Privacy policy

Information regarding the handling of personal data pursuant to art. 13 Reg. EU no. 679/2016 (“GDPR”) and Legislative Decree no. 196/2003 (“Privacy Code”)

The Data Controller of personal data is Centro Estero per l'Internazionalizzazione S.c.p.a. (hereinafter "CEIPIEMONTE"), in the person of its General Manager, with registered office in Via Nizza n. 262/int. 56 - 10126 Turin.
CEIPIEMONTE is a point of reference in Piedmont for the promotion abroad of local companies and for the attraction of investments. On behalf of the Partners, the Company assists Piedmontese SMEs in the process of internationalization and business development, guaranteeing companies training and consulting support, promotional initiatives such as participation in international fairs, the organization of workshops and business meetings in Piedmont or abroad. CEIPIEMONTE is also a point of reference for external and foreign companies wishing to invest in Piedmont, to which it guarantees complete assistance by accompanying them in all phases of the investment project.
With reference to the initiatives relating to the Integrated Supply Chain Projects (PIF), the Investment Attraction Project, as well as any further Project commissioned by its Members, it should be noted that CEIPIEMONTE processes personal data as External Data Processor on behalf of both the Piedmont Region and the Chamber of Commerce System, in accordance with the relevant Privacy Policy viewable here. 

a) Data categories

Depending on the initiatives and/or services it organizes and/or provides, CEIPIEMONTE needs certain personal data, rather than others.
In general, the data subject to processing may be:
• user identification data (e.g.: name, surname, tax code, date and place of birth, language and country of residence/domicile, etc.);
• contact details (e.g. e-mail address, telephone and mobile phone number, residence/home address);
• connection, geolocation and browsing data (if, for example, IP address, mobile app, cookies or similar technologies);
• commercial data (e.g.: VAT number, newsletter subscription).

b) Purpose and legal basis for processing

Personal data will be processed for the purpose of organizing initiatives aimed at the Promotion and Attraction of Investments for the benefit of the local economic system, organized by CEIPIEMONTE and by the Bodies that deal with internationalization. In particular, personal data may be processed for:
1. the organization of seminars, conferences, fairs, missions in Italy and abroad (art. 6, par. 1, letter b));
2. the organisation of workshops and partnership meetings between Italian and foreign companies, investment attraction activities (Article 6, paragraph 1, letter b));
3. business development activities, personalized assistance to companies, consultancy support, network development (art. 6, par. 1, letter b));
4. the organisation of training courses provided in favour of member companies and, at the request of the interested party, for the provision of the training service organised by CEIPIEMONTE (Article 6, paragraph 1, letter b));
5. participation in the selection procedures announced by CEIPIEMONTE (art. 6, par. 1, letter b));
6. the analysis of some aggregate data and performance data - acquired following the purchase of sector databases - in order to improve, towards companies, the offer of their promotion and/or attraction services (art. 6, par. 1, letter b));
7. the creation of catalogues, sectoral repertoires and publications (paper, computer, online), aimed at promoting and attracting investments for the local economic system, for which specific information will be provided and therefore on the basis of the explicit consent of the data subject (art. 6, par. 1, letter a));
8. the sending of marketing communications about promotional initiatives and investment attraction organized by CEIPIEMONTE and the bodies that deal with internationalization, as well as for the sending of satisfaction survey questionnaires, on the basis of explicit and specific consent (art. 6, par. 1, letter a));
9. the management of administrative aspects and obligations resulting from the fulfilment of accounting, tax and legal obligations; this purpose is pursued on the basis of a legal or contractual obligation (Article 6(1)(b) and (c));
10. respond to specific requests from the data subject, on the basis of the legitimate interest of the Data Controller to promote its institutional purposes (Article 6, letter f)).

