Our company, hereinafter the “Company”, guarantees security, confidentiality and protection on of the data its possesses in all business processes.
The present Privacy Policy describes how we process and manage your personal data collected for the purpose of the participation in “Cosmoprof Connect Dubai” (the “Event”), an Event by Cosmoprof Asia Limited, in which respect the Company is an affiliate of its shareholder BolognaFiere S.p.A.
As per article 13 of Regulation (EU) 2016/679 (“GDPR”), we inform you that your personal data, voluntarily given, and collected for participation in such Event, will be processed in compliance with applicable rules on personal data protection and principle of confidentiality which inspired our Company.

For any other information on your data processing, please feel free to contact us at [email protected]

1. Categories of processed data

This section explains the personal data that may be collected during your participation in the Event.
Such personal data includes the following types of data:

• Personal information (such as: name and surname);
• Contact data (such as: telephone, mobile, e-mail/certified mail, residential or domicile address);
• Professional Position data;
• Comments, feedback, posts and other content you submit.

Social Network
BolognaFiere Cosmoprof does not control nor supervise over the social media platforms to which you provided your personal data, nor uses some of the possible interactions with such platforms (e.g. “like” on Facebook) to carry out direct marketing or profiling activities. Any question or request related processing of your personal data by social media platforms shall be addressed to the latter.

2. Purpose and legal basis of processing of personal data
Your Personal data shall be used for the following purposes and legal basis.

A. To execute pre-contractual measures you have requested and perform the contract
We will use your personal data for the following purposes:

• to reply to your messages and requests received through the contact address;
• to execute pre-contractual measures you have requested and/or necessary for participation in the Event;
• to perform contractual undertakings regarding your participation in the Event and allow you to use the related services.

B. To Fulfill our legal obligations
We can process your personal data to fulfill our legal or regulatory obligations or requests issued by Authorities and other Institutions.

C. To pursue our legitimate interests
We could process your personal data to pursue our legitimate interests in order to:

• send communications related to your relationship with us and the services you have requested;
• send you commercial communications regarding BolognaFiere Cosmoprof’s services and products similar to those which you have availed yourself during the Event, unless you disagree;
• ascertain, exercise or defend our rights and / or those of other companies belonging to the BolognaFiere Group in Court.

D. Processing for which consent is required
Upon your consent, your personal data could be processed for the following purposes:

• to send you promotional and commercial communication, including our Newsletter, regarding the events, services and products offered by BolognaFiere Cosmoprof, as well as by companies of the BolognaFiere Group, with traditional methods of contact (e.g. letter mail) or automated systems of contact (e.g., email, MMS, SMS);
• to perform statistic studies and researches, as well as market researches.

Consent shall be revoked at any time, without prejudice to the lawfulness of the processing carried out prior to said withdrawal.

3. Manner of data processing
Personal Data processing will be carried on through adequate electronical and/or telematic means, with logic strictly related to the above purposes and in order to grant security and confidentiality of data. Specific security measures are observed in order to prevent loss of your data, illicit or incorrect and non-authorized access to such data.

4. Provision of personal data and consequences in case of lack of provision
The provision of personal data for the purposes indicated in the letters A., B. and C. of the above point 2) is not mandatory; lack of, partial or incorrect provision of data, will determine the impossibility to perform contractual undertakings or pre-contractual measures and to allow you the use of the related services as well as the fulfilment of legal and regulatory obligations.
Lack or withdrawal of consent for the purposes of the letter D of the above point 2), will result in the inability to send you promotional or commercial communication, as well as to perform statistic studies and researches, as well as market researches.

5. Recipients of personal data
We can communicate your data to the following recipients:

• Subsidiary and/or affiliated companies of the Bolognafiere Group
• entities performing statistic and marketing researches, as well as suppliers of services regarding the management and performance of events;
• entities managing and/or maintaining the electronic and telematic tools used by our Company, hosting service provider;
• entities who provide, on our behalf, various type of services (e.g. tax consultant, auditing firm),
• freelance professionals or professional firms in charge of defending our Company in litigation and/or administrative proceeding by virtue of the aforementioned relationship, and debt collection companies;
• Public Security Authority, Judicial Authority or any other entities and Authorities in order to comply with applicable law, orders or regulations.

In any case, your personal data will not be disseminated.

6. Transfers of personal data abroad
Your personal data may be transferred abroad, in compliance with applicable law, also to non-EU Member States, for fulfilling obligations imposed by law, regulations and European legislation, as well as to perform the purposes as set out in the above point 2.
Transfer to non-EU Member States, save as the cases granted by Adeguacy Decision of the European Commission, is done in a way to ensure appropriate safeguards as per article 46, 47 and 49 of GDPR.

7. Duration period of processing
Your personal data will be processed for a period of time no longer than that necessary for the purposes for which they were collected, or subsequently processed, pursuant to legal obligations. Specifically:

• personal data will be retained only for the performance of the contractual relationship and the services provided and, after their expiration, only for the time necessary to ensure the fulfilment of all legal obligations.
• data used for sending promotional and commercial communication will be processed until you communicate to us your withdrawal of consent in the manners made available from time to time. In the absence of revocation of your consent, the data acquired for the aforementioned purposes may be kept for a period of time not exceeding 24 months. After such revocation or, failing that, after the expiry of the mentioned retention period, the data will be permanently deleted or made anonymous.

8. Right on personal data processing
We inform you that, at any time, regarding your data processing, you will exercise the rights guaranteed under article 15- 22 of GDPR.
In particular, you have the following rights:

• Right of access: you have the right to obtain any information on your data processing or the confirmation that we process your personal data. You can also request copy of your personal data by e-mail and check which data we have processed.
• Right to rectification: you have the right to have your personal data rectified if the information are incorrect, including the right to modify personal data not complete.
• Right to erasure: you have the right to have your personal data deleted (so called “Right to be forgotten”).
• Right to restriction: you have the right to obtain from us restriction on your personal data processing when provided by applicable law.
• Right to data portability: you have the right to receive your personal data in a structured, commonly used and machine-readable format and the right to transmit those data to another controller.
• Right to object: you have the right to object, on ground relating to your particular situation, to the processing of your personal data, save as our legitimate interests.
• Withdrawal of consent: if the processing is based on your consent, you can withdraw it at any time, however, without prejudice to the lawfulness of the processing carried out before said the withdrawal.

You have also the right to lodge a complaint to the competent Supervisory Authority when you consider that our processing of your personal data infringes data protection provisions, without prejudice to any other administrative or judicial remedy.
Any requests advanced for the exercise of your rights mentioned above must be forwarded to the following address [email protected]; all requests will be given adequate reply without any delay, in compliance with the law.

9. Data Controller and Data Protection Officer
The Data Controller is BolognaFiere Cosmoprof S.p.A., in the person of its legal representative pro tempore, with registered office in Bologna, Via Maserati n. 16.
The Data Protection Officer (“DPO”) can be addressed to the following address: [email protected].
The present information will be updated. BolognaFiere Cosmoprof invite the user to visit this page periodically, for information on personal data collected by BolognaFiere Cosmoprof.

Last updated date: 3rd June 2025.