Privacy Policy Clients & Suppliers

CX live now considers your privacy and the protection of the confidentiality and security of your personal data to be a priority, and for this reason it is committed to processing your data correctly, lawfully, and transparently, always protecting your confidentiality and rights in accordance with the Privacy Code D.lgs. n. 196/2003 coordinated and updated with the amendments made by D.Lgs. n. 24/2023 and the EU Regulation 2016/679

This is our Policy regarding the processing of personal data that we collect, regardless of the channel or medium (online or in person), when we have a business contact, when you ask us for information, when we enter into a sales contract, when you visit our websites and it has been drawn up to provide you with clear information about who we are, for what purposes we may use your personal data, how long they remain in our files, how they are processed, to whom we may disclose them and where they may be transferred and we provide you with details of all your rights

CX live now, in all its processes, adopts a policy based on the principles of personal data protection established by the GDPR Regulation 2016/679 and the national legislation in force, not only with a view to mere compliance but with a heartfelt awareness of the importance of protecting the confidentiality and security of personal data of natural persons.

CX live now is the data controller of your data and informs you that your personal data will be processed in compliance with the above-mentioned legislation

Please read this Policy carefully: it contains important information about the processing of your Personal Data.

Personal Data' shall mean any information relating to an identified or identifiable natural person ('data subject'); an identifiable natural person is one who can be identified, directly or indirectly, by reference in particular to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to his or her physical, physiological, genetic, mental, economic, cultural or social identity.

Processing means any operation or set of operations which is performed upon personal data or sets of personal data, whether or not by automated means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction. The processing must be based on the principles of fairness, lawfulness, transparency, protecting your confidentiality and your rights.

Source of personal data

The collection of your personal data is carried out by CX live now by recording data collected directly from you, through its website, electronically or verbally at the time of initial contact or subsequent communication, data collected at events or trade fairs, or intermediaries

How we process your data

We have identified and implemented technical and organisational security measures to protect processed personal data against accidental loss, use, alteration, destruction, disclosure or unauthorised access. Personal data are processed by internal resources who are instructed and instructed on a need-to-know basis, and who act as staff authorised to process them. The processing of your personal data is governed by CX live now policies on information security, data protection and other internal regulations and guidelines applicable to the processing of personal data. For the processing of data, however, there is a margin of risk that involves the adoption of measures for emergency management in the event of a data security incident (Data Breach and Data Recovery Procedures)

Source of personal data processed

The collection of your personal data is carried out by CX live now by recording data collected directly from the data subject, through the site in electronic form or verbally at the time of initial contact or subsequent communications, data collected at events and trade fairs, through contact information from proxies

Method of data processing

We inform you that your data will be processed using computerised and paper means.

The data will be processed in compliance with the principles of confidentiality, correctness, necessity, relevance, lawfulness and transparency imposed by the GDPR and applicable legislation. The data controller processes the data both to comply with legal provisions, to manage business relations, and following the consent of data provided voluntarily

The legal bases are according to the Regulation UE 2016/679:

Contract art 6 letter a): the processing is necessary in order to fulfil the requests sent. Failure to provide it would make it impossible to activate the services provided

Consent art 6 letter b) informed and given voluntarily by the person concerned, who has the right to revoke it at any time

Law art 6 letter c) the processing is necessary to comply with civil, administrative and fiscal law obligations. Failure to provide it would make it impossible to activate the services provided.

Data Category	Purpose	Legal basis	Storage times
Personal and/or contact data such as name, surname, e-mail, addresses and telephone numbers	1 In the data collection phase to execute requests received via the site's contact forms	art 6 lett a) Contract	Duration of the business relationship
Personal and/or contact data such as name, surname, e-mail and telephone, addresses data for making payments	2 In the pre-contractual and contractual data collection phase collected directly by CX live now	art 6 lett a) Contract	Term of the business relationship, for ten years in accordance with tax and civil law provisions. for the period necessary in the event of litigation
Personal and/or contact details such as name, surname, e-mail and telephone number	3 Marketing and promotional activities that CX live now. carries out in its own interest	art 6 lett b) Contract	For a period of five years from the collection of the data taking reasonable account of the type of product offered by the data controller. The data is deleted upon receipt of the revocation by the data subject
Personal and/or contact data such as name, surname, e-mail and telephone, addresses data for making payments	4 Administrative/Fiscal/Legal Compliance	art 6 lett c) Law	For ten years in accordance with tax and civil law provisions. for the period necessary in the event of litigation

Without prejudice to communications carried out in fulfilment of legal and contractual obligations, all data collected and processed may be communicated exclusively for the purposes specified above to authorised recipients and external data processors identified in writing and to whom specific written instructions regarding data processing have been provided:

• Employees, collaborators, administrators authorised to process
• third-party IT-related service providers to support our IT infrastructure;
• web service providers for website management or management
• partner advisors (e.g. our auditors, tax advisors, legal advisors, consultants in necessary fields).
• Credit institutions for the management of payment collection
• Tax authorities for the management of invoicing obligations.

