytics cookies from third-party services

These cookies are used in order to collect information about users' use of the Site anonymously such as: pages visited, time spent, source traffic origins, geographic origin, age, gender and interests for the purpose of marketing campaigns. These cookies are sent from third-party domains external to the Site.

5) Cookies to integrate third-party software products and functions

This type of cookie integrates functionality developed by third parties within the pages of the Site such as icons and preferences expressed in social networks for the purpose of sharing site content or for the use of third-party software services (such as software to generate maps and additional software offering additional services).
These cookies are sent by third-party domains and partner sites that offer their functionality between the pages of the Site.

6) Profiling cookies

These are those cookies necessary to create user profiles in order to send advertising messages in line with the preferences expressed by the user within the pages of the Site.

Our portal, according to current regulations, is not required to seek consent for technical and analytics cookies, as they are necessary to provide the requested services.

For all other types of cookies, consent may be expressed by the User in one or more of the following ways:

• By specific configurations of the browser used or the related computer programs used to navigate the pages that make up the Site.
• By changing settings in the use of third-party services

Either of these solutions may prevent you from using or viewing parts of the Site.

7) Third-party websites and services

The Site may contain links to other Web sites that have their own privacy policies that may differ from those adopted by positioning-seo and therefore are not responsible for those sites.

8) How to disable cookies by browser configuration

If you decide to disable all cookies on each site, you must do so by disabling cookies directly from the browser you are using.

The following is the procedure to follow.

9) Chrome

• Running the Chrome Browser
• Click on the menu on the browser toolbar next to the url entry window for browsing
• Select Settings
• Click Show Advanced Settings
• In the "Privacy" section, click "Content Settings" button.
• In the "Cookies" section you can change the following cookie-related settings:
• Allow data to be saved locally
• Change local data only until the browser is closed
• Preventing sites from setting cookies
• Blocking third-party cookies and data from sites
• Manage exceptions for some websites
• Deleting any or all cookies

For more information visit the dedicated page.

10) Mozilla Firefox

• Run the Mozilla Firefox Browser
• Click on the menu on the browser toolbar next to the url entry window for browsing
• Select Options
• Select the Privacy panel
• Click Show Advanced Settings
• In the "Privacy" section, click "Content Settings" button.
• In the "Tracking" section, you can change the following cookie-related settings:
• Require sites to do no tracking
• Notify sites of willingness to be tracked
• Do not communicate any preference regarding personal data tracking
• From the "History" section, it is possible:
• By enabling "Use custom settings" select to accept third-party cookies (always, from the most visited sites or never) and to keep them for a specified period (until they expire, when Firefox closes, or to ask each time)
• Remove individual stored cookies

For more information visit the dedicated page.

11) Internet Explorer

• Run the Internet Explorer Browser
• Click on the Tools button and choose Internet Options
• Click on the Privacy tab and in the Settings section change the slider to the desired cookie action:
• Block all cookies
• Allow all cookies
• Selection of sites from which to obtain cookies: move the cursor to an intermediate position so as not to block or allow all cookies, then press on Sites, in the Website Address box enter a website and then press on Block or Allow

For more information visit the dedicated page.

Safari 6

• Running the Safari Browser
• Click on Safari, select Preferences and press on Privacy
• In the Block Cookies section, specify how Safari should accept cookies from Internet sites.
• To view which sites have stored cookies click on Details

Safari iOS (mobile devices)

• Running the iOS Safari Browser
• Tap on Settings and then Safari
• Tap on Block Cookies and choose from the options: "Never," "Third-party and advertisers," or "Always"
• To clear all cookies stored by Safari, tap on Settings, then on Safari, and finally on Clear Cookies and Data

For more information visit the dedicated page.

Opera

• Running the Opera Browser
• Click on Preferences then on Advanced and finally on Cookies
• Select one of the following options:
• Accept all cookies
• Accept cookies only from the site you are visiting: third-party cookies and that are sent from a domain other than the one you are visiting will be rejected
• Never accept cookies: all cookies will never be saved

For more information visit the dedicated page.

12) How to disable cookies from third-party services

• Google Services
• Facebook
• Twitter

13) Further information on treatment

Litigation defense

The User's Personal Data may be used for the defense by the Data Controller in court or in the preparatory stages of its possible establishment, from abuse in the use of the same or related services by the User.
The User declares that he/she is aware that the Data Controller may be required to disclose the Data at the request of public authorities.

Specific disclosures

Upon the User's request, in addition to the information contained in this privacy policy, this Application may provide the User with additional and contextual disclosures regarding specific services, or the collection and processing of Personal Data.

System logs and maintenance

For operation and maintenance purposes, this Application and any third-party services it uses may collect System Logs, which are files that record interactions and may also contain Personal Data, such as the User's IP address.

Information not contained in this policy

More information in relation to the processing of Personal Data may be requested at any time from the Data Controller using the contact information.

Exercise of Rights by Users

The subjects to whom the Personal Data refer have the right at any time to obtain confirmation of the existence or non-existence of the same at the Data Controller, to know its content and origin, to verify its accuracy or request its integration, deletion, updating, rectification, transformation into anonymous form or blocking of Personal Data processed in violation of the law, as well as to oppose in any case, for legitimate reasons, their processing. Requests should be addressed to the Data Controller.

This Application does not support "Do Not Track" requests. To find out if any third-party services you use support them, see their privacy policies.

Changes to this privacy policy

The Data Controller reserves the right to make changes to this privacy policy at any time by giving notice to Users on this page. Therefore, please consult this page often, taking as reference the date of last modification indicated at the bottom. If you do not accept the changes made to this privacy policy, you must cease using this Application and may request the Data Controller to remove your Personal Data. Unless otherwise specified, the previous privacy policy will continue to apply to the Personal Data collected up to that point.

About this privacy policy

The Data Controller is responsible for this privacy policy, drafted from forms prepared by Iubenda and stored on its servers.

This page is visible by means of links at the bottom of all pages of the Site in accordance with Article 122 second paragraph of Legislative Decree 196/2003 and following the simplified procedures for information and acquisition of consent for the use of cookies published in the Official Gazette No. 126 of June 3, 2014 and its register of measures No. 229 of May 8, 2014.

Updated 11/16/2021