INFORMATION ON THE TREATMENT OF PERSONAL DATA IN RELATION TO THE ART. 13 and 14 EUROPEAN REGULATION No. 679/2016

The writer SPORT MONTEGRAPPA ASD, with headquarters in Via Caose, 22 - 31030 - BORSO DEL GRAPPA (TV), c.f. 92032660265 and VAT number 04736960263 as "Data Controller" informs you, pursuant to articles 13 and 14 of European Regulation n. 679/2016 (hereinafter the "EU Regulation"), that your data, when they are released to us or transmitted in any form or manner, will be processed as follows:

Subject of processing

The data controller informs you that personal, identifying data (for example, name, surname, company name, address, telephone, e-mail, bank and / or payment references, etc.), hereinafter called "personal data" and also the data of "special categories" as envisaged in art. 9 of the EU Regulation (for example data concerning the state of health, political, religious, sexual orientation) and all of them simply called “data”, related to you, acquired also verbally directly or through third parties in the past, such as those that will be collected in the future, they may be processed in full compliance with the EU Regulation. The Data Controller performs the processing in a lawful manner specifically for the execution of a contract of which you are a party or for the execution of pre-contractual measures (eg preparation of an offer, etc.) requested by you (art. 6 of the EU Regulation). Data processing means any operation or set of operations concerning the collection, recording, organization, storage, consultation, processing, modification, selection, extraction, comparison, use, interconnection, blocking, communication, dissemination or destruction of the data.

Legal basis and purpose of the processing

Legal basis: EU Regulation n. 679/2016, your data will be processed 2A) without your express consent (Article 6 letter b), c), e) of the EU Regulation), for the following Purposes:

- fulfill the pre-contractual, contractual and fiscal obligations deriving from any existing relationships with you;
- to fulfill the obligations provided for by the law, by a regulation, by EU legislation or by an order of the Authority (such as in the field of anti-money laundering);
- exercise the rights of the Data Controller, for example the right of defense in court;
- for management purposes (invoicing, registrations, document management relating to the proposed activity, etc.);
- for statistical analysis and quality control;
- for insurance management;
- for technical assistance.

Given that you have read this information regarding our site, we also inform you and in any case that your navigation data will be processed for purposes related to the implementation of the following obligations, relating to legislative or contractual obligations:

- Technical and Functional Access to the Site no data is kept after closing the Browser;
- Purpose of Advanced navigation or personalized content management;
- Statistical purpose and analysis of navigation and users.

2B) Only with your specific and separate consent (art. 7 of the EU Regulation), for the following purposes: - concerning data on your health status or of the minor of which you are parent or guardian - commercial and / or marketing and / or profiling, only if we made use of it and informed in advance with:

    sending via e-mail, post and / or sms and / or telephone contacts of newsletters, commercial communications and / or advertising material on products or services offered by the Data Controller and / or detection of the degree of satisfaction with the quality of what has been performed on Her request;
    sending via e-mail, post and / or sms and / or telephone contacts of commercial and / or promotional communications of third parties.

Treatment modalities

The processing of your personal data is carried out by means of the operations indicated in the art. 4 n. 2) of the EU Regulation and specifically: the collection, registration, organization, structuring, conservation, adaptation or modification, extraction, consultation, use, communication by transmission, dissemination or any other other form of provision, comparison or interconnection, limitation, cancellation or destruction, blocking. Your personal data is subjected to both paper and electronic and / or automated processing (in any case suitable for guaranteeing data security and confidentiality).

Data retention times and other information.

The Data Controller will process the personal data for the time necessary to fulfill the aforementioned purposes and in any case for no later than the terms of the law from the termination of the relationship for the purposes referred to in the existing relationship. With reference to the personal data subject to Treatment for Marketing and commercial purposes, the same will be kept in compliance with the principle of proportionality and in any case until the purposes of the processing have been pursued or until the specific consent revocation is reached. part of the interested party. Specifically, the Data Controller will process the data for no more than 5 years from the end of the relationship after which they will be anonymized or destroyed. The personal data you provide will be treated "in a lawful manner, with fairness and transparency" protecting your privacy and your rights. The interested party undertakes not to insert or transmit in or from the Website or other platform any material: that is intimidating, defamatory, obscene, indecent, seditious, offensive, pornographic, abusive, such as to incite racial, discriminatory or discriminatory hatred, threatening, scandalous, inciting, blasphemous, harmful to secrecy obligations, detrimental to privacy or that can in any way cause annoyance or damage; or that represents or encourages behaviors that could be considered forms of crime, which can lead to the responsibility of anyone, who is in any way contrary to the law, public order or morality or who infringe the rights of third parties anywhere in the world ; or that cause damage (including, without limitation, computer viruses, logic bombs, Trojan horses, worms, defective components, corrupted data or other software with harmful or damaging contents). The User may not abuse the Site (including, but not limited to, carrying out hacking activities).

Access to data

Your data may be made accessible for the purposes referred to in points 2.A) and 2.B):

- to members, employees and collaborators of the Data Controller in Italy and abroad, in their capacity as appointees and / or internal processors and / or system administrators;
- to third party companies or other subjects that perform activities in outsourcing on behalf of the Data Controller, in their capacity as external processors (as an indication: associated offices, lawyers, data processing companies, certifying bodies, accounting consultant / tax and in general to all the Bodies responsible for checks and controls on the correct fulfillment of the aforementioned purposes, credit institutions, professional offices, consultants, insurance companies for the provision of insurance services, financial offices, Municipal Bodies and / or Municipal Offices, to consultants and service companies and to secure workplaces, which can in turn communicate the data, or grant access to them in the context of their members, users and their assignees for specific searches of market The data collected and processed may also be communicated, in Italy and abroad, to subcontractors, suppliers, for the management of information systems, to transporters, shippers and customs agents.

