Information regarding the handling of personal data pursuant to art. 13 Reg. EU no. 679/2016 (“GDPR”) and Legislative Decree no. 196/2003 (“Privacy Code”)

The Data Controller of personal data is Centro Estero per l'Internazionalizzazione S.c.p.a. (hereinafter "CEIPIEMONTE"), in the person of its General Manager, with registered office in Via Nizza n. 262/int. 56 - 10126 Turin.
CEIPIEMONTE is a point of reference in Piedmont for the promotion abroad of local companies and for the attraction of investments. On behalf of the Partners, the Company assists Piedmontese SMEs in the process of internationalization and business development, guaranteeing companies training and consulting support, promotional initiatives such as participation in international fairs, the organization of workshops and business meetings in Piedmont or abroad. CEIPIEMONTE is also a point of reference for external and foreign companies wishing to invest in Piedmont, to which it guarantees complete assistance by accompanying them in all phases of the investment project.
With reference to the initiatives relating to the Integrated Supply Chain Projects (PIF), the Investment Attraction Project, as well as any further Project commissioned by its Members, it should be noted that CEIPIEMONTE processes personal data as External Data Processor on behalf of both the Piedmont Region and the Chamber of Commerce System, in accordance with the relevant Privacy Policy. 

a) Data categories

Depending on the initiatives and/or services it organizes and/or provides, CEIPIEMONTE needs to process certain personal data.
In general, the data subject to processing may be:

• personal data for the identification of the user (for example: name, surname, date and place of birth, tax code, language and country of residence/domicile, etc.);
• contact details (e.g. e-mail address, telephone and/or mobile phone number, domicile/residence address);
• connection and geolocation data (e.g.: "IP" addresses);
• browsing data (including data deriving from the use of social icons and social login buttons - e.g. Facebook, Instagram, X, LinkedIn, etc. -) collected through cookies and similar tracking technologies (such as web beacons and pixels) installed on
• the data subject's computer or mobile device (for more information see the Cookie Policy);
• useful bank data and VAT number for the management of the commercial relationship;
• commercial data (e.g.: subscription to the newsletter, interactions with CEIPIEMONTE's social channels).

b) Purpose and legal basis for processing

Personal data are processed for the purpose of organizing initiatives aimed at the Promotion and Attraction of Investments for the benefit of the local economic system, organized by CEIPIEMONTE and by the Bodies that deal with internationalization. In particular, personal data are processed for:
1. the organization of seminars, conferences, fairs, missions in Italy and abroad (art. 6, par. 1, letter b));
2. the organization of workshops and partnership meetings between Italian and foreign companies, and the organization of investment attraction activities (Article 6, paragraph 1, letter b));
3. business development activities, personalized assistance to companies, consultancy support, network development (art. 6, par. 1, letter b));
4. the organisation of training courses provided in favour of member companies and, at the request of the interested party, for the provision of the training service organised by CEIPIEMONTE (Article 6, paragraph 1, letter b));
5. participation in the selection procedures announced by CEIPIEMONTE (art. 6, par. 1, letter b));
6. the analysis of some aggregate data and performance data - acquired following the purchase of sector databases - in order to improve, towards companies, the offer of their promotion and/or attraction services (art. 6, par. 1, letter b));
7. the creation of catalogues, sectoral repertoires and publications (paper, computer, online), aimed at promoting and attracting investments for the local economic system, for which specific information will be provided and therefore on the basis of the explicit consent of the data subject (art. 6, par. 1, letter a));
8. the sending of marketing communications about promotional initiatives and investment attraction organized by CEIPIEMONTE and the bodies that deal with internationalization, as well as for the sending of satisfaction survey questionnaires, on the basis of explicit and specific consent (art. 6, par. 1, letter a));
9. the management of administrative aspects and obligations resulting from the fulfilment of accounting, tax and legal obligations; this purpose is pursued on the basis of a legal or contractual obligation (Article 6(1)(b) and (c));
10. respond to specific requests from the data subject, on the basis of the legitimate interest of the Data Controller to promote its institutional purposes (Article 6, letter f)).

c) Processing methods

Personal data will be processed in accordance with the requirements of current privacy legislation, both with the aid of electronic and automated means, including Artificial Intelligence (AI) systems, including generative ones, and manually, with logics strictly related to the purposes of the processing, through databases, electronic platforms managed by CEIPIEMONTE or by third parties (appointed as External Data Processors).
The data will be processed within the limits necessary and in such a way as to guarantee maximum security and confidentiality and only by persons who are instructed and authorised to process them. The Data Controller adopts appropriate technical and organisational measures to ensure a level of security appropriate to the risk of processing.
Personal Data are processed at the Data Controller's headquarters and in the places where the External Data Processors are located.

