How the personal data of people who access the Campus Eventi platform are processed, pursuant to Articles 13 and 14 of Regulation (EU) 2016/679 (GDPR).
Campus Eventi is a restricted-access corporate platform intended for WPP Group staff in Italy and for expressly authorised guests. It is not a service open to the public: access is granted only through credentials issued after approval by an administrator.
Personal data processed through this platform are processed within the WPP Group. The data controller is WPP Marketing Communications (Italy) S.r.l., Via Morimondo 26, 20143 Milano (MI), VAT no. 08990600150. For any request concerning the processing of your data you can write to technology.milan@wpp.it or, by certified email (PEC), to wppmarketing@legalmail.it. For an overview of all processing activities, please also see the WPP Group privacy notice.
Separate internal tools are hosted on the same domain (including corporate asset management and locker management). They have their own access and process data relating to the assignment of company assets to staff. The principles described in this notice also apply to those tools.
| Purpose | Legal basis |
|---|---|
| Providing the platform, managing accounts and distributing training and information content to staff | Performance of the employment or collaboration relationship and the controller's legitimate interest in organising its activities (Art. 6(1)(b) and (f) GDPR) |
| Recording the viewing of mandatory content and managing event attendance | Legitimate organisational interest and, where applicable, compliance with legal obligations (Art. 6(1)(f) and (c) GDPR) |
| Platform security, prevention of unauthorised access and misuse | Legitimate interest in the security of IT systems (Art. 6(1)(f) GDPR) |
| Managing invitations and external guests | Legitimate interest in organising corporate events (Art. 6(1)(f) GDPR) |
The data are not used for marketing purposes, are not sold or passed on to third parties for commercial purposes and are not subject to automated decision-making or profiling that produces legal effects on data subjects.
The data are accessible to authorised WPP Group staff working on the platform (administrators and contacts), each limited to what is necessary for their role. They are not disclosed to the public.
To operate the platform, the controller relies on providers acting as data processors or independent controllers, including:
The data are processed mainly within the European Economic Area. Where some providers involve a transfer to third countries, this takes place on the basis of adequacy decisions of the European Commission or standard contractual clauses, with the safeguards provided for in Chapter V of the GDPR.
At any time you can exercise the rights provided for by Articles 15-22 of the GDPR: access to your data, rectification, erasure, restriction of processing, portability and objection to processing based on legitimate interest. Requests should be sent to technology.milan@wpp.it or, by certified email (PEC), to wppmarketing@legalmail.it and will be answered within the legal time limits.
You also have the right to lodge a complaint with the Italian Data Protection Authority (garanteprivacy.it).
The platform adopts appropriate technical and organisational measures: encrypted HTTPS connection, passwords stored exclusively as hashes, session cookies with the HttpOnly, Secure and SameSite attributes, protection against brute-force attacks and access to content limited according to the permissions granted.
This notice may be updated to reflect changes to the platform or to applicable law. The date of the latest revision is shown at the top of the page.
This is a translation provided for convenience: in case of discrepancy, the Italian version prevails.