Privacy Policy

THE REASON FOR THIS NOTICE
This page describes how the site of Play Modena manages the processing of the personal data of
users who consult it. This is information also provided pursuant to art. 13 of Legislative Decree
196/2003 (Personal Data Protection Code) to those who interact with the MODENAFIERE web
services starting from the address: www.play-modena.it
The information is provided for this site and the other sites owned by Modenafiere srl relating to
individual events, and not for other websites that may be consulted by the user through links to the
sites.
The information is also based on the Recommendation No. 2/2001 that the European authorities for
the protection of personal data, gathered in the Group established by art. 29 of the directive No.
95/46/EC, adopted on 17 May 2001 to identify certain minimum requirements for the collection of
personal data online, and, in particular, the methods, timing and nature of the information that the
data controllers must provide to users when they connect to webpages, regardless of the purpose of
the link.
The Data Controller
The data controller is MODENAFIERE SRL, with offices in Viale Virgilio 58, 41123 Modena VAT No.
02320040369, in the person of the legal representative in office.
Place of data processing
The processing operations connected to the web services of this site take place at the
aforementioned ModenaFiere office and are only handled by technical staff of the Office in charge of
processing, or by persons in charge of occasional maintenance operations. No data deriving from the
web service is communicated or disseminated, except as indicated below.
The personal data provided by users who request the dispatch of informative material (newsletters,
replies to queries, etc.) are used only to perform the service or provision requested and are
communicated to third parties only if this necessary for such a purpose.
Types of data processed
Navigation data
During their normal operation, the computer systems and software procedures used to operate this
website acquire some personal data, the transmission of which is implicit in the use of Internet
communication protocols. This is information that is not collected to be associated with identified
interested parties, but which by their very nature could, through processing and association with data
held by third parties, allow users to be identified.
This category of data includes IP addresses or domain names of the computers used by users
connecting to the site, the addresses in the Uniform Resource Identifier (URI) notation of the
requested resources, the time of the request, the method used to submit the request to the server,
the size of the file obtained in response, the specific numerical code or status of the response given
by the server (success, error, etc.) and other parameters relating to the operating system and the
user’s computer environment.
These data are used for the sole purpose of obtaining anonymous statistical information on the use of
the site and to check its correct functioning, and are deleted immediately after processing. The data
could be used to ascertain responsibility in case of hypothetical computer crimes against the site:
except for this case, at present the data on web contacts do not persist for more than seven days.
Data provided voluntarily by the user

The optional, explicit and voluntary sending of emails to the addresses indicated on this site entails
the subsequent acquisition of the sender’s address, necessary to respond to requests, as well as any
other personal data included in the message.
Specific summary information will be progressively reported or displayed on the pages of the site
designed to provide particular services on request.
Cookies
No personal user data is acquired by the site in this regard.
We do not use cookies to transmit information of a personal nature, nor are so-called ‘persistent
cookies’ used of any kind, nor systems for profiling and / or tracking users. The use of so-called
‘session cookies’ (which are not stored permanently on the user’s computer and disappear when the
browser is closed) is strictly limited to the transmission of session identifiers (consisting of random
numbers generated by the server) necessary to ensure the safe and efficient browsing of the site.
The so-called ‘session cookies’ used on this site avoid the need for other technologies that could
compromise the privacy of users’ browsing and do not allow for the acquisition of personal
identification data.

Optional provision of data
Apart from what is specified above for navigation data, the user is free to provide personal data
contained in the request forms to ModenaFiere or indicated in contacts with the offices of the same
to request the sending of informative material or other communications.
The provision of data is mandatory for reasons of normal commercial and administrative practice, and
their failure to provide it could result in the non-execution of the contract and / or relationship and /
or contact and the impossibility for the request to be met.
Method of treatment
The processing to which the personal data requested or acquired will be subjected (be it prior to the
establishment of any contact and / or commercial relationship, collaboration and work regarding any
contacts for the sole purpose of promoting the activities of the Body) is carried out to comply with
legal and contractual obligations, to verify the correct fulfilment of these obligations by
MODENAFIERE, and to ensure the best exercise of its activities as linked to its corporate goals.
The data will be processed using methods and instruments suitable to guarantee confidentiality and
may be carried out by electronic or automated means (network computers not accessible to the
public) and through non-automated means (paper archives), both provided with adequate security
measures, such as personalized passwords with exclusive access, personal identification code and
access control of archives, as provided for and regulated by articles 31 to 36 included in the Code and
always in compliance with article 11 of the Code.
Personal data may be disclosed, subject to your formal consent:
a) only in the cases foreseen by law, for the purposes of compliance with administrative, accounting
and / or tax matters, to collaborators external to the company ModenaFiere S.r.l. as consultants in tax
and / or accounting and / or legal matters;
b) to controlling and / or investee companies, and / or the BolognaFiere group, of which ModenaFiere
is a part, sales networks (agents, concessionaires, collaborators and / or distributors), subcontractors
and subcontractors engaged in the execution of established contractual or commercial relationships;

