Privacy Policy Maker Faire Rome Calls

Privacy Notice on the Processing of Personal Data
pursuant to Article 13 of Regulation (EU) 2016/679 (hereinafter the “Regulation” or “GDPR”)

Exhibitor Portal and Call for Participation Form for the event
Maker Faire Rome – The European Edition 2026

This notice describes the methods used to process the personal data of individuals who, having registered on the Exhibitor Portal, access its features and submit their application to participate in “Maker Faire Rome – The European Edition 2026” by completing and submitting applications relating to the following initiatives (hereinafter collectively referred to as the “Calls”):

• Call for Humanoid Soccer Teams
• Call for Makers
• Call for Schools
• Call for Partners
• Call for Universities and Research Institutes

The term “Call” is used in this policy to refer indiscriminately to any of the initiatives listed above.
This policy also applies to the processing of personal data carried out in connection with activities relating to the management of the Calls, as well as, where applicable, to participation in the “Maker Faire Rome – The European Edition 2026” event (hereinafter the “Event”) and related initiatives.

1. Data Controller and Data Protection Officer

The Data Controller is Innova Camera, a special agency of the Rome Chamber of Commerce, with registered office at Via de’ Burrò 147 – 00186 Rome, Tax Code 1020381100 (hereinafter “Data Controller” or “Innova Camera”).
Innova Camera has appointed a Data Protection Officer (hereinafter “DPO”), who is available to address all matters relating to the processing of personal data and the exercise of rights under data protection legislation, and can be contacted at [email protected].

2. Data subject to processing, nature of provision and source

The data processed by Innova Camera are:

Browsing data: the IT systems and software procedures used to operate this website acquire certain personal data during the user’s browsing and during the registration process for one of the Calls indicated in the introduction; the transmission of such data is implicit in the use of Internet communication protocols (by way of example, IP addresses or the domain names of the computers through which users connect to the site, the URI (Uniform Resource Identifier) addresses of the resources requested, and system logs). This data is used solely for the purpose of obtaining anonymous statistical information on the use of the site and to verify its correct functioning. This information is not collected for the purpose of directly identifying users; however, by its very nature, it could, through processing and association with data held by third parties, allow the identification of the data subject. The data may also be used to ascertain liability in the event of cybercrimes committed against the website or the Exhibitors’ Portal. Except in such cases, browsing data is retained for a period not exceeding seven days.

Data provided voluntarily by users: through registration on the Exhibitors’ Portal and the subsequent completion of online forms to participate in relevant calls, available via the “Maker Faire Rome” Exhibitors’ Portal, personal data provided voluntarily by the user will be collected and processed.
In particular, as part of the registration of a personal account on the Exhibitors’ Portal makers.makerfairerome.eu (hereinafter the “Portal”), the identification and contact details necessary for the creation, management and administration of the personal account will be processed, such as, by way of example, name, surname, email address, telephone number, as well as any additional data that may be required for authentication, authorisation and the security of access to the Portal and the services available therein. This data will also be used to enable the user to access the restricted area, use the Portal’s features, receive service communications relating to the account, as well as to ensure the security of the Portal, the traceability of operations carried out and the prevention of misuse, unauthorised access or activities potentially prejudicial to the integrity of the systems.
As part of the submission of an application to one or more Calls for the Event, personal details, identification details, contact details and all other data and content entered by the user in the relevant application forms will also be processed, including, by way of example but not limited to, first name, surname, tax code, date and place of birth, address, contact details, the organisation to which they belong or the proposing entity, as well as information relating to the project, together with any other data, documents, images, files or content transmitted via the Portal for the purposes of the application and participation in the selected Call and all other events or initiatives linked to the Call and the Event.

