Pursuant to Articles 12, 13 and 14 of Regulation (EU) 2016/679 (“GDPR”)
Version: 7 August 2026
The Data Controller is VALET S.r.l., VAT no. 02107230373, registered office at Via dei Fornaciai 29/B, 40129 Bologna (BO), Italy, tel. +39 051 6388334, e-mail info@valet.it (“Controller”).
Requests concerning data protection or the exercise of rights may be sent to the above e-mail address. If a Data Protection Officer (DPO) has been appointed, the relevant contact details will be published in this section.
This notice applies to www.sclerotherapy.it, its connected online services and organisational activities relating to Sclerotherapy events, including enquiries, newsletters, registration, payment, visa requests, abstract submission, speaker and attendee management, badges, attendance records and any Italian CME accreditation.
| Processing | Purposes and data | Legal basis | Indicative retention |
|---|---|---|---|
| Browsing and security | Technical data, IP address, logs, device data and information required to operate and protect the website and prevent abuse. | Provision of the service and the Controller’s legitimate interest in website security. | Normally up to 6 months, unless required for investigation or legal defence. |
| Enquiries | Name, surname, e-mail address, selected department, message and any data voluntarily provided. | Pre-contractual measures requested by the data subject and legitimate interest in replying to and documenting enquiries. | 12 months after closure, unless followed by a relationship or dispute. |
| Registration and attendance | Identification, professional, contact and tax data, registration, purchased services, badge and attendance data. | Performance of a contract and compliance with legal, tax and administrative obligations. | Contract and tax data for up to 10 years; organisational data for up to 24 months after the event, unless further obligations apply. |
| Payments | Transaction data. Full card details are processed directly by the payment provider rather than by the website, unless otherwise stated. | Performance of a contract and legal obligations. | According to civil, tax and payment-provider requirements. |
| CME and certificates | Profession, discipline, required identifiers, attendance, checks and information required to award credits. | Performance of the requested service and obligations under applicable Italian CME rules. | For the period required by applicable law and the rules governing the CME Provider. |
| Visa requests | Name, surname, place and date of birth, profession, passport number, issue and expiry dates. | Pre-contractual measures requested by the data subject to produce an invitation letter. | Passport data will normally be erased or anonymised within 90 days after the event, unless required for obligations or disputes. |
| Abstracts, speakers and faculty | Account, abstract, biography, role, CV, photograph and scientific content. | Pre-contractual measures and performance of the relationship; consent where required for further use of an image. | Operational data for up to 24 months after the event; programme and scientific archive for up to 5 years, or longer as protected historical documentation. |
| Newsletters and marketing | E-mail address, preferences and proof of consent. Individual opening and click data will only be processed after suitable notice and where an appropriate legal basis exists. | Consent, withdrawable at any time; “soft spam” only in the limited cases permitted by law. | Until withdrawal or unsubscribe and subject to periodic review; proof of consent for the applicable limitation period. |
| Photography and audiovisual recordings | Images, voice and footage captured during events for documentation, information, scientific dissemination, institutional communication and event recaps. | Legitimate interest for panoramic, contextual or merely incidental footage; consent or a specific release where required, especially for interviews, close-ups, testimonials or individual promotional uses. | Normally up to 5 years for communication and recap; possible longer retention in a proportionate and access-controlled historical archive. |
| Compliance and disputes | Data required to prevent fraud, handle complaints, establish or defend rights and comply with authority requests. | Legal obligation and legitimate interest in protecting rights. | As necessary and within the applicable limitation periods. |
Photographs and video recordings may be made during congresses, courses and other events, including by appointed photographers or videographers. The material may be published on the websites and social channels of the Controller and organisers, in newsletters, press releases, programmes and materials intended to document, report on, disseminate and recap the event.
Panoramic, group and contextual footage will be produced with due regard for personal dignity and will not be used for purposes incompatible with those described above. A specific release may be requested for interviews, testimonials, close-ups or recordings in which an individual is the main subject.
Anyone who does not wish to be recorded, or wishes to object to the use of a particular image, may inform reception staff and contact info@valet.it, providing sufficient details to identify the content. Objections will be assessed by balancing the data subject’s rights with reasonable organisational and documentary needs.
Data marked as mandatory are required to provide the requested service, complete registration, issue tax documents or comply with applicable obligations. Failure to provide them may prevent the service from being delivered. Consent to newsletters and marketing is optional, and refusal does not affect participation in the event.
Data are collected from the data subject or, where permitted, from entities, companies, associations, scientific secretariats or persons registering attendees on their behalf. Where data are not obtained directly, the notice will be provided within the time limits under Article 14 GDPR.
Data may be handled by authorised staff and disclosed, as necessary, to hosting and IT providers, event registration and management platforms, payment institutions, advisers, venues, badge and technical suppliers, CME Providers, travel agencies, competent authorities and other parties required by law.
Providers processing data on behalf of the Controller are appointed as processors under Article 28 GDPR where applicable. Data will not be shared with sponsors or exhibitors for their own commercial purposes without an appropriate legal basis and, where required, specific consent.
Some technology providers may process data outside the European Economic Area. Such transfers will rely on an adequacy decision, the EU–US Data Privacy Framework where applicable, Standard Contractual Clauses or another safeguard under Articles 44 et seq. GDPR. Information about the safeguards may be requested from the Controller.
The Controller does not make decisions based solely on automated processing that produce legal or similarly significant effects. This notice will be updated if such processes are introduced.
Data subjects may request access, rectification, erasure, restriction, portability and objection. Where processing is based on consent, consent may be withdrawn at any time without affecting prior lawful processing. A complaint may also be lodged with the Italian Data Protection Authority or the competent authority in the data subject’s Member State.
These support security, browsing, preferences and functions strictly necessary to provide the website. They do not require consent but are covered by this notice.
These are used with consent unless the conditions for treating them as technical cookies are met. Where configured to produce only aggregate statistics with appropriate data-minimisation measures, they may be handled under the rules applicable to technical cookies.
Embedded video, maps, social buttons, anti-spam systems and other third-party services may use identifiers and transfer data. Where they are not strictly necessary, they will be blocked until consent is given.
On first access, the banner allows users to accept or reject cookies. Choices can be changed at any time through the “Cookie settings” command on the website. Closing the banner or merely continuing to browse constitute consent.
The Controller may update this notice to reflect legal, technical or organisational changes. The current version and its date will be published on this page.