Privacy Notice pursuant to Article 13, Regulation (EU) 2016/679
(Training and information events also electronically)

  1. Holder

The data controller is: EDI.IT s.r.l. (hereinafter EDI), with registered office in piazza G.G. Belli, 2, 00153 Rome (RM).

  1. Categories of data processed, methods, purposes and legal basis of the processing

Your personal data collected with the registration form (personal data, contact data, company data, particular categories of data suitable for detecting membership, company data) will be processed by EDI with automatic and / or manual methods, however suitable for guarantee its security and confidentiality, by personnel duly instructed by the owner and by companies specifically appointed by them, appointed as data processors, for the purposes indicated below.

The purposes of the processing of personal data are as follows:

– Purpose 1​: provision of the service in the agreement promoted by EDI.IT srl and related organizational activities such as the communication of your data, including by telephone, to the third party who provides the agreement.

– Purpose 2​: Invitation, also via email, for participation in training courses, conferences, events and other events to promote the agreements that EDI has stipulated in favor of companies, as well as sending the related information material and promotion of the services offered by EDI and its network territorial branch of innovation desks (Spin)

– Purpose 3​: Subject to your specific consent, sending, also via e-mail, invitations for participation in training courses, conferences, exhibitions, and other events, and sending information material in general, with content other than that reported in the previous point, also through newsletters, as well as marketing activities by sending promotional material and information of interest to the data controller, including via email.

Table 1


Purpose of the processing for which the personal data are intended

Legal basis of the processing

Categories of personal data being processed

Retention period of personal data

Categories of recipients

Purpose 1


● Identification data

● Personal data

Until the end of the management period of the services related to the initiative and for the subsequent period strictly necessary, unless consent is revoked or opposition to the processing


Purpose 2


● Identification data

● Personal data

For a period of 12 months from participation in the event, unless the interested party objects


Purpose 3


● Identification data

● Personal data

For a period of 12 months from the issue of consent, unless revoked


  1. Nature of the provision and consequences in case of refusal

EDI collects the personal data indicated above in order to allow you to take advantage of the agreement and for the other purposes described above.

You are free to provide your personal data but failure to provide them will make it impossible to access the service.

  1. Scope of communication and categories of recipients

In addition to the Data Controller’s employees, authorized by the same to carry out processing operations, your personal data may also be processed by the Confcommercio Territorial Associations, national trade associations or federations or other bodies of the Confcommercio system. They may also be communicated to third parties, promptly appointed as Data Processors by the Data Controller, to whom the proposed agreements refer. They may also be communicated to defined subjects, in full compliance with the provisions of the law, for purposes strictly related to those previously indicated. Any access to your personal data is limited to the subjects authorized by the Data Controller.

The list of personal data processing managers is available at the headquarters of the Data Controller.

The data will not be transferred outside the European Union.

  1. Retention period

The data relating to you collected in order to allow you to take advantage of the agreement and will be processed and stored by EDI for the time necessary to fulfill these purposes as specified in table 1 above.

  1. Rights of interested parties

You have the right to ask EDI to access your personal data and to rectify them if they are inaccurate, to delete them or limit their processing if the conditions are met and to obtain data portability only in the case of automated processing based on consent, as well as to oppose for reasons related to their particular situation and, in any case, for direct marketing. The interested party has the right to revoke the consent given by sending a written request to the following e-mail address:, without prejudice to the lawfulness of the processing until the moment of revocation. The interested party also has the right to lodge a complaint with the competent supervisory authority, the Guarantor for the protection of personal data.