Privacy Policy

Purposes

1. To manage website registration process, ticket purchases, or the redemption of complimentary access codes for participation in the Event (as governed by the General Terms and Conditions of Sale, to which reference is made), including all related legal, fiscal, accounting, and administrative obligations (e.g., VAT). If registration occurs via LinkedIn, only the following data will be collected: first name, last name, and profile picture; the Data Subject may review the authorization to share such information through the “Partners and Services” section on LinkedIn.
2. To support participants, including reception, badge printing, information services, technical support, schedule notifications, and similar activities.
3. To manage spontaneous information requests submitted by data subjects.
4. To comply with legal, fiscal, or administrative obligations applicable to the Controllers and Processors.
5. To process the Data Subject’s images (see also Section 1.4).
6. To send informational newsletters and communications relating to or connected with the Netcomm Forum, as well as training, educational, or promotional initiatives and content of Netcomm and Netcomm Services.

Data processed

• Registration to the Event: identification and professional data such as first name, last name, email address, phone number, corporate role, company name, company type and size, country, postal code, and any LinkedIn URL. Financial data related to ticket purchases.
• For website and/or APP: technical and online navigation data (IP address, browser type, URLs visited, downloads, cookies, and other tracking technologies), which are transmitted implicitly as part of Internet communication protocols (see the Cookie Policy).

Legal basis

For participation-related purposes (Sections 1.1 (i), (ii), (iii), (v)): Article 6(1)(b) of Regulation (EU) 679/2016 (pre-contractual and contractual measures necessary for the provision of the Services requested by the Data Subject).
For compliance with legal obligations: Article 6(1)(c) of Regulation (EU) 679/2016. For the sending of communications: Article 6(1)(b) and the “soft spam” principle, with the Data Subject’s right to object pursuant to Article 21 of Regulation (EU) 679/2016 through the mechanisms provided, including the direct opt-out link included in emails (unsubscribe from mailing lists).

Purposes

1. To manage participation in the Event and access to its content via the website and/or the web application (hereinafter, the “APP”), including plenary conferences, workshops, Sponsor and Exhibitor initiatives hosted at exhibition stands, access to, use of, and download of multimedia content (insights) made available by Sponsors, etc.
2. To manage reporting relating to access to plenary sessions and workshop rooms, whether live or on demand, and to manage reporting concerning the exchange of data between users collected through Badge scanning. These activities involve analysis and profiling (see Sections 1.3 and 1.5).

Data processed

1. Participation (physical and digital access) and interactions between participants (Badge scanning): first name, last name, email address, job role, company name, company type and size, country, and postal code (collectively, the “registration data”).
2. For browsing and accessing online content through the website and via the APP: the above-mentioned registration data and personal data that are inherently transmitted as part of Internet communication protocols (e.g., IP addresses, computer domain names, URI/URL addresses), as well as data linked to downloads, cookies, and other tracking technologies enabling optimal use of the services and personalized experiences based on stated preferences and interests.

Legal bases

• Participation and logistical management: Article 6(1)(b) GDPR.
• Compliance with legal obligations: Article 6(1)(c) GDPR.
• Profiling and analysis: Article 6(1)(a) GDPR – explicit consent of the Data Subject given through a clear, informed, and affirmative action (see Section 1.3 below).

The Data Subject may withdraw consent at any time without affecting the lawfulness of processing carried out prior to withdrawal (Art. 21 GDPR).

The Netcomm Forum is an exhibition designed to foster interaction, knowledge-sharing, and in-depth discussion of digital-related topics, consistent with the networking expectations typical of an event of this nature.
Personal data are processed to facilitate these objectives by enabling, on the one hand, interaction between individuals attending physically (e.g., through QR-code scanning) and, on the other, offering professional training content such as workshops, including those sponsored by third parties (Sponsors and Exhibitors), through solutions and services ensuring a secure, engaging, and informed physical and digital experience.

