Browser not supported

Privacy Notice – Event Registration (GDPR Art. 13)

Data Controller

NES S.r.l., Via Prina 4, 20900 Monza (MB), Italy

Tax Code / VAT No.: 14311450960

Privacy contact

For any privacy-related request, please contact: info@nesviaggi.it

1) Categories of personal data processed

We process the personal data you provide through the registration form, such as:

• identification and contact details (e.g., first name, last name, email, phone number if requested);

• organisation/company affiliation (if requested in the form);

• purchase and administrative information needed to manage your participation and, where applicable, invoicing.

We do not collect special categories of personal data (e.g., dietary or health-related information).

2) Purposes and legal bases of processing

a) Managing your registration and participation in the event

This includes registration handling, confirmation emails, operational communications, access management and participant support.

Legal basis: performance of a contract and/or pre-contractual measures (Art. 6(1)(b) GDPR).

b) Payment management

Payments are processed via Nexi XPay. NES S.r.l. does not store full payment card details; these are handled by the payment service provider under its own policies and security standards.

Legal basis: performance of a contract (Art. 6(1)(b) GDPR).

c) Administrative and accounting compliance (invoicing where requested, bookkeeping, legal obligations)

Legal basis: compliance with a legal obligation (Art. 6(1)(c) GDPR).

3) Methods of processing

Processing is carried out using electronic tools and organisational measures designed to ensure adequate security, confidentiality and integrity of the data.

4) Data recipients

Your data may be shared with:

• Digievents (event platform provider), acting as a service provider for registration management;

• Nexi XPay (payment service provider) for payment processing;

• IT/hosting and technical support providers connected to the platform’s operation;

• administrative/accounting consultants, where necessary for invoicing and compliance.

Data is not disclosed to the public.

5) International data transfers

If any service provider processes personal data outside the European Economic Area (EEA), transfers will be carried out in accordance with GDPR requirements (e.g., adequacy decisions or Standard Contractual Clauses).

6) Data retention

• Registration and event management data: retained for 12 months after the event.

• Accounting and invoicing data (if applicable): retained for the period required by applicable tax and accounting laws.

• Payment-related data: retained according to Nexi XPay’s obligations and retention policies.

7) Mandatory nature of providing data

Providing personal data for registration and participation is necessary. If you do not provide the required data, we may not be able to process your registration.

Data for invoicing is required only if you request an invoice.

8) Data subject rights

You may exercise the rights provided by Articles 15–22 GDPR, including access, rectification, erasure, restriction, portability, and objection (where applicable).

You also have the right to lodge a complaint with the competent supervisory authority (in Italy: Garante per la Protezione dei Dati Personali).

To exercise your rights, please contact: info@nesviaggi.it.