Associazione Sportiva Dilettantistica Paddling4all
Indirizzo: Via Sicilia 14, Alghero, 07041
pursuant to and for the purposes of art. 13, Legislative Decree no. 196/2003 and in compliance with EU Regulation no. 2016/679 (General data protection regulation so-called "GDPR")
In compliance with the provisions of Legislative Decree no.196 / 2003, as amended by EU Regulation 2016/679 of the European Parliament and of the Council of 27 April 2016 (hereinafter GDPR), the necessary information is provided in order to the purposes and methods of processing your personal data, in the context of communication and dissemination of the same. This information applies to all users, including registered and unregistered visitors, of our website: www.paddling4all.com. The user is invited to read this information carefully. In case of doubts or questions, the user can contact us at: firstname.lastname@example.org
1. Data Controller
The Data Controller is ASD Paddling4all, with registered office in Via Sicilia 14, Alghero, 07041.
2. Type of data processed and purpose of processing
To provide our services, we collect the personal information (eg personal and contact data; navigation data) of the user. The type of personal information we collect is the data that the user decides to provide to us in order to use our services - specifically: name; email address; phone number - and browsing data.
The personal information provided by the user is used by the Data Controller in order to:
provide and manage services (participation in courses; equipment rental; etc.) at the request of the user (eg contact / be contacted by registering on the contact form; etc.);
respond to user requests (e.g. commercial requests; quotes, etc.);
make communications by various means (e.g. newsletters, etc.);
exchange information aimed at the execution of the contractual relationship, including previous and subsequent activities.
comply with the obligations established by laws, regulations, or provisions issued by public authorities.
3. Processing methods
Users' personal data will be subject to processing operations in compliance with current legislation and the principles of correctness, lawfulness, transparency and confidentiality. These data will be processed with and without the aid of electronic and IT tools. Users' personal data will be processed by the Data Controller, by the Data Processor, even external, sub-managers and / or in charge of processing. Users' personal data will not be subject to automated decision-making processes, nor to any type of profiling, except as provided for in points 6 and 7 below.
4. Legal basis of the processing
A) navigation on our website: Legitimate interest pursuant to art. 6 lett. f) and recital 47: the processing is necessary for the pursuit of the legitimate interest of the data controller or of third parties, provided that the interests or fundamental rights and freedoms of the data subject that require the protection of personal data do not prevail, taking into account the reasonable expectations nurtured by the data subject based on his relationship with the data controller. Activities strictly necessary for the operation of the site and the provision of the navigation service on the platform.
B) compilation of forms on our site to collect user requests: Execution of pre-contractual measures and / or execution of a contract adopted at the request of the interested party pursuant to art. 6 lett. b) and recital 44; consent of the interested party pursuant to art. 6 lett. a) and recitals 42 and 43.
5. Personal data
By personal data, we mean: any information relating to a natural person, identified or identifiable, even indirectly, by reference to any other information, including a personal identification number; personal data that allow direct identification of the interested party.
6. Navigation data
The computer system used to operate this website acquires some personal data of the user during normal operation, the transmission of which is implicit in the use of internet communication protocols. This information is not collected to be associated with identified interests, but which by its very nature could, through further processing and association with data held by third parties, allow users to be identified. This category of data includes: IP addresses or domain names of the computers used by users who connect to the site; the URI (Uniform Resource Identifier) rotation addresses of the requested resources; the time of the request; the method used in submitting the request to the server; the size of the file obtained in response; the numerical code indicating the status of the response given by the server (eg error, successful, etc.) and other parameters relating to the operating system and the user's IT environment. These data are used for the sole purpose of obtaining anonymous statistical information on the use of the site and to check its correct functioning.
8. Provision of data and refusal
Apart from that specified for navigation data, the user is free to provide personal data in dedicated areas on the site. The provision of the user's personal data for the purposes indicated in this information is necessary to improve the specific functions and use the services offered by the Data Controller through the Site. Failure to provide personal data may make it impossible to obtain the service. requested or to use the services offered by the site.
9. Communication of data
The user's personal data may be disclosed, for the purposes referred to in point 2 of this information, to the following categories of subjects:
employees and collaborators of the Data Controller;
service providers (e.g. web hosting; web agency; mobile payment companies, etc.) and third parties that provide services that are instrumental to satisfying user requests.
Studies and companies in the field of assistance and consultancy relationships;
Competent authorities for the fulfillment of legal obligations and / or provisions of public bodies, upon request.
The subjects belonging to the aforementioned categories perform the function of Data Processor, sub-manager, in charge of processing, or operate in total autonomy as separate Data Controllers.
10. Data recipients
The user's personal data will not be disclosed to third parties and indeterminate subjects in any form (eg consultation of data, provision of data).
11. Data transfer
The personal data collected by us for the purposes described in this Notice will be communicated and transferred to companies and individuals located in other countries belonging to the European Union or in non-EU countries.
Any transfer of data to companies and / or third parties located in countries outside the E.U. it is always implemented within the limits and under the conditions set out in Articles 44 and ss. EU Reg. 2016/679 (GDPR).
In this case, the user will be able to obtain a copy of the conditions underlying the transfer by writing to the owner's office indicated above.
12. Retention time of the collected data
The Data Controller will process the personal data collected for as long as necessary to fulfill the purposes referred to in point 2 of this information. Subsequently, the user's personal data will be stored, and not further processed, for a period of time that can vary significantly depending on: purposes pursued, type of data processed (eg navigation data, personal information), obligations of law (e.g. tax, administrative, etc.). In any case, if it is no longer necessary to keep said data, they will be deleted / destroyed in accordance with the provisions of the GDPR.
13. User rights
The user can at any time ask the Data Controller to exercise the following rights: art. 15 (right of access), art. 16 (right of rectification), article 17 (right to cancellation), art. 18 (right to limit the processing), art. 19 (obligation to notify in case of rectification or cancellation of personal data or limitation of processing), art. 20 (right to data portability) and 21 (right to object), art. 22 (automated decision-making process and profiling) of the GDPR, may at any time request access to personal data and the correction or cancellation of the same or the limitation of processing or to oppose their processing, in addition to the right to data portability, by sending written communication to the Data Controller. The interested party can lodge a complaint with the Italian Data Protection Authority (www.garanteprivacy.it). The interested party also has the right, pursuant to art. 34 GDPR, to receive communication from the Data Controller, without undue delay, of any violations of personal data likely to present a high risk for the rights and freedoms of individuals.
14. How to exercise rights
The interested party may at any time exercise the rights referred to in this information and in general the provisions of the GDPR legislation: (I) by sending a registered letter with return receipt to the Data Controller at the registered office of the company located in Via Sicilia 14, Alghero , 07041. (II) by sending an email to email@example.com.
15. Consent to data processing
Pursuant to and for the purposes of art. 6, par. 1, lett. a) of the GDPR, the interested party gives consent to the processing of their personal data in the context, for the purposes and according to the methods mentioned above. This consent is to be considered valid until written revocation to be sent in the manner described in the previous point.
If the changes concern treatments whose legal basis is consent, the Data Controller will collect the User's consent again, if necessary.
Update date: May 20, 2021