LX20 LAW FIRM

In the event of any discrepancies, the Italian version prevails.

Webinar privacy notice

Version dated 2 November 2026

Privacy notice on the processing of personal data

“T+1 Webinar, The settlement cycle is shortening, and so is the time to prepare”, 12 November 2026

Under Article 13 of Regulation (EU) 2016/679

IT Value Partner S.r.l. and LX20 Law Firm S.T.A. S.r.l. jointly organise the webinar “The settlement cycle is shortening, and so is the time to prepare” on 12 November 2026. This notice explains how they process the personal data of those who register for and attend it.

1. Definitions

1.1. In this notice, the terms below have the meanings given here, in both the singular and the plural.

2. Joint Controllers

2.1. The Joint Controllers are IT Value Partner S.r.l., with its registered office at Corso di Porta Romana 63, 20122 Milan, VAT number 08825160966, contactable at info@itvaluepartner.eu and on 02 38265 204, and LX20 Law Firm S.T.A. S.r.l., with its registered office at Via San Raffaele 1, Milan, contactable at info@lx20lawfirm.com.

2.2. For the purposes set out in paragraph 4.1, the Joint Controllers have entered into an arrangement under Article 26 of the GDPR, the essence of which is as follows. ITVP manages the Registration Form, the Platform and the sending of communications relating to the Webinar, and acts as the contact point for Data Subjects; LX20 receives from ITVP the list of registered participants and attendance data for organising the Webinar, preparing its content and answering questions addressed to its Speakers; each Joint Controller is responsible for the security measures for the data it holds.

2.3. For the purposes set out in paragraphs 4.4 to 4.6, each Joint Controller acts as an independent controller, solely in relation to Data Subjects who have given the relevant consent.

3. Personal data processed

3.1. The Joint Controllers process the categories of personal data listed below.

(i) Data provided through the Registration Form, namely first name, last name, company, role, company type, business email address, telephone number, the channel through which the Data Subject heard about the Webinar, any question for the Speakers, consent choices and the date and time of registration;

(ii) Data relating to attendance at the Webinar through the Platform, namely display name, email address, joining and leaving times, messages written in the chat or questions and answers section, and poll responses collected anonymously and not associated with the Data Subject’s name;

(iii) The Data Subject’s image and voice, if they contribute with their microphone or camera enabled during the Webinar and their contribution is included in the Recording;

(iv) Data provided by a Data Subject who requests a Snapshot Session or writes to the Joint Controllers in relation to the Webinar.

3.2. The Joint Controllers do not request special categories of personal data under Article 9 of the GDPR. Data Subjects are asked not to enter such data in the free text fields of the Registration Form, in the chat or in questions.

4. Purposes and legal bases

4.1. For registration for and attendance at the Webinar, the Joint Controllers process the data to record the registration, send confirmation, the link to the Platform and reminders, enable attendance, collect and answer questions, send the Materials and organise the Webinar. The legal basis is the performance of steps requested by the Data Subject when registering (Article 6(1)(b) of the GDPR).

4.2. As regards the Recording, the Webinar is recorded to make its content available to registered participants, including those unable to attend live. The legal basis is the Joint Controllers’ legitimate interest (Article 6(1)(f) of the GDPR), balanced by the following measures. Participants attend the Webinar with their microphones and cameras disabled; the Recording is announced at the start; written questions are read without identifying the person who asked them, unless the Data Subject requests otherwise; the Recording is sent only to registered participants. Publication of a Data Subject’s contribution beyond the circle of registered participants takes place only with the consent referred to in paragraph 4.6.

4.3. As regards statistics and the Snapshot Session, company type, the channel through which participants heard about the Webinar and poll responses are processed in aggregate and anonymous form to adapt the content to the audience and improve future initiatives; aggregate results may be shared with the Speakers. The legal basis is the Joint Controllers’ legitimate interest (Article 6(1)(f) of the GDPR). If a Data Subject requests a Snapshot Session, ITVP processes the data to organise it on the basis of the Data Subject’s request (Article 6(1)(b) of the GDPR).

4.4. As regards ITVP’s Communications, ITVP uses contact details to send its own Communications, including after the Webinar, only with the Data Subject’s consent. The legal basis is consent (Article 6(1)(a) of the GDPR and Article 130 of the Privacy Code).

4.5. As regards LX20’s Communications, LX20 uses contact details to send its own Communications, including after the Webinar, only with the Data Subject’s consent. The legal basis is consent (Article 6(1)(a) of the GDPR and Article 130 of the Privacy Code).

