Maker Faire Rome Personal data processing policy for Maker Faire Rome visitors

Privacy Notice on the Processing of Personal Data
pursuant to Articles 13 and 14 of Regulation (EU) 2016/679 (hereinafter the “Regulation” or “GDPR”)
for Visitors of Maker Faire Rome – The European Edition 2026 (hereinafter also the “Event”)

This privacy notice describes the methods for processing personal data provided by data subjects / visitors in the context of registration, access, and participation in “Maker Faire Rome – The European Edition 2026” and its related initiatives (hereinafter, the “Event”) and integrates the provisions of the general privacy notice of the ticket sales service provider.

1. Data Controller and Data Protection Officer

The Data Controller is Innova Camera, a Special Agency of the Rome Chamber of Commerce, with registered office at Via de’ Burrò 147 – 00186 Rome, Tax Code 1020381100 (hereinafter “Data Controller” or “Innova Camera”). Innova Camera has appointed a Data Protection Officer (hereinafter “DPO”), who is available for all matters relating to the processing of personal data and the exercise of rights deriving from data protection legislation, and who can be contacted at [email protected].

2. Types of Data Processed and Data Source

In the context of registration, ticket purchase for the Event, access, and participation in the Event, Innova Camera may process common personal data of participants, such as, by way of example but not limitation, identification and contact data (name, surname, email address, telephone number), any data related to booking, registration, issuance of the access ticket or accreditation, including payment and billing data, as well as further data communicated by the data subject or otherwise necessary to allow participation in the Event and the use of related services. If visitors are minors, the relevant data may be provided by those exercising parental responsibility / guardians of the minors. During the Event, data consisting of images, audio-video recordings, footage, and other multimedia content may also be processed, which may capture the public present, visitors, areas open to the public, activities carried out during the Event, and, in general, the context of the Event. Data are collected directly from the data subject, including during registration, booking, or access to the Event, as well as during participation in the same. As a rule, the processing of special categories of personal data pursuant to Article 9 of the Regulation (e.g., health data) is not envisaged, unless such data are strictly necessary for specific accessibility, safety, or assistance needs related to participation in the Event, within the limits permitted by applicable legislation.

3. Purposes of Processing and Legal Bases

Your personal data will be processed for the following purposes:

a) to manage the registration, booking, purchase, and issuance of the access ticket, entry, and participation in the Event, including administrative, accounting, and tax compliance, as well as for the organization of related services, access management, requests made by the data subject, institutional and service communications relating to the Event and, where necessary, the organizational and logistical activities related to participation. The provision of personal data for this purpose is optional but necessary to allow registration, access, and participation in the Event; in the event of failure to provide data, it may not be possible to allow participation or the provision of related services (“Purpose of Event Participation Management”);

b) for the creation of photographs, audio-video recordings, footage, and other multimedia content captured during the Event, including by Innova Camera or by Partners, Sponsors, or other entities authorized by it, as well as for the institutional documentation, communication, information, promotion, and dissemination of the Event and its related initiatives. Within the scope of this purpose, the aforementioned content may be used by Innova Camera for live broadcasting of the Event, for publication on the institutional website and on the online and social media channels of Innova Camera and the Event, as well as through further institutional communication tools, informational materials, press office activities, and other online and offline channels. Such content may also be disseminated, subject to authorization by Innova Camera, on the websites, social media pages, and further communication channels of Partners and Sponsors participating in the initiative, where this is functional to the institutional dissemination of the Event and the related initiatives of public interest. This processing is carried out for the purpose of institutional documentation, information, communication, and promotion of the Event. The provision of personal data for this purpose is inherent to participation in the Event and its execution in a context open to the public and also intended for the institutional documentation and dissemination of the Event; in any case, if expressed by the data subject and compatibly with the organizational and documentary needs of the Event, the data subject’s wish not to be filmed will be taken into consideration by Innova Camera, also by avoiding, as far as possible, direct filming of the data subject and/or directing them towards areas or moments of the Event not involved in filming activities (“Purpose of creation and dissemination of photographic and audio-video content, as well as institutional documentation, communication, and promotion of the Event”).