Cookies and other tracking technologies

A “cookie” is a small text file that may be stored in a dedicated space on the hard drive of the device used by the user (e.g. computer, tablet, smartphone, etc.) when they visit a website via their browser and may be subject to the user’s prior consent before being installed. Cookies enable a website to remember the user’s actions and preferences (such as login details, chosen language, font size, other display settings, etc.) so that these do not need to be re-entered when the user returns to the site or navigates between its pages. Cookies are therefore used to perform user authentication, session tracking and the storage of information regarding the activities of users accessing a website, and may also contain a unique identifier that allows the user’s browsing activity within the site to be tracked for statistical or advertising purposes. Whilst browsing a website, the user may also receive on their computer or mobile device cookies from websites or web servers other than the one they are visiting (so-called ‘third-party’ cookies). Certain operations could not be carried out without the use of cookies, which in some cases are therefore technically necessary for the website to function.
There are various types of cookies, depending on their characteristics and functions, and these may remain on the user’s computer or mobile device for different periods of time: so-called session cookies, which are automatically deleted when the browser is closed; so-called persistent cookies, which remain on the user’s device until a pre-set expiry date.
Under applicable legislation, the user’s express consent is not always required for the use of cookies. In particular, so-called “technical cookies” do not require consent, i.e. those used solely for the purpose of transmitting a communication over an electronic communications network or to the extent strictly necessary to provide a service explicitly requested by the user. In other words, these are cookies that are essential for the functioning of the website or, in any case, necessary to perform activities requested by the user. Among technical cookies, which do not require express consent for their use, the Italian Data Protection Authority (see the provision Identification of simplified procedures for the provision of information and the acquisition of consent for the use of cookies of 8 May 2014 – hereinafter simply “Provision” – and, most recently, the Guidelines on cookies and other tracking tools of 10 June 2021 – hereinafter simply “Guidelines”) also includes:

• first-party and third-party statistical or analytical cookies, provided that tools are used to reduce the cookies’ ability to identify individuals and the third party does not cross-reference the information collected with other data already in its possession, used to gather information, in aggregate form, on
• the number of users and how they visit the website;
• navigation or session cookies, the deactivation of which compromises the use of the services available on the website;
• functionality cookies, which allow the user to navigate the site according to a set of selected criteria (for example, language, products selected for purchase) in order to improve the service provided to them.

Conversely, ‘profiling cookies’ i.e. those designed to identify the user’s preferences in order to improve and personalise their browsing experience and/or display marketing communications in line with the preferences expressed whilst browsing, as well as for third-party statistical or analytical cookies, if no measures are taken to reduce the cookies’ ability to identify individuals and the third party cross-references the information collected with other data already in its possession, the user’s prior consent is required.

• Types of cookies used by the Website and the option to select or deselect them

Please note that the Website uses only necessary “technical” cookies: these cookies enable the Website to function correctly and allow you to view its content; disabling them would result in the Website malfunctioning. Technical cookies also include functionality cookies used to activate specific functions of the Website and to configure the Website according to your choices (for example, the language), in order to improve your browsing experience.

In detail, the cookies installed via the Website are listed below:

Cookie type: first-party technical cookie
Purpose: Maintaining the authentication session
Name: appsession
Duration: duration of the session
Please note that disabling technical cookies may make it impossible to use the Website and view its content.
You can block or delete (in whole or in part) technical cookies using the specific functions of your web browser. To disable cookies or for more information on how to set your cookie preferences via your web browser, please consult the relevant instructions:

• Internet Explorer
• Firefox
• Chrome
• Safari
• Opera
• Edge

Your cookie preferences will need to be reset if you use different devices or browsers to access the Website.
With regard to the source of collection of the aforementioned personal data, please note that it will be collected directly from you, both whilst simply browsing the Website and whilst using the services made available through it.

3. Purposes of processing and legal bases

Your personal data will be processed for the following purposes:

a) to enable registration on the Exhibitor Portal, the creation and management of your personal account, access to the restricted area and the use of the services and features available therein, as well as for the technical and administrative management of users, the verification of login credentials, the security of the Portal, the traceability of operations carried out and the prevention of misuse or unauthorised access. The provision of your personal data for this purpose is optional but necessary to enable you to register on the Exhibitor Portal and use its features; if you do not provide your data, it will not be possible to create a personal account, access the restricted area or use the services available on the Portal (“Purpose of registration on the Exhibitor Portal and management of the personal account”);

b) for the management of your application and the completion of the assessment and selection procedures relating to the Call or Calls in which you intend to participate, through the collection, organisation, examination and evaluation of the data, information, documents and content submitted via the Exhibitor Portal. Specifically, as part of the selection process, your personal data may be processed to verify the validity and completeness of your application, to analyse the project submitted, to request any clarifications, additional information or further details from the curators/jury appointed by Innova Camera, and for any preliminary activities related to the evaluation of participation proposals.
The provision of your personal data for this purpose is optional; however, if you do not provide it, you will not be able to submit your application or participate in the selection procedure for the chosen Call (“Purpose of managing the application and the selection procedure”);

