Privacy Policy

Google Ads measurement (optional)

With your consent, when this feature is enabled, we use the Google Ads tag to attribute completed congress registrations to advertisements. Google may receive advertising click and cookie identifiers, the page visited, browser/device and connection data, and a pseudonymous registration transaction identifier. The conversion value of EUR 1 is a measurement unit, not a payment or revenue amount. We do not send names, email addresses, phone numbers or registration form contents through this integration; enhanced conversions and ad personalization are not enabled.

The Google tag is loaded only after acceptance. Google Analytics is not used for this measurement and Umami remains separate. Google Ads first-party cookies (names beginning _gcl_, such as _gcl_aw) are configured on allaround.eludiaevents.it with a 90-day duration. A transaction marker in session storage prevents repeated events within the browser tab and is removed when the session ends. Events completed without consent are not replayed after later acceptance.

Google Ireland Limited provides the service and Google may process measurement data outside the EEA. See Google's privacy information at https://policies.google.com/privacy and its partner-site data information at https://policies.google.com/technologies/partner-sites. You may withdraw consent through Cookie preferences without affecting your congress registration.

Data Controller

The Data Controller is Eludia Events S.r.l. — Società Benefit (the Organising Secretariat), registered office Via Cassia 699, 00189 Rome (RM), Italy — operational office Via Armando Diaz 23, 00069 Trevignano Romano (RM), Italy. VAT no. 18183241001, REA RM 1767244, share capital € 10,000 fully paid-up, PEC eludiaevents@legalmail.it, email info@allaround.eludiaevents.it, tel +39 06 92918727.

Privacy contact

For any data-protection matter, or to exercise your rights, you may contact the Data Controller at privacy@eludiaevents.it.

Data we process

For registration we process: identification and contact data (name, email, phone, country), professional data (profession/role, specialization, institution, sponsor), and billing data (fiscal code, company name, VAT number, SDI code, PEC, address).

Payment data is collected and processed directly by our payment providers (Stripe and PayPal); we never store full card details.

Purposes and legal bases

a) Managing your registration and participation — performance of a contract (Art. 6(1)(b) GDPR).

b) Invoicing and accounting/tax obligations — legal obligation (Art. 6(1)(c) GDPR).

c) CME/ECM accreditation and the related reporting to the competent authorities (where you request the credits) — compliance with a legal obligation to which we are subject (Art. 6(1)(c) GDPR).

d) Optional updates about future editions (newsletter) — your consent (Art. 6(1)(a) GDPR), freely withdrawable.

e) Photographic and video documentation of the event, including live-surgery sessions, for documentation and educational/promotional purposes — our legitimate interest in documenting and promoting the congress (Art. 6(1)(f) GDPR). You may object at any time and ask not to be photographed or filmed by notifying the Organising Secretariat at the start of the event; for any use of your image in targeted promotional campaigns we rely on your separate consent.

Provision of data and automated decision-making

Providing registration and billing data is necessary to complete your registration; refusal makes registration impossible. Consent for marketing updates is optional and does not affect your registration. No automated decision-making or profiling within the meaning of Art. 22 GDPR is carried out.

Recipients

Data may be shared with the following data processors (Art. 28 GDPR): the ECM provider (MedicalNet) for accreditation; the payment providers (Stripe and PayPal); the newsletter provider (Intuit Mailchimp) for optional marketing; our hosting providers (Serverplan and Hetzner) and the operator of the EludiAPP registration backend (ArtsCom); and public authorities where required by law. An up-to-date list of processors is available on request.

International transfers

Some processors (Stripe and PayPal for payments, Intuit Mailchimp for the newsletter) are based in the United States and may process data outside the EEA. Such transfers are governed by adequate safeguards — Standard Contractual Clauses and/or the EU–US Data Privacy Framework — a copy of which is available on request.

Retention

Registration and account data is retained until you cancel or request its deletion, subject to a ten-year review of necessity. Accounting and invoicing records are retained for the 10 years required by tax law. Marketing data is kept until consent is withdrawn.

Your rights

You may exercise the rights of access, rectification, erasure, restriction, portability and objection, and lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali). To exercise your rights write to info@allaround.eludiaevents.it.