1) Data controller.
The data controller of the personal data is Pitti Immagine s.r.l., with offices in Florence, via Faenza no. 111, VAT registration no. 03443240480.
2) Non-registered users.
Non-registered users may nonetheless request information on site functions and characteristics and on the activity of Pitti Immagine s.r.l. by completing the form provided. For information requests, it is necessary to complete the form with the personal and contact data requested, which are used to fulfil information requests and stored for possible promotional and information communications by Pitti Immagine s.r.l. and by the companies belonging to the same group (FieraDigitale s.r.l., Stazione Leopolda s.r.l.).
3)Registered users.
3.1) Type of personal information.
3.2) Purpose and methods of processing. Compulsory provision.
Data processing is mainly but not exclusively carried out electronically, in compliance with the security measures pursuant to the Legislative Decree no. 196/2003 (Privacy Code). The provision of data is compulsory and failure to do so prevents access to the site’s restricted area and the use of the functions therein.
3.3) Data collection.
3.4) Communication and dissemination of data.
3.5) Management and protection of the account.
The username and password you have identified to access the Pitti Immagine extranet and the site are the only means of access to their services. Use a complex alphanumeric password and do not disclose your username or password to third parties. If you lose or disclose your password, you will no longer be able to control the activity carried out on your behalf on the site and will be exposed to the consequences of the binding agreements made on your behalf.
The username and password chosen for accessing the extranet network will also be valid for entering the reserved areas of the websites of the other group companies and, in particular, for accessing the reserved area on the www.e-pitti.com website managed by FieraDigitale s.r.l..
3.6) Cookies.
3.7) Cancellation.
In any case, the personal data will also be stored to permit continued access to the reserved area of the www.e-pitti.com website unless the same is concomitantly cancelled from that website as well.
4) Rights of data subjects.
Art. 7. Rights to access personal data and other rights
1. The data subject shall have the right to obtain confirmation as to whether or not personal data concerning him/her exist, regardless of their being already recorded, and their communication in intelligible form.
2. The data subject shall have the right to be informed:
a) of the source of the personal data;
b) of the purpose and methods of processing;
c) of the logic applied to the processing, if the latter is carried out with the help of
electronic means;
d) of the identification data concerning the data controller, the data processor and
the representative designated as per article 5, paragraph 2;
e) of the entities or categories of entity to which the personal data may be
communicated and which may have access to the said data in their capacity as
designated representative(s) in the territory of the State, as data processor(s) or
as person(s) in charge of the processing.
3. The data subject shall have the right to obtain:
a) updating or rectification or, where interested therein, integration of the data;
b) erasure, anonymisation or blocking of data that have been processed unlawfully,
including data whose retention is unnecessary for the purpose for which they have
been collected or subsequently processed;
c) certification to the effect that the operations as per letters a) and b), including
their contents, have been made known to the entities to which the data have been
communicated or disseminated, unless this requirement proves impossible or
involves a manifestly disproportionate effort compared to the right to be protected.
4. The data subject shall have the right to object, in whole or in part:
a) on legitimate grounds, to the processing of personal data concerning him/her,
even though they are relevant to the purpose of the collection;
b) to the processing of personal data concerning him/her, where it is carried out for
the purpose of sending advertising material or direct selling or else for market or
commercial communication surveys.
5) Exercising the rights.
Data subjects may exercise their rights pursuant to art. 7 of the Legislative Decree 196/2003 by sending notification, also by email, to the data controller, who undertakes to promptly answer using the most suitable means in relation to the request.
6) Validity of this statement and modifications.

