Privacy Policy EuroCucina 2026

DATA CONTROLLER

Elica S.p.A. – Via Ermanno Casoli, No. 2, 60044 Fabriano (AN), VAT No. AN 00096570429, certified email (PEC): elicaspa@sicurezzapostale.it, Telephone: +39-07326101 (hereinafter also the “Company” or the “Controller”).  

DATA PROTECTION OFFICER

The Company has appointed a Data Protection Officer (“DPO”), who can be contacted at: dpo@elica.com.

SOURCE OF PERSONAL DATA

Personal data are collected directly from the data subject and/or from Federlegno Arredo Eventi S.p.A., which organized the trade fair “Salone del Mobile Milano” 2026 and, in particular, the event “Eurocucina” (the “Event”).

As indicated at the time of registration for the Event and upon entry into the Controller’s exhibition space, by requesting the scanning of the QR code on the admission ticket, consent is given to the transfer of data to Elica S.p.A., in its capacity as an exhibitor at the Event, in order to receive commercial communications from it. Such consent may be withdrawn at any time by contacting the Controller or via the unsubscribe link at the bottom of emails.

CATEGORIES OF PERSONAL DATA PROCESSED

The Company will process personal data such as, by way of example and not limited to: first name, last name, email, country, province, city, company, role, operator type, operator details (hereinafter the “Data”).

PURPOSES OF PROCESSING

The Data will be processed by the Company for the following purposes:

a) research activities and statistical analysis of Data in a general and aggregated form, aimed at guiding the Company’s strategic decisions;

b) direct marketing: sending commercial communications via email regarding offers, discounts, promotions, and updates on the Company’s products and/or services, using automated or telephone contact methods;

c) profiling marketing: analysis of interests inferred by combining the Data provided by the data subject in order to send personalized commercial communications, using automated or telephone contact methods.

LEGAL BASIS

The legal bases for the processing purposes indicated above are as follows:

- for purpose a): the legitimate interest of the Controller, pursuant to Art. 6(1)(f) of the GDPR;

- for purpose b): the consent of the data subject, pursuant to Art. 6(1)(a) of the GDPR;

- for purpose c): the consent of the data subject, pursuant to Art. 6(1)(a) of the GDPR.

DATA RETENTION PERIOD

The Data, with reference to the purposes indicated above, will be retained:

- purpose a): for the time necessary to achieve the purposes and, in any case, until the data subject objects;

- purposes b) and c): personal and contact data will be retained until consent is withdrawn and, in any case, until the end of the relationship with the data subject. Data relating to details of interactions between the data subject and the Company will be retained for 5 years from the collection of interaction-related Data (e.g., participation in an event, technical support contact, product registration, or warranty extension), for both direct and profiling marketing purposes.

After the retention periods indicated above, the Data will be deleted or anonymized, in accordance with technical deletion and backup procedures.

PROVISION OF DATA

Providing Data is entirely optional; if not provided, the Company will not process the Data for the purposes described above.

DATA RECIPIENTS

The Data may be disclosed to independent data controllers and processed by parties appointed by the Company as data processors who provide services instrumental to the purposes indicated in this notice, such as, by way of example: the company responsible for maintenance/management of the Company’s website and electronic and/or telematic tools; the company managing the sending of commercial communications; and the company providing and maintaining the CRM.

AUTHORIZED PERSONS TO PROCESS DATA

The Data may be processed by employees of the Company who have been expressly authorized and have received appropriate operational instructions pursuant to Art. 29 of the GDPR.

TRANSFER OF PERSONAL DATA OUTSIDE THE EUROPEAN UNION

The Data are not currently transferred outside the European Union. In any case, should Data be transferred to countries outside the European Union (EU) or the European Economic Area (EEA) that have not been deemed adequate by the European Commission, the transfer mechanisms provided for by Art. 46 of the GDPR (such as standard contractual clauses) will be used, assessing the possible adoption of supplementary measures to ensure a level of protection essentially equivalent to that required by EU law.

DATA SUBJECT RIGHTS – COMPLAINT TO THE SUPERVISORY AUTHORITY

To exercise their rights, the data subject may contact the Company at: privacy@elica.com.

The data subject may request access to their Data, deletion, rectification of inaccurate Data, completion of incomplete Data, and restriction of processing in the cases provided for by Art. 18 of the GDPR.

Furthermore, where processing is based on consent or on a contract and is carried out by automated means, the data subject has the right to receive the Data in a structured, commonly used, and machine-readable format and, where technically feasible, to transmit them to another controller without hindrance.

The data subject has the right to object at any time, easily and free of charge, for reasons related to their particular situation, to the processing of Data based on the Controller’s legitimate interest.

The data subject has the right to withdraw consent at any time and to object to receiving promotional communications by contacting the Controller or by clicking the unsubscribe link included in each email.

Where the data subject intends to exercise their rights, the Company—if it has reasonable doubts about the identity of the requester—may request identification before processing the request.

Finally, the data subject has the right to lodge a complaint with the competent supervisory authority in the Member State where they habitually reside or work, or in the State where the alleged infringement occurred.