All parties (authorised persons and/or external data processors) are identified in writing and given specific written instructions regarding the processing of data and required to ensure compliance with the European Data Protection Regulation. The list is available for consultation upon request.

Transfer of personal data to third countries

The general principle of data protection in transfers to countries outside the European Economic Area (EEA) requires that data controllers ensure that such transfers enjoy a level of protection equivalent to that guaranteed within the European Union. The current legislation requires the verification of an adequate level of protection, i.e. that:

• the transfer will be governed by the standard data protection clauses approved by the European Commission.
• any other appropriate guarantees applicable under Article 46 of the General Data Protection Regulation (EU) (2016/679).

CX live now does not share personal data with third parties located in a country outside the European Union, however it does use some platforms (Google, Microsoft, which may transfer data to their clouds outside the EEA)

Your rights

Pursuant to European Regulation 679/2016 (GDPR) and the applicable national legislation, you may, in the manner and within the limits provided for by the applicable legislation, exercise the following rights:

• know its origin;
• receive intelligible communication;
• obtain information on the logic, methods and purposes of the processing;
• request the updating, rectification, integration, deletion, transformation into anonymous form, blocking of data processed in breach of the law, including data no longer necessary for the purposes for which they were collected (right of rectification and deletion - Articles 16 and 17 of Regulation 679/2016);
• right to restrict and/or object to the processing of data concerning him/her (Art. 18 of Regulation 679/2016)
• right of revocation;
• Right to data portability (Art. 20 of Regulation 679/2016);
• in cases of consent-based processing, receive their data provided to the data controller in a structured, machine-readable form and in a format commonly used by an electronic device;
• the right to lodge a complaint with the Supervisory Authority (data subject's right of access - Art. 15 of Regulation 679/2016). https://www.garanteprivacy.it/web/guet/home/docweb/-/docweb-display/docweb/1089924

DATA CONTROLLER: MARKETING VIBES S.R.L. Via Zanica 85, 24126 Bergamo - BG PIVA /CF 04708800166 admin@cxlivenow.com PEC: marketingvibes@pec.it

This privacy policy was drawn up in February 2024 and may be subject to change over time, also in connection with the possible entry into force of new sector regulations, the updating or provision of new services or technological innovations, which will be promptly made available and published on our website www.cxlivenow.com in the sections dedicated to Privacy.

CX live now considers your privacy and the protection of the confidentiality and security of your personal data to be a priority, and for this reason it is committed to processing data correctly, lawfully, and transparently, always protecting your confidentiality and rights in accordance with the Privacy Code Legislative Decree No. 196/2003 coordinated and updated with the amendments made by Legislative Decree No. 24/2023 and the EU Regulation 2016/679

This is our Policy regarding the processing of personal data that we collect, regardless of the channel or medium (online or in person), when we have a business contact and has been drafted to provide you with clear information about who we are, for what purposes we may use your personal data, how long it remains in our files, how it is processed, to whom we may disclose it and where it may be transferred and provide you with details of all your rights

CX live now, in all its processes, adopts a policy based on the principles of protection of personal data established by the GDPR Regulation 2016/679 and national legislation in force, not only with a view to mere compliance but with a heartfelt awareness of the importance of protecting the confidentiality and security of individuals' personal data

CX live now is the data controller of your personal data and informs you that your personal data will be processed in accordance with the above-mentioned legislation.

Please read this Information Notice carefully: it contains important information on the processing of your Personal Data.

Personal Data' shall mean any information relating to an identified or identifiable natural person ('data subject'); an identifiable person is one who can be identified, directly or indirectly, by reference in particular to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to his or her physical, physiological, genetic, mental, economic, cultural or social identity.

Processing means any operation or set of operations which is performed upon personal data or sets of personal data, whether or not by automatic means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction. The processing must be based on the principles of fairness, lawfulness, transparency, protecting your confidentiality and your rights.

Source of personal data

Your personal data is collected by CX live now by registering the data collected directly from the person concerned for the purpose of requesting a quote or managing an existing contract

How we process your data

We have identified and implemented technical and organisational security measures to protect processed personal data against accidental loss, use, alteration, destruction, disclosure or unauthorised access. Personal data are processed by internal resources who are instructed and instructed on a need-to-know basis, and who act as staff authorised to process them. The processing of your personal data is governed by CX live now policies on information security, data protection and other internal regulations and guidelines applicable to the processing of personal data. For the processing of data, however, there is a margin of risk that involves the adoption of measures for emergency management in the event of a data security incident (Data Breach and Data Recovery Procedures)

Source of personal data processed

Your personal data is collected by CX live now by recording the data collected directly from the data subject in electronic form or verbally at the time of initial contact.

