© Gran Premio Liberazione. SSD Terenzi Sport Eventi
This privacy notice (or “privacy policy”) is provided in compliance with current legislation on the protection of personal data and, in particular, pursuant to Articles 13 and 14 of EU Regulation 2016/679 (“GDPR”) with reference to the processing of personal data collected or otherwise processed through the website www.runromethemarathon.com (“Website” or “Site”). The Site is managed by Team Bike Terenzi Italy S.p.A. (for company details see par. 1). This notice contains important information about the personal data that are processed through this Website, whether you are a registered or unregistered user, and describes how such data are used. This document contains important information about the following:
DATA CONTROLLER
PURPOSE OF PROCESSING
NATURE OF DATA PROVISION AND CONSEQUENCES OF ANY REFUSAL
TYPES OF DATA PROCESSED/SPECIFIC PROCESSING
DATA RETENTION PERIOD
RECIPIENTS/CATEGORIES OF RECIPIENTS OF PERSONAL DATA
RIGHTS OF THE DATA SUBJECTS
RIGHT OF WITHDRAWAL AND OBJECTION
PROTECTION OF MINORS' PRIVACY
METHODS OF PROCESSING AND SECURITY AND CONFIDENTIALITY OF PERSONAL DATA
UPDATES TO THIS NOTICE-COMMUNICATIONS
DATA CONTROLLER
For the purposes of this Privacy Policy and the data processing described herein, it is specified that the data will be processed by Team Bike Terenzi, with registered office in Ladispoli (RM), Via L.Odescalchi n. 27, VAT number 15533341002 (“Team Bike Terenzi”), email asdbiketerenzi@gmail.com, as an independent data controller (as defined in Reg. (EU) 2016/679 (“GDPR”)) of the data collected, hereinafter also referred to as the “Controller”.
For any comments or questions about this Privacy Policy and to speak with the local contact person responsible for handling data processing requests, you can also contact customer service at the following email address: asdbiketerenzi@gmail.com.
PURPOSE OF THE PROCESSING
Following the consultation of this Site and the use of one or more related services, data relating to identified or identifiable natural persons may be processed. Any personal data acquired, always in compliance with current regulations, will be processed solely for the following purposes:
purposes connected and instrumental to access and use of the Site, its functionalities, the requested services and the services provided by the Data Controller, as well as more generally to navigation on the Site itself;
for the activities of organization, management, and documentation of the sports events indicated, advertised, and organized also through the Website as well as, more generally, for operational and management needs of the Data Controller related to the services and/or products offered through the same Website, including direct marketing activities;
to fulfill obligations required by law and applicable regulations;
where expressly requested, to execute the newsletter service and for promotional and advertising activities of the Data Controller and/or third parties;
to respond to users' requests and communications;
in case of data collected as part of registration and use of any reserved areas of the Site for: (i) registration and management of reserved areas (ii) the purposes indicated in any data collection form (iii) the sending of commercial information, newsletters, special offers, and promotional material by the parties specifically indicated in the consent collection form, where necessary;
for any other purpose indicated in the specific notices provided at the time of collection of any additional data.
In the case of explicit and optional consent, where necessary, the data collected for the purposes referred to in letters a), b), and f) will also be processed for direct marketing purposes by the Data Controller, in particular for sending informational, commercial, or advertising material relating to the services and/or products offered by the same.
The data will be processed lawfully and fairly and used only for the purposes indicated in the previous letters. The processing will be carried out using tools suitable to guarantee the security and confidentiality of personal data and may be carried out using paper and/or automated and computerized tools designed to store, manage, and transmit the data itself.
NATURE OF DATA PROVISION AND CONSEQUENCES OF ANY REFUSAL
The provision of personal data is optional. However, we remind you that failure to provide such data may not allow proper navigation of the Site and the provision of any requested services or information. The provision of additional personal data indicated in the request forms to solicit the sending of informational material or other communications is optional. Failure to provide them may make it impossible to fulfill the requests and therefore to obtain the information. It should be noted that, in any case, if the processing of your data is based on consent, this can be revoked at any time, as further specified below.
