Information on the processing of personal data of participants in the “DC Night” event

Information on the processing of personal data of participants in the “DC Night” event

Pursuant to the European Data Protection Regulation 679/2016

ROCK Communications SRL, with Registered Office in via Beato Agelico 23/2 – 20133 Milan / Operating Office in via dell’Unione 1 – 20122 Milan (P.IVA 06776230960), in its capacity as Data Controller, processes data in compliance with national and European data protection regulations.
This information notice, aimed exclusively at those who register through this link to take part in the event, describes how personal data is processed.

Data controller
The Data Controller is ROCK Communications SRL, with Registered Office in via Beato Agelico 23/2 – 20133 Milan / Operating Office in via dell’Unione 1 – 20122 Milan (P.IVA 06776230960), tel +39 0236693300

You may contact the Controller using the e-mail address dcnight@rock-comms.com

Type and source of processed data
With the registration of the participation request through the above-mentioned link, the collection and processing of personal data provided directly by the interested parties (such as name, surname, company/institution of affiliation, e-mail address, telephone number) will be carried out. This data is strictly necessary for the participation, organization and management of the event.
When registering and enrolling in the event, users will also be asked to communicate data belonging to the special categories pursuant to Art. 9, para. 1 of the GDPR (so-called sensitive data) that reveal the state of health of the person concerned with regard to any allergies, food intolerances or particular dietary regimes. The processing of such sensitive data will only take place on a voluntary basis and subject to express consent for the purpose of protecting the health of the User.
However, all other so-called ‘sensitive data’ (Art. 9 Chapter I of the Regulation), i.e. data allowing the disclosure of racial and ethnic origin, religious, philosophical or other beliefs, political opinions, membership of parties, trade unions, associations or organizations of a religious, philosophical, political or trade-unionist character, as well as any other data (with the exception of the above-mentioned data), capable of disclosing health and sex life, are excluded from the Processing.

Purpose of processing and legal basis
The processing of the above-mentioned personal data is necessary for the registration and participation in the event, management of related activities by the Data Controller (such as sending e-mail reminders, organizational changes, organization of the catering). The data may also be processed for compliance with the rules and regulations on safety and security of the venue and to comply with contractual obligations, for the exercise of the right of defense in court.
For the purposes described above, express consent is required when registering for the event.
In the event that the Data Controller intends to add further processing purposes to those indicated above, this information notice will be adjusted and supplemented, with the request for consent to processing (if due) in the most appropriate manner.

Audio, video and photographic material
Without the consent of the person portrayed pursuant to art. 97 of the law on copyright (L. 22 April 1941, no. 633), filming and photography may be carried out that portrays the user participating in the event of a public nature. This material will not constitute the processing of a particular category of user’s personal data, as it does not allow for the unambiguous identification or authentication of the same.

Purpose of the processing and legal basis.
Photographic images or audio-video recordings will be taken for the prevailing purpose connected with and instrumental to the documentation of the event held, using, for the purpose, the dissemination of the same by means of the means of communication most widely used today.
The images collected will therefore be mainly aimed at the environmental context in which the public event itself takes place (main theme) and, on a purely secondary basis (background or context) at the subjects present, taking care not to film in the foreground or frontally the faces of those present, but with angles that limit the recognizability of the subjects and/or taken from a long distance.
The processing operations carried out for the purposes described above are based on the granting of consent by the user concerned, which shall be deemed to be explicitly manifested if the person concerned, previously informed, goes to the spaces where the event takes place. Processing consisting in the publication of images to document the event is based on the legitimate interest of the Data Controller.

Modalities of data processing, communication and dissemination
The images collected will be stored, also in electronic form and on any technological support, for the purposes and within the limits defined above. They may be disseminated through social network channels (Facebook, Twitter, YouTube by way of example but not limited to).

Nature of provision
The provision of data is necessary for the regular provision of the service (participation in the event). If the data is not provided, it will not be possible in any way for the interested party to access the event.

Method and duration of processing
The processing is carried out using electronic and paper-based instruments.
In relation to such processing, the Data Controller has adopted adequate security measures in order to guarantee the integrity and confidentiality of the data.
The data is kept by the Data Controller for the time necessary to achieve the purposes for which the data was collected, i.e. participation in and performance of the event. Data subjects may request the termination of the processing at any time by notifying the Data Controller.

Transmission and communication of data
Personal data will be brought to the attention of employees or collaborators of the Data Controller and of all the organizers and managers of the event, appointed and authorized to process the data by the Data Controller and suitably trained.
The data may also be processed by companies outside the Data Controller for the event’s organizational requirements (e.g. catering, security, etc.). These subjects act in the exercise of activities falling within their exclusive competence as autonomous Data Controllers.
The data may also be communicated to jurisdictional or supervisory authorities, administrations, public bodies and organizations, in the exercise of their functions.
The data are not subject to dissemination in any way.

Transfer of data to third countries
Personal data collected for participation in the event will be stored by the web hosting service provider, which is based in the EU. The Data Controller does not currently transfer any data to third countries.

Rights of the User:
Users may exercise certain rights at any time with reference to the data processed by the Data Controller.
In particular, under the GDPR, the User has the right to:

withdraw consent at any time;
object to the processing of their data;
access their own data;
verify and request rectification;
obtain the restriction of processing;
obtain the deletion or removal of one’s personal data;
receive their data or have them transferred to another data controller;
to lodge a complaint with the Supervisory Authority (Privacy Guarantee).

Information provided on 28/02/2025 to registered users for participation in the “DC Night” event.