c) The legal basis for processing your personal data for the purpose referred to in letter a) is found in Article 6(1)(b) of the Regulation, where processing is necessary to manage the registration or access ticket requested by the data subject, as well as in Article 6(1)(e) and Article 6(3)(b) of the Regulation and Article 2-ter of Legislative Decree no. 196/2003, as the processing is in any case necessary for the performance of tasks carried out in the public interest by Innova Camera, as a Special Agency of the Rome Chamber of Commerce, within its institutional purposes of organizing and managing services, projects, platforms, and events aimed at fostering innovation, the dissemination of digital culture, entrepreneurial development, and the promotion of the economic and productive system. The legal basis for processing your personal data for the purpose referred to in letter b) is found in Article 6(1)(e) and Article 6(3)(b) of the Regulation, as well as in Article 2-ter of Legislative Decree no. 196/2003, as such processing is necessary for the performance of tasks carried out in the public interest attributed to Innova Camera, as a Special Agency of the Rome Chamber of Commerce, within its institutional purposes of organizing, promoting, and enhancing events, projects, and initiatives aimed at fostering innovation, the dissemination of digital culture, entrepreneurial development, and the enhancement of the economic and productive system. This scope also includes the institutional documentation, communication, and dissemination activities of the Event, including live broadcasting, publication on the institutional online and social media channels of Innova Camera and the Event, as well as dissemination on the channels of partners and sponsors participating in the program, subject to authorization by Innova Camera, where functional to the institutional dissemination of the Event and the public interest initiatives connected to it, also taking into account the right to report and information protected by the Constitution;

d) At the express request of the data subject, manifested by checking the specific optional box at the bottom of the registration, booking, or access ticket purchase form, the Data Controller may use the email address provided to send the Innova Camera newsletter and informational communications relating to initiatives, events, projects, and similar activities, consistent with its institutional and public interest purposes and connected to the promotion of innovation, digital culture, entrepreneurship, and the development of the economic and productive system. The processing of personal data for this purpose finds its legal basis in Article 6(1)(e) of the Regulation, as it is carried out for the performance of tasks in the public interest falling within the institutional purposes of Innova Camera, as a Special Agency of the Rome Chamber of Commerce, as well as in Article 2-ter of the Privacy Code. The provision of data for this purpose is optional, and any failure to select the specific box does not affect registration, booking, ticket purchase, or participation in the Event in any way. The data subject may at any time stop receiving the newsletter and further informational communications, including by using the specific unsubscribe link at the bottom of each communication received (“Purpose of subscribing to the newsletter and receiving informational communications on Innova Camera’s institutional initiatives”).

Once provided, personal data may also be processed for the following purposes:

e) to comply with any obligations provided for by law, regulations, national or European Union legislation, as well as provisions issued by competent authorities or supervisory and control bodies, connected to the management of the relationship with the exhibitor, the Event, and the related administrative and organizational activities, on the basis of Article 6(1)(c) of the Regulation (“Compliance Purpose”);

f) in the event that it becomes necessary to establish, exercise, or defend a right of the Data Controller or third parties in judicial, administrative, or out-of-court proceedings, pursuant to Articles 6(1)(f) and (e) and, where applicable, Article 9(2)(f) of the GDPR (“Defensive Purposes”).

4. Retention Periods of Personal Data

Personal data will be kept only for the time necessary for the purposes for which they are collected, in compliance with the principles of data minimization and storage limitation referred to in Article 5(1)(c) and (e) of the GDPR. In particular, personal data processed for the purpose referred to in paragraph 2, letter a) will be kept for the time strictly necessary for the correct organizational management of the Event and related fulfillments. Personal data processed for the purpose referred to in paragraph 2, letter b), and in particular photographs, audio-video recordings, footage, and other multimedia content captured during the Event, will be retained, without prejudice to the provisions regarding the relative scope of dissemination, for as long as the Data Controller maintains an institutional, public interest, dissemination, and archival interest in their preservation, in compliance with the rights recognized to the data subject by current legislation. The contact data of the data subject, and in particular the email address, processed for sending the Innova Camera newsletter and informational communications relating to institutional initiatives, will be kept until the data subject requests cancellation from the informational service or the interruption of the receipt of such communications; In any case, the Data Controller reserves the right to retain personal data for a further period if this becomes necessary to comply with regulatory obligations or to establish, exercise, or defend a right in judicial, administrative, or out-of-court proceedings.

