Privacy Policy

LAGO S.P.A., with headquarters in Villa del Conte (Padua), Via Dell’Artigianato II, 21, Fiscal Code, VAT number and Company Register number for the Padua Registry of Companies no.

01508340286 (‘Lago’ or the “Event Organiser”), works continuously to protect the privacy of the all those who participate in and communicate their personal data to the company in order to sign up for and/or for the carrying out of events organized by same (‘Events’).

The Event Organiser takes part in the Salone del Mobile and Fuorisalone of Milan, 2019 (the “Event”). The Personal Data that will be collected during the Event, could be shared for the following purposes, with Lago partners that provide subsidiary and/or related services, such as companies that: produce and provide food and beverage, design products for table and kitchenware, stationery products, home fragrances, videogames, high-range electrical appliances; produce sportswear apparels and organize sports and recreational activities; offer IP consulting services; provide materials and products for the interior design planning; operating in the following branches: Real Estate, textile manufacturing and automotive (the “Thirds”).

1.  Data Controller and Data Protection Officer

Lago, as identified at the beginning of the Policy, is the Data Controller for all of the Personal

Data processed in the context of its Events and can be contacted at the following email address:

privacy@lago.it

2.  Personal Data Subject to Processing

The personal data processed when you sign up for and/or participate in an Event, collected

through on-line or paper forms, includes such information as your name, surname, telephone number, email address, date of birth, country of residence, address and occupation.

3.  Purpose of the Processing

The company will use your Personal Data for the following purposes:

• To provide services, such as: making it possible for you to sign up for and/or participate in Events and to send you the company newsletter (if explicitly requested), which contains informational material only and no marketing material (‘Provision of Service’);
• To send you marketing, promotional and advertising communications, market research and surveys via email, SMS, MMS, apps, paper post, telephone and/or through the company’s official pages on social networks; as well as for marketing, in the broad sense, including prize competitions, games and free gifts with purchase, of products and/or services offered by the company and/or the products and/or services of third parties (‘Marketing’);
  • To create a profile for you in order to offer you information about other products and/ or services that the company thinks might interest you and to show you advertising that might be relevant to your tastes (‘Profiling’);
• To discharge legal obligations that require the company to collect and/or further process certain types of Personal Data (‘Compliance’);
• To prevent or identify any kind of abuse of or any fraudulent activity in relation to the company and so permit the company to protect itself in court (‘Abuse/Fraud’).

• Legal Grounds and Obligatory or Voluntary Nature of the Processing

The company’s legal grounds for processing your Data, in accordance with the purposes listed above in Section 3, are the following:

• Provision of Service: processing is necessary for this purpose in order to provide you with the requested Services. It is not obligatory to provide your Personal Data for this purpose, but if you do not provide it, it will not be possible to provide you with any Services. The same is true for the Service newsletter, which you will receive after specifically requesting it and you can opt out of receiving it by following the instructions in Section 8 below;
• Marketing: processing for this purpose is based on your consent. It is not obligatory to give your consent for this purpose and you are free to withdraw it at any time without any consequences (except that you will no longer receive marketing communications from the company). You can withdraw your consent by following the instructions in Section 8 below;

• Profiling: processing for this purpose is based on your consent. It is not obligatory to give your consent for this purpose and you are free to withdraw it at any time without any consequences. You can withdraw your consent by following the instructions in Section 8 below;
• Compliance: processing for this purpose is necessary for the company to discharge its legal obligations. When you provide Personal Data to the company, it must be processed in accordance with the applicable regulations, which might it their storage and communication to the Authorities to meet accounting, fiscal or other obligations;
• Abuse/Fraud: information collected for this purpose will be used solely for preventing and/or identifying possible abuse of or fraudulent activity in relation to the company and therefore permit the company to protect itself in court.

• Recipients of Personal Data

Your Personal Data can be shared with the following subjects (the ‘Recipients’):

• Subjects who work primarily as data officers or persons, companies or professional firms that provide assistance and consulting to the company;
• Subjects with whom it is necessary to interact for the provision of Services (for example, providers of platforms for signing up for events, sending emails, etc.);
  • Subjects hired to carry out technical maintenance activity (including the maintenance of network equipment and electronic communication networks);
  • Persons authorised by the company to process Personal Information as required for
    

actions strictly related to the provision of themselves to confidentiality or are under confidentiality (e.g. company employees), Services, whether they have committed an appropriate statutory obligation of;

• Subjects, institutions or authorities to whom it is obligatory to communicate your Personal Data for purposes of Compliance, Abuse or Fraud or by order of the authorities;
• The Thirds as mentioned in the premise.

