MIRABILIA TOURISM 2025

In compliance with personal data protection regulations, ISNART, acting as the data controller for the 2025 B2B Mirabilia FOOD&DRINK and TOURISM events, provides the following information on the processing of personal data. This processing is performed in full conformity with the legal principles of lawfulness, fairness, transparency, relevance and adequacy. 

The event features in-person B2B meetings and networking sessions for Italian companies in the food and wine sectors, as well as international buyers operating in these sectors who are interested in developing business relationships. 

For clarity, the roles of the parties involved in the initiative and mentioned in this notice are defined below: 

•             ISNART ScpA, with its registered office at Piazza Sallustio 21, 00187 Rome, represented by its interim legal representative; the organiser and promoter of the event, as well as Data Controller;
•             WTC Genoa, a Special Agency of the Italian Chamber of Commerce, Industry, Crafts and Agriculture of Genoa, represented by its interim legal representative and with its registered office at Via Garibaldi No. 4, 16124 Genoa (GE), VAT No. 01601570995; PEC certified e-mail: wtcge@legalmail.it; the owner of the platform and Data Processor;

Independent Data Processors: 

•             Unioncamere - the Italian Union of Chambers of Commerce, Industry, Crafts and Agriculture – which is the public body that unites and institutionally represents the Italian chamber system, co-organiser of the 2025 Mirabilia FOOD&DRINK and TOURISM events.;
•             Italian Chambers of Commerce, Industry, Crafts and Agriculture (Camere di Commercio, Industria, Artigianato e Agricoltura - CCIAA), associates of Isnart Scpa and conduct scouting and selection activities within their designated territories, including the verification and validation of participating companies involved in the relevant initiatives;
•             Italian Chambers of Commerce Abroad (Camere di Commercio Italiane all’Estero - CCIE), associated with Assocamerestero and promotes Italian products in countries where it has a presence; CCIE is also involved in selecting and inviting buyers from the food&drink sector;
•             Italian Exhibition Group SpA, which selects and engages buyers from the tourism sector

 Data Processors

•             Asset Basilicata, A special agency of the Italian Chamber of Commerce, Industry, Crafts and Agriculture of Basilicata, providing support to ISNART in managing the 13th edition of the National Tourism Exchange and Mirabilia Food & Drink in 2025, in fulfilment of its assigned mandate;
•             Suppliers: Economic operators providing technical, media, IT and logistical support services for the organisation and management of the initiatives specified above (Dintec, Enterprise Europe Network, ICE Agency and others). The complete list is available on request from the Data Controller.

 **Data Protection Officer
**ISNART Scpa appointed a Data Protection Officer whose contact email address is: dpo@isnart.it

**Purpose
**Personal data is processed for purposes related to the organisation and management of the specified activities, including the possible recording of the events in audio and video formats.
The legal basis for this processing is the legitimate interest of the Data Controller, in compliance with the rights and freedoms of the Data Subjects.

Personal data may also be used for additional communications, using the following methods:

o    video, photographs and/or other multimedia materials;
o    the use of images in books, magazines, brochures, catalogues and other printed material;
o    communications regarding future events, conferences or similar institutional initiatives.

 The legal basis for this processing is the explicit consent of the Data Subject, which is provided by ticking the appropriate flag box.

Data Subjects are entitled to withdraw their consent to data processing at any time, without affecting the lawfulness of the processing carried out before the withdrawal.

This includes communications regarding future initiatives by the Data Controller.

**Nature of the data processed
**The data processed includes: first name, surname, telephone number, and email address. Additional information provided voluntarily, such as job title or organisation, may also be included.
No processing is executed on special categories of personal data, such as trade union membership or political/religious beliefs.

Right of access (Article 15 of the Regulation)
Right to rectification (Article 16 of the Regulation)
Right to erasure (Article 17 of the Regulation)
Right to restriction of processing (Article 18 of the Regulation)
Right to data portability (Article 20 of the Regulation)
Right to object (Article 21 of the Regulation)

**Rights of Data Subjects
**According to the applicable legal provisions, data subjects are entitled to the following rights[1]:

To exercise your rights, please send a request to: legale@isnart.it

**Right to lodge a complaint
**If your personal data is processed unlawfully, you have the right to lodge a complaint with the Data Protection Authority or take legal action in a competent Court.

**Communication and methods of personal data processing
**Personal data is processed in both paper and digital forms by authorised staff members of the Data Controller, who implement all appropriate security measures. The data may also be published on the institutional channels of the Data Controller, including social media. Additionally, external parties appointed as Data Processors are authorised to process the data.

**Transfer of data to non-EU countries
**The transfer of data to countries outside the European Union (e.g. the USA, Australia and the United Arab Emirates) is only performed in conformity with Article 44 and subsequent articles of the GDPR, and involves:

•             standard contractual clauses approved by the EU;
•             appropriate safeguards and enforceable rights for Data Subjects.

**Absence of automated decision-making
**The data controllers do not perform automated decision-making or profiling, as defined in Article 22 of the GDPR.

**Data processing duration
**Personal data is only stored for as long as is necessary to fulfil the above-described purposes, in compliance with the applicable statutory retention period.

[1] Rights:

-        the right of access, which allows You to obtain confirmation from the Data Controller as to whether Your personal data is being processed, and if so, to access that data;

-        the right to rectification, which allows You to request the correction or completion of Your personal data if it is inaccurate or incomplete;

-        the right to erasure, which allows You, in specific cases, to request the deletion of Your personal data;

-        the right to restriction of processing, which allows You, in certain circumstances, to restrict the processing of Your personal data by the Data Controller;

-        the right to data portability, which allows You, in specific and defined cases and only for data You have provided, to request to receive Your personal data in a structured, commonly used and machine-readable format;

-        the right to object, which allows You to object to the processing of Your personal data when specific conditions apply.

_
This notice was updated on 18.07.2025