TYPES OF DATA PROCESSED/SPECIFIC PROCESSING and LEGAL BASIS OF PROCESSING
Depending on the service provided, different types of personal data may be processed, as specified in this article.
4.1. Browsing data
The IT systems and software procedures responsible for the operation of this Site acquire, during their normal operation, certain personal data whose transmission is implicit in the navigation of websites. This information is not collected to be associated with identified interests; however, by its very nature, it could, through processing and association with data held by third parties, allow users to be identified. Among these are the IP addresses or domain names of the computers used by users who connect to the site, the URLs of the requested resources, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response given by the server, and other parameters related to the user's operating system and platform. The above data is used solely to obtain anonymous statistical information on the use of the site and to check its correct functioning: it is deleted immediately after processing. The data could be used to ascertain responsibility in the event of hypothetical computer crimes against the site: except for this eventuality, at present, web contact data does not persist for more than seven days. The retention of access logs, kept directly on the servers that record users' IPs, is maintained for 12 months. The legal basis for the processing of such data is to be found in the necessity to provide the browsing service to the user. Should such data be used for profiling purposes, the legal basis for processing will be consent. With regard to cookies, please refer to the cookies policy.
4.2.1. Data voluntarily provided by the user (communications)
The optional, explicit, and voluntary sending of communications via contact forms on the site or by email to the addresses indicated on this Site entails the subsequent acquisition of the data communicated to the sender, including their email address, in order to receive any response messages to their requests.
The personal data thus provided are used solely for the purpose of fulfilling or responding to the requests submitted and are communicated to third parties only if this is necessary for that purpose. Specific information prepared for particular services upon request will be provided on the relevant pages of the site. The legal basis for the processing of such data is to be found in the necessity to fulfill a user's request or to carry out pre-contractual measures adopted at the user's request (art. 6, paragraph 1, letter b) GDPR) or in the legitimate interest of the Data Controller to fulfill the requests of its users or to promote its own activity (art. 6, paragraph 1, letter f) GDPR).
4.2.2. Data voluntarily provided by the user (to receive communications for marketing and/or commercial promotion purposes)
Each data subject may voluntarily provide their personal data to the Data Controller in order to receive commercial or promotional communications, by any name, with communications either digital or paper-based, from the Data Controller or from third parties. The legal basis for the processing will be consent, pursuant to Article 6, paragraph 1, letter a) GDPR. In every communication, in any case, the data subject is reminded that they may withdraw their consent at any time and without formalities. The data will be deleted at the request of the data subject, unless otherwise provided by law.
Only in cases where the email contact details are provided by the data subject in the context of the sale of a product or service, the email address thus provided may be used for the direct sale of further similar products or services, pursuant to EU Regulation 2016/679 (GDPR) and Legislative Decree 196/2003 (Personal Data Protection Code, so-called "Privacy Code"), without the need for express and prior consent. In this case, the legal basis for the processing is represented by the legitimate interest of the Data Controller, pursuant to Art. 6, letter f) GDPR.
4.2.3. Data voluntarily provided by the user (to receive newsletters)
The Data Controller's newsletter is sent by email to those who subscribe to the newsletter. The legal basis for processing can be found in the necessity to provide the service requested by users, as well as the legitimate interest of the Data Controller to respond to its users' requests, pursuant to art. 6, paragraph 1, letters a) and f) GDPR. To stop receiving the newsletter, simply select the unsubscribe link at the end of each email. Unsubscription is managed automatically, so you may still receive newsletters that were scheduled before your unsubscribe request was received, but in any case, within a maximum period of 72 hours.
4.2.4 Data voluntarily provided by the user (registration data for reserved areas of the Site and data provided in the context of sporting events organized by the Data Controller and sponsored and managed also through the Site)
The registration data (necessary for registering for any reserved areas of the Site) will be used for: (i) registration and management of reserved areas (ii) the purposes indicated in any data collection form (iii) sending commercial information, newsletters, special offers, and promotional material by the parties specifically indicated in the consent collection form, where necessary. The legal basis for processing in relation to the data necessary for registration in any reserved areas of the Site is to be found in the necessity to provide the service requested by users or to carry out pre-contractual measures adopted at their request (art. 6, paragraph 1, letter b) GDPR) or in the legitimate interest of the Data Controller to promote its activity (art. 6, paragraph 1, letter f) GDPR).