• Transfer of Personal Data

Some Personal Data is shared with recipients outside the European Economic Area. The company ensures that the processing of Personal Data by such recipients is carried out in accordance with the applicable regulations. In fact, the transfer of data can be based on an adequacy decision or on the Standard Contractual Clauses approved by the European Commission. For more

information, please write to the company as instructed in Section 8 below.

7. Storage of Personal Data

Personal Data processed for the purpose of Provision of Service will be preserved by the company for the time strictly necessary for the fulfilment of said purpose. In any case, since this

Personal Data is processed in order to provide you with Services, the company may store it for a

longer period, in particular since it might be needed for protecting its interests from possible complaints relative to the Services.

Personal Data processed for the purpose of Marketing will be stored by the company until you

withdraw your consent. You will, however, be asked periodically to renew your consent. Once you withdraw your consent, the company will no longer use your Personal Data for this purpose,

but may continue to store it, in particular for the period necessary to protect its interests from possible complaints based on the relative processing.

Personal Data processed for the purpose of Profiling will be stored by the company until you

withdraw your consent. You will, however, be asked periodically to renew your consent. Once you withdraw your consent, the company will no longer use your Personal Data for this purpose,

but may continue to store it, in particular for the period

necessary to protect its interests from possible complaints based on the relative processing.

Personal Data processed for the purpose of Compliance will be stored for the period provided for by specific legal obligations or the applicable regulations.

Personal Data processed for the purpose of Abuse/Fraud will be stored for the time strictly necessary for this purpose and in any case as long as the company needs to store it in order to protect itself in court to communicate said data to the competent authorities.

8. Data Subject Rights

You have the right to ask the company, at any time:

• For access to your Personal Data (or a copy of your Personal Data), as well as further information about the way it is being processed;
• To amend or update your Personal Data, should it be incomplete or out of date;
• To erase your Personal Data from the company database;
• To limit the company’s processing of your Personal Data;
• To obtain a copy of your Personal Data in a structured, commonly used and machine-readable format.

You may also:

• Withdraw your consent for Marketing purposes;
• Withdraw your consent for Profiling purposes;
• Withdraw your consent for sharing your Personal Data with the Thirds.

You may withdraw your consent to Marketing sent via email using the dedicated link found at

the bottom of every email that you receive. The same method may be used to stop receiving the newsletter, if you have requested it as a Service.

In addition to the above, you may also exercise your rights writing to the company at the following email address: privacy@lago.it.

In any case, you always have the right to lodge a complaint with the competent supervisory authority (Italian Data Protection Authority) should you hold that the processing of your Personal Data does not comply with current regulations.

Photograph and video policy and consent notice

LAGO S.P.A., with legal offices in Villa del Conte (Padua) at Via Dell’Artigianato II, 21; tax ID code, VAT no. and Padua Business Register no. 01508340286 (hereinafter the “Data Controller” or “LAGO”), undertakes to protect the privacy of all of those attending events for which it is the organiser (the “Events”). This document (the “Policy Notice”) has been drawn up to help you understand how your Personal Data, as defined below, shall be processed as regards the Events, to ensure that you are informed of the processing described below and are able to exercise your rights as recognised by the legislation in force, should you so wish. In general, all information or Personal Data you provide to Lago shall be processed in line with the internationally recognised principles of lawfulness, fairness, transparency, purpose and storage limitation, data minimisation, accuracy, integrity and confidentiality.

• The Data Controller and Data Protection Officer

Lago, as identified at the start of this Policy Notice, is the Data Controller for the Personal Data processed as part of the Events, and can be contacted via the email address privacy@lago.it.

• Personal data subject to processing

Photographs or audio/video recordings may be taken during the Events by individuals appointed by Lago. By taking part in the Event, you acknowledge that you are aware that Lago may use images of you and your voice (“Images”) for the purposes specified in point 3 below. Please be informed that Lago shall process your personal data as specified under point a) below (hereinafter “Personal Data”). The Personal Data subject to processing are as follows: Name, contact details and other Personal Data.

By taking part in the Event, you communicate Personal Data to Lago, including Images of you and possibly your contact details.

• Purpose of the data processing

Lago shall use your personal data for the following purposes:

• publishing images and videos in which Images of you may be inserted, without any obligations for Lago in this sense, in segmented form or partially and together with other images or content, including those containing the Lago brand and/or that of other companies related to it, for promotional and informative purposes, on the internet (company website, social media on pages related to Lago and/or companies related to Lago, and electronic newsletters sent by Lago), in internal presentations, at trade fairs, on videos in store (including in franchises/third-party stores) and on the company employee portal at Lago and/or companies related to Lago, excluding for the purposes of direct commercial sales of products and services (“Publishing Images”);
• satisfying Lago’s legal obligations imposing the gathering and/or further processing of specific types of Personal Data (“Compliance”);
• preventing or identifying any abuse or any fraudulent activity towards Lago, and therefore allowing Lago to protect itself legally (“Abuse/Fraud”).

