Vexpo S.r.l. · GDPR Reg. EU 2016/679

Privacy Policy

Information on the processing of personal data pursuant to Art. 13 of EU Regulation 2016/679 (GDPR) and Italian Legislative Decree 196/2003 as amended by Legislative Decree 101/2018.

GDPR Reg. EU 2016/679 Updated April 2026
01

1. Data Controller

The Data Controller is Vexpo S.r.l., based in Venice, Italy. For any matter relating to the processing of your personal data, please contact us at the email address indicated above.

Company VEXPO S.R.L.
P.IVA / C.F. 04759470273
Address Via Maestri del Lavoro 50 — 30015 Chioggia (VE)
Privacy Email vexposrl@legalmail.it
Website www.vexpo.it
02

2. Personal Data Collected

We collect personal data that you provide directly to us and data generated automatically by your use of the website.

Voluntarily provided data

First name, last name, email address, phone number, company name — provided through contact forms, newsletter subscription or exhibitor registration.

Browsing data

IP address, browser type, operating system, pages visited, access times — collected automatically by servers during navigation.

Cookie and analytics data

Aggregate information on website usage collected through technical cookies and, subject to consent, analytical and profiling cookies.

03

3. Purposes of Processing

Your data is processed for the following purposes:

Purpose Legal Basis Retention
Responding to contact and information requests Legitimate interest / Contract 12 months from request
Sending newsletters and promotional communications Consent (Art. 6.1.a GDPR) Until consent is withdrawn
Managing exhibitor registrations and contracts Contract performance (Art. 6.1.b GDPR) 10 years (fiscal obligations)
Statistical analysis of website navigation Consent / Legitimate interest 26 months (EDPB guidelines)
04

4. Legal Basis for Processing

The processing of your personal data is based on the following legal grounds under Art. 6 GDPR: the data subject's explicit consent (Art. 6.1.a) for marketing communications and non-technical cookies; the performance of a contract or pre-contractual measures (Art. 6.1.b) for exhibitor management; the legitimate interest of the Controller (Art. 6.1.f) for website security and fraud prevention; compliance with legal obligations (Art. 6.1.c) for the retention of tax and accounting documents.

05

5. Data Retention

Personal data is stored for the time strictly necessary to achieve the purposes for which it was collected, in accordance with the periods indicated in the table at point 3. Data processed for tax and accounting obligations is retained for 10 years. Once the retention period has expired, data is securely deleted or anonymised.

06

6. Third Parties and Transfers

Your data is not sold or transferred to third parties for their own commercial purposes. It may be shared exclusively with the following parties:

Technical service providers (Data Processors)

Hosting providers, email platforms, web analytics services — bound by appropriate agreements pursuant to Art. 28 GDPR and required to implement adequate security measures.

Public authorities

Law enforcement, tax or judicial authorities — exclusively upon a legally binding request and within the limits provided by applicable law.

Transfers outside the EU

Any transfers to non-EU countries take place exclusively to countries with an adequacy decision by the European Commission or through appropriate safeguards (Standard Contractual Clauses).

07

7. Your Rights

Pursuant to Arts. 15-22 GDPR, you have the right to exercise the following rights against the Controller at any time:

Access (Art. 15)Obtain confirmation that processing is taking place and access the personal data concerning you.
Rectification (Art. 16)Request the correction of inaccurate data or the completion of incomplete data.
Erasure (Art. 17)Obtain the deletion of data in the cases provided for by law (right to be forgotten).
Objection (Art. 21)Object to processing on grounds relating to your particular situation or for direct marketing purposes.
Portability (Art. 20)Receive your data in a structured, machine-readable format.
Restriction (Art. 18)Request the restriction of processing in the cases provided for by Art. 18 GDPR.
You also have the right to lodge a complaint with the Italian Data Protection Authority — Garante per la protezione dei dati personali (www.garanteprivacy.it), Piazza Venezia 11, 00187 Rome — if you believe that the processing of your data violates the GDPR.
08

8. Cookie Policy

This website uses cookies in accordance with the Italian Data Protection Authority Guidelines of 10 June 2021 and the ePrivacy Directive. Cookies are small text files stored on your device during browsing.

Technical cookies (always active)

Required for the website to function: session management, language preferences, light/dark theme. No consent required pursuant to Art. 122 of Legislative Decree 196/2003.

Analytical cookies (subject to consent)

Used for anonymous statistical analysis of user behaviour. Activated only upon explicit consent via the cookie banner.

Managing consent

You can manage, modify or withdraw your cookie consent at any time through your browser settings or the cookie management panel on this website.

09

9. Minors

This website is not intended for children under 14 years of age. Pursuant to Art. 8 GDPR and Art. 2-quinquies of Legislative Decree 196/2003, the processing of data of children under 14 requires parental consent. Should we become aware that we have collected data from minors without the required consent, we will proceed with immediate deletion.

10

10. Changes to this Privacy Policy

The Controller reserves the right to modify this policy at any time, including in response to regulatory changes. Amendments will be published on this page with the updated date indicated. For processing substantially different from the original, new consent will be requested where required.

Last updated: April 2026

Subscribe to Newsletter

Get exclusive offers and news directly in your inbox.