Purposes

1. i. Communication of the Data Subject’s personal data through reporting mechanisms.
   The Data Subject is informed that access to a workshop room, theatre, plenary conference sessions, participation in initiatives at exhibition stands, the scanning of their Badge by event staff or Sponsors, as well as the online viewing of content (including videos and insights), may result in the disclosure of their Personal Data to the relevant Sponsor by the Organiser. Accordingly, such Personal Data shall be disclosed solely to the Sponsors of the specific session or initiative with whom the Data Subject has engaged through the activities described above. The disclosure takes place through an automated reporting system which makes the collected data available to the relevant Sponsor in real time. Following the communication of the data, the Sponsor/Exhibitor will process the data as an independent data controller and for its own purposes, including commercial and marketing activities
   To ensure full and informed transparency, before entering the rooms or accessing digital content, the Data Subject is shown specific micro-notices (on-site signage and digital alerts) indicating (i) the process activities (collection and communication), (ii) which Sponsor will receive the data; (iii) the data that will be disclosed (registration data); (iv) the purpose of the communication (commercial/marketing contact by the Sponsor related to the workshop or content accessed); and (iv) that the Sponsor will act as an independent Controller and will provide its own privacy notice pursuant to Article 14 GDPR.
2. Communication of personal data between participants.
   The Data Subject is informed that access to a workshop room, theatre, plenary conference sessions, participation in initiatives at exhibition stands, the scanning of their Badge by event staff or Sponsors, as well as the online viewing of content (including videos and insights), may result in the disclosure of their Personal Data to the relevant Sponsor by the Organiser. Accordingly, such Personal Data shall be disclosed solely to the Sponsors of the specific session or initiative with whom the Data Subject has engaged through the activities described above. The disclosure takes place through an automated reporting system which makes the collected data available to the relevant Sponsor in real time.

Third Parties: the Sponsor who acquires the data, in the ways and limits described above, will process this information as an Independent Data Controller, thus being able to address commercial communications relating to the products/services offered during the event. The Sponsor is informed that it must provide the interested party with its own information pursuant to art. 14 GDPR. The Organisers therefore remain unaffected by the processing carried out by the Sponsors after the data has been communicated.

Legal basis

Affirmative action and informed consent. The legal basis for communicating data to Sponsors is the Data Subject’s consent under Article 6(1)(a) GDPR, expressed through a clear affirmative action (such as entering workshop rooms, plenary sessions, exhibition stands, accessing the website, etc.) which is recorded through dedicated system logs (date, time, workshop/Sponsor, physical or remotely access). The Data Subject is informed—through this privacy policy and through the micro-notices displayed outside workshop rooms—that the interactions described constitute affirmative actions by which he/her provide free, specific, and informed consent to the communication of their personal data to the relevant Sponsors involved in the selected activity.

Data processed

Only identification and professional data provided during registration (first name, last name, company name, job role, email address) will be communicated to the Sponsor.

Data Subject rights

The Data Subject may exercise the rights provided under the GDPR, as further described in Section 7 of this Privacy Notice. The Data Subject may withdraw their consent to the disclosure of their Personal Data at any time. Such withdrawal shall not affect the lawfulness of any disclosures or processing carried out prior to the withdrawal and shall therefore not have effect in respect of disclosures already made. The Sponsors/Exhibitors receiving the Personal Data act as independent Controllers in relation to such data. The Data Subject may exercise the rights set out in Articles 15–22 of Regulation (EU) 2016/679 directly against them. Upon request, the Organiser may provide confirmation of the disclosures made and the relevant contact details of the Sponsor concerned.

Purposes

1. To manage the processing of personal data (first name, last name, job role) and biometric data acquired through video recordings and/or photographs of plenary sessions and workshops (e.g., recording of speakers during presentations, or panoramic shots of the audience including the Data Subject’s image) for the creation of videos, frames, images, photographs, and multimedia materials aimed at institutional purposes of information, scientific dissemination, and promotion of the Event. These materials may be published on the websites of Netcomm and Netcomm Forum, made available via live streaming or on-demand, posted on Netcomm’s official social media pages, and disseminated to the public through media outlets (press, television).
2. To manage the processing of content shared by the Data Subject while navigating and using the platform.

The Data Subject authorizes, without any claim for compensation, the Controllers and Processors to record and/or acquire the aforementioned materials for the stated purposes and hereby declares that they: (i) waive any claim, including financial, concerning future uses of the reproductions covered by this release against the Controllers and Processors expressly authorized to use them; (ii) release the Controllers from any liability, including financial, arising from improper use of photographic and/or audiovisual material by users of websites, social networks, or third parties (iii) have read and understood the entire privacy notice, including this release, and acknowledge that checking the relevant box (checkbox) constitutes signing this release under their own responsibility.