• Optional/compulsory data processing and legal basis

Lago’s legal basis for processing your Personal Data, in accordance with the purposes laid out in point 3 above, is as follows:

• Publishing Images: processing for this purpose is based on Lago’s legitimate interest, pursuant to Art. 6(1)(f) of Italian Regulation 679/2016, in taking part in Events (such as presentations of new collections) typically promoting the Lago brand and products, at which it can be reasonably expected that the above processing shall take place, also given the clearly visible notices at the entrance to the Event. Should you be opposed to Images of you being used by Lago, please clearly express this by wearing the gadget (“Gadget”) available from a member of Lago staff at the Event. Wearing this Gadget makes your preference immediately clear to Lago staff. Should you decide not to wear the Gadget, Lago may use Images of you, for free, for audio/video recordings and photographs of the Event, in contexts depicting the figure alone or in a group, taken by individuals appointed by Lago.

Lago guarantees that it shall not use the Images in contexts or ways that would undermine the personal dignity and decorum of the subjects filmed/photographed.

Should you decide not to allow use of Images of you as specified above, Lago invites you to wear the Gadget, make sure it is visible, and continue to wear it for the whole duration of the time during which you do not wish to be photographed/filmed. You may also decide to refuse consent after the Event, by following the indications in section 8 of this Policy Notice.

• Compliance: Lago is required to process personal data for these purposes in order to meet any legal obligations. When you provide your Personal Data to Lago, they shall be processed according to the applicable legislation, which may require their storage and communication to the authorities.
• Abuse/Fraud: the information gathered for this purpose shall be used exclusively to prevent and/or identify any fraudulent activity or abuse towards Lago and shall therefore allow Lago to protect itself legally.

5. Recipients of the personal data

Your Personal Data may be shared with the following subjects present (the “Recipients”): i) subjects acting typically as Data Processors i.e. people, companies or professional studios providing support and consultancy services to Lago in the following fields: accounting, administration, law, tax, finance, debt recovery and other areas; ii) subjects delegated to performing technical maintenance work (including maintaining the network devices and electronic communication network devices); iii) people authorised by Lago to process Personal Data, who have committed to confidentiality or who have a sufficient legal confidentiality obligation (e.g. Lago employees); iv) subjects, bodies or authorities to which your Personal Data must be communicated for reasons of Compliance, Abuse or Fraud, or following orders from the authorities;

Images of you may be published on the internet, as specified in point 3 above.

• Transferring personal data

Considering Lago’s international presence, some of your Personal Data may be shared with Recipients which may be located outside of the European Economic Area. Lago guarantees that processing of your Personal Data by these Recipients shall be carried out in compliance with the applicable legislation. The transfers shall be carried out with sufficient safeguards such as Adequacy Decisions and Standard Contractual Clauses approved by the European Commission or another similar body. More information can be obtained by writing to Lago at the following email address: privacy@lago.it.

• Storing personal data

• The Personal Data processed for the purpose of Publishing Images shall be stored by Lago for the time necessary for pursuing the above purposes.
• The Personal Data processed for the purpose of Compliance shall be stored by Lago for the time provided for by specific legal obligations or by the applicable legislation.
• The Personal Data processed for the purposes of preventing Abuse/Fraud shall be stored by Lago for the time strictly needed for the above purpose and, therefore, until such a time as Lago shall be held to store them to protect itself legally or communicate said data to the relevant authorities.

• Rights of the data subject

You have the right to ask Lago at any time for:

• access to your Personal Data (or a copy of said Personal Data), as well as to further information regarding the processing being carried out on the same;
• your Personal Data processed by Lago to be amended or updated, where the data are incomplete or not up to date;
• your Personal Data to be deleted from Lago’s databases;
• the processing of your Personal Data by Lago to be limited;
• the Personal Data relating to you in a structured, commonly used format, readable from an automatic device;

and you may also:

• refuse consent for your Personal Data being processed by Lago;
• revoke your consent.

To exercise your rights, please write to Lago at the following email address: privacy@lago.it.

You are further entitled to lodge a complaint with the competent supervisory authority (the Italian Personal Data Protection Supervisory Authority), should you believe that your Personal Data has been processed in breach of the legislation in force.