Privacy Policy for the management of MZ Events events
This privacy notice describes the methods by which ALISEI – National Technological Cluster for Life Sciences Association processes the personal data of data subjects in the context of events, congresses, conferences, workshops, webinars, B2B meetings, networking initiatives, and similar activities organized or managed by MZ Events, when such data are communicated to ALISEI by MZ Events on the basis of a free, specific, informed, optional, and separate consent. The notice also applies to any data collected directly by ALISEI during the event or in subsequent contacts with the data subject, within the limits of the purposes indicated below.
1. Data Controller
ALISEI – National Technological Cluster for Life Sciences Association.
Registered office: Piazza Città di Lombardia n. 1, 20124 Milan.
Tax Code: 97703670154.
E-mail: segreteria@clusteralisei.it.
Certified e-mail (PEC): ctn@pec.clusteralisei.it.
Telephone: +39 02 82950723.
Any requests relating to the processing of personal data may be sent to the Association’s secretariat or to any other privacy contact indicated on the institutional website of ALISEI.
2. Source of the data
Personal data may be received by ALISEI following communication by MZ Events S.r.l., as the organizer or manager of the event, when the data subject has provided MZ Events with a specific consent to the communication of data to ALISEI as an independent data controller.
Data may also be collected directly by ALISEI during the event through contacts with ALISEI personnel, participation in networking sessions, information requests, paper or digital forms, e-mails, business cards, or subsequent contacts from the data subject.
If the data were not collected directly from the data subject, ALISEI processes them pursuant to Art. 14 GDPR on the basis of the information received from MZ Events and/or what is subsequently provided by the data subject.
3. Categories of data processed
Depending on the case, ALISEI may process: name, surname, e-mail, telephone number, city, country, belonging organization or entity, professional role or qualification, sector of activity, data relating to the interest shown in the event or participation in it, as well as any further information voluntarily communicated by the data subject.
During the event, ALISEI may also process data relating to interactions had with the data subject, preferences expressed with respect to themes, initiatives, or projects of the Cluster, as well as any data contained in follow-up or contact requests.
ALISEI does not require the provision of special categories of personal data pursuant to Art. 9 GDPR; if such data are incidentally communicated by the data subject, they will be processed only if strictly necessary and in the presence of an appropriate legal ground.
4. Purposes of processing and legal bases
Purpose | Legal basis | Data processed | Indicative retention period |
Management of post-event contacts, sending of informative materials, follow-up, responding to requests, and development of institutional and networking relationships consistent with the cluster’s activities. | Art. 6, par. 1, let. a) GDPR (consent provided for communication in favor of ALISEI and/or subsequent consent of the data subject); where applicable, Art. 6, par. 1, let. b) GDPR for specific requests from the data subject. | Identifying, contact, and professional data; data relating to interest or participation in the event. | Up to 24 months from receipt/collection of the data or for the different term indicated in the specific privacy notice or form, unless revoked earlier or a further relationship is established. |
Sending informative, institutional, promotional, and networking communications relating to activities, projects, events, initiatives, and opportunities associated with ALISEI. | Art. 6, par. 1, let. a) GDPR (consent). | Name, surname, e-mail, telephone, organization, role, city, country, and other contact data/basic professional profile. | Up to 24 months from the receipt/collection of consent, unless revoked earlier or a different lawful term applies. |
Organizational, administrative, and documentary management of activities related to the event or subsequent meetings requested by the data subject. | Art. 6, par. 1, let. b) GDPR and/or Art. 6, par. 1, let. f) GDPR. | Identifying, contact, professional data, and any data strictly necessary for managing the request. | For the time necessary to manage the activity and subsequently for the terms necessary for organizational and protection purposes. |
Protection of ALISEI’s rights, management of disputes, prevention of abuse, security, and defense in extrajudicial or judicial proceedings. | Art. 6, par. 1, let. f) GDPR (legitimate interest). | Data relevant to the specific case, correspondence, logs, contractual or pre-contractual information. | For the time necessary to protect rights and manage litigation, within the limits of the applicable statute of limitations. |
Compliance with obligations provided by laws, regulations, or requests from competent authorities. | Art. 6, par. 1, let. c) GDPR. | Data necessary for compliance required by applicable regulations. | For the period provided by law or applicable provisions. |
The provision of data for purposes based on consent is optional. Failure to provide or the withdrawal of consent does not affect participation in the event organized by MZ Events.
5. Processing methods
The processing is carried out using paper, computer, and electronic tools, according to principles of lawfulness, fairness, transparency, minimization, accuracy, storage limitation, integrity, and confidentiality.
ALISEI adopts appropriate technical and organizational measures pursuant to Art. 32 GDPR and processes data through authorized personnel and suppliers who operate, where necessary, as data processors pursuant to Art. 28 GDPR.
No solely automated decisions are made that produce legal or similarly significant effects on the data subject.
6. Recipients and categories of recipients
Data may be communicated, within the limits of what is strictly necessary, to authorized personnel of ALISEI, consultants, IT providers, cloud services, mailing or CRM providers, entities that support ALISEI in managing institutional, informational, and networking activities, as well as to public authorities or bodies when communication is required by law or necessary for the protection of a right.
External parties processing data on behalf of ALISEI operate, where required, on the basis of specific data processor appointment agreements.
Data received from MZ Events are not subject to widespread dissemination.
7. Data transfers to non-EEA countries
If, for technical or organizational reasons, data must be processed using tools or suppliers involving transfers to countries outside the European Economic Area, ALISEI will adopt the safeguards provided for by Articles 44 et seq. of the GDPR, such as adequacy decisions, standard contractual clauses, or other suitable instruments provided by applicable regulations.
8. Retention periods
Data processed by ALISEI for informational, promotional, institutional, and networking purposes will be kept for a period not exceeding 24 months from receipt from MZ Events or direct collection, unless consent is withdrawn earlier, a different term is indicated in a specific notice, or a further relationship with the data subject justifies a different retention period.
After this period, the data will be deleted or anonymized, unless their further retention is necessary for legal obligations or for the establishment, exercise, or defense of a legal claim.
9. Rights of the data subject
In the cases provided for by applicable regulations, the data subject may exercise the rights of access, rectification, erasure, restriction of processing, data portability, objection, as well as withdrawal of consent at any time, without affecting the lawfulness of processing carried out before the withdrawal.
The data subject also has the right to object at any time to the processing of data carried out for direct marketing purposes.
Requests can be sent to ALISEI at the contact details indicated above. The right to lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali) or to take legal action before the competent judicial authorities remains unaffected.
10. Relationships with MZ Events and scope of autonomy of the controllers
For the collection of consent for the communication of data to ALISEI and for the processing carried out by MZ Events in the context of the organization and management of the event, please refer to the privacy policy of MZ Events.
Once the data have been received from MZ Events on the basis of the data subject’s consent, ALISEI processes them as an independent data controller for its own purposes indicated in this privacy notice.
The data subject can therefore exercise their rights against MZ Events for the processing carried out by the latter, and against ALISEI for the processing subsequently carried out by ALISEI.
11. Updates to the privacy notice
ALISEI reserves the right to update this privacy notice in the event of regulatory, organizational, or technical changes. The updated version will be made available on the institutional website or by other appropriate means, with an indication of the last updated date.
12. Third-party cookies and embedded content
13. Cookie Data Controller
The Data Controller is DAITA Consulting, with registered office in Via Cagliero, 6 – 20125 Milan.