This information is provided in accordance with and Article 13 of the EU 2016/679 General Data Protection Regulation, hereinafter "GDPR".

The processing of data will take place by applying appropriate security measures to ensure compliance with the principles of lawfulness, fairness, transparency, purpose limitation and storage, data minimization, accuracy, integrity and confidentiality, in accordance with applicable regulations.

JOINT DATA CONTROLLERS

The joint data controllers are ASSIOM FOREX - Associazione Operatori dei Mercati Finanziari and ASSIOM FOREX Servizi srl, both with registered offices at Via Monte Rosa n. 17, 20149 - Milan.

For any further information or clarification, ASSIOM FOREX may be contacted at the mail address indicated, or at the e-mail address privacy@assiomforex.it

PERSONAL DATA SUBJECT TO PROCESSING

The personal data subject to processing are:

1. identification and contact data; 2. bank data to make the registration; 3. data related to the job task; 4. photographic and video footage

PURPOSE AND LEGAL BASIS FOR PROCESSING

Your personal data will be processed for the purposes specified below.

a. Registration for a specific event and management of the request for participation;

b. Processing requests received and forwarding communications pertaining to participation in the event by different means of communication (telephone, email);

c. Fulfillment of administrative, accounting and tax obligations arising from existing relationships, as well as obligations under the law, a regulation, EU legislation or an order of the Authority

d. Exercise of the rights of the Contractors, e.g. the right to defense in court.

The legal basis for processing is the performance of a contract to which the Participant/Participant is a party or the execution of pre-contractual measures taken at the request of the same as well as the legitimate interest of the Co-Participants in processing the data in order to efficiently manage the relationship with the Members/Participants and the related internal and external organizational processes.

The provision of data for these purposes is mandatory and, therefore, any refusal to provide it in whole or in part would not allow the execution of the contract.

e. Inclusion of the registrant's identification data (first name, last name, company name) in a "Congress Participant List" made available to all participants of the event.

The legal basis for processing for these purposes is his or her explicit consent. The provision of data for this purpose is optional.

To take photographs and videos during the event for the dissemination and promotional purposes of the Holders through dissemination of the images on the institutional websites and social networks of the same, in print media and/or any other means of dissemination, without any territorial and/or temporal limitation.

The legal basis of the processing for this purpose is represented by its explicit consent.

This consent is expressed, on the occasion of events organized by the Contractors, through the voluntary act of the interested party to go to the premises where the event takes place, clearly identified with appropriate iconic information.

Pursuant to art. 130 c. 4 Privacy Code, the Co-owners - if you were already our Members - reserves the right to send, even without explicit consent, informative newsletters in order to stay updated on events organized in the future by the Association and on services similar to those covered by the service provided, unless you explicitly disagree (art. 130 c. 4 Privacy Code). We also remind you that you can also subsequently object to the processing and revoke the consent previously given for such purposes.

DISSEMINATION AND COMMUNICATION OF DATA

The video and photographic footage taken during the event will be "disseminated and communicated," i.e., it will be made known to unspecified parties, by means of computer methods on the social networks and Internet channels of the Data Controllers.

Your personal data may be processed by employees expressly authorized for processing as well as by companies providing outsourced services as Data Processors. They may also be communicated to the competent authorities and public administrations in order to fulfill the obligations provided for by laws, regulations and national or European legislation or to enable the defense in court of the Data Controllers.

Your personal data, excluding images, will not be disseminated.

TRANSFER OF PERSONAL DATA

The Data Controller does not transfer personal data to third countries or international organizations. However, it reserves the possibility of using cloud services. In this case, the service providers will be selected from among those who provide adequate guarantees, as provided by Article 46 GDPR.

RETENTION PERIOD

Personal and contact data will be retained until the fulfillment of contractual obligations and thereafter for the fulfillment of legal obligations and will be processed only for the achievement of the specific purposes pursued from time to time. Data collected for informational and promotional activities will be retained until consent is revoked and in any case for a period not exceeding 3 years.

YOUR RIGHTS.

The participant will be able to exercise the rights provided for in Articles 15 et seq. of the GDPR, i.e.: Article 15 - "Right of access of the data subject," Article 16 - "Right of rectification," Article 17 - "Right to erasure," Article 18 - "Right to limitation of processing," Article 20 - "Right to data portability," within the limits and under the conditions provided for in Article 12 of the GDPR.

Requests should be made in writing to the Data Controller at the contact details indicated in the "Data Controller" section of this policy.

In any case, the data subject always has the right to lodge a complaint with the competent supervisory authority (Data Protection Authority).