PRIVACY POLICY

Dear user, pursuant to Article 13 of EU Regulation No. 679/2016 (GDPR), we would like to provide you with clear and simple information on how we process the personal data that you directly provide to us or that we may otherwise obtain through your browsing of our website.

Data Controller
The Data Controller is Bologna Welcome S.r.l.
Registered Office: P.zza Nettuno, 1 – 40124 Bologna

Contact point for information
privacy@bolognawelcome.it

1. WHAT IS THE LIFECYCLE OF PERSONAL DATA? PERSONAL DATA PROCESSED, PURPOSES, AND LEGAL BASIS FOR PROCESSING

CONTACTS AND INFORMATION

What personal data do we process?
First name and last name
Email address
Phone number

Why do we process them (purposes and legal basis)?
The processing is based on the data subject’s consent in order to respond to their requests for information and clarifications regarding the data controller’s processing activities.

What happens if we are unable to process the data?
Failure to provide the data will make it impossible to submit and respond to user requests.

How long do we process the data for?
The data are processed for the time necessary to respond to information and contact requests.

WHO MAY BECOME AWARE OF MY DATA?

Personal data will not be disclosed or shared with third parties.

SUBSCRIBE TO OUR NEWSLETTER SERVICE

What personal data do we process?
First name and last name
Email address
Country and/or city of origin*
Data on travel habits and preferences*

What happens if we are unable to process the data?
Providing the data is necessary for the conclusion of the contract, and failure to provide the data makes it impossible to register for the Affiliates Area.
The uploading of images is optional, and failure to provide them does not prevent registration to the affiliation program.

How long do we process the data for?
The data are processed for the duration of the contractual relationship and, thereafter, for the period required by law for administrative, tax, and accounting purposes.

WHO MAY BECOME AWARE OF MY DATA:

Personal data will not be published on the Bologna Welcome website. Any publication of content (e.g. images, contact details) on the website is based on the data subject’s consent.
Personal data will be disclosed to our business partners who collaborate in promoting the activities of Bologna Welcome affiliates. The provision of data is a contractual obligation, and failure to provide the data does not allow the user to take advantage of the opportunities offered by the affiliation program in terms of visibility and business growth.

The data subject who uploads images taken at their premises or business is the sole owner of such images and guarantees that their processing, also with reference to any third parties, is lawful and based on informed, freely given, specific and unambiguous consent or on another lawful basis.

BUY THE BOLOGNACARD OR COMPLETE OTHER ONLINE PURCHASES

What personal data do we process?
First name and last name
Email address
Phone number

Why do we process them (purposes and legal basis)?
The processing allows the establishment and performance of the contractual relationship, as well as compliance with all applicable tax and administrative legal requirements, instrumental, related, and/or otherwise useful for the establishment and performance of the contractual relationship enabling the purchase of the Bologna Card, the booking of a service (e.g. hotel accommodation), or the completion of online purchases or purchases at our points of sale of products and services (e.g. tours, travel packages).

What happens if we are unable to process the data?
Providing the data is necessary for the conclusion of the contract, and failure to provide it makes the purchase impossible.
Without a phone number, we cannot inform you of schedule changes or contact you for logistical needs related to guided tours or other services.

How long do we process the data for?
The data are processed for the duration of the contractual relationship and, thereafter, for the period required by law for administrative, tax, and accounting purposes.

What personal data do we process?
First name and last name
Email address

Why do we process them (purposes and legal basis)?
Strictly for the purpose of sending commercial offers for services and products similar to those already purchased, the processing is based on our legitimate interest.

What happens if we are unable to process the data?
Providing personal data is optional and does not prevent the purchase. The data subject has the right to object to direct marketing at any time.

How long do we process the data for?
The sending of commercial offers for services similar to those purchased is carried out for an unlimited period, until the data subject objects to the processing or the service is terminated.

What personal data do we process?
Phone number
Date of birth
Country and/or city of origin
Data on travel habits and preferences

Why do we process them (purposes and legal basis)?
The data are collected with the data subject’s consent for statistical purposes and to offer experiences and products aligned with their preferences.

What happens if we are unable to process the data?
Providing the data is optional and does not prevent the purchase, but it reduces the ability to offer similar services or to collect statistics on the service provided.

How long do we process the data for?
The data are stored for a period of 12 months (profiling).
The data will then be anonymised for further statistical processing.

WHO MAY BECOME AWARE OF MY DATA?

