PRIVACY POLICY NOTE UNDER (EU) REGULATION 2016/679 (GDPR)
PROCESSING OF PERSONAL DATA
The purpose of this information notice is to allow users browsing our Site to know, even before accessing the various sections of the Site, how the users’ personal data are processed through this Site and it will be necessary for the user to read it before he/she provides his/her personal data when registering on the Site. This information, in particular, is provided pursuant to EU Regulation N. 679/2016 and subsequent national implementing regulations. Navigation on the Site and/or access to certain sections of the Site and/or any requests for information or services by users of the Site may entail the processing of personal data by Basilicata Bike Trail Associazione Sportiva Dilettantistica (hereinafter the “Data Controller”), as the Data Processor, which will take place in compliance with Legislative Decree 196/2003 “Code on the Protection of Personal Data” (hereinafter the “Code”) and European Regulation 2016/679. The following are the terms and conditions under which users may consent to the transfer of rights to images, comments, catchphrases associated with the subject matter of the Site, material, content and any other information conceived by users and published by them on the Site, and consent to the use of the image that the user may have given to the Data Controller.
PURPOSES OF DATA PROCESSING
According to the needs expressed from time to time by the user accessessing the various sections of the Site, the purposes of the processing of personal data are indicated below, i.e. those conferred directly by users through the completion of on-line forms, or through the use of social networks (see the following section “Nature and modalities of the conferment of users’ Personal Data”) or those acquired automatically through browsing (see the following section “Categories of Personal Data subject to processing”) (hereinafter, “Personal Data”):
• a) provide and manage the various services offered; allow registration on the Site, which is necessary for access to particular sections of the Site itself and to provide and manage the various services offered;
• b) allow users to publish contributions directly on the Site, or on sites managed autonomously by third parties with which the Controller may have reached agreements to this effect, such as, by way of example but not limited to, social networks such as Facebook, Twitter, etc. (hereinafter “Social Networks”); the publication of Contributions may also take place together with a pseudonym (“nickname”) chosen by the user during registration on the Site and possibly with the image associated by the user with his/her nickname:
◦ i) the user shall be solely responsible for any choice that prejudices the interests of third parties;
◦ ii) the user shall not be required to use personal data that would allow third parties other than the Controller to identify him/her, but the user, through the Controller, may also disseminate his/her own personal data if he/she has included them in his/her nickname, as well as the photo that he/she may have associated with his/her profile.
• c)subject to the user’s consent and until such time as it is revoked, carry out marketing activities such as sending promotional and advertising material from the Controller, including e-mail, mms and sms;
• d) ) in compliance with legal requirements and for the purpose of personalising the user experience on the Site and improving the services and products offered by the Controller to its customers or transmitting profiled advertising (by means of e-mail, banners and dynamic content on the Site) based on users’ tastes and navigation, subject to the user’s consent and until such time as the same is revoked, carrying out analyses on consumption habits or choices and defining the profile of the interested parties using the information provided by the latter when registering, or when filling in questionnaires or on the basis of actions taken or information provided when navigating on the Site. These purposes will be carried out through the use of cookies, which must be considered as the collection and processing of data concerning the users of a service, in order to divide them into groups according to their behaviour. Where the user specifically consents, therefore, personal data may be used to trace the user’s ‘history’.
• e) respond to user requests in relation to the Controller’s products, advertising, or the Site (the ‘Contact Us’ section of the Site);
• f) subject to the user’s consent, and until the user’s consent is revoked, carry out activities of comparison and combination, for profiling purposes, of the user’s personal data present in different databases of, or in use by, the Data Controller. User registration on the Site is not required for the provision of certain services offered by the Controller (e.g. those referred to in paragraph e above). However, in order to process any requests from users concerning such services, they will be asked to provide Personal Data, which will be processed only for the relevant purposes and for the time strictly necessary. Processing methods Personal Data will be processed by means of the operations of collection, recording, organisation, storage, consultation, processing, modification, selection, extraction, comparison, use, interconnection, blocking, communication, cancellation and destruction of data. Personal Data shall be processed mainly by automated means but also in paper form, with logics strictly related to the aforesaid purposes, by means of Data Bases, electronic Platforms managed by the Data Controller or by third parties appointed for this purpose as data processors and/or integrated IT systems and/or websites owned by or in use by the Data Controller. If the user expresses his or her consent, personal data will be made visible and stored in a computer archive for customer relationship management, known as Customer Relationship Management (CRM), as well as possibly stored in one or more special archives or databases of the company that may be accessed by other associated companies. Since, therefore, the CRM is a database for the shared management of the data it contains, the updating, rectification or deletion of any of the data provided will entail the updating of such data with regard to all subjects to whom access is granted.
