4) Recipients, categories of recipients of personal data and data transfer in third countries
Your personal data may come to the knowledge of shareholders, members of the board of directors or other administrative body and, in any case, of the Data Protection Officer, external Data Processors, Persons in charge of processing and/or Data Processing Authors appointed by BolognaFiere in the performance of their duties. Your personal data may be communicated to subjects who provide BolognaFiere with services or services instrumental to the purposes indicated above, such as, by way of example, parent companies, subsidiaries, investee companies and/or associates, partners/joint venture partners; subjects, entities and/or companies that manage and/or participate in the management and/or maintenance of the Internet sites and the electronic and/or telematic tools used by us, photographers and/or videomakers who produce video-audio material or the related post-production, journalists and newspapers, companies providing services necessary for the organisation and management of events (e.g. installation of fittings and equipment, publishers of printed and on-line catalogues, logistics, safety and security, first aid, hostesses, etc.), diplomatic representatives, consultants, law firms, banks, marketing and communication service providers; other subjects in charge of the selection process and management of the related benefits for buyers (such as insurance companies, travel agencies, hotels), etc.
The updated list of Data processors is available at the Data Controller’s headquarters, or may be requested by email at: privacy@bolognafiere.it.
Your personal data may be communicated and/or transferred abroad, in accordance with the provisions of current legislation (Articles 45 et seq. of the GDPR), even in countries outside the European Union, or if necessary, in the countries where the recipients referred to in the previous paragraph are located. In all the above cases, the transfer is necessary for the execution of the contract with the Data Subject or for the execution of contractual measures adopted upon your request, or to ascertain, exercise or defend a right in the Court; in general, it is carried out on the basis of an adequacy decision adopted by the Commission (Art. 45 of the GDPR) or in accordance with the standard data protection clauses or other appropriate guarantees pursuant to Articles 46 or 49 of the GDPR. In the event that no Commission adequacy decision has been taken and the other guarantees established by GDPR are not applicable, the communication and/or transfer of data outside the European Union will be subject to your consent, after having been informed that the country in question does not provide an adequate level of protection.