This notice describes how the personal data of users who visit the website www.pestmed.it and use the services available on it are processed, pursuant to Regulation (EU) 2016/679 (“GDPR”).
This notice applies to the website www.pestmed.it. For external websites that can be reached through links, please refer to their respective privacy notices.
1. Data Controller
The Data Controller is:
AVENUE MEDIA S.R.L.
Viale Antonio Aldini, 222/4
40136 Bologna, Italy
Phone: +39 051 6564311
E-mail: expo@avenue-media.eu
2. Personal data processed
The website collects personal data provided voluntarily by users and data acquired during browsing.
Data provided through contact forms
Depending on the request and on the fields in the form, the following may be collected: first name, last name, e-mail address, company name, city, postcode, country, business sector and the information contained in the message.
Data provided to subscribe to the newsletter
To subscribe to the newsletter, the following may be collected: e-mail address, first name, last name, city and company name.
Browsing and usage data
The IT systems and procedures required for the website to operate may acquire information such as IP address, pages requested, time of requests, server response status, browser characteristics, operating system and other technical data relating to browsing.
Cookies and other tracking tools
The website uses cookies and similar technologies as described in the Cookie Policy.
3. Purposes and legal bases of processing
Handling contact requests
Data provided through the forms or the contact details on the website are used to respond to requests for information, quotes and other communications sent by the user.
Where the request concerns a possible contractual relationship, processing is based on the need to take pre-contractual steps at the request of the data subject, pursuant to Article 6(1)(b) GDPR.
For other requests, processing is based on the Controller’s legitimate interest in handling and replying to the communications received, pursuant to Article 6(1)(f) GDPR.
Newsletter subscription
With the user’s consent, data are used to send newsletters, updates and communications, including commercial and promotional communications, relating to PestMed.
The legal basis is consent, pursuant to Article 6(1)(a) GDPR.
Consent is optional and may be withdrawn at any time using the unsubscribe link included in the communications or by writing to expo@avenue-media.eu. Withdrawal does not affect the lawfulness of processing carried out before it.
Sending a request for information does not, in itself, constitute consent to receive the newsletter.
Website operation, maintenance and security
Technical data may be processed to enable browsing, keep the website operational, prevent unauthorised access and detect abuse or fraudulent activity.
The legal basis is the Controller’s legitimate interest in ensuring the operation and security of the website, while respecting the rights and freedoms of users.
Consent is requested for tracking tools that are not strictly necessary, as described in the Cookie Policy.
Compliance with legal obligations and protection of rights
Data may be processed to comply with legal obligations or binding requests from authorities, and to establish, exercise or defend legal claims.
The legal bases are, respectively, compliance with a legal obligation and the legitimate interest in protecting the Controller’s rights.
4. Provision of data
Providing data is optional. However, failure to provide the information needed to handle a request may prevent the Controller from replying or providing the requested service.
Data marked as optional may be omitted without affecting the handling of the request.
Consent to the newsletter is freely given and separate from the other purposes. Refusing or withdrawing it does not prevent users from browsing the website or contacting the Controller.
5. Processing methods
Processing is carried out using IT and telematic tools, in ways consistent with the stated purposes and with appropriate technical and organisational measures to protect data from unauthorised access, loss, disclosure or alteration.
Access to data is limited to those who need it to carry out the tasks assigned to them.
6. Recipients of data
Data may be processed by the Controller’s authorised staff and by suppliers involved in managing the website and services, such as hosting, IT support, maintenance, communication and mailing providers.
When processing data on behalf of the Controller, suppliers are appointed as data processors pursuant to Article 28 GDPR.
Data may also be disclosed to consultants, authorities and other parties where necessary to comply with legal obligations or protect rights.
Information on recipients and the up-to-date list of processors can be requested from the Controller.
7. Third-party services
The website integrates services that allow fonts and icons to be displayed. External integrations may involve the transfer of technical data to the respective providers even when the user does not interact directly with the content.
Font Awesome — Fonticons, Inc.
Font Awesome allows fonts and icons to be integrated into the website’s pages.
Data indicated for the service: usage data and tracking tools.
Stated place of processing: United States.
Provider’s privacy notice: https://fontawesome.com/privacy.
Google Fonts — Google Ireland Limited
Google Fonts allows fonts to be integrated into the website’s pages.
Data indicated for the service: usage data and tracking tools.
Stated place of processing: Ireland.
Provider’s privacy notice: https://policies.google.com/privacy.
The use of any non-necessary tracking tools is subject to the choices made by the user as described in the Cookie Policy.
8. Place of processing and international transfers
Data are processed at the Controller’s premises and at the premises of the parties involved in providing the services.
The use of external services may involve processing data outside the European Economic Area, including in the United States.
Any such transfers must comply with the conditions set out in Chapter V GDPR, on the basis of an applicable adequacy decision or other safeguards provided for by law.
For information on the place of processing, foreign recipients and applicable safeguards, and to obtain a copy where available, please contact the Controller at expo@avenue-media.eu.
9. Data retention
Personal data are kept for as long as necessary for the purposes for which they were collected, according to the following criteria:
- Requests for information and quotes: for the time needed to handle the request and any resulting relationship.
- Contractual relationships: for the duration of the relationship and, thereafter, for the period required by applicable legal obligations.
- Newsletter: for the time needed for sending purposes and in any case no longer than until consent is withdrawn or the user unsubscribes, without prejudice to keeping the information needed to document and respect the user’s choices.
- Technical data and logs: for the time needed for the operation, maintenance and security of the website, taking into account any need to investigate abuse.
- Protection of rights: for the period needed to establish, exercise or defend the right concerned.
Once the purposes have ended, data are deleted or anonymised, unless further retention is required by law.
10. Rights of the data subject
In the cases and within the limits provided by law, users may:
- obtain confirmation as to whether their data are being processed and access their data;
- request the rectification of inaccurate data and the completion of incomplete data;
- request the erasure of their data;
- obtain restriction of processing;
- receive their data in a structured, commonly used and machine-readable format and request its transmission to another controller, where applicable;
- object, on grounds relating to their particular situation, to processing based on legitimate interest;
- object at any time to processing for direct marketing purposes;
- withdraw consent previously given.
Requests can be sent to expo@avenue-media.eu.
The Controller will reply without undue delay and, as a rule, within one month of receipt. In the cases provided for by the GDPR, this period may be extended, and the data subject will be informed.
Users may also lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali), following the procedures set out at www.garanteprivacy.it, or contact the competent supervisory authority.
11. Changes to this notice
The Controller may update this notice in response to changes in services, processing methods or legislation.
Updates are published on this page. Where necessary, the Controller will provide further notice to data subjects and obtain their consent again.