Privacy Policy

The data controller of your personal data is the company PEAKSTART SOLUTIONS SRL, currently located in Sen Jan 21, 38036, San Giovanni di Fassa - Sen Jan, REA TN-246452, VAT number 02740890229, e-mail address: hello@bolzanoslushd.com (hereinafter referred to as "Company" or "Controller").

The Company will process your personal data within the Bolzano SLUSH'D event and related official side events, which will take place in Bolzano on the 3rd, 4th and 5th of September 2025 (hereinafter the "Bolzano SLUSH'D Event") in order to:

• allow users to browse the website. The processing of your personal data is based on the legitimate interest of the Controller pursuant to Article 6(1)(f) of the GDPR, ensuring the proper functioning and security of the website.

• allow the purchase the ticket for Bolzano SLUSH'D event. The processing of your personal data is based on the performance of a contract pursuant to Article 6(1)(b) of the GDPR, allows processing necessary for fulfilling a contract to which the data subject is a party.

• being part of BOLZANO SLUSH'D network by using the matching tool Knock produced by MetaEsse S.r.l. By accepting the terms and conditions you allow (i) the Controller to send communication related to the matching tool, including surveys (ii) MetaEsse S.r.l., as Processor, to create an account in your name and thus use all the matching tool functionalities, such as contacting other network members, creating business and job opportunities (https://slushbeing.codeworks.team). Within the scope of this data processing, the Controller may transfer personal data to the event sponsors, as specified in section Recipient of Data of this Privacy Policy. The processing of your personal data is based on your consent, pursuant to Article 6(1)(a) of the GDPR. Your consent is optional, failure to give it will prevent you from being included in the SLUSH'D network.

• being part of BOLZANO SLUSH'D network of volunteers that supports in the planning and execution of the event. By being part of the volunteers network you accept to receive communication related to the onboarding and the overall volunteering role. The processing of your personal data is based on the performance of a contract pursuant to Article 6(1)(b) of the GDPR, allows processing necessary for fulfilling a contract to which the data subject is a party.

• apply for a booth and be selected to obtain a place during the Event in the exhibition area. The processing of your personal data is based on the performance of a contract pursuant to Article 6(1)(b) of the GDPR, allows processing necessary for fulfilling a contract to which the data subject is a party.

• apply for a spot to take part to the official side event "Mountain Hike" of Bolzano Slush'D, taking place on 05.09.2025. The consent includes the processing of personal data for communication concerning the side event and related updates. The processing of your personal data is based on your consent, pursuant to Article 6(1)(a) of the GDPR. Your consent is optional, failure to give it will prevent you from applying and joining the side event.

• receive commercial communications concerning the program and related updates for the edition of Bolzano Slush'D 2025 before and after the event, including partner discounts and information about future editions. Within the scope of this data processing, the Controller may transfer personal data to the event sponsors, as specified in section Recipients of Data of this Privacy Policy. The processing of your personal data is based on your consent, pursuant to Article 6(1)(a) of the GDPR. Your consent is optional, failure to give it will prevent you from receiving communications related to the BOLZANO SLUSH'D Event.

• if necessary, the Controller will process your personal data to establish, exercise, or defend a legal claim, whether in judicial, administrative, or extrajudicial proceedings, and/or to comply with legal obligations and requests from competent authorities. The processing of personal data is based on the legal bases set forth in Article 6(1)(c) and (f) of the GDPR.

The Company will process the following personal data:

• IP number;
• depending on the section of the website https://www.bolzanoslushd.com/ on which the requested data is provided: Name, surname, email address, phone number, information related to your job and education, and provided by you on the website.

The processing activities are directed towards the following categories of data subjects: event participants, volunteers.

The Controller will process your personal data through IT, with methods suitable to ensure their security and confidentiality in accordance with the provisions of the GDPR. Your personal data will be processed for the period strictly necessary to achieve the purposes of the Bolzano SLUSH'D Event and in accordance with the Controller's data retention policies.

The Controller may communicate your personal data to the following categories of subjects:

• authorized and duly trained personnel - including volunteers - of the Company, also regarding security measures and confidentiality obligations;
• third-party IT service providers ( MetaEsse S.r.l.);
• network members operating on the matching tool Knock;
• where applicable, third-party subjects participating in the Bolzano SLUSH'D Event as sponsor;
• where applicable, subjects and authorities whose right to access personal data is expressly recognized by law or by measures issued by competent authorities.

The Controller will process your personal data within the European Union.

The data subject may exercise the rights set forth in Articles 7(3) and 15 to 22 of the GDPR by submitting the request directly to the Controller by using the following e-mail address: hello@bolzanoslushd.com. The Controller may request additional information necessary to verify the identity of the data subject before processing the request.

The data subject may exercise, where applicable, the rights set out in Articles 15 to 22 of the GDPR, including:

• Right of access – Article 15 GDPR: The right to obtain confirmation as to whether or not personal data concerning you is being processed, and, if so, to access such data.

• Right to rectification – Article 16 GDPR: The right to obtain, without undue delay, the correction of inaccurate personal data concerning you and/or the completion of incomplete personal data.

• Right to erasure (right to be forgotten) – Article 17 GDPR: The right to request the deletion of personal data concerning you without undue delay, provided that the conditions set out in the GDPR are met. This right does not apply where processing is necessary for compliance with a legal obligation, the performance of a task carried out in the public interest, or for the establishment, exercise, or defense of legal claims.

• Right to restriction of processing – Article 18 GDPR: The right to obtain restriction of processing where one of the following applies:

  1. You contest the accuracy of your personal data, for the period necessary for the controller to verify its accuracy;
  2. The processing is unlawful, and you oppose the erasure of the personal data and request instead the restriction of its use;
  3. The controller no longer needs the personal data for processing purposes, but you require it for the establishment, exercise, or defense of legal claims;
  4. You have objected to processing pursuant to Article 21(1) GDPR, pending the verification of whether the controller's legitimate grounds override yours.

• Right to data portability – Article 20 GDPR: The right to receive your personal data in a structured, commonly used, and machine-readable format and the right to transmit such data to another controller without hindrance, where processing is based on consent or a contract and is carried out by automated means. This right includes, where technically feasible, the ability to have your personal data transmitted directly from one controller to another.

• Right to object – Article 21 GDPR: The right to object, at any time, to the processing of your personal data where it is based on legitimate interest, including profiling. The controller shall no longer process your data unless it demonstrates compelling legitimate grounds for processing that override your interests, rights, and freedoms or for the establishment, exercise, or defense of legal claims.

• Right not to be subject to automated decision-making – Article 22 GDPR: The right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you. This right does not apply where the decision is necessary for entering into or performing a contract, is authorized by law, or is based on your explicit consent. In any case, you have the right to obtain human intervention from the controller, express your opinion, and contest the decision.

• Right to lodge a complaint with the Data Protection Authority: You have the right to lodge a complaint with the competent Data Protection Authority, which in Italy is the Garante per la Protezione dei Dati Personali: http://www.garanteprivacy.it.

• Right to withdraw consent: Where processing is based on consent, you have the right to withdraw it at any time, without affecting the lawfulness of processing carried out before withdrawal. The withdrawal of consent shall be as easy to perform as the act of giving it.

The exercise of the rights as a data subject is free of charge, in accordance with Article 12 GDPR.