Method of data processing

We inform you that the data will be processed with the support of computerised and paper means.

The data will be processed in accordance with the principles of confidentiality, correctness, necessity, relevance, lawfulness and transparency imposed by the GDPR and applicable legislation. The data controller processes the data both to comply with legal provisions, to manage business relations, and following the consent of data provided voluntarily

The legal bases are according to EU Regulation 2016/679:

Contract art 6 letter a): the processing is necessary in order to fulfil the requests sent. Failure to provide it would make it impossible to activate the services provided

Consent art 6 letter b) informed and given voluntarily by the person concerned, who has the right to revoke it at any time

Law art 6 letter c) the processing is necessary to comply with civil, administrative and fiscal law obligations. Failure to provide it would make it impossible to activate the services provided.

Data Category	Purpose	Legal basis	Storage times
Personal and/or contact data such as name, surname, e-mail, addresses and telephone numbers, payment data	1 In the data collection phase to execute requests for quotations or manage existing contractual stages	Article 6(a) Contract	Duration of the business relationship
Personal and/or contact data such as name, surname, e-mail and telephone, addresses, tax data	2 Administrative/Fiscal/Legal Compliance	Article 6(c) Law	For ten years in accordance with tax and civil law provisions. for the period necessary in the event of litigation.

Without prejudice to communications carried out in fulfilment of legal and contractual obligations, all data collected and processed may be communicated exclusively for the purposes specified above to authorised recipients and external data processors identified in writing and to whom specific written instructions regarding data processing have been provided:

• Employees, collaborators, administrators authorised to process
• third-party IT-related service providers to support our IT infrastructure;
• web service providers for website management or management
• partner advisors (e.g. our auditors, tax advisors, legal advisors, consultants in necessary fields).
• Credit institutions for the management of payment collection
• Tax authorities for the management of invoicing obligations.

All parties (authorised persons and/or external data processors) are identified in writing and given specific written instructions regarding the processing of data and required to ensure compliance with the European Data Protection Regulation. The list is available for consultation upon request.

Transfer of personal data to third countries

The general principle of data protection in transfers to countries outside the European Economic Area (EEA) requires that data controllers ensure that such transfers enjoy a level of protection equivalent to that guaranteed within the European Union. The current legislation requires the verification of an adequate level of protection, i.e. that:

• the transfer will be governed by the standard data protection clauses approved by the European Commission.
• any other appropriate guarantees applicable under Article 46 of the General Data Protection Regulation (EU) (2016/679).

CX live now does not share personal data with third parties located in a country outside the European Union, however it does use some platforms (Google, Microsoft, which may transfer data to their clouds outside the EEA)

Your rights

Pursuant to European Regulation 679/2016 (GDPR) and the applicable national legislation, you may, in the manner and within the limits provided for by the applicable legislation, exercise the following rights:

• - request confirmation of the existence of personal data concerning him/her (right of access of the data subject - Art. 15 of Regulation 679/2016);
• know its origin;
• receive intelligible communication;
• obtain information on the logic, methods and purposes of the processing;
• request the updating, rectification, integration, deletion, transformation into anonymous form, blocking of data processed in breach of the law, including data no longer necessary for the purposes for which they were collected (right of rectification and deletion - Articles 16 and 17 of Regulation 679/2016);
• right to restrict and/or object to the processing of data concerning him/her (Art. 18 of Regulation 679/2016)
• right of revocation;
• Right to data portability (Art. 20 of Regulation 679/2016);
• in cases of consent-based processing, receive their data provided to the data controller in a structured, machine-readable form and in a format commonly used by an electronic device;
• the right to lodge a complaint with the Supervisory Authority (data subject's right of access - Art. 15 of Regulation 679/2016). https://www.garanteprivacy.it/web/guet/home/docweb/-/docweb-display/docweb/1089924

DATA CONTROLLER: MARKETING VIBES S.R.L. Via Zanica 85, 24126 Bergamo - BG PIVA /CF 04708800166 admin@cxlivenow.com PEC: marketingvibes@pec.it

This privacy policy was drawn up in February 2024 and may be subject to change over time, also in connection with the possible entry into force of new sector regulations, the updating or provision of new services or technological innovations, which will be promptly made available and published on our website www.cxlivenow.com in the sections dedicated to Privacy.