Privacy policy regarding the processing of personal data Light + Building
1. INTRODUCTION
In connection with the promotion, organization, and management of a shared exhibition stand as exhibitors at the trade fair known as Light + Building (the “Fair”), the undersigned organizations (the “Joint Controllers” or the “Companies”) jointly process your personal data (the “Data”) for the specific purposes set out in this Privacy Policy, in compliance with Regulation (EU) 2016/679 (the “GDPR”) and applicable data protection laws.
This Privacy Policy is addressed to users of the website https://www.beghelli.it/landingpage/en/light-building-2026 or https://www.beghelli.it/landingpage/it/light-building-2026 (the “Website”), developed by the Joint Controllers to collect and manage registrations for the Fair, as well as for events (e.g. conferences, workshops, etc.; the “Events”) organized and promoted by the Companies within their shared exhibition stand.
2. WHO ARE THE JOINT DATA CONTROLLERS?
The Joint Data Controllers are:
• BEGHELLI S.p.A., with registered office in Valsamoggia (BO), loc. Monteveglio, Via Mozzeghine no. 13/15, VAT no. 00666341201, email: privacy@beghelli.it.
• PERFORMANCE iN LIGHTING S.p.A., with registered office in Cenate Sotto (BG), Via Domenico Bosatelli no. 1, VAT no. 08517220011, email: dpo@pec.pil.lighting.
• TVILIGHT PROJECTS B.V., with registered office in Groningen, Leonard Springerlaan no. 35, VAT no. NL 0055 29 505 B01, email: info@tvilight.com.
For any information and/or clarification regarding the processing of Data described in this Privacy Policy, the Joint Controllers have designated a dedicated contact point, reachable at: privacy@beghelli.it.
3. WHO ARE THE DATA PROTECTION OFFICERS (“DPO”)?
Beghelli S.p.A. and Performance in Lighting S.p.A. have each appointed their own Data Protection Officer (“DPO”), who may be contacted for any information relating to the processing of Data at the following email addresses:
• for BEGHELLI S.p.A.: dpo@beghelli.it
• for PERFORMANCE iN LIGHTING S.p.A.: dpo@pec.pil.lighting
4. WHAT PERSONAL DATA ARE PROCESSED?
4.1 Cookies
The Website only uses technical session cookies (non-persistent), strictly limited to what is necessary to ensure secure and efficient navigation of the Website.
4.2 Data voluntarily provided by the user
For the purpose of allowing your registration and participation in the Fair and in the Events organized within the shared stand of the Joint Controllers, through the completion of the relevant forms available on the Website, the Joint Controllers process the following categories of Data:
• identification data (first name, last name, and country);
• contact data (address, email address, and telephone number);
• company name and job position.
5. WHY ARE THE DATA PROCESSED AND WHAT IS THE LEGAL BASIS?
5.1 Collection and management of registrations
Purpose: to collect and manage registration requests for the Fair and the Events submitted by data subjects.
Legal basis: performance of a contract to which the data subject is a party (Article 6(1)(b) GDPR).
Retention period: the Data are retained for the time strictly necessary to manage registrations for the Fair and the Events and, in any case, until their conclusion.
5.2 Service communications
Purpose: to send updates and operational instructions related to participation (e.g., generation and transmission of QR codes, logistical information, program changes).
Legal basis: performance of a contract to which the data subject is a party (Article 6(1)(b) GDPR).
Retention period: the Data are retained for the time strictly necessary to manage registrations for the Fair and the Events and, in any case, until their conclusion.
5.3 Sharing of Data for independent marketing purposes
Purpose: subject to prior sharing, use of the Data by each Joint Controller to send promotional and commercial communications regarding products and/or services by email and/or SMS.
Legal basis: consent of the data subject (Article 6(1)(a) GDPR).
Retention period: the Data are retained until the data subject withdraws consent.
5.4 Compliance
Purpose: to comply with obligations imposed by applicable laws, regulations, or EU legislation (including enabling the data subject to exercise their data protection rights) or to respond to requests from competent authorities.
Legal basis: compliance with a legal obligation to which the Joint Controllers are subject (Article 6(1)(c) GDPR).
Retention period: the Data are retained for the period required by the applicable legal obligation.
5.5 Establishment, exercise, or defense of legal claims
Purpose: to prevent fraud committed through the use of the Website and to enable the Joint Controllers to protect their rights in legal proceedings.
Legal basis: legitimate interest of the Joint Controllers (Article 6(1)(f) GDPR).
Retention period: the Data are retained for the entire duration of any judicial proceedings, including appeal periods.
6. IS THE PROVISION OF DATA MANDATORY?
The provision of Data required at the time of registration for the Fair and the Events is necessary to allow proper participation. Failure to provide such Data will prevent the Joint Controllers from providing the services referred to in Sections 5.1 and 5.2.
The provision of Data for sharing among the Joint Controllers for independent marketing purposes (Section 5.3) is entirely optional and does not affect registration or participation in the Fair and the Events. Consent may be withdrawn at any time.
7. WITH WHOM ARE MY PERSONAL DATA SHARED?
The Data may be processed by third parties external to the Joint Controllers acting as independent data controllers, including, by way of example, supervisory and control authorities and, more generally, public or private entities legally entitled to request the Data.
The Data may also be processed on behalf of the Joint Controllers by external parties designated as data processors pursuant to Article 28 GDPR, who are provided with appropriate operational instructions. These categories include:
• companies providing email delivery services;
• companies providing website maintenance services;
• companies supporting the performance of market research;
• call center service providers.
8. WHO IS AUTHORIZED TO PROCESS THE DATA?
The Data may be processed by the Companies’ employees and personnel assigned to the above purposes, who have been expressly authorized to process such Data by the Joint Controllers, have received appropriate operational instructions, and are bound by professional confidentiality obligations.
9. WHERE ARE MY PERSONAL DATA PROCESSED?
No transfers of Data outside the European Economic Area are envisaged.
10. HOW CAN I EXERCISE MY RIGHTS?
By contacting the Joint Controllers at privacy@beghelli.it, data subjects may request access to their Data, erasure, rectification of inaccurate Data, completion of incomplete Data, restriction of processing in the cases provided for by Article 18 GDPR, and may object to processing based on the Joint Controllers’ legitimate interest.
Where processing is based on consent or a contract and carried out by automated means, data subjects have the right to receive their Data in a structured, commonly used, and machine-readable format and, where technically feasible, to transmit those Data to another controller without hindrance.
Data subjects also have the right to withdraw their consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out prior to such withdrawal.
Finally, data subjects have the right to lodge a complaint with the competent supervisory authority in the Member State of their habitual residence, place of work, or the place where the alleged infringement occurred.