c) companies operating in the same sector as MODENAFIERE Srl;
d) service companies operating in the sector of financing and / or revisions of an EU or national
nature.
In the event that the contracts for the acquisition of tickets and / or exhibition spaces foresee the
payment of the fee due to ModenaFiere by debiting a credit card, a new consent to data processing
will be requested directly by the transaction manager. This is because the personal data and
identification data of credit cards are not accessible by MODENAFIERE Srl but only by the operator of
the electronic money payment system (PayPal, etc.), and this will necessarily require specific
authorization to proceed with the transaction.
Rights of the interested parties
The subjects to whom the personal data refer have the right at any time to obtain confirmation of the
existence or otherwise of the data and to know its content and origin, verify its accuracy or request its
integration, updating or correction (articles 7, 8, 9 and 10 of Legislative Decree No. 196/2003
reproduced below for your convenience).
Pursuant to the same articles, you have the right to request the cancellation, transformation into
anonymous form or blocking of data processed in violation of the law, and to oppose in any case, for
legitimate reasons, their processing.
Requests should be forwarded to the data controller by writing to the following email address:
privacy@modenafiere.it
P3P
This privacy statement can be consulted automatically by the most recent browsers implementing the
P3P standard (“Platform for Privacy Preferences Project”) proposed by the World Wide Web
Consortium (www.w3c.org).
Every effort will be made to make the functionality of this site as interoperable as possible with the
automatic privacy control mechanisms available in some products and operated by users.
Considering that the state of improvement of the automatic control mechanisms does not make them
currently free from errors and malfunctions, it is hereby specified that this document, published at
www.play-modena.it, constitutes the “Privacy Policy” of this site which will be subject to updates.
Art. 7 Right of Access to Personal Data and Other Rights
1. The interested party has the right to obtain confirmation of the existence or not of personal data
concerning him / her, even if not yet registered, and their communication in intelligible form.
2. The interested party has the right to obtain information on:
a) the origin of personal data;
b) the purposes and methods of the processing;
c) the logic applied in case of treatment carried out with the aid of electronic means;
d) the identifying details of the holder, of the controller and of the designated representative
according to article 5, paragraph 2;
e) the subjects or categories of subjects to whom the personal data may be communicated or who
can learn about them as appointed representative in the territory of the State, managers or agents.
3. The interested party has the right to obtain:

a) updating, rectification or, when interested, integration of data;
b) the cancellation, transformation into anonymous form or blocking of data processed unlawfully,
including data whose retention is unnecessary for the purposes for which the data were collected or
subsequently processed;
c) the attestation that the operations referred to in letters a) and b) have been brought to the
attention, also as regards their content, of those to whom the data have been communicated or
disseminated, except in the case where this fulfilment proves impossible or involves a use of means
manifestly disproportionate to the protected right.
4. The interested party has the right to object, in whole or in part:
a) on legitimate grounds, to the processing of personal data concerning him / her, even though they
are relevant to the purpose of the collection;
b) to the processing of personal data concerning him for the purpose of sending advertising or direct
sales material or for carrying out market research or commercial communication.
Art. 8 Exercise of Rights
1. The rights referred to in Article 7 shall be exercised with a request made without formalities to the
owner or manager, also through a designated person, to whom appropriate confirmation is provided
without delay.
2. The rights referred to in Article 7 cannot be exercised by request to the owner or manager or by
appeal pursuant to Article 145, if the processing of personal data is carried out:
a) based on the provisions of the Legal Decree of 3 May 1991, No. 143, converted, with modifications,
from the law of 5 July 1991, No. 197, and subsequent modifications, concerning recycling;
b) according to the provisions of the Legal Decree of 31 December 1991, No. 419, converted, with
modifications, from the law 18 February 1992, No. 172, as amended, with regard to support for
victims of extortion requests;
c) by parliamentary committees of inquiry set up pursuant to Article 82 of the Constitution;
d) by a public entity, other than public economic entities, on the basis of the specific provision of law,
for exclusive purposes related to monetary and currency policy, the payment system, the control of
intermediaries and credit and financial markets, as well as the protection of their stability;
e) pursuant to Article 24, paragraph 1, letter f), limited to the period during which it could derive an
actual and concrete prejudice for the conduct of defensive investigations or for the practice of law in
court;
f) by providers of electronic communication services accessible to the public with regard to incoming
telephone communications, unless it may derive an actual and concrete prejudice for the conduct of
the defensive investigations referred to in the law of December 7, 2000, No. 397;
g) for reasons of justice, in judicial offices of every grade or the Superior Council of the judiciary or
other self-governing bodies or the Ministry of Justice; h) pursuant to Article 53, without prejudice to
the provisions of the law of 1 April 1981, No. 121.
3. The Guarantor, also upon notification by the interested party, in the cases referred to in paragraph
2, letters a), b), d), e) and f), shall proceed in the manner provided for in Articles 157, 158 and 159
and, in the cases referred to in letters c), g) and h) of the same paragraph, shall proceed in the
manner referred to in Article 160.
4. The exercise of the rights referred to in article 7, when it does not concern data of an objective
nature, may take place unless it concerns the rectification or integration of personal data of an
evaluative nature, relating to judgments, opinions or other appraisals of a subjective nature, as well
as the indication of conduct to be held or decisions being taken by the data controller.
Art. 9 Operating Procedures
1. The request addressed to the owner or manager can also be sent by registered letter, fax or email.
The Guarantor can identify another suitable system with reference to new technological solutions.
When it concerns the exercise of the rights referred to in Article 7, paragraphs 1 and 2, the request

