Privacy Policy

Data Controller

The Data Controller is Eludia Events S.r.l. — Società Benefit (the Organising Secretariat), registered office Via Cassia 699, 00189 Rome (RM), Italy — operational office Via Armando Diaz 23, 00069 Trevignano Romano (RM), Italy. VAT no. 18183241001, REA RM 1767244, share capital € 10,000 fully paid-up, PEC eludiaevents@legalmail.it, email info@allaround.eludiaevents.it, tel +39 06 92918727.

Privacy contact

For any data-protection matter, or to exercise your rights, you may contact the Data Controller at privacy@eludiaevents.it.

Data we process

For registration we process: identification and contact data (name, email, phone, country), professional data (profession/role, specialization, institution, sponsor), and billing data (fiscal code, company name, VAT number, SDI code, PEC, address).

Payment data is collected and processed directly by our payment providers (Stripe and PayPal); we never store full card details.

Purposes and legal bases

a) Managing your registration and participation — performance of a contract (Art. 6(1)(b) GDPR).

b) Invoicing and accounting/tax obligations — legal obligation (Art. 6(1)(c) GDPR).

c) CME/ECM accreditation and the related reporting to the competent authorities (where you request the credits) — compliance with a legal obligation to which we are subject (Art. 6(1)(c) GDPR).

d) Optional updates about future editions (newsletter) — your consent (Art. 6(1)(a) GDPR), freely withdrawable.

e) Photographic and video documentation of the event, including live-surgery sessions, for documentation and educational/promotional purposes — our legitimate interest in documenting and promoting the congress (Art. 6(1)(f) GDPR). You may object at any time and ask not to be photographed or filmed by notifying the Organising Secretariat at the start of the event; for any use of your image in targeted promotional campaigns we rely on your separate consent.

Provision of data and automated decision-making

Providing registration and billing data is necessary to complete your registration; refusal makes registration impossible. Consent for marketing updates is optional and does not affect your registration. No automated decision-making or profiling within the meaning of Art. 22 GDPR is carried out.

Recipients

Data may be shared with the following data processors (Art. 28 GDPR): the ECM provider (MedicalNet) for accreditation; the payment providers (Stripe and PayPal); the newsletter provider (Intuit Mailchimp) for optional marketing; our hosting providers (Serverplan and Hetzner) and the operator of the EludiAPP registration backend (ArtsCom); and public authorities where required by law. An up-to-date list of processors is available on request.

International transfers

Some processors (Stripe and PayPal for payments, Intuit Mailchimp for the newsletter) are based in the United States and may process data outside the EEA. Such transfers are governed by adequate safeguards — Standard Contractual Clauses and/or the EU–US Data Privacy Framework — a copy of which is available on request.

Retention

Registration and account data is retained until you cancel or request its deletion, subject to a ten-year review of necessity. Accounting and invoicing records are retained for the 10 years required by tax law. Marketing data is kept until consent is withdrawn.

Your rights

You may exercise the rights of access, rectification, erasure, restriction, portability and objection, and lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali). To exercise your rights write to info@allaround.eludiaevents.it.