Privacy Policy
pursuant to Article 13 of GDPR
This Policy, issued pursuant to Article 13 of Regulation (EU) 2016/679 (General Data Protection Regulation, hereinafter the “GDPR”), is intended to describe the methods and purposes of personal data processing carried out by Dexai, with registered office at Via Macedonia 72, Rome, as data controller (hereinafter, the “Controller”), through its website (the “Website”).
The processing of users’ personal data will be carried out in full compliance with the applicable data protection legislation.
The Controller reserves the right to update this Policy at any time and to inform users by using the most appropriate means.
For any further information, users may contact the Controller at: info[at]dexai.eu
THE WEBSITE
The Website is designed to minimize the collection and use of users’ identifying data, excluding processing whenever the intended purposes can be achieved by other means.
For the avoidance of doubt, this Policy applies solely to the Website and to events organized by Dexai, and does not extend to any external pages or websites accessible via links and/or managed by third parties.
Users are therefore encouraged to review the privacy policies of such third-party sites to gain a detailed understanding of the data processing they carry out.
PURPOSES OF DATA PROCESSING
Personal data are processed by the Controller solely to provide the services accessible through the Website, and in particular for the following purposes:
• to allow users to learn about and explore, through the Website, the activities and services offered by the Controller (Legal basis: Art. 6.1.b GDPR);
• to respond to any requests sent by users via the contact e-mail address (Legal basis: Art. 6.1.b GDPR);
• to offer initiatives and services aligned with users’ interests, subject to their prior consent (events, newsletters, training) (Legal basis: Art. 6.1.a GDPR);
• to process applications or, more generally, requests made by individuals in relation to initiatives organized by the Controller (Legal basis: Art. 6.1.b GDPR);
• to monitor the proper functioning of the Website (Legal basis: Art. 6.1.f GDPR).
TYPES OF DATA PROCESSED
Data automatically collected by the Website
The IT systems and software procedures used to operate the Website acquire, during their normal operation, certain personal data whose transmission is implicit in the use of Internet communication protocols.
These data are not collected to be associated with identified individuals, but by their very nature could, through processing and association with data held by third parties, allow users to be identified.
This category includes, for example, IP addresses or domain names of users’ computers connecting to the Website, URI (Uniform Resource Identifier) addresses of requested resources, the time of the request, the method used to submit the request to the server, the size of the file received in response, the numeric code indicating the server’s response status (success, error, etc.), and other parameters related to the user’s operating system and IT environment.
Data voluntarily provided by the user
The submission of any personal data by the user—such as name, surname, or e-mail address—entails the acquisition of such data by the Controller and their subsequent processing to respond to requests and/or provide the requested service.
Therefore, users who wish to avoid data collection are advised not to submit any requests or, at the very least, to provide as little personal information as possible.
Data provided by participants during Dexai events
Some events published on our Website may require the registration of personal data such as name, surname, and e-mail (mandatory), as well as job title and organization (optional). These data help us understand the type of audience interested in our events and ensure their proper organization alongside our guests.
If, following participation, users do not express interest in being contacted again through our newsletter or in receiving updates about future initiatives, their personal data will be deleted within 30 days of registration or retained in anonymous, aggregated form.
Dexai events may be recorded and published online. Therefore, participants wishing to intervene acknowledge that their voice and image may be recorded. If they do not wish this to happen, they can simply use the event chat function to address questions to the speakers.
METHODS OF PROCESSING
All personal data are processed primarily using electronic means and methods; however, processing on paper is not excluded.
Processing will be carried out solely by individuals duly authorized in writing by the Controller, in compliance with applicable law.
Data will be retained in a form allowing user identification only for the time strictly necessary to achieve the purposes for which they were collected, and in any case within the limits set by law.
DISCLOSURE OF PERSONAL DATA TO THIRD PARTIES
No data will be disclosed or shared with third parties except with the express and specific consent of the individual concerned, or when necessary to provide a requested service.
It remains understood that users’ personal data may be disclosed to third parties, such as law enforcement authorities, whenever required by law or by an order of a competent authority.
SECURITY MEASURES
The Controller will adopt all necessary security measures to minimize the risk of destruction or loss—even accidental—of data, unauthorized access, or processing not permitted or inconsistent with the purposes described in this document.
USERS’ RIGHTS
The Controller must confirm whether or not personal data concerning the user exist, even if not yet recorded, and provide such information in an intelligible form upon request.
Furthermore, under applicable law, users have the right to request:
• access to, updating, rectification, or, when interested, integration of data;
• deletion, anonymization, blocking, or restriction of processing;
• objection to the processing of their personal data;
• submission of a complaint to the competent Data Protection Authority (in Italy, Autorità Garante per la Protezione dei Dati Personali).
The above rights may be exercised at any time, freely and without difficulty, by sending a request to the Controller at: info[at]dexai.eu

