PRIVACY POLICY PURSUANT TO ARTICLE 13 OF THE EUROPEAN GENERAL DATA PROTECTION REGULATION 2016/679
In accordance with Regulation (EU) 2016/679 (hereinafter "General Data Protection Regulation" or "GDPR"), Var Group informs you about the processing of your personal data in connection with your participation in the Hannover Messe 2025 Contest
1. Joint controllers for data processing
The joint controllers for data processing are Var Group S.p.A., headquartered at Via della Piovola, 138 - 50053 Empoli (Florence), Italian VAT No. 03301640482, and its affiliated and controlled companies, which can be viewed at https://www.vargroup.com/it-IT/Contitolari (hereinafter "Joint Controllers").
2. Type and Duration of Data Storage
2.1. Personal Data Collected via the Online Form and During the Draw
The Joint Controllers intend to process the so-called "general" personal data of participants (first name, last name, email address, phone number) electronically, using other data carriers, and in paper form.
Personal data collected via the form and during the draw will be deleted within 20 days after the conclusion of the Contest, except where legal retention periods apply.
2.2. Personal Data for CRM-Based Marketing
This category includes so-called "general" personal data of participants (first name, last name, company, professional position, email address, phone number, and any additional information on business and participation cards), which the Joint Controllers intend to use for marketing purposes with the company's CRM system, subject to the prior consent of the individuals concerned.
The information entered into the CRM system will be stored until the individual withdraws their consent.
2.3. Personal Data Related to Participation and Winning
This category includes so-called "general" personal data of participants (first name, last name, images).
The personal data that clearly identifies the individual (name, last name) will be disclosed by the Organizer during the announcement of the winners.
If the individual has authorized the publication of photos and videos of the events they attended, these may be shared on the websites of the Joint Controllers, their social media pages, YouTube channels, newspapers, magazines, and television. These personal data may also be accessible through online searches via common search engines. It should be noted that once consent is withdrawn, the Joint Controllers will no longer process these data, but they cannot guarantee the complete removal of previously published content, as it may have been duplicated by third parties.
3. Purposes and Legal Basis of Processing
Depending on the category of personal data, the Joint Controllers process data for the following purposes:
- Personal data collected via the online form and during the draw: The Joint Controllers process these data to enable participation in the Contest.
- Personal data for CRM-based marketing activities: The Joint Controllers process these data for marketing purposes.
- Personal data related to participation and winning: The Joint Controllers process these data to promote the company's image.
The legal bases for the processing described above are:
- Consent (Article 6(1)(a)): Personal data for CRM-based marketing activities, personal data related to participation and winning (images);
- Contractual necessity (Article 6(1)(b)): Business and participation cards;
- Legitimate interest (Article 6(1)(f)): Identifying data of participants related to the Contest (first name, last name).
4. Recipients
Personal data related to participation and winning (first name, last name) may be disclosed to Hannover Messe 2025 participants during the winner announcement.
The winners' data may be shared and published on social networks, websites, etc., with prior consent.
If necessary to fulfil the above purposes, your data may also be transferred and processed in countries outside the European Union and the European Economic Area. In such cases, the transfer will take place in compliance with applicable data protection guarantees.
5. Rights of Data Subjects
According to Article 15 of the GDPR, data subjects have the right to access their personal data. Additionally, they have the right to rectification, deletion, restriction of processing, data portability, and objection to the processing of their personal data under Articles 16, 17, 18, 20, and 21 of the GDPR.
Please note that you may exercise your rights against any of the Joint Controllers in accordance with Article 26(3) by sending a request to the following email address: digitallaw&[email protected].
6. Right to Lodge a Complaint
Participants who believe that the processing of their personal data in connection with this Contest violates data protection regulations may file a complaint with their relevant data protection authority.
7. Data Protection Officer
The Data Protection Officer can be contacted at the following email address: [email protected].
8. Key Points of the Joint Controllership Agreement Among Var Group S.p.A. Companies
The key points of the agreement regarding joint data processing responsibilities among Var Group S.p.A. companies can be requested at the following email address: digitallaw&[email protected].