c) Processing methods

Personal data are processed lawfully, fairly, transparently and, in general, in full compliance with current legislation and the provisions of the Guarantor, as well as applying the principles required by the GDPR to art. 5. The processing will be carried out using procedures, including computerised (and possibly automated), in the ways and within the limits necessary to pursue the purposes indicated above and, in any case, in such a way as to guarantee the security and confidentiality of the data.
Personal data are stored for a variable period depending on the type and purpose of the processing. At the end of the retention period, personal data is deleted or irreversibly anonymized.
Specifically, the retention periods of personal data are as follows:
1. browsing data remain for the duration of access to the CEIPIEMONTE website and for the storage times provided for by the relevant technologies in use, in accordance with the adopted Cookie Policy;
2. the data relating to registration in the reserved area are kept until the request for cancellation of the account;
3. the retention times of the data processed for purposes 1, 2, 3, 4, 5, 6 and 7 are proportionate to the pursuit of CEIPIEMONTE's institutional purpose and, in any case, do not extend beyond 10 years from the last contact. These data will subsequently be archived for public interest and for scientific research purposes in a totally anonymous form;
4. the retention times of the data collected for purposes 4 and 9 is equal to the periods required by law;
5. the retention times of the data processed for purpose 8, carried out with the consent given by the data subject, continue for 24 months from the last contact.

d) Nature of the provision of personal data

The provision of data is necessary to allow CEIPIEMONTE to pursue its institutional purposes. The consequence of failure to provide it is the impossibility for CEIPIEMONTE to get in touch with the data subject and to organize activities and events in his interest, as well as the failure to satisfy the specific requests of the data subject. The provision of personal data for purpose 10 is also necessary to allow CEIPIEMONTE to adequately respond to the specific request addressed to it.
The provision of consent is optional for purpose 7, but failure to provide it prevents the personalization and enhancement of the presence of companies at the events organized in Italy and/or abroad by CEIPIEMONTE, thus potentially nullifying their participation in them.
Likewise, the provision of consent is optional for purpose 8, the failure to provide which, however, prevents CEIPIEMONTE from promoting services and events similar to the interests of the person. In particular, the provision of personal data is optional, but any refusal will make it impossible to be informed and to participate in the activities organized by CEIPIEMONTE on behalf of its members, including information on internationalization issues, as well as to be suppliers of CEIPIEMONTE, or registered in the relevant lists.

e) Scope of communication and/or dissemination of personal data

The personal data provided may be communicated to the subjects listed below, for the provisions of laws and regulations and for the exercise of contractual and institutional obligations:
- Judicial, administrative and/or public security authorities
- Tax administrations
- Banks
- Bodies involved in the organization of promotional and investment attraction initiatives
- Transport companies, professionals (such as commercial, administrative and legal consultants) involved in the aforementioned activities.
As part of its activities, CEIPIEMONTE may communicate to third parties those personal data that are necessary and/or useful for the performance of particular practices aimed at satisfying a request of the interested party, or for the organization of initiatives promoted to which the interested party adheres.
Some personal data may also be communicated to companies and debt collection companies.
External Data Processors adequately chosen and designated, such as CEIPIEMONTE members and other private and public bodies, suppliers, consultants (an exhaustive list of designated subjects is available at the Personnel Office), as well as internal Data Processors authorized and trained by CEIPIEMONTE, both in Italy and abroad, may receive the communication of data, or in any case become aware of it.

f) Rights of the Data Subject

The data subject always has the right to request access to his or her data, rectification or integration, deletion of the same, restriction of processing or the possibility of objection, as well as the right to data portability. The data subject also has the right to lodge a complaint with the Supervisory Authority.
For data processed for purpose 7, the data subject always has the right to withdraw consent without prejudice to the lawfulness of the processing based on the consent given before the withdrawal.
The Personal Data Protection Officer (DPO) for the purposes of feedback in the event of exercising rights is the Project Manager at the Legal Department of CEIPIEMONTE, who can be contacted at the following addresses: e-mail privacy@centroestero.org, telephone 011/6700571, or at the address: Via Nizza n. 262/int. 56 - 10126 Turin. You can write to the DPO for any question concerning the processing of your personal data, as well as to exercise your rights pursuant to Articles 15-22 of the GDPR.