2. Categories of Personal Data Processed

Among the Personal Data collected by Padova Hall, either independently or through third parties, are: first name, last name, telephone number, address, email, various types of data, city, cookies, usage data, profession, and company name.

Full details on each type of data collected are provided in the dedicated sections of this privacy policy or through specific information notices displayed prior to data collection.

Personal Data may be freely provided by the User or, in the case of Usage Data, collected automatically when using our websites.

Unless otherwise specified, all data requested in the forms on our websites are mandatory. If the User refuses to provide them, it may be impossible for Padova Hall to provide the Service. Where Padova Hall indicates certain data as optional, Users are free not to provide such data without any consequence on the availability or operation of the Service.

Users who have doubts about which data are mandatory are encouraged to contact the Data Controller.

Any use of cookies or other tracking tools by Padova Hall or third-party service providers, unless otherwise specified, is intended to provide the Service requested by the User, in addition to the other purposes described in this document and in the Cookie Policy.

The Data Subject assumes responsibility for the Personal Data of third parties obtained, published, or shared with Padova Hall and guarantees that they have the right to communicate or disseminate them, releasing the Controller from any liability toward third parties.

2.1) Personal Data of Third Parties Voluntarily Provided by You

The User acknowledges that providing personal data of third parties in our commercial documentation and/or online forms constitutes processing for which the User acts as the data controller of such data.

Therefore, the User, as data controller and contact point, guarantees that such personal data have been collected and communicated in compliance with applicable privacy laws. To this end, the User undertakes, pursuant to Article 13 of the Privacy Code and Article 13 of the GDPR, to inform such third parties of the processing methods and purposes. The personal data of such third parties will be communicated solely for the purpose of providing and managing our services.

4. Legal Basis for Processing

The legal basis for processing is:
a) the contract and/or participation in a commercial and/or promotional initiative;
b) the consent of the Data Subject for promotional activities.

Providing personal data for purpose (a) is mandatory; failure to provide such data will make it impossible to perform and manage Padova Hall services.

Providing personal data for purpose (b) is optional; refusal will only result in the inability to send marketing communications or carry out profiling activities.

The Data Subject may withdraw consent or object to processing at any time by sending a written communication to the contacts indicated in paragraph 11.

Objection to marketing processing will apply to all contact methods unless limited by the Data Subject.

Upon receiving such a request, Padova Hall will promptly delete the data and, where possible, inform third parties.

6. Recipients of Personal Data

Personal data, which will not be disclosed publicly, may be shared with:

• employees, agents, or collaborators of Padova Hall;
• consultants and external service providers (accounting, legal, IT, marketing, hosting, couriers, etc.);
• authorities or entities where required by law;
• entities involved in profiling and marketing activities.

These parties may act as data processors, independent controllers, or joint controllers.

8. Data Retention Period

Personal data will be retained for the time necessary to fulfill the purposes for which they were collected.

• Data related to contracts will be retained until completion of the contract;
• Data processed for legitimate interest will be retained until that interest is fulfilled;
• Data processed based on consent will be retained until consent is withdrawn.

Data may be retained longer if required by law or authority.

At the end of the retention period, data will be deleted.

10. Rights of the Data Subject

The Data Subject has the right to:

• access, rectify, or delete personal data;
• restrict or object to processing;
• withdraw consent;
• request data portability;
• lodge a complaint with the Italian Data Protection Authority (Garante).

Requests must be submitted in writing to the contacts indicated below and are free of charge.