Privacy Policy

SUMMARY

  1. INTRODUCTION
  2. CONTACT DETAILS OF THE DATA CONTROLLER
  3. METHODS OF COLLECTION AND CATEGORIES OF DATA PROCESSED
  4. PURPOSES OF DATA PROCESSING, LEGAL BASIS OF PROCESSING AND RETENTION PERIOD
  5. RECIPIENTS OF YOUR PERSONAL DATA
  6. TRANSFER OF PERSONAL DATA
  7. OBLIGATION TO PROVIDE DATA
  8. DATA SUBJECT’S RIGHTS
  9. METHODS OF EXERCISING RIGHTS
  10. COOKIES
  11. CHANGES TO THIS DOCUMENT

1. INTRODUCTION

This section contains information provided regarding the processing of personal data of those who visit the website
https://smartbuildingexpo.it/en. This privacy notice is provided pursuant to Articles 13–14 of Regulation (EU) 2016/679 (GDPR), concerning the protection of natural persons with regard to the processing of personal data as well as the free movement of such data.

Pentastudio s.r.l. (hereinafter, “Pentastudio”), as the Data Controller, provides this information notice only to users of this website (hereinafter, “User”) and not for other websites that may be consulted by the user via links contained therein.

The purpose of this document is to provide guidance on the methods, timing, and nature of the information that the Data Controller must provide to the User when connecting to the webpage and also for subsequent interactions with sections of the same.

By browsing the Site, the User acknowledges having read and understood the content of this Privacy Notice.

2. CONTACT DETAILS OF THE DATA CONTROLLER

The Data Controller is:

3. METHODS OF COLLECTION AND CATEGORIES OF DATA PROCESSED

Browsing the site and/or entering data in certain areas thereof by the User may involve the processing of the User’s Personal Data.

The Personal Data that may be processed are:

  • First and last name;
  • Phone number;
  • Email address;
  • Internet Protocol (IP) address;
  • Type of browser and device parameters used to connect to the site;
  • Name of the internet service provider (ISP);
  • Date and time of visit;
  • User’s referring and exit webpage (referral);
  • Free text entered in site fields and any uploaded attachments.

4. PURPOSES OF DATA PROCESSING, LEGAL BASIS OF PROCESSING AND RETENTION PERIOD

Personal Data are collected and processed for the following purposes:

Purpose of processing Legal basis of processing Retention period
Responding to information requests related to Smart Building Expo and/or participation in the event Performance of a contract or pre-contractual measures 24 months
Marketing activities, sending of commercial communications, including via newsletters Consent Until withdrawal of consent, which may be exercised at any time using the link at the bottom of each promotional email (with regard to marketing activities and newsletters) or by sending us an email using the contact details provided above
Transfer to third-party companies for their own marketing purposes (sending commercial offers and advertising and promotional communications) Consent Until withdrawal of consent
Various purposes related to non-technical cookies (refer to the banner displayed upon accessing the site) Consent Until withdrawal of consent or until the cookie expires on the device that accepts it
Management and performance of obligations required by law (accounting, administrative, tax-related, etc.) Legal obligation 10 years
Management of disputes and possible litigation, to prevent or control unlawful conduct, or to protect and enforce rights Legitimate interest Until the limitation periods provided or until statutory deadlines

5. RECIPIENTS OF YOUR PERSONAL DATA

The User’s Personal Data may be communicated to and processed by:

i. legal or natural persons, and their employees and/or collaborators, acting as external data processors, carrying out activities on behalf of the Controller (including entities entrusted with assistance, communication, marketing, advertising, promotions and sales of products and/or services, as well as advertisers, advertising agencies, IT service providers, Site/APP managers, electronic platform managers, partners, credit institutions, professional firms);

ii. employees and/or collaborators of the Controller who, operating under the direct authority of the latter, will be authorized to process Personal Data.

Furthermore, where necessary, the User’s personal data may be disclosed to competent authorities and other public bodies that request them under current regulations, in connection with investigations and proceedings related to the prevention, detection, and prosecution of crimes, as well as for judicial defense needs.

Personal data will not be disseminated.

6. TRANSFER OF PERSONAL DATA

Personal data are not transferred to non-EU countries.

7. OBLIGATION TO PROVIDE DATA

Providing Personal Data must be considered mandatory for processing that the organization must carry out in order to fulfill its obligations towards the data subject under the existing relationship (or contract), as well as to comply with legal, regulatory, and statutory obligations. Failure to provide such data may result in the Controller’s inability to provide the requested service, fulfill legal obligations, and respond to the User’s requests. Providing data to manage information requests is not a legal or contractual requirement; however, providing such data is necessary to respond to the User’s request.

Providing data is not mandatory for all other purposes.

8. DATA SUBJECT’S RIGHTS

The User has the right to exercise at any time the rights recognized by Articles 15 to 22 and 77 GDPR, briefly summarized below:

Right Description
Right to withdraw consent If processing is based on consent, you may withdraw it at any time, without prejudice to the lawfulness of processing carried out prior to withdrawal
Right of access to data (Art. 15) You may request information regarding the processing of your personal data or confirmation that the Controller processes your personal data. In such case, you may request a copy of your data and verify which data we hold
Right to rectification (Art. 16) You may request the rectification of inaccurate personal data concerning you and obtain the completion of incomplete personal data.
Right to erasure (right to be forgotten) (Art. 17) You may request the erasure of personal data concerning you, pursuant to paragraphs 1 and 3 of Art. 17 GDPR.
Right to restriction of processing (Art. 18) You may obtain restriction of processing from the Controller where the conditions provided under Art. 18 GDPR apply.
Right to data portability (Art. 20) You may obtain, in a structured, commonly used and machine-readable format, the personal data concerning you that you have provided and have the right to transmit it to another controller if processing is based on consent or a contract and carried out by automated means, unless processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority and such transmission infringes the rights of others.
Right to object (Art. 21) You may object at any time, on grounds relating to your particular situation, to the processing of your personal data, subject to the existence of an overriding legitimate reason for continuing such processing.
Right to lodge a complaint with the supervisory authority (Italian Data Protection Authority) (Art. 77) Without prejudice to any other administrative or judicial remedy, if you believe that processing carried out by the Controller violates the GDPR and national data protection law (Legislative Decree No. 196/2003, as amended by Legislative Decree No. 101/2018), you have the right to lodge a complaint with a Supervisory Authority, in particular in the Member State where you usually reside, work, or where the alleged violation occurred.

9. METHODS OF EXERCISING RIGHTS

The User may exercise these rights at any time or send any other request relating to the processing of Personal Data via email to:
info@smartbuildingexpo.it.

The User may lodge a complaint with the Italian Data Protection Authority by following the instructions provided on its website, in the “Forms” section, under “Complaint” (or by clicking the following (link)).

10. COOKIES

Please refer to the dedicated page, available at the following address:
https://smartbuildingexpo.it/cookie/.

11. CHANGES TO THIS DOCUMENT

This document may be subject to changes or updates; therefore, you are invited to consult it periodically.

Revision no. 3 of 17/09/2025