d) Retention period

In order to ensure compliance with the principles of necessity and proportionality of processing, different retention periods of personal data have been identified in relation to the individual purposes pursued. At the end of the retention period, personal data is deleted or irreversibly anonymized.
Specifically, the retention periods of personal data are as follows:
1. browsing data remain for the duration of access to the CEIPIEMONTE website and for the storage times provided for by the relevant technologies in use, in accordance with the adopted Cookie Policy;
2. the data relating to registration in the reserved area are kept until the request for cancellation of the account;
3. the retention times of the data processed for purposes 1, 2, 3, 4, 5, 6, 7 and 10, are proportionate to the pursuit of the relative institutional purpose of CEIPIEMONTE and, in any case, do not extend beyond 10 years from the last contact. These data will subsequently be archived for public interest and for scientific research purposes in a totally anonymous form;
4. the retention times of the data collected for purpose 9 are suitable to ensure the correct execution of the related contracts and in any case for a further 10 years for the purpose of fulfilling the related administrative and tax obligations;
5. The retention times of the data processed for purpose 8, carried out with the consent given by the data subject, continue for 24 months from the last contact.

e) Nature of the provision of personal data

The provision of data is necessary to allow CEIPIEMONTE to pursue its institutional purposes. The consequence of failure to provide it is the impossibility for CEIPIEMONTE to get in touch with the data subject and to organize activities and events in his interest, as well as the failure to satisfy the specific requests of the data subject. The provision of personal data for purpose 10 is also necessary to allow CEIPIEMONTE to adequately respond to the specific request addressed to it.
The provision of consent is optional for purpose 7, but failure to provide it prevents the personalization and enhancement of the presence of companies at the events organized in Italy and/or abroad by CEIPIEMONTE, thus potentially nullifying their participation in them.
Likewise, the provision of consent is optional for purpose 8, the failure to provide which, however, prevents CEIPIEMONTE from promoting services and events similar to the interests of the person. In particular, the provision of personal data is optional, but any refusal will make it impossible to be informed and to participate in the activities organized by CEIPIEMONTE on behalf of its members, including information on internationalization issues, as well as to be suppliers of CEIPIEMONTE, or registered in the relevant lists

f) Scope of communication and/or dissemination of personal data

The personal data provided may be communicated to the subjects listed below, for legal provisions and regulations and for the exercise of contractual and institutional obligations:
- Judicial, administrative and/or public security authorities
- Tax administrations
- Banking institutions
- Bodies involved in the organization of promotional and investment attraction initiatives
- Transport companies, professionals (such as commercial, administrative and legal consultants) involved in the aforementioned activities.
As part of its activities, CEIPIEMONTE may communicate to third parties those personal data that are necessary and/or useful for the performance of particular practices aimed at satisfying a request of the interested party, or for the organization of initiatives promoted to which the interested party adheres.
Some personal data may also be communicated to companies and debt collection companies.
The Data Controller processes personal data through its internal Data Processors, authorised and instructed by CEIPIEMONTE.
The following subjects may also receive the communication of data and process them, both in Italy and abroad: CEIPIEMONTE shareholders and other private and public bodies, suppliers, consultants (an exhaustive list of designated External Data Processors is available at the Legal Office, tenders and tenders).

g) Rights of the Data Subject

The data subject always has the right to exercise the rights provided for by art. 15-22 of the GDPR, including:
a) the right to obtain confirmation of the existence or otherwise of personal data concerning him/her, even if not yet recorded, and their communication in intelligible form;
b) the right to revoke at any time the consent given in relation to the purposes of the processing;
c) the right to obtain access, rectification, erasure, restriction of processing and portability of personal data;
d) the right to object to processing at any time;
e) the right to appeal before the competent supervisory authority, if it considers that the processing of data is contrary to the legislation in force.
The Personal Data Protection Officer (DPO) for the purposes of feedback in the event of the exercise of the aforementioned rights is the Service Manager at the Legal Office, tenders and tenders of CEIPIEMONTE, who can be contacted at the following addresses: e-mail This email address is being protected from spambots. You need JavaScript enabled to view it., telephone 011/6700571, or at the address: Via Nizza n. 262/int. 56 - 10126 Torino.