The data provided within the scope of sports events organized by the Controller and sponsored and managed also through the Website, including any images, will be used for: (i) registration, organization, management, and documentation of users' participation in the events themselves (ii) the purposes indicated in any data collection form (iii) sending information and newsletters related to events of the same nature by the parties specifically indicated in the consent collection form, where necessary. The legal basis for the processing is found in the necessity to execute the contract/provide the service requested by users or to carry out pre-contractual measures adopted at their request (Art. 6, paragraph 1, letter b) GDPR) or in the legitimate interest of the Controller to promote its activity (Art. 6, paragraph 1, letter f) GDPR).
Finally, the legal basis for the processing of any other data that may be processed will be indicated from time to time in the specific information notice.
4.3.1. Cookie
The Site uses technologies such as cookies to collect information regarding users' use of the Site. Please note that consent to the use of such technologies and the related data processing is optional, but be aware that if consent is not given, there may be problems with browsing and accessing all or parts of the Site, or limitations regarding its full functionality. For further information and details, please visit the Cookies Policy section.
STORAGE PERIOD
Except as expressly indicated in paragraph 4 above, the data provided will be kept for the time strictly necessary to carry out the activities for which they were collected and, in any case, for the periods prescribed by applicable legal or regulatory provisions and in any event for the time necessary to ensure the exercise of the rights of the Data Controller.
CATEGORIES OF RECIPIENTS OF PERSONAL DATA
For the purposes indicated in art. 2 of this document, the data may be communicated to third parties whose collaboration Team Bike Terenzi may and/or must use for the performance of such services offered. These third parties will act as external data processors pursuant to art. 28 of the GDPR and will process the data for the same purposes referred to in art. 2 of this document. It should be noted that some parties to whom the data may be communicated may also act as independent data controllers, after providing an appropriate Privacy Policy pursuant to art. 14 GDPR, unless otherwise provided by law.
The data collected for the purposes outlined above may also be communicated to companies affiliated with or belonging to the same corporate group as the Data Controller and to parties authorized for this purpose by legal provisions and European regulations, including in countries outside the European Union (for example, Switzerland). In such cases, the Data Controller guarantees that this will be done in compliance with the provisions of the GDPR. With particular regard to Switzerland, it is noted that the European Commission, by decision no. 2000/518/EC of July 26, 2000, has recognized that this country ensures an adequate level of protection for personal data.
A list of entities to whom the Data Controller discloses the personal data collected for the aforementioned purposes is available to data subjects at the Data Controller's office and can be obtained upon written request sent to them.
RIGHTS OF THE DATA SUBJECTS
The data subject is the natural person, identified or identifiable, to whom the personal data being processed refers.
We inform you that, as a data subject, you have the right to access at any time the data concerning you processed by the Data Controller (right of access) in order to verify its accuracy and to check the lawfulness of the processing carried out. You may also exercise all the rights recognized by current national and European legislation on the protection of personal data, specifically Articles 15 et seq. of EU Regulation No. 2016/679 and subsequent amendments and additions: in particular, you may request at any time access to, correction and updating of incorrect or inaccurate data, restriction of the processing carried out, and deletion of such data (right to be forgotten) if one of the reasons indicated in Article 17 of the GDPR exists, as well as lodge a complaint with the Data Protection Authority, at the following contacts: Data Protection Authority, in Rome, Piazza Monte Citorio No. 121, email: garante@gdpr.it, telephone: 06.69677, or by sending a fax to 06696773785.
With regard to personal data processed by automated means, you are also granted the right to receive the data concerning you in a structured, commonly used format and to transmit them, if necessary, to another data controller (right to data portability).
To allow Team Bike Terenzi to best serve the user, the user is invited to regularly check and update their personal data. If registered, the user can access and modify their personal data using the user account settings on the Website; otherwise, they can contact support to receive assistance in updating their personal data.
