PRIVACY POLICY
Privacy Notice pursuant to Article 13 of Regulation (EU) 2016/679 (GDPR)

This Privacy Policy describes how the website https://interexpo.it is managed with regard to the processing of users’ personal data.
This notice is provided pursuant to Article 13 of Regulation (EU) 2016/679 (hereinafter “GDPR”) to users who interact with the web services accessible electronically from the following address: https://interexpo.it

This Privacy Policy applies exclusively to this website and not to any external websites that may be accessed through links available on the pages of this website.

DATA CONTROLLER
The Data Controller responsible for the processing of personal data is:

Interexpo S.r.l.
Registered office: Via Plinio 73 – Milan
VAT Number / Tax Code: [insert]
Contact e-mail: allestimenti@interexpo.it
Certified e-mail (PEC): interexpo.cif@pec.it

The Data Controller determines the purposes and methods of processing the personal data collected through this website.

TYPES OF DATA PROCESSED
Browsing data
During the normal operation of the website, IT systems and software procedures used to operate the website acquire certain personal data, the transmission of which is implicit in the use of Internet communication protocols.
This category includes:

• IP addresses;
• domain names of the devices used by users;
• URI addresses of the requested resources;
• time of the request;
• method used to submit the request to the server;
• size of the file obtained in response;
• numerical code indicating the status of the server response;
• information relating to the user’s operating system and IT environment.

These data are mainly processed to:

• ensure the correct functioning of the website;
• guarantee IT security;
• prevent misuse or fraudulent activities;
• obtain anonymous statistical information regarding website usage.

The legal basis for processing is the legitimate interest of the Data Controller in ensuring website security and technical management (Article 6(1)(f) GDPR).
The data are stored for the period strictly necessary for the purposes indicated and, in any case, normally no longer than seven days.

Data voluntarily provided by the user
The voluntary sending of communications via e-mail or through any forms available on the website involves the acquisition of the data provided by the user, including:

• first and last name;
• e-mail address;
• telephone number, if provided;
• information contained in the request.

These data are used exclusively to respond to requests received and provide information relating to the services offered.
The legal basis for processing is the performance of pre-contractual measures taken at the request of the data subject (Article 6(1)(b) GDPR).
Failure to provide the necessary data may prevent the Data Controller from responding to the request.

PURPOSES AND LEGAL BASES OF PROCESSING
Personal data are processed for the following purposes:

METHODS OF PROCESSING
Personal data are processed using electronic tools and, where necessary, paper-based methods.
The Data Controller adopts appropriate technical and organisational measures to ensure:

• confidentiality;
• integrity;
• availability of data;
• protection against unauthorised access;
• prevention of accidental loss or destruction of data.

SUBJECTS WHO MAY ACCESS THE DATA
Personal data may be processed by:

• personnel authorised by the Data Controller;
• IT service providers;
• suppliers managing the website or technological infrastructures;
• professionals appointed by the Data Controller;
• parties whose access to data is permitted by legal obligations.

External parties processing personal data on behalf of the Data Controller act, where required, as Data Processors pursuant to Article 28 GDPR.

TRANSFER OF DATA TO NON-EU COUNTRIES
Some service providers used by the website may process personal data outside the European Economic Area.
In such cases, transfers are carried out in compliance with Articles 44 et seq. of the GDPR through:

• adequacy decisions adopted by the European Commission;
• Standard Contractual Clauses approved by the European Commission;
• additional safeguards provided by applicable legislation.

SERVICES USED BY THE WEBSITE
Website statistics and traffic analysis
The website may use Google Analytics, a web analytics service provided by Google Ireland Limited.
The service allows the collection of statistical information regarding website usage.
Processing through non-technical analytics tools takes place exclusively after the user’s consent has been provided through the cookie banner.

Processed data:

• cookies;
• usage data;
• browsing information.

Provider privacy information: https://policies.google.com/privacy

EMBEDDED CONTENT AND THIRD-PARTY SERVICES
The website may include content from external platforms, such as:

• YouTube;
• Vimeo;
• Google Maps;
• Google Fonts;
• Social networks.

These services may collect browsing-related data according to their own privacy policies.
The loading of content that is not necessary for the operation of the website takes place only after the user’s consent through the cookie management system.

DATA RETENTION PERIOD
Personal data are stored for the period necessary to achieve the purposes for which they were collected.

In particular:

• requests submitted via e-mail or contact forms: for the time necessary to manage the request and subsequently according to administrative or legal requirements;
• contractual and tax-related data: for the period required by applicable legislation;
• data collected through statistical tools: according to the retention periods indicated by the relevant providers and until consent is withdrawn.

DATA SUBJECT RIGHTS
The data subject may exercise, at any time, the rights provided for by Articles 15–22 of the GDPR:

• right of access;
• right to rectification;
• right to erasure;
• right to restriction of processing;
• right to data portability;
• right to object;
• right to withdraw consent previously given;
• right to lodge a complaint with the Italian Data Protection Authority (Garante per la Protezione dei Dati Personali).

Requests may be sent to: allestimenti@interexpo.it

COOKIE POLICY
What are cookies?
Cookies are small text files that websites visited by users may store on the device used for browsing.
They are used to ensure the proper functioning of the website, improve the user experience, or collect statistical information.

Types of cookies used
Technical cookies
These cookies are necessary for the operation of the website and do not require user consent.
They may include cookies used for:

• session management;
• security;
• storage of preferences;
• operation of WordPress features.

Analytics cookies
The website may use analytics cookies to collect statistical information about website usage.
These cookies are installed only after the user’s consent when they cannot be considered technical cookies.

Example: Google Analytics.

Profiling cookies
The website does not use profiling cookies aimed at creating user profiles or providing personalised advertising.

Cookie consent management
Upon the first visit to the website, a cookie banner is displayed allowing the user to:

• accept all cookies;
• reject non-essential cookies;
• select personal preferences.

Consent may be modified or withdrawn at any time through the dedicated cookie management panel available on the website.

How to disable cookies through the browser
Users can manage or delete cookies through their browser settings.
For further information, please consult the guides of the main browsers, such as Google Chrome, Mozilla Firefox, Safari and Microsoft Edge.

Disabling technical cookies may affect some website functionalities.

UPDATES TO THIS PRIVACY POLICY
This document may be periodically updated following regulatory, technical or organisational changes.

Last update: 29/07/2026