c) If the selection process is successfully concluded, for the management of communications following admission to the Event and the selected Call and for preliminary activities to formalize the relationship with the selected entity, including sending acceptance communications, operational and logistical instructions, and document requests to the email address indicated during the application phase; for any further administrative and organizational activities preliminary to the signing of the participation contract; as well as for the dissemination of data and materials relating to the projects on the Event’s website and on other communication channels used by Innova Camera for the promotional purposes of the Event and its related contents, as detailed in the Regulations governing adhesion to the Calls. Providing personal data for this purpose is optional but necessary to allow the management of admission to the Event and related preliminary requirements; otherwise, it may be impossible to complete the participation process as an exhibitor (“Purpose of managing admission and pre-contractual activities following the selection“).
The legal basis for the processing of your personal data for the purposes referred to in points (a), (b) and (c) is found in Article 6(1), point (b) of the Regulation, in that the processing is necessary for the performance of pre-contractual measures taken at the request of the data subject, as well as in Article 6(1)(e) and (3)(b) of the Regulation and Article 2-ter of Legislative Decree No. 196/2003 (“Privacy Code”), in that the processing is necessary for the performance of tasks carried out in the public interest by Innova Camera, as a special agency of the Rome Chamber of Commerce, within the scope of its institutional purposes of organising and managing services, projects, platforms and events aimed at fostering innovation, the dissemination of digital culture, entrepreneurial development and the promotion of the economic and productive system.

d) Upon the data subject’s express request, indicated by ticking the relevant optional box at the bottom of the Exhibitor Portal registration form, the Data Controller may use the email address provided to send the Innova Camera newsletter and informational communications regarding initiatives, events, projects and similar activities, consistent with its institutional purposes and related to the promotion of innovation, digital culture, entrepreneurship and the development of the economic and productive system.
The processing of personal data for this purpose has its legal basis in Article 6(1)(e) of the General Data Protection Regulation (GDPR), as it is carried out for the performance of tasks in the public interest falling within the institutional purposes of Innova Camera, as a special agency of the Rome Chamber of Commerce, as well as in Article 2-ter of the Privacy Code.
The provision of data for this purpose is optional and failure to tick the relevant box does not in any way affect registration on the Exhibitors’ Portal, the submission of an application or participation in the Call. The data subject may at any time stop receiving the newsletter and further informational communications, including via the dedicated unsubscribe link at the bottom of each communication received (“Purpose of subscribing to the newsletter and receiving informational communications on Innova Camera’s institutional initiatives”).

Once provided, personal data may be processed for the following purposes:

e) to comply with any obligations laid down by law, regulations, national or European Union legislation, as well as provisions issued by competent authorities or supervisory and control bodies, relating to the management of the Exhibitors’ Portal, the applications submitted, the selection procedures and related organisational and administrative activities, pursuant to Article 6(1)(c) of the Regulation (“Compliance purposes”);

f) in the event that it becomes necessary to establish, exercise or defend a right of the Data Controller or of third parties in judicial, administrative or extrajudicial proceedings, pursuant to Articles 6(1)(f) and (e) and, where applicable, 9(2)(f) of the GDPR (“Defence purposes”).

4. Methods of processing personal data

Personal data will be processed in accordance with the principles of lawfulness, fairness, transparency, relevance and data minimisation, as well as in compliance with current data protection regulations. Processing will be carried out using manual, IT and telematic tools, with logic strictly related to the purposes for which the data were collected, and in any case in such a way as to ensure the security and confidentiality of the data themselves.
The data are collected directly from the data subject, in particular through registration on the Exhibitors’ Portal, the completion of online forms and the use of the related functions, and are processed for specific, explicit and legitimate purposes, in a manner compatible with the purposes indicated above.
The Data Controller adopts specific technical and organisational security measures suitable for preventing data loss, unlawful or improper use of the data, as well as unauthorised access.