5. Recipients of Personal Data

Personal data may be shared with:

entities acting typically as autonomous data controllers, such as entities providing ticket and admission pass resale services, for all activities necessary to manage the direct relationship with the purchaser (e.g., provision of sales, payment, invoicing, and account management services);
entities acting typically as data processors pursuant to Article 28 of the GDPR on behalf of Innova Camera, such as, by way of example, entities providing Event organization and management services, registration, accreditation, direction, video recording, live streaming, institutional communication, technical assistance, security, and resale services specifically concerning the event. The updated list of data processors can be requested by contacting the Data Controller or the Data Protection Officer at the contact details indicated in paragraph 1 of this privacy notice;
individuals authorized to process data by the Data Controller pursuant to Article 29 of the GDPR and Article 2-quaterdecies of the Privacy Code, operating under its authority and bound by confidentiality obligations, such as, by way of example, employees, collaborators, and appointed staff;
entities involved, within the limits of what is necessary, in the organization, management, promotion, and execution of the Event and related initiatives, such as, by way of example, the promoter entity Rome Chamber of Commerce, as well as the Partner and Sponsor companies/entities of the Event involved in the organization and promotion of the initiative, operating, depending on the case, as data processors or autonomous data controllers;
entities, bodies, or authorities, as autonomous data controllers, to whom it is mandatory to communicate personal data under statutory provisions or orders from authorities. The updated list of recipients can be requested from the Data Controller or the DPO at the contact details provided above.

6. Transfer of Data Outside the EEA

As a rule, the Data Controller does not transfer your personal data outside the European Economic Area. If, for needs related to the organization and management of the Event or its related services, it becomes necessary to transfer personal data to third countries or international organizations, such transfer will take place in compliance with the conditions set out in Article 44 et seq. of the Regulation and, therefore, only in the presence of an adequacy decision by the European Commission or, in its absence, through the adoption of appropriate safeguards provided for by applicable legislation. Further information regarding any transfer of personal data to third countries or international organizations, as well as the safeguards adopted by the Data Controller, can be requested by contacting the Data Controller and/or the DPO at the contact details indicated in paragraph 1 of this privacy notice.

7. Methods of Data Processing

The processing of personal data will take place through IT, manual, and/or telematic supports and tools, with logics strictly related to the purposes of the processing and in any case guaranteeing the confidentiality and security of the data themselves and in compliance with the Regulation and applicable provisions. During the Event, photographs and video recordings affecting areas open to the public and the general context of the Event may be made, in order to document and disseminate the Event through the institutional communication channels of the Data Controller. In carrying out these activities, Innova Camera will adopt, as far as possible and compatibly with the public nature of the Event, suitable organizational measures to limit direct focus on individual visitors who are not protagonists of the footage. If the data subject expresses a wish not to be filmed, Innova Camera will take this into account, as far as possible and compatibly with the organizational and documentary needs of the Event, also by avoiding direct filming of the data subject and/or directing them towards areas or moments of the Event not involved in filming activities.

8. Rights of the Data Subject

The data subject may, at any time, exercise the rights referred to in Articles 15-22 of the GDPR. In particular, they have the right to access data concerning them at any time, request its rectification, erasure, restriction of data processing in the cases provided for by Article 18 of the Regulation, withdrawal of consent given pursuant to Article 7 of the Regulation, and to obtain data portability in the cases provided for by Article 20 of the Regulation. It is possible to submit a request to object to the processing of data pursuant to Article 21 of the Regulation, providing evidence of the reasons justifying the objection: the Data Controller reserves the right to evaluate your request, which would not be accepted if compelling legitimate grounds for the processing exist that override the interests, rights, and freedoms of the data subject. The data subject also has the right to lodge a complaint with the competent supervisory authority pursuant to Article 77 of the GDPR (Garante per la protezione dei dati personali) or to take appropriate judicial action pursuant to Article 79 of the GDPR. Requests must be addressed in writing to the Data Controller, by sending a registered letter with return receipt to Innova Camera, Via de’ Burrò n. 147, CAP 00186, Rome, or by writing an email to [email protected], or by writing to the DPO at [email protected].