METHODS OF DATA PROCESSING
Personal Data shall be processed by means of the operations of collection, recording, organisation, storage, consultation, processing, modification, selection, extraction, comparison, use, interconnection, blocking, communication, deletion and destruction of data. Personal Data shall be processed mainly by automated means but also in paper form, with logics strictly related to the aforesaid purposes, by means of Data Bases, electronic Platforms managed by the Data Controller or by third parties appointed for this purpose as data processors and/or integrated IT systems and/or websites owned by or in use by the Data Controller. If the user gives his or her consent, personal data will be made visible and stored in a computerised customer relationship management (CRM) archive, as well as possibly stored in one or more special archives or databases of the company that may be accessed by other associated companies. Since, therefore, the CRM is a database for the shared management of the data it contains, the updating, rectification or deletion of any of the data provided will entail the updating of such data with regard to all subjects to whom access is granted.
PLACE OF DATA PROCESSING
Personal Data are mainly processed at the Data Controller’s premises located in Potenza, Viale Marconi n. 90 and in the places where the Data Processors are located. For further information, please contact the Controller.
TIME OF DATA PROCESSING AND STORAGE
The Owner will process Personal Data for a period of time not exceeding that necessary to achieve the purposes for which the data are processed, or for a longer period, for purposes permitted by law, and in any case deleted without undue delay after 5 years from the collection, without prejudice to the possibility for the interested party to modify and/or revoke his will at any time. The user may at any time cancel his account or his registration on the Site or request the interruption of processing or revoke his consent, according to the procedures indicated in the personal profile section on the Site. Nature and modalities of the provision of users’ Personal Data, the provision of personal data is optional, but for some personal data the provision is compulsory (i.e. necessary for those data whose fields are marked with an asterisk or otherwise marked as compulsory) so that the Controller can meet the user’s needs within the scope of the Site’s functionalities Failure to provide, or the partial or incorrect provision of, Personal Data marked with an asterisk, insofar as it is necessary for the performance of the service requested, does not make such performance possible; while the failure to provide, or the partial or incorrect provision of, optional Personal Data does not entail any consequences. The provision of Personal Data may take place:
◦ a) by filling in the appropriate fields in the various sections of the Site; or
◦ b) by browsing the Site or using cookies; or
◦ c) by automatic compilation, thanks to a request by the data subject to a Social Network to which he/she is subscribed to communicate to the Controller some of the data that the data subject has already provided to the Social Network;
CATEGORIES OF PERSONAL DATA SUBJECT TO PROCESSING
In addition to the Personal Data conferred directly by users (such as name, surname, postal address, e-mail address, password, age, date of birth, sex, image, profession, marital status, etc.), when connecting to the Site, the computer systems and software procedures used to operate the Site itself, acquire automatically and indirectly certain information that may constitute personal data, the transmission of which is implicit in the use of Internet communication protocols (such as, but not limited to, the following, so called “cookies” (as better specified below), “IP” addresses, domain names of the computers used by the users who connect to the Site, the addresses in “Url” notation of the resources requested, the time of the request to the server, navigation on the Site).
COOKY POLICY
Cookies are lines of text acting as computer markers sent by a server (in this case, that of this Site) to a user’s device (generally to the Internet browser) when the user accesses a given page of a website; cookies are automatically stored by the user’s browser and retransmitted to the server that generated them each time the user accesses the same Internet page. In this way, for example, cookies allow and/or facilitate access to certain Internet pages in order to improve the user’s navigation, i.e. they allow the storage of visited pages and other specific information, such as frequently consulted pages, connection errors, etc. Therefore, for an easier and complete use of this Site, it would be advisable for the user to configure his or her browser so that it accepts the reception of such cookies. Browsers are often set to automatically accept cookies. However, users can change the default configuration to disable or delete cookies (from time to time or once and for all), with the result, however, that the optimal use of certain areas of the Site may be precluded. You can also check the methods and types of cookies stored on your browser by changing your browser’s cookie settings. Types and management of cookies used by our Site Our Site uses the following categories of cookies:
◦ a)“Technical cookies”:
▪ i) “Strictly necessary cookies”, which are necessary for browsing a Website and using its functionalities, such as for example to enable correct display or access to restricted areas. Therefore, disabling such cookies does not allow such activities.
