PRIVACY NOTICE ON THE PROCESSING OF PERSONAL DATA
– Pursuant to Article 13 of Regulation (EU) 2016/679 (GDPR) –
Venicepromex – Agenzia per l’internazionalizzazione S.c.a.r.l. (hereinafter “Venicepromex” or the “Data Controller”) intends to provide the information required under Article 13 of Regulation (EU) 2016/679 (GDPR or General Data Protection Regulation) regarding the processing of the personal data of Users of the Venicepromex app.
This Privacy Policy is supplemented by the App’s General Terms of Use.
1. Data Controller and Data Protection Officer
The Data Controller is Venicepromex, with registered office at Via delle Industrie 19/D – 30175 Marghera (VE), VAT no. and tax code 04631170273, e-mail: info@vepromex.it, tel. +39 041 0999700.
Venicepromex has appointed its Data Protection Officer (DPO), who can be contacted at the following e-mail address: rpd@vepromex.it.
2. Categories of data processed
The personal data of the User (data subject) processed for the creation of the profile are: first name, last name, professional activity, professional domicile, business telephone number, business e-mail address, VAT number, image (optional).
Such data will be made public and accessible to other Users of the app.
The optional, explicit and voluntary sending of messages to Venicepromex’s contact details, as well as the completion and submission of the forms available in the app, entail the acquisition of the sender’s contact details, which are necessary in order to respond, as well as any personal data included in the communications. The User is free to provide the personal data requested in the forms available in the app; however, failure to provide such data may result in the inability to obtain what is requested.
The Data Controller has prepared specific privacy notices for the provision of specific services.
3. Purposes and legal bases for processing
The personal data collected through the app are processed for the following purposes:
1. to provide services through the app and facilitate the creation of business networks (Article 6(1)(b) GDPR);
2. to manage requests for information or services submitted by Users by completing the relevant forms available in the app, or via Venicepromex’s e-mail addresses (Article 6(1)(b) GDPR);
3. to manage requests to register for events/conferences organised by Venicepromex by completing the relevant forms available in the app (Article 6(1)(b) GDPR);
4. to send notifications regarding changes to the app, the general terms of use, or this privacy notice (Article 6(1)(b) GDPR);
5. subscription to the Venicepromex newsletter, subject to the User’s explicit consent (Article 6(1)(a) GDPR).
4. Underage Users
The services offered through the app are intended for adults. If an underage User communicates their data through the app, the Data Controller will immediately and irreversibly delete such data.
5. Data processors and recipients of personal data
The User’s data will also be processed by external parties formally appointed by Venicepromex as Data Processors pursuant to Article 28 GDPR, belonging to the following categories:
• companies providing maintenance services for the app and IT systems;
• companies providing telematic communications services and, in particular, e-mail services;
• companies providing database management and maintenance services for the Data Controller.
The data entered when creating the profile will be made public and accessible to other Users of the app.
An up-to-date list of the Data Processors may always be requested from the Data Controller.
6. Data retention
The data provided by the User (data subject) for the creation of the profile will be processed until a request is made to delete the profile.
The User’s data are deleted within 30 days in the event of a request to delete the profile.
If a profile remains inactive for 5 years, the relevant data will be deleted.
Where a profile has been suspended, the Data Controller will retain the data for up to a maximum of 10 years depending on the seriousness of the breach, in order to prevent the User from circumventing the rules governing the use of the app.
The data processed for sending newsletters will be processed until consent is withdrawn.
Any additional personal data provided to the Data Controller through forms or specific e-mail communications will be processed for the time necessary to provide the requested service and/or until a response is provided to the User’s request, and thereafter for a period equal to:
- 2 years, in the case of requests for information;
- 10 years, in the case of registrations for events or conferences.
7. Nature of the provision of data and consequences of failure to provide data
The provision of the personal data indicated as mandatory is necessary in order to provide the requested service.
Failure to provide the necessary data makes it impossible to obtain what is requested. Failure to provide optional data may result in a less precise and detailed response, or greater difficulty in being able to contact the data subject again if necessary by the Data Controller.
8. Your rights
Regulation (EU) 2016/679 grants you, as a Data Subject, several rights, which you may exercise by contacting the Data Controller or the DPO at the contact details indicated in Section 1 of this policy.
Among the rights that may be exercised—provided that the conditions set out from time to time by applicable law are met (in particular Articles 15 et seq. of the Regulation)—are:
• the right to know whether Venicepromex is carrying out processing of personal data concerning you and, if so, to obtain access to the data being processed and to all information relating thereto;
• the right to rectification of inaccurate personal data concerning you and/or to have incomplete data completed;
• the right to erasure of personal data concerning you;
• the right to restriction of processing;
• the right to object to processing;
• the right to data portability of your personal data.
In addition, the data subject has the right to lodge a complaint with the Supervisory Authority where they consider that the processing of their personal data is carried out in breach of the GDPR, in accordance with the procedures provided by the Authority; alternatively, the data subject may bring the matter before the competent courts.
The Data Controller reserves the right to make changes to this privacy notice at any time. Users are therefore invited to periodically check its contents. In the event of material changes, the data subject will be notified by sending an e-mail to the address provided when registering the profile.
Last updated: May 13, 2026