Data communication

Without the need for an express consent (art. 6 lett. B) and c) of the EU Regulation), the Data Controller may communicate your data for the purposes referred to in the previous point 2.A) to supervisory bodies, judicial authorities , to insurance companies for the provision of insurance services, as well as to those subjects to whom the communication is obligatory by law for the fulfillment of the purposes indicated above. These subjects will treat the data in their capacity as independent data controllers. During and after browsing, your data may be disclosed to third parties, in particular to:

- Google: Advertising service, Advertising target, Analytics / Measurement, Content customization, Optimization;
- Google AdWords: Advertising service, Target advertising, Analytics / Measurement, Content customization, Optimization; - Google Analytics: Target advertising, Analytics / Measurement, Optimization. Your information will not be disseminated.

Data transfer

Personal data is stored on devices located at the headquarters of the data controller or at providers, within the European Union. In any case, it is understood that the Data Controller, if necessary, will have the right to move the data even in non-EU countries. In this case the Data Controller ensures from now on that the extra-EU data will be transferred in compliance with the applicable legal provisions, subject to the stipulation of the contractual clauses and standard checks provided for by the European Commission. Regarding both the data present on its own devices and any data present at the provider, the Data Controller has put in place adequate technical and organizational measures to guarantee an adequate level of security, in full compliance with the provisions of art. 32 of the EU Regulation. Navigation: your navigation data may also be transferred, limited to the aforementioned purposes, to the following states: - EU countries, - United States of America.

Nature of data provision and consequences of refusal to respond

The provision of data for the purposes referred to in the previous point 2.A) is mandatory. In their absence, we will not be able to guarantee the Services as indicated in 2.A). The provision of data for the purposes referred to in paragraph 2.B) is instead optional. He may therefore decide not to give any data or subsequently deny the possibility of processing data already provided: in this case, he will not be able to receive newsletters, commercial communications and advertising material and / or anything else inherent to the Services offered by the Data Controller. However, he will continue to have the right to the Services referred to in point 2.A).

Rights of the interested party

As an interested party, you have the rights set forth in art. 15 of the EU Regulation shown below, namely:

1. has the right to obtain from the Data Controller the confirmation that the processing of personal data concerning him is in progress and in this case, to obtain access to personal data and to the following information:

a) the purposes of the processing;
b) the categories of personal data in question:
c) the recipients or categories of recipients to whom the personal data have been or will be communicated, in particular if they are recipients of third countries or international organizations;
d) when possible, the period of storage of personal data provided or, if this is not possible, the criteria used to determine this period;
e) the existence of the right of the data subject to request the data controller to rectify or cancel personal data or limit the processing of personal data concerning him or to oppose their processing;
f) the right to lodge a complaint with a supervisory authority (the Guarantor for the protection of personal data);
g) if the data is not collected from the interested party, all available information on their origin;
h) the existence of an automated decision-making process, including profiling pursuant to art. 22, paragraphs 1 and 4 of the EU Regulation, and, at least in such cases, significant information on the logic used, as well as the importance and expected consequences of this treatment for the interested party.

2. If your personal data is transferred to a third country or to an international organization, you have the right to be informed of the existence of adequate guarantees pursuant to art. 46 of the EU Regulation concerning the transfer.
 
3. The data controller will provide you with a copy of your personal data processed if you request it. If you request further copies, the Data Controller may charge you a reasonable fee based on administrative costs. If you submit the request electronically, and unless otherwise indicated, the information will be provided to you in an electronic format in common use.

4. The right to obtain a copy referred to in paragraph 3 must not affect the rights and freedoms of others. Furthermore, where applicable, you can enjoy the rights set out in articles 16 to 22 of the EU Regulation and specifically have:

- the right to rectify personal data;
- the right to be forgotten (the right to cancel);
- the right to limit the processing;
- the right to data portability;
- the right to object;
- the right to complain to the Guarantor Authority.

You also have the right to revoke any consent already given at any time without jeopardizing the lawfulness of the processing based on the consent given before the revocation.

Personal data not obtained from the person concerned

It may happen that the writer is not the Data Controller to whom you have given your personal data, but appears to be co-owner of the treatment or manager of the external processing and therefore your data has reached the writer in second place as a result of a contract that governs the parties. In this case it is specified that the writer will do everything possible to ensure that you have been informed and have given consent to the processing. You can ask the writer at any time for the origin of your data acquisition.

Owner, Distributors and External Processors of the processing

Below we provide you with some information that you must bring to your knowledge, not only to comply with legal obligations, but also because transparency and fairness towards the people who visit our website is a fundamental part of our business. Data controller. The Data Controller of your personal data is SPORT MONTEGRAPPA ASD, with headquarters in Via Caose, 22 - 31030 - BORSO DEL GRAPPA (TV) and which you can contact for any information or request at the following addresses: e-mail: info @ acquaterracielo. it

External Treatment Officers and Managers.

The updated list of appointees and external data processors is kept at the headquarters of the Data Controller.