1.Introduction

NEPI Rockcastle Retailers Day (the “Event”) is an event organized by NE Property B.V., of Strawinskylaan 563, WTC Zuidas Tower Ten, 5th Floor,1077 XX Amsterdam, the Netherlands, CoC number: 34285470, VAT: NL 818597392B01, bank account no. NL59 INGB 0650 4007 39 opened with ING Bank, hereby duly represented by Eugeniu Barba and Alexandru Florescu (the “Organiser”).

During the Event we process your personal data, as controller. For some processing operations carried out for marketing purposes, we also act as joint controller together with other NEPI Rockcastle Group entities (network available here – https://nepirockcastle.com/portfolio/).

The purpose of this Privacy Notice (the “Privacy Notice”) is addressed to you, as participant to the Event.

2.What types of personal data we process

The categories of personal data processed by us are:

• Identification details: name and surname

• Professional details: name of employer/company you are representing and the position you hold

• mage

• Voice

• Signature

We will collect the personal data we process directly from you, for example when you register for or attend the Event. 

During the Event we will collect your image and/or your voice (contained in visual, video and audio records) in the following situations:

a) Capturing your personal data while taking pictures and videos to capture the general atmosphere inside the event. The areas in which we will conduct these activities will be signalled, so you may opt not to have your image and video and audio recordings by not entering the designated areas.

b) Capturing your personal data while conducting video interviews with you (only if you consent to participating in the interview).

3.Why do we process your personal data

We collect and process information about you for a variety of reasons, as follows:

4.Who do we share your data with

NEPI NE Property B.V.  will share your personal data with the following parties:

• NEPI Rockcastle Group entities (network available here – https://nepirockcastle.com/portfolio/) – for the purposes of promoting the Event via their own marketing channels

• Social media websites (including, but not limited to LinkedIn, Facebook and Instagram) – for the purposes of promoting the Event and create brand awareness. Please note that social media platforms process personal data disclosed to them in accordance with their own privacy policies.

• Contractors supporting NE Property B.V.  or NEPI Rockcastle Group entities in media and PR management – for the purposes of organizing, hosting and promoting the event.

• Judicial bodies, public institutions, or central and local public authorities – for the purpose of complying with an express justified request or a legal obligation.

Your personal data will generally be transmitted electronically to the aforementioned recipients.

We have taken appropriate safeguards to ensure the protection of the personal data transferred, especially as all NEPI Rockcastle Group entities abide by the same data privacy internal rules and regulations.

5.For how long do we keep your personal data

We will retain personal data for the period necessary to fulfil the purposes outlined in this Privacy Notice unless a longer retention period is required or permitted by law.

The data contained in the consent form are to be stored for a period of 3 (three) years, as consent evidence for such processing, unless otherwise required by applicable legislation. NEPI Rockcastle Group entities will not store the photo/video/audio records outside the media and social media environment.

6.Security

NE Property B.V. and NEPI Rockcastle Group entities process your personal data in compliance with data privacy legal framework, ensuring appropriate security measures, preserving confidentiality and integrity. Details regarding the way we process personal data are available on the website of each commercial center, member of NEPI Rockcastle Group.

7.Your rights

You will at all times have the following rights as to your personal data processed by us:

• Right to be informed

• Right of access

• Right to rectification

• Right to be forgotten

• Right to restriction of processing

• Right to data portability

• Right to object

• Rights in relation to automated decision making and profiling

7.1How do you exercise your rights

In order to exercise your rights listed above, you can always contact the Group DPO at data.protection@nepirockcastle.com or mail us at Floreasca Business Park, Building A, 5th Floor, 169A Calea Floreasca, Bucharest 1, 014459, Romania.

7.2Right to place a complaint with the supervisory authority

You also have the right to lodge a complaint with a Data Protection Authority. The contact details of EU data protection authorities are available here - https://edpb.europa.eu/about-edpb/about-edpb/members_en#member-ro