▪ ii) “Performance cookies”, collecting information on the efficiency of a Website’s responses to user requests in an anonymous form, for the sole purpose of improving the Website’s functionality; for example, which pages are most frequently visited by users, and whether there have been any errors or slowdowns in the delivery of web pages.
▪ iii) “Functionality cookies”, allowing the Website to remember the choices made by the user and re-propose them on subsequent visits in order to provide better and more personalised services: for example, they may be used to propose content similar to that previously requested by the user.
◦ b) Analytics cookies
This website also uses cookies from Google Analytics, a web analysis service provided by Google. The information generated by the cookie about your use of the website (including your IP address) will be transmitted to and stored by Google on servers operated by Google, who will use this information for the purpose of evaluating your use of the website, compiling reports on website activity for website operators and providing other services relating to website activity and internet usage. The data generated by Google Analytics is stored by Google as indicated in the Information Notice available at the following link.
You can selectively disable Google Analytics by installing the opt-out component provided by Google on your browser. To disable the action of Google Analytics, please refer to the link below: https://tools.google.com/dlpage/gaoptout.
◦ c)Targeted advertising or targeting cookies:
• These are profiling cookies used to offer users advertising potentially close to their interests as detected during browsing. They are, for example, used to limit the delivery of a given advertisement, or to infer the effectiveness of a campaign from the frequency with which the relevant advertisement is viewed. Such cookies may also be administered by third parties, including on behalf of advertisers and advertising agencies. Third-party profiling cookies may also allow to understand which sites of the Owner or of third parties the user has visited. The user may accept or not such cookies by expressing his or her consent (“opt in”) before they are administered, by proceeding with navigation after the display and closure of the notice regarding the use of cookies.
How to enable or disable cookies on your browser:
You may block the acceptance of cookies by your browsing browser. However, this may make it less efficient or prevent access to certain functions or pages of the Site. Below are the ways offered by the main browsers to block the acceptance of navigation cookies:
◦ Internet Explorer http://windows.microsoft.com/it-it/internet-explorer/delete-manage-cookies#ie=ie-11
◦ Firefox https://support.mozilla.org/it/kb/Gestione dei cookie
◦ Chrome https://support.google.com/chrome/answer/95647?hl=it
◦ Safari http://support.apple.com/kb/HT1677?viewlocale=it_IT
CATEGORIES OF SUBJECTS WHO MAY BECOME AWARE OF USERS’ PERSONAL DATA
Personal Data may be disclosed to employees or collaborators of the Data Controller who, operating under the latter’s direct authority, process data and are appointed as internal data processors or persons in charge of processing pursuant to Articles 29 and 30 of the Code or as system administrators and who will receive adequate operating instructions in this regard from the Data Controller; the same will be done – by the Data Processors appointed by the Data Controller – in respect of the employees or collaborators of the Data Processors. Personal Data may also be brought to the attention of the Data Controller’s external Data Processors, such as third party companies or other entities (for example, entities entrusted with the assistance, communication, marketing, advertising, promotion and sale of products and/or services, advertisers, advertising agencies, IT service providers, Site managers, managers of electronic Platforms, partners, credit institutions, professional firms) that perform outsourcing activities on behalf of the Data Controller.
Scope of communication or dissemination of Users’ Personal Data
Personal Data shall not be communicated to third parties, nor shall it be disclosed, except in the latter case where the user has included personal data in his/her nickname or has also provided a picture of him/herself.
MINORS
The Sites contain virtually no information directly intended for minors. Minors must not give information or personal data to the Controller without the consent of those exercising parental responsibility over them. Therefore, the Data Controller invites all those who exercise parental responsibility over minors to inform them about the safe and responsible use of the Internet and the Web and to put in place any procedures indicated from time to time in relation to the initiatives in which the Data Controller intends to process the data of minors.
DATA CONTROLLER AND DATA PROCESSORS
The data controller is Basilicata Bike Trail Associazione Sportiva Dilettantistica, based in Potenza, Viale Marconi 90.