Personal data will not be disclosed or shared with third parties.
Personal data will be communicated exclusively to Partner providers that supply the services/products purchased by users (e.g. tour operators, hotels). Some Partners may send their own commercial communications only where the data subject has given consent.

Personal data will not be disclosed to third parties.

ACCESS THE RESTRICTED AREA

What personal data do we process?
First name and last name
Email address
Login credentials

Why do we process them (purposes and legal basis)?
The processing is based on the data subject’s consent to allow access to the restricted area of the Bologna Welcome website.

What happens if we are unable to process the data?
Providing the data is optional, but failure to provide it makes access to the restricted area impossible.

How long do we process the data for?
The data are processed for the duration of the data subject’s registration to the restricted area, at the discretion of the data subject.

What personal data do we process?
First name and last name
Email address
Login credentials

Why do we process them (purposes and legal basis)?
The processing is based on the data subject’s consent to allow access to the restricted area of the Bologna Welcome website.

What happens if we are unable to process the data?
Providing the data is optional, but failure to provide it makes access to the restricted area impossible.

How long do we process the data for?
The data are processed for the duration of the data subject’s registration to the restricted area, at the discretion of the data subject.

WHO MAY BECOME AWARE OF MY DATA?

Personal data will not be disclosed or communicated to third parties.

BECOME A MEMBER OF THE BOLOGNA CONVENTION BUREAU

What personal data do we process?
Personal data
Contact details
Data relating to business activities
Personal and contact details of the internal contact person of the registered organisation

Why do we process them (purposes and legal basis)?
The processing allows the establishment and performance of the contractual relationship, as well as compliance with all applicable tax and administrative legal requirements, instrumental, related, and/or otherwise useful for the establishment and performance of the contractual relationship enabling participation in the Bologna Convention Bureau network.

What happens if we are unable to process the data?
Providing the data is necessary for the conclusion of the contract, and failure to provide the data makes participation in the Bologna Convention Bureau network impossible.

How long do we process the data for?
The data are processed for the duration of the contractual relationship and, thereafter, for the period required by law for administrative, tax, and accounting purposes.

WHO MAY BECOME AWARE OF MY DATA?

Personal data will not be published on the Bologna Welcome website. Any publication of content and personal data (e.g. images, contact details) on the website is based on the data subject’s consent.
Personal data will be disclosed to our business partners who collaborate in promoting the activities of the Bologna Welcome partner network. The provision of data is a contractual obligation, and failure to provide the data does not allow participation in the network, involvement in event organisation, or access to training opportunities.

RECEIVING CVs

What personal data do we process?
Personal data
Contact details
Career data

Why do we process them (purposes and legal basis)?
Staff selection.

What happens if we are unable to process the data?
Failure to provide the data makes it impossible to forward and respond to applicants.

How long do we process the data for?
1 year

VIDEO SURVEILLANCE SYSTEM OF THE PALADOZZA

Who processes the images?
The recorded video images may be made available to the Judicial Authority and/or the Police, upon specific request.

Who may become aware of the personal data?
Your data are processed by specially designated internal authorised personnel who are bound by strict confidentiality obligations, as well as by Law Enforcement Authorities.

Consult the full privacy notice ->

What personal data do we process?
Images from the video surveillance system.

Why do we process them (purposes and legal basis)?
To ensure security and the protection of company assets, based on the legitimate interest of the data controller. To monitor the behaviour of the public in the stands during sporting events in order to prevent offences. The processing is necessary for the performance of a task carried out in the public interest.

What happens if we are unable to process the data?
The processing is necessary and lawful as it is carried out pursuant to Article 6(1)(c), (e) and (f) of Regulation (EU) 2016/679.

How long do we process the data for?
Images are automatically deleted after 48 hours.

2. BY WHAT MEANS ARE PERSONAL DATA PROCESSED?

The collected data are mainly processed using electronic tools. Appropriate security measures are adopted to prevent data loss, unlawful or improper use, and unauthorised access. The Data Controller collects personal data through dedicated contact forms or via email communication sent to the Data Controller.

The Data Controller sends email messages to users who have given specific consent through a newsletter management service.
For the newsletter service and the sending of commercial and promotional communications, we use the HubSpot service for email distribution.
Personal data are mainly processed within the territory of the European Union.

When you make a purchase on our website, some data may be processed through data centres located in Switzerland via one of our personal data processors. The transfer of data to Switzerland ensures an adequate level of protection in accordance with the European Commission’s adequacy decision of 26 July 2000.
Some services provided by our data processors (newsletter services, management systems and CRM, other services) involve the transfer of personal data to the United States of America. The transfer of data to the U.S.A. ensures an adequate level of protection, as these companies adhere to the Privacy Shield agreement, which binds U.S. companies to guarantee data protection levels in line with European Union standards.

