EVIW 2027 – Information on the Processing of Personal Data
(pursuant to EU Regulation 2016/679)
-
Data Controller
The Data Controller for the processing of personal data carried out through the website www.eviw2027.org and in connection with the organization of the EVIW 2027 event is:
RNIV – Rete Nazionale di Immunologia Veterinaria (RNIV), C.F. 98198240172, with registered office at Fondazione Iniziative Zooprofilattiche e Zootecniche (FONDIZ), Via Istria 3/C, 25125 Brescia (Italy), email: info @ immvet.it (hereinafter, the “Controller”).
-
Data Processor
For the operational management of the website and of the EVIW 2027 event, including participant registration and handling of information requests, the Controller has appointed Triumph [full legal name], with registered office at [address], as Data Processor pursuant to Article 28 of EU Regulation 2016/679 (the “Processor”).
The technical development and hosting of the website are entrusted to an external service provider acting as sub-processor under a written agreement in accordance with Article 28 of EU Regulation 2016/679.
-
Categories of Personal Data Processed
Through the website, the following categories of personal data may be processed:
– identification and contact data (such as name, surname, email address, telephone number, organization, professional role);
– data necessary for event registration and participation;
– billing data, where applicable;
– information provided in free-text fields (e.g. contact forms);
– where relevant, data relating to dietary requirements or accessibility needs;
– technical data collected automatically (e.g. IP address, browser type), as described in the Cookie Policy.
Payment data, where registration fees apply, are processed through a dedicated payment service provider. The Controller and the Processor do not store or have access to full credit card details.
-
Purposes and Legal Bases of Processing
Personal data are processed for the following purposes:
a) management of event registrations, abstract submissions (if applicable), and participation in EVIW 2027.
Legal basis: performance of a contract to which the data subject is party or pre-contractual measures taken at the request of the data subject.
b) handling of information requests submitted through the contact form.
Legal basis: performance of pre-contractual measures at the request of the data subject or the Controller’s legitimate interest in responding to inquiries.
c) administrative, accounting and fiscal management related to the event.
Legal basis: compliance with legal obligations.
d) communication of personal data to event sponsors for their own informational or promotional purposes, where explicitly agreed.
Legal basis: the data subject’s explicit consent, collected separately and freely given.
e) sending information about future editions of EVIW or similar initiatives organized by RNIV.
Legal basis: the data subject’s consent, unless otherwise permitted under applicable law.
-
Nature of the Provision of Data
The provision of personal data marked as mandatory in the registration forms is necessary in order to complete registration and participate in the event. Failure to provide such data will make it impossible to process the registration.
The provision of data for marketing or sponsor-related communications is optional and subject to separate consent.
-
Processing Methods and Security Measures
Personal data are processed by authorized personnel using electronic and IT tools, in compliance with the principles of lawfulness, fairness, transparency, data minimization and integrity.
Appropriate technical and organizational measures are implemented to ensure a level of security appropriate to the risk, including protection against unauthorized or unlawful processing and against accidental loss, destruction or damage.
-
Data Recipients
Personal data may be accessed by:
– authorized staff of the Controller;
– the Processor (Triumph) and its authorized personnel;
– technical service providers (e.g. hosting providers, IT service providers), duly appointed as processors or sub-processors;
– payment service providers, acting as independent data controllers for payment-related processing;
– public authorities, where required by law.
Personal data will not be publicly disclosed.
-
Data Transfers Outside the European Union
Where personal data are transferred to countries outside the European Union or the European Economic Area, such transfers will take place in compliance with applicable data protection legislation, including, where necessary, the adoption of appropriate safeguards such as Standard Contractual Clauses.
-
Data Retention
Personal data will be retained for the time strictly necessary for the organization and management of EVIW 2027 and, thereafter, for the period required to comply with legal, administrative and accounting obligations.
Data processed on the basis of consent for marketing purposes will be retained until consent is withdrawn.
-
Rights of the Data Subject
Data subjects may exercise the rights provided for by Articles 15 et seq. of EU Regulation 2016/679, including the right of access, rectification, erasure, restriction of processing, objection and data portability, as applicable.
Where processing is based on consent, the data subject has the right to withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal.
Requests may be sent to the Controller at the following email address: info @ immvet.it.
Data subjects also have the right to lodge a complaint with the competent supervisory authority.