USERS’ RIGHTS
In their capacity as data subjects, users have the rights set forth in Art. 7 of the Italian Privacy Code and subsequent amendments and additions as introduced pursuant to EU Regulation 2016/679 (GDPR): in particular, they have the right to obtain from the Data Controller confirmation of the existence or otherwise of Personal Data concerning them and their communication in an intelligible form; they may also request to know the origin of the Personal Data; the purposes and methods of processing; they may also obtain the updating, rectification or integration of the Personal Data. They may also, at any time, revoke their consent, cancel their account and/or cease to be registered to the Site, request the interruption of the processing, the cancellation, transformation into anonymous form or blocking of the Personal Data processed. They may object, in whole or in part, to the processing: a) for legitimate reasons to the processing of Personal Data concerning them; b) for the purpose of sending advertising material or for carrying out market research or commercial communication. In this regard, they may decide to receive only communications by traditional means or only automated communications or neither of the two types of communication.
Users also have the rights set out in Articles 16-21 of European Regulation 2016/679 (Right to rectification, right to be forgotten, right to restriction of processing, right to data portability, right to object). Finally, users will be able to lodge a complaint with the Supervisory Authority where necessary, or contact the same to request information on the exercise of their rights under European Regulation 2016/679.
“Article 7 Italian Privacy Code – Right of access to personal data and other rights”.
◦ 1. A data subject shall have the right to obtain confirmation as to whether or not personal data concerning him exist, regardless of their being already recorded, and communication of such data in intelligible form.
◦ 2. The data subject shall have the right to be informed of:
▪ a) the origin of the personal data;
▪ b) the purposes and methods of processing;
▪ c) the logic applied in the event of processing carried out with the aid of electronic instruments;
▪ d) the identity of the data controller, data processors and the representative designated pursuant to Article 5(2);
▪ e) the entities or categories of entity to whom or which the personal data may be communicated or who or which may get to know said data in their capacity as designated representative(s) in the State’s territory, data processor(s) or person(s) in charge of the processing.
◦ 3. The interested party has the right to obtain:
▪ a)the updating, rectification or, where interested therein, integration of the data;
▪ b) the cancellation, transformation into anonymous form or blocking of data processed in breach of the law, including data whose storage is not necessary
▪ in relation to the purposes for which the data were collected or subsequently processed;
▪ c) certification to the effect that the operations as per letters a) and b) have been notified, as also related to their contents, to the entities to whom or which the data were communicated or disseminated, unless this requirement proves impossible or involves a manifestly disproportionate effort compared with the right that is to be protected.
◦ 4. The data subject shall have the right to object, in whole or in part:
▪ a) on legitimate grounds, to the processing of personal data concerning him/her, even though they are relevant to the purpose of the collection;
▪ b) to the processing of personal data concerning him/her for the purposes of sending advertising or direct sales material or for carrying out market research or commercial communication.
Procedures for the exercise of rights and to know the list of data processors
Users may, at any time, exercise their rights under Article 7 of the Code by sending an e-mail message or a letter by ordinary post to the Data Controller. The user, moreover, if he/she has consented to it, may object to the processing for the purposes referred to in point c) carried out through the user’s e-mail address by clicking on a special “link” in each e-mail message. Assignment of rights to Contributions and consent to the use of the image By subscribing to the Site, the user:
◦ A) declares that:
▪ i) all rights to the Contributions that he/she posts on the Site on the occasion of his/her participation in the Initiative belong to the user,
▪ ii) remains solely responsible for any damage or action that he/she may suffer as a result of the publication of the Contributions;
▪ ii) the Contributions published by the user do not contain any material that could hinder their publication, e.g. obscene, racist, defamatory, blasphemous, paedopornographic and are original, i.e. they do not infringe any intellectual and industrial property rights of third parties, nor any copyright, trademark, distinctive sign, patent, etc;
◦ B) authorises the Owner to carry out a possible admissibility check on the Contributions, with the aim of excluding those that contain material that may be considered damaging to decorum, personal dignity or that are offensive, defamatory, obscene, indecent, insulting or incite hatred, violence or dangerous behaviour or that are offensive or incite the violation of laws or regulations;
◦ C) assigns to the Controller, free of charge and definitively, any right to publish and use the Contributions for commercial or marketing purposes relating to the Controller’s products, on the websites owned by the Controller, for the time strictly necessary for the service requested and in any case no longer than 5 years from the date of their provision, from which date the data shall be deleted;
◦ D) give consent to the Controller for the use of his/her image that may be conferred (in any of the contexts referred to in point C) above), and for the entire duration of the Site, pursuant to art. 96 of the copyright law.