5. Retention periods

Personal data will be processed and retained for the time strictly necessary to fulfil the purposes for which they were collected, in accordance with the principles of data minimisation and storage limitation referred to in Article 5(1)(c) and (e) of the GDPR.
In particular, personal data processed for the purposes of registering on the Exhibitors’ Portal, creating and managing a personal account, submitting an application and carrying out the related selection procedures will be retained for the entire duration of the Event and, subsequently, for five years from the conclusion of the Event, in accordance with tasks carried out in the public interest and the retention periods necessary to fulfil legal obligations incumbent upon the Data Controller or to safeguard the Data Controller’s rights;
The personal account created on the Exhibitors’ Portal will remain active for the time necessary to manage the application, carry out the selection procedure and, in any event, no later than the conclusion of the Event; upon expiry of this period, the account will be deactivated and subsequently deleted, except in cases where its further retention is necessary for technical, administrative, security or protection of the Data Controller’s rights;
The data subject’s contact details, and in particular their email address, processed for the purpose of sending the Innova Camera newsletter and informative communications relating to institutional initiatives, will be retained until the data subject requests to be removed from the mailing list or to stop receiving such communications;
In any case, the Data Controller retains the right to retain personal data for a further period should this be necessary to comply with regulatory obligations or to establish, exercise or defend a right in judicial, administrative or extrajudicial proceedings.

6. Recipients of personal data

For the purposes set out above, your personal data may be disclosed to the following parties, to the extent necessary and in compliance with current data protection legislation (hereinafter, the “Recipients”):

• third parties who provide services to the Data Controller and who process personal data on the Data Controller’s behalf, generally designated as data processors pursuant to Article 28 of the GDPR. The updated list of data processors may be requested by contacting the Data Controller or the Data Protection Officer at the contact details provided in paragraph 1 of this policy.
• persons authorised to process data by the Data Controller pursuant to Articles 29 of the GDPR and 2-quaterdecies of the Privacy Code, who operate under its authority and are bound by confidentiality obligations, such as, by way of example, employees, collaborators and appointed staff;
• third parties involved, to the extent necessary, in the organisation, management, evaluation, promotion and implementation of the Calls, the Event and related initiatives, such as, by way of example, the promoter, the Rome Chamber of Commerce; the assessors responsible for evaluating applications; as well as partners and sponsors involved in the organisation and promotion of the Event and related initiatives, who act, as the case may be, as data processors or independent data controllers;
• entities, bodies, public administrations, authorities or organisations to which the disclosure of personal data is mandatory pursuant to provisions of law, regulations or measures adopted by the competent authorities, which will process the data as independent data controllers.

7. Transfers outside the EU

As a rule, personal data processed by the Data Controller for the purposes set out in this policy are not transferred to entities established outside the European Economic Area (EEA) or to international organisations.
Should it become necessary, for reasons related to the organisation and management of the Exhibitors’ Portal, the Calls, the Event or related services, to transfer personal data to third countries or international organisations, such transfer shall take place in accordance with the conditions set out in Articles 44 et seq. of the Regulation and, therefore, only where an adequacy decision has been issued by the European Commission or, failing that, by adopting appropriate safeguards as provided for by applicable legislation.
Further information regarding any transfer of personal data to third countries or international organisations, as well as the safeguards adopted by the Data Controller, may be requested by contacting the Data Controller and/or the DPO at the contact details provided in paragraph 1 of this policy.

8. Rights of the data subject

The data subject may, at any time, exercise the rights referred to in Articles 15–22 of the GDPR. In particular, they have the right to access their personal data at any time, request rectification, erasure, or restriction of processing in the cases provided for in Article 18 of the Regulation, withdraw consent given pursuant to Article 7 of the Regulation, and obtain data portability in the cases provided for in Article 20 of the Regulation.
It is possible to submit a request to object to the processing of data pursuant to Article 21 of the Regulation, setting out the reasons justifying the objection: the Data Controller reserves the right to assess your request, which would not be accepted if there are compelling legitimate grounds for processing that override the interests, rights and freedoms of the data subject.

The data subject also has the right to lodge a complaint with the competent supervisory authority pursuant to Article 77 of the GDPR (Data Protection Authority) or to bring the matter before the appropriate courts in accordance with Article 79 of the GDPR.

Requests must be addressed in writing to the Data Controller, by sending a registered letter with return receipt to Innova Camera, Via de’ Burrò 147, 00186 Rome, or by emailing [email protected], or by writing to the DPO at [email protected].

Last updated: August 6, 2026