Processing of personal information means the collection, recording, organisation, conservation, processing, alteration, selection, retrieval, comparison, use, disclosure, erasure, distribution, interconnection and any other processing which is useful for the performance of the activities related to the Event.
1. Personal information we may collect
1.1 Board collects personal information provided by users when submitting the registration form on the website www.board-day.com (the “Website”) and in particular:
– name, surname and job title and other contact information including the e-mail address and telephone number;
– personal information such as address, postcode, country, and company.
Board may record audio and video in the course of the Event. Board may take photos of the Event that might also include your appearance or picture; Board will also make available an automatic camera that can be used autonomously by the attendees during the Event. Photos may be edited, copied, exhibited, published or distributed and the content of the speech may be partially reproduced in a writing form. Photographic, audio and video recordings may be electronically displayed via the Internet or in any other materials for marketing purposes connected to the Event and shall be deemed without any payment obligation for Board to you.
The aforementioned information falls under the definition of personal data, i.e. any information concerning an identified or identifiable physical person (the “Data subject”); identifiable refers to physical persons who can be identified, directly or indirectly, with particular reference to data such as the name, identification number, data concerning their location, an online ID or one or more characteristic elements of his or her physical, physiological, genetic, mental, economic, cultural or social identity.
1.2 When submitting the registration form on the Website, Board may also collect personal information that is considered “sensitive” by the applicable data protection laws (that include the General Data Protection Regulation -the “GDPR”-, as well as the relevant applicable local legislation on data protection). This information may be necessary for the organization and provision of the meals during the Event. The use and processing of the aforementioned information will be carried out in compliance with the applicable data protection laws and regulation.
2. Purposes of the processing
2.1 The data you have provided at the time of filing the registration form on the Website, or otherwise acquired by Board during the activities related to the Event, are processed for purposes linked to the provision of the services related to the Event (including the organization of provision of the meals), for the administrative management of the participation, for the execution of specific activities and for the sending of email referring to the Event. After the Event, Board may send you emails relating to similar events or connected to services that are similar to the ones pertinent to the Event. You may object to the sending of e-mails at any time.
2.2 Photographic, audio or video recordings and the written text of the speech may be used for marketing activities referred to the Event, included the ones carried out by Board.
3. Methods of processing
Your data are collected by the parties indicated in article 6 and the related processing is carried out by using manual or computerised automated instruments with logics strictly linked to the purposes described above and in any case to guarantee the security and confidentiality of the data.
4. Optional nature of the provision of data
4.1 The provision of data (described in article 1) by you is absolutely optional and does not represent a legal requirement; however, in some cases, the provision of your data could be required in order to provide the services and perform the activities related to the Event.
4.2 As regards the effects of the non-acceptance or disabling of the cookies, please refer to the terms of the Cookies Policy.
5. Categories of subjects to whom data may be disclosed
5.1 Data collected for the purposes described in article 2.1and 2.2 may be disclosed to companies performing functions that are strictly linked and instrumental to the performance of the services Such data may be transferred to associated companies and/or companies in the Board group or third parties even located outside the European Community, where there is a decision of suitability (guarantee of an appropriate level of protection) by the European Commission.
5.2 Data collected for the purposes listed in point 2 may be transferred to third parties in the Board Group or other third parties (located inside or outside the European Community), also for sale or attempted sale, i.e. all purposes of a lawful commercial and/or statistical nature. The list of persons to whom your data have been disclosed may be requested from Board using the e-mail address given in point 7.4.
6. Controller, Processors and Representatives
6.1 Data Controller or Controller refers to the physical or legal person, public authority, service or other body which, individually or with others, determines the purposes and means of the processing of personal data; where the purposes and means of processing are determined by law by the European Union and the Member States, the Controller or the specific criteria applicable to his or her appointment may be established by the law of the European Union and the Member States.
6.2 The Controllers are Board International SA with registered office in Piazza Bernasconi 5, Chiasso, Ticino 6830, Switzerland and the other companies in the Board group which work autonomously and independently in the processing of data.
6.4 The Controllers have appointed their own employees and collaborators to process the data.
6.5 Data Subjects may exercise their rights towards each Controller.
7. Rights of the Data Subjects
7.1 You have the right, at any time, to obtain confirmation from the Controller as to whether or not personal data concerning you is being processed, to know its origin, purposes and methods of processing; you also have the right to request the updating, correction, integration, erasure, transformation into an anonymous form, the suspension of any data processed in violation of the relevant legislation, including those which are no longer necessary to pursue the purposes for which they were collected and/or subsequently processed.
7.2 You have the right to object, wholly or partially, to the processing of your data for legitimate reasons, even where this is still relevant for the purpose for which they were collected, and to the processing of your data for the purpose of commercial information or the sending or advertising materials or direct sales or for the execution of market research or commercial communication.
7.3 You have the right to receive the data concerning you provided, in a structured, commonly used and machine-readable format, and to transmit those data to another controller without hindrance.
7.4 To exercise your rights please write to the specific e-mail address: privacy@Board.com.
7.5 Please note that you also have the right to lodge a complaint with the competent supervisory authority.
7.6 If you no longer wish to receive notifications via e-mail from Board and wish to unsubscribe from the newsletter, you may do so by clicking on the “erasure” link at the bottom of each e-mail sent by Board.
8. Period for which the personal data is stored
8.1 Your data will be conserved in hard copy and/or electronic/computerised/optical format for the time strictly necessary to meet the purposes listed in point 2 and, where applicable, until the revocation of the consent, in compliance with the laws in force. Board has defined the specific duration of the conservation of data for each type of data collected. At the end of such periods, Board will definitively erase your data.
8.2 If you request the erasure of your data from the Website. Please not that such data will be conserved for the purpose of the investigation and prosecution of breaches for a period of no more than 12 months from the date of communication, and will subsequently be erased safely in an anonymised and irreversible manner. Please also note that for the same purposes the data relating to telematic traffic, excluding in any case the contents of the communications, shall be kept for a period of no more than 12 months following the date of communication.