4.6. As regards publication of contributions, only with the consent of a Data Subject who contributes with their microphone or camera enabled may the Joint Controllers publish the part of the Recording concerning them on their websites and social media profiles, for the purpose of providing information about the initiative. The legal basis is consent (Article 6(1)(a) of the GDPR).

4.7. As regards legal obligations and the protection of rights, data may be processed to comply with legal obligations (Article 6(1)(c) of the GDPR) and, where necessary, to establish, exercise or defend a right of the Joint Controllers (Article 6(1)(f) of the GDPR).

4.8. Providing the data marked with an asterisk in the Registration Form is necessary for registration. Without these data, it is not possible to register the Data Subject and send them the link to the Webinar. Providing the other data and giving each of the consents in the Registration Form are optional and independent of one another. Refusing or withdrawing one consent does not affect registration or the other consents.

4.9. The data are not used for decisions based solely on automated processing.

5. Methods of processing

5.1. The data are processed using electronic tools by authorised personnel of the Joint Controllers under Article 29 of the GDPR and Article 2-quaterdecies of the Privacy Code, with appropriate technical and organisational measures under Article 32 of the GDPR.

6. Recipients of the data

6.1. The data may be processed on behalf of the Joint Controllers, as processors under Article 28 of the GDPR, by providers of services necessary for the Webinar and for sending the Communications. These include Aruba S.p.A., Via San Clemente 53, 24036 Ponte San Pietro (BG), for hosting ITVP’s website, Registration Form and email, and Microsoft for the Platform. An updated list of processors is available on request using the Joint Controllers’ contact details.

6.2. Speakers receive the questions addressed to them, without the name of the person who asked them unless the Data Subject requests otherwise, and the aggregate and anonymous poll results.

6.3. The Recording and slides are sent to participants registered for the Webinar.

6.4. The data may be disclosed to public and judicial authorities where required by law. Outside the cases described in this notice, the data are neither disseminated nor transferred to third parties.

7. Transfers outside the European Economic Area

7.1. Use of the Platform may involve the processing of personal data by Microsoft group companies established in the United States. Microsoft Corporation is listed as participating in the EU-U.S. Data Privacy Framework, which is the subject of the European Commission’s adequacy decision of 10 July 2023 (Article 45 of the GDPR). Any other transfers are subject to the standard contractual clauses adopted by the European Commission (Article 46 of the GDPR), a copy of which the Data Subject may request from the Joint Controllers.

8. Retention period

8.1. The data are retained for the periods set out below.

(i) Registration and attendance data are retained for twelve months from the date of the Webinar;

(ii) The Recording is retained for twelve months from the date of the Webinar, except for parts published with the consent referred to in paragraph 4.6, which are retained until consent is withdrawn;

(iii) Data relating to the Snapshot Session are retained for twelve months from the last contact, unless a contractual relationship results, in which case the periods prescribed by law apply;

(iv) Data processed for the Communications are retained until consent is withdrawn and in any event for no longer than twenty-four months from the Data Subject’s last interaction with the relevant Joint Controller’s Communications;

(v) Aggregate and anonymous results of polls and statistics are retained without a time limit, as they do not constitute personal data.

8.2. After these periods, the data are deleted or anonymised, unless further retention is necessary to comply with a legal obligation or to protect a right in judicial proceedings, for the strictly necessary period.

9. Rights of the Data Subject

9.1. The Data Subject may exercise the rights of access, rectification, erasure, restriction of processing and data portability (Articles 15 to 20 of the GDPR) at any time against each Joint Controller (Article 26(3) of the GDPR), by writing to info@itvaluepartner.eu or info@lx20lawfirm.com.

9.2. The Data Subject may object at any time, on grounds relating to their particular situation, to processing based on legitimate interests, including the distribution to registered participants of their contribution in the Recording (Article 21 of the GDPR).

9.3. The Data Subject may withdraw each consent at any time, without affecting the lawfulness of processing carried out before its withdrawal (Article 7(3) of the GDPR), by writing to the contact details provided or using the link in each Communication.

9.4. The Data Subject has the right to lodge a complaint with the Italian Data Protection Authority (Article 77 of the GDPR), following the procedures indicated at www.garanteprivacy.it.

The Joint Controllers may update this notice; the version in force is the one published on the Registration Form page. Last updated 2 November 2026.

Back to the registration form