PRIVACY NOTICE · ART. 13 GDPR
Your privacy.
We treat your data with the same care we bring to the edition itself. This page explains who we are, what we collect, why, and which rights you may exercise.
Last updated:
1 · Data Controller
The Data Controller of personal data collected through this site is:
Data Controller details are currently being registered and will be published shortly. In the meantime, for any request concerning the processing of your personal data you may write to info@fieraturismosud.it.
2 · Categories of data collected
We collect the following categories of personal data, always provided voluntarily by you through the site forms:
a) Exhibitor application data (/esporre form)
- Company name, VAT or tax code, sector, website
- Company location (city, province, region)
- Contact person's first and last name, role, email, phone, preferred language
- Package of interest and free-form notes on exhibition needs
b) Newsletter subscription data (Dispatches)
- Email address
- Subscription date and time
c) Browsing data
The IT systems and software procedures responsible for the operation of this site acquire, during normal operation, certain personal data whose transmission is implicit in the use of Internet communication protocols (anonymized IP addresses, browser type, operating system, visit time and duration). These data are not used to identify users.
3 · Purposes of processing and legal bases
Your data is processed for the following purposes:
| Purpose | Legal basis | Retention |
|---|---|---|
| Evaluating exhibitor application and managing contractual relationship | Art. 6(1)(b) GDPR — pre-contractual and contractual measures | Duration of relationship + 10 years (tax obligations) |
| Responding to information requests (consultation) | Art. 6(1)(b) GDPR — pre-contractual measures | 24 months from last contact |
| Sending the Dispatches newsletter | Art. 6(1)(a) GDPR — consent, revocable at any time | Until consent is withdrawn |
| Commercial communications (optional opt-in on exhibitor form) | Art. 6(1)(a) GDPR — explicit consent | Until consent is withdrawn |
| Site security and abuse prevention | Art. 6(1)(f) GDPR — legitimate interest | 12 months |
4 · Recipients of data and external processors
Your data is processed internally by the Controller's authorized personnel. For the technical and organizational purposes described, we share data with the following providers, designated as Data Processors pursuant to Art. 28 GDPR:
- Vercel Inc. — site hosting (USA; Standard Contractual Clauses)
- Resend, Inc. — transactional emails and newsletter delivery (EU servers, Ireland)
- Formagrid Inc. (Airtable) — exhibitor application storage (USA; Standard Contractual Clauses)
- Cloudflare, Inc. — DNS protection, CDN, security (USA; Standard Contractual Clauses)
- Stripe, Inc. — payment processing where applicable (USA; Standard Contractual Clauses)
Data is never sold to third parties or used for automated profiling activities.
5 · Transfers outside the EU
Some of the providers listed above are based in the United States. In such cases, transfer takes place on the basis of the Standard Contractual Clauses (SCC) approved by the European Commission pursuant to Art. 46 GDPR. Application data is stored in structured format on Airtable (US servers); transactional email is sent via Resend with servers located in Ireland (eu-west-1 region).
6 · Your rights
Pursuant to Art. 15-22 GDPR you have the right to:
- Access your data and obtain a copy (Art. 15)
- Rectification of inaccurate or incomplete data (Art. 16)
- Erasure of data (right to be forgotten, Art. 17)
- Restriction of processing (Art. 18)
- Portability of data in structured format (Art. 20)
- Object to processing (Art. 21)
- Withdraw consent at any time, without affecting the lawfulness of processing based on consent before withdrawal
To exercise these rights, write to us at info@fieraturismosud.it. We will respond within 30 days of receiving the request.
7 · Right to lodge a complaint with the Supervisory Authority
If you believe that the processing of your data is in violation of the GDPR, you have the right to lodge a complaint with the Italian Data Protection Authority (Piazza Venezia 11, 00187 Rome · www.garanteprivacy.it).
8 · Minors
The services offered through this site are intended exclusively for tourism industry professionals. We do not knowingly collect data from minors under 16. In case of accidental collection, data will be deleted without undue delay.
9 · Changes to this notice
We reserve the right to update this notice to reflect regulatory or operational changes. The date of the last update is indicated at the top of the page. Substantial changes will be communicated by email to newsletter subscribers and active exhibitor applicants.