Once the purpose of the processing has been achieved, personal data may be anonymised for statistical purposes, in the legitimate interest of the Data Controller to analyse aggregated data, which do not in any way allow the identification of the data subject who provided the data.

WHY DO WE ASK YOU FOR MORE INFORMATION ABOUT YOURSELF?

If the data subject gives consent, profiling is used to offer experiences, services, and products aligned with the interests demonstrated by the data subject.

No automated decision-making is applied, and your consent allows us to remind you to revisit events or places similar to those you have visited, to inform you about new editions of events you have attended, or to propose products and services we believe may be of interest to you.

Through this processing, you allow us to contact you via email, telephone, SMS, or other means to which you have given consent, in order to inform you about places, products, services, and events in Bologna that best match your preferences.

The data subject has the right to object to processing related to profiling and direct marketing.

3. WHO PROCESSES PERSONAL DATA?

Personal data are processed by authorised internal personnel who have been specifically trained in data processing and are bound by professional secrecy and strict confidentiality obligations.
Personal data are also processed by companies responsible for website updates and maintenance, or by providers of other services to the Data Controller, who are formally appointed as Data Processors and are bound to comply with technical and organisational security measures ensuring the protection of personal data.

For certain projects, services, or products, personal data are processed jointly with third parties acting as Joint Controllers of personal data, through agreements defining the purposes and methods of processing, also to ensure the protection of personal data. For example, individual tour or travel package providers act as Joint Controllers and process data to allow access to the service. Bologna Fiere acts as Joint Controller for certain initiatives, such as the sending of promotional material to purchasers of the Bologna Welcome Card Art Week.

4. THE DATA SUBJECT HAS THE RIGHT TO REQUEST FROM THE DATA CONTROLLER

Access to personal data
The data subject may obtain confirmation as to whether or not personal data concerning them are being processed, and may obtain further information on the processing as well as a copy of the personal data.

Rectification of personal data
The data subject may request the rectification of their personal data to ensure that the data processed are accurate.

Erasure of personal data
The data subject may obtain the erasure of personal data in the cases referred to in Article 17 of the GDPR.
The data subject has the right to obtain anonymisation or blocking of data processed in violation of the law pursuant to Article 7 of Legislative Decree 196/2003.

Restriction of processing concerning them
The data subject may request restriction of processing, including by objecting to erasure where the data are necessary for the establishment, exercise, or defence of a legal claim in court.

Right to data portability (for data processed by automated means)
The data subject has the right to receive their personal data in a structured, commonly used, and machine-readable format.

Where processing is based on consent, the data subject has the right to withdraw their consent at any time.

The data subject may object to the processing of personal data.
The data subject has the right to object at any time to direct marketing.
Some personal data voluntarily provided by data subjects may be used to create user profiles; however, no decisions are made based on automated processes.
Profiling is linked to the consent given by the data subject, who may object at any time.

The data subject may request further information or exercise their rights under Articles 12–22 of EU Regulation No. 679/2016 and Article 7 of Legislative Decree 196/2003 by contacting the Data Controller’s point of contact: privacy@bolognawelcome.it
The data subject has the right to lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali). For more information on the right to lodge a complaint, please visit the following webpage: https://goo.gl/GLbTN9

5. MINORS UNDER 16 YEARS OF AGE

Bologna Welcome does not offer services directly aimed at users under 16 years of age. If you are under 16, you must not provide any information or personal data (such as name, surname, and email address) under any circumstances without prior authorisation from a parent or the holder of parental responsibility.
If Bologna Welcome becomes aware that personal data have been provided by a person under 16 years of age, it will promptly request the submission of appropriate consent from the parents (or the holder of parental responsibility) in order to process the received data.
In the absence of timely consent, Bologna Welcome will immediately delete the personal data received and reserves the right to block access to the services available on the website.
Any personal accounts created by users under 16 will also be deleted if the user has concealed their age, including by providing false information or otherwise communicating personal data without parental consent (or the consent of the holder of parental responsibility).
The transmission of consent to Bologna Welcome by the holders of parental responsibility may take place electronically (email) or in person at the Bologna Welcome offices at Piazza Nettuno 1, Bologna.
In accordance with Article 8 of the GDPR, Bologna Welcome makes all reasonable efforts to verify the accuracy of the data provided and the consent given; any misuse by the user cannot be attributed to Bologna Welcome.