can also be formulated verbally and in that case it is noted briefly by the person in charge of the
person in charge.
2. In the exercise of the rights referred to in Article 7, the interested party may confer, in writing, a
proxy or power of attorney to natural persons, bodies, associations or bodies. The interested party
may also be assisted by a trusted person.
3. The rights cited in Article 7 referring to personal data concerning deceased persons may be
exercised by those who have an interest of their own, or act to protect the data subject or for family
reasons deserving protection.
4. The identity of the interested party is verified on the basis of suitable elements of evaluation, also
by means of deeds or documents available or exhibition or attachment of a copy of an identity
document. The person acting on behalf of the interested party exhibits or attaches a copy of the
power of attorney, or the proxy signed in the presence of a person in charge or signed and presented
together with an unauthenticated photocopy of an ID document of the person concerned. If the
person concerned is a juridical person, an institution or an association, the request is made by the
legitimate individual according to the respective statutes or regulations.
5. The request referred to in Article 7, paragraphs 1 and 2 is formulated freely and without constraints
and may be renewed, save for the existence of justified reasons, with an interval of no less than
ninety days.
Art. 10 Feedback to the Party Concerned
1. To ensure the effective exercise of the rights referred to in Article 7, the data controller is required
to take appropriate measures aimed, in particular:
a) at facilitating access to personal data by the party concerned, also through the use of special
computer programmes aimed at a careful selection of data concerning the individual identified or
identifiable individuals;
b) at simplifying the procedures and reducing the time required for the reply to the applicant, also in
the context of offices or services in charge of relations with the public.
2. The data are extracted by the person or persons in charge and may be communicated to the
applicant also orally, or offered in view via electronic means, provided that in such cases the
understanding of the data is easy, considering the quality and quantity of the given information. If
requested, the data will be transposed onto paper or electronic means, or transmitted via computer.
3. Unless the request refers to a particular treatment or to specific personal data or categories of
personal data, the reply to the interested party includes all personal data concerning the data subject
processed by the data controller. If the request is addressed to a healthcare professional or to a
health organization, the provision referred to in Article 84, paragraph 1 shall be observed.
4. When the extraction of data is particularly difficult, the reply to the request of the interested party
may also take place through the presentation or delivery of copies of documents and documents
containing the personal data requested.
5. The right to obtain the communication in an intelligible form does not concern personal data
relating to third parties, unless the breakdown of the data processed or the deprivation of some
elements renders the personal data concerning the interested party incomprehensible.
6. The communication of data must be carried out in an intelligible form also through the use of
readable handwriting. In the case of communication of codes or acronyms, the parameters for
understanding the relative meaning are provided, also by means of the persons in charge.
7. When, as a result of the request referred to in Article 7, paragraphs 1 and 2, letters a), b) and c) the
existence of data concerning the data subject is not confirmed, a fee may be requested that is not in
excess of the costs actually incurred for the research carried out in the specific case.
8. The contribution referred to in paragraph 7 cannot in any case exceed the amount determined by
the Guarantor with a general provision, which may identify it as a flat rate in relation to the case in
which the data are processed electronically and the answer is provided orally. With the same
provision, the Guarantor may decide that the contribution may be requested when personal data
appear on a specific medium to which reproduction is specifically requested, or when, with one or

more owners, a considerable use of means is determined in relation to the complexity or the extent
of the requests and the existence of data concerning the data subject is confirmed.
9. The fee referred to in paragraphs 7 and 8 may also be paid by postal or bank payment, or, where
possible, by credit card upon receipt of the reply and in any case no later than fifteen days pursuant
to that reply.