Any request regarding the processing of personal data and any communication relating to the exercise of your rights may be addressed by sending an email to: info@runromethemarathon.com or, by mail, to: Team Bike Terenzi L. Odescalchi 27, Rome.
RIGHT OF WITHDRAWAL AND OBJECTION
Each data subject is also granted the right to withdraw consent at any time, without prejudice to the lawfulness of processing carried out by the Data Controller prior to such withdrawal, as well as the possibility for the Data Controller to continue processing based on other legal grounds.
The data subject is also always recognized the possibility to object to the processing of data concerning them if it is carried out for direct marketing purposes as referred to in art. 2, letter b; in this case, your data will no longer be processed for such purposes (right to object).
PROTECTION OF MINORS' PRIVACY
This Website is aimed at a general audience, however its services are intended for people aged 14 or older. Team Bike Terenzi does not knowingly request, collect, use, or disclose personal data provided by individuals under the age of 14. If Team Bike Terenzi becomes aware that it has collected data from a minor under the age of 14, it will delete it.
If the user does not meet the required age, please do not register and ask an adult (that is, your parents or your guardian) to carry out the necessary procedures.
It should be noted that pursuant to Article 2-quinquies of Legislative Decree 196/2003, if Article 6, paragraph 1, letter a) applies, regarding the direct offer of information society services to minors, the processing of a minor's personal data is lawful where the minor is at least 14 years old.
METHODS OF PROCESSING AND SECURITY AND CONFIDENTIALITY OF PERSONAL DATA
The processing of the collected data will be carried out in compliance with the principles set out in Art. 5 of the GDPR. The processing for the identified purposes will take place using both electronic and manual methods, through electronic tools or paper supports, based on logical criteria functional to the purposes for which the data were collected, in compliance with the confidentiality and security rules provided by the GDPR and the relevant national implementing regulations. In any case, pursuant to Art. 32 GDPR, the Data Controller has adopted all appropriate security measures to prevent risks that may arise from data processing, such as destruction, loss, and unlawful use of data, as well as unauthorized access to them.
In particular, Team Bike Terenzi has implemented appropriate measures aimed at protecting the user's personal data from accidental loss and from unauthorized access, use, modification, and disclosure. In managing this Website, password controls, firewall technology, and other technological and procedural security measures are used. Although Team Bike Terenzi has implemented the aforementioned security measures for the Website, the user should be aware that 100% security cannot be guaranteed. Therefore, the user provides their personal data at their own risk and, to the maximum extent permitted by applicable law, Team Bike Terenzi will not be in any way responsible for their disclosure due to errors, omissions, or unauthorized actions by third parties during or after their transmission. Team Bike Terenzi recommends that the user periodically update software to protect data transmission over networks (for example, antivirus software) and check that the electronic communication service provider has adopted appropriate means for the security of data transmission over networks (for example, firewalls and anti-spam filters); keep the username and password for account access confidential and not share them with anyone; and periodically change the password.
In the unlikely event that Team Bike Terenzi believes that the security of the user's personal data in its possession or under its control has been or may have been compromised, the Data Controller will inform the user of the incident in accordance with the procedures provided by current law, using the methods prescribed by it (by providing Team Bike Terenzi with their email address, the user agrees to receive such communications in electronic format through that email address).
UPDATES TO THIS NOTICE – COMMUNICATIONS
Team Bike Terenzi, at its sole discretion, reserves the right to change, modify, add, or remove parts of this Privacy Policy at any time by publishing the revised version on this page of the Website and updating the "Last Modified" date indicated below. It is the user's responsibility to review the Privacy Policy from time to time to become aware of any changes made. In some cases, Team Bike Terenzi may provide additional notice regarding significant changes to this Privacy Policy by posting a notice on the homepage of this Website or, in the case of registered users, by sending a notification email or posting a notice on their account page. By accepting such revised Privacy Policy by clicking the "accept" button in such notification email or in the communication posted on the account page (where required to comply with current regulations), or by using or submitting information to the Website after the publication of the revised Privacy Policy, the user accepts such revised Privacy Policy. Following the changes, where required by current regulations, the user's data will not be processed without the user's explicit consent.
© Gran Premio Liberazione. SSD Terenzi Sport Eventi