Data processed

Personal data collected via the registration form, the release form, personal image, and voice (biometric data) acquired as described above.

Legal basis

Images are processed in accordance with copyright and related rights legislation (Arts. 96, 97 et seq., Italian Law No. 633 of 22 April 1941, Art. 10 Civil Code) and Regulation (EU) 2016/679. The authorization constitutes the grant of a non-exclusive, worldwide, unlimited-duration license, transferable to third parties, for the use of the materials, including the rights referred to in Arts. 12–19 of Italian Law No. 633/1941, such as: publication rights; reproduction in any form or manner; transcription, editing, adaptation, processing, and reduction; communication and distribution to the public, including projection, transmission, and dissemination, even in summary or shortened form, by any technical means; and the right to retain copies, including electronic copies, on any known or future technological medium, within the purposes and limits described above. In any case, pursuant to the above-cited law and Art. 10 of the Civil Code, any use of the images that could harm the honor, reputation, or dignity of the person depicted, recorded, or photographed is strictly prohibited. If the Data Subject does not wish their image to be captured during the Netcomm Event, the Organizer recommends avoiding the event areas. The legal basis for processing the personal data is the execution of the contract, i.e., registration on the website/participation in the event/ticket purchase (Art. 6(1)(b) GDPR), together with granting this release.

Purposes

1. Analysis of interests and statistical processing of the data provided to evaluate and improve services offered by Netcomm, and to design events increasingly aligned with users’ expectations and deliver communications more closely tailored to interests and preferences;
2. Analysis of access reports to exhibition spaces and digital environments, also for reporting purposes to be communicated to Sponsors.

Legal basis

Processing is based on Article 6(1)(a) GDPR, i.e., the consent of the Data Subject, which may be withdrawn at any time. In any case, under Art. 21 GDPR, the Data Subject may object to processing at any time using the provided mechanisms: direct opt-out link in emails or by contacting the Controllers to request cessation of communications and exercise of data subject rights.

Collected data will be processed:

• By the Processors for the purposes described above, by the Controllers, and by any other Processors that may be appointed;
• By other parties with whom interaction is necessary to provide the Services (e.g., hosting providers);
• By external parties appointed as Processors, including the following categories: companies providing email delivery services and/or performing invoicing and/or fiscal management activities; companies providing management and maintenance services for the Platform’s IT infrastructure.

Data may be disclosed:

• With the Data Subject’s consent to the Event Sponsors and Exhibitors through access reports. See Section 1.3 for further details regarding the rationale, methods, and legal basis of such processing;
• To Judicial Authorities in response to legal requests, to third parties for the fulfilment of fiscal or administrative obligations, or where necessary to achieve the purposes described above.

5.1. Personal data will be collected, processed, recorded, consulted, stored, made available to third parties, profiled, and extracted in the terms, methods, and limits described in this privacy notice. Processing will always be conducted in accordance with the purposes for which the data were collected, by personnel expressly appointed by the Controllers and Processors, using paper-based, IT, or telematic tools, or any technological support, within the limits and purposes defined above. Data will be processed by:

• TIG Events S.r.l., Milan, Via Ettore Romagnoli 6, by its personnel from the marketing, communication, and administrative departments, at its premises and on servers located on-site.
• TIG Factory S.r.l., Milan, Via Ettore Romagnoli 6, by personnel from IT and marketing-commercial departments, AI process.
• Netcomm e Netcomm Services, Via Serbelloni 2, Milan, by personnel from marketing-commercial and associative development departments.

Processing activities are conducted to ensure data and system security, implementing specific security measures aimed at minimizing risks of destruction or accidental loss of data, unauthorized access, or unlawful or non-compliant processing relative to the purposes and methods indicated in this privacy notice.

5.2 The Organiser informs that some processing may also be carried out through Artificial Intelligence systems to optimise the execution and facilitate the general user experience, such as when registering on the website and purchasing access tickets (Badges) or converting gift codes. The use of these tools takes place in full compliance with Regulation (EU) 2024/1689 and Regulation (EU) 679/2026. In any case, the use of these systems takes place under human supervision, and the result of the interaction can always be verified and/or corrected by an operator. Finally, the data will be used and operated in a "closed" environment (private AI) and will not be entered into publicly accessible AI systems.