Privacy Policy

Ads and registration source measurement (optional)

With your consent, when this feature is enabled, we use the Google Ads tag to attribute completed congress registrations to advertisements. Google may receive advertising click and cookie identifiers, the page visited, browser/device and connection data, and a pseudonymous registration transaction identifier. The conversion value of EUR 1 is a measurement unit, not a payment or revenue amount. We do not send names, email addresses, phone numbers or registration form contents through this integration; enhanced conversions and ad personalization are not enabled.

With your renewed optional consent, we also use the LinkedIn Insight Tag (partner 10936129) to measure congress registrations. LinkedIn receives browser/device and connection data, advertising identifiers and a generic measurement-page URL; this integration does not send registration form fields or payment details. A valid LinkedIn click identifier may be used for attribution. The tag runs in a separate frame, removed when you withdraw consent. LinkedIn may use first-party and third-party cookies, including li_fat_id and li_adsId; current purposes and durations are described at https://www.linkedin.com/legal/l/cookie-table. A session marker prevents repeated registration events in the same tab. Registration is recorded before payment confirmation, and the assigned EUR 1 value is not revenue. Previous Google-only acceptance does not authorize LinkedIn. LinkedIn may process data outside the EEA: see https://www.linkedin.com/legal/privacy-policy. Withdrawal stops future collection and removes accessible LinkedIn cookies on this host; it cannot recall data already sent or remove cookies on LinkedIn domains.

With the same optional consent, we store the latest identifiable visit source on this browser for up to 30 days (local storage: aapfs_registration_source_v1): source category, a campaign code when available, evidence type, observation date and consent date/version. We do not store full URLs, search terms or advertising click identifiers in this source record. If you register, the source is linked to your registration in EludiAPP and its registration log, subject to the retention and rights described in the Privacy Policy. A direct visit does not overwrite a known source. Missing evidence is recorded as undetermined, not as an organic visit. Source labels are browser observations, not verified Google attribution. Withdrawal clears the source on this browser and stops future collection; for source data already linked to an enrollment, contact the privacy address in this policy. The updated consent is requested again from visitors with an earlier preference.

The Google tag is loaded only after acceptance. Google Analytics is not used for this measurement and Umami remains separate. Google Ads first-party cookies (names beginning _gcl_, such as _gcl_aw) are configured on allaround.eludiaevents.it with a 90-day duration. A transaction marker in session storage prevents repeated events within the browser tab and is removed when the session ends. Events completed without consent are not replayed after later acceptance.

Google Ireland Limited provides the service and Google may process measurement data outside the EEA. See Google's privacy information at https://policies.google.com/privacy and its partner-site data information at https://policies.google.com/technologies/partner-sites. You may withdraw consent through Cookie preferences without affecting your congress registration.

Data Controller

The Data Controller is Eludia Events S.r.l. — Società Benefit (the Organising Secretariat), registered office Via Cassia 699, 00189 Rome (RM), Italy — operational office Via Armando Diaz 23, 00069 Trevignano Romano (RM), Italy. VAT no. 18183241001, REA RM 1767244, share capital € 10,000 fully paid-up, PEC eludiaevents@legalmail.it, email info@allaround.eludiaevents.it, tel +39 06 92918727.

Privacy contact

For any data-protection matter, or to exercise your rights, you may contact the Data Controller at privacy@eludiaevents.it.

Data we process

For registration we process: identification and contact data (name, email, phone, country), professional data (profession/role, specialization, institution, sponsor), and billing data (fiscal code, company name, VAT number, SDI code, PEC, address).

Payment data is collected and processed directly by our payment providers (Stripe and PayPal); we never store full card details.

Purposes and legal bases

a) Managing your registration and participation — performance of a contract (Art. 6(1)(b) GDPR).

b) Invoicing and accounting/tax obligations — legal obligation (Art. 6(1)(c) GDPR).

c) CME/ECM accreditation and the related reporting to the competent authorities (where you request the credits) — compliance with a legal obligation to which we are subject (Art. 6(1)(c) GDPR).

d) Optional updates about future editions (newsletter) — your consent (Art. 6(1)(a) GDPR), freely withdrawable.

e) Photographic and video documentation of the event, including live-surgery sessions, for documentation and educational/promotional purposes — our legitimate interest in documenting and promoting the congress (Art. 6(1)(f) GDPR). You may object at any time and ask not to be photographed or filmed by notifying the Organising Secretariat at the start of the event; for any use of your image in targeted promotional campaigns we rely on your separate consent.

Provision of data and automated decision-making

Providing registration and billing data is necessary to complete your registration; refusal makes registration impossible. Consent for marketing updates is optional and does not affect your registration. No automated decision-making or profiling within the meaning of Art. 22 GDPR is carried out.

Recipients

Data may be shared with the following data processors (Art. 28 GDPR): the ECM provider (MedicalNet) for accreditation; the payment providers (Stripe and PayPal); the newsletter provider (Intuit Mailchimp) for optional marketing; our hosting providers (Serverplan and Hetzner) and the operator of the EludiAPP registration backend (ArtsCom); and public authorities where required by law. An up-to-date list of processors is available on request.

International transfers

Some processors (Stripe and PayPal for payments, Intuit Mailchimp for the newsletter) are based in the United States and may process data outside the EEA. Such transfers are governed by adequate safeguards — Standard Contractual Clauses and/or the EU–US Data Privacy Framework — a copy of which is available on request.

Retention

Registration and account data is retained until you cancel or request its deletion, subject to a ten-year review of necessity. Accounting and invoicing records are retained for the 10 years required by tax law. Marketing data is kept until consent is withdrawn.

Your rights

You may exercise the rights of access, rectification, erasure, restriction, portability and objection, and lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali). To exercise your rights write to info@allaround.eludiaevents.it.