2. IP ADDRESS.
Protecting your privacy and the security of your personal data are two aspects of paramount importance to our company. The use of personal data by AS is carried out in compliance with the provisions of the General Data Protection Regulation No. 679/2016 (hereinafter referred to as “GDPR” or “Regulation”), as well as in accordance with the applicable national privacy regulations. Pursuant to Article 5 of the GDPR, all of our employees, who in the performance of their duties operate the Site, are required to process users’ personal data lawfully, fairly and transparently and in compliance with confidentiality obligations.
4.1. Special categories of personal data
The Site does not process any special categories of personal data, as defined by Article 9 of the GDPR.
4.2. Data Protection Guarantee.
In principle, our company will not process your personal data without your prior consent, where necessary, and, in any case, will carry out the processing within the limits of the existing contractual relationship with you and for the agreed purposes. If you contact us using our contact details on the Site or through contact forms, we will collect and store your personal data for the sole purpose of following up your requests (art. 6, co. 1, let. b) of the Regulations). You are free not to provide such data. However, failure to provide them may result in the impossibility of obtaining what you have requested. We would also like to inform you that in relation to so-called marketing activities we will process your personal data subject to your optional consent, as provided for in art. 6, co. 1, let. a) of the Regulations and art.130 of Legislative Decree 130/2003, which can be expressed by checking the appropriate consent box at the bottom of the contact form (form). Where consent is given, we will process personal data for marketing purposes (direct sales, sending advertising material, carrying out market research, commercial communication, customer satisfaction survey) and sending by mail, e-mail, SMS/MMS, WhatsApp and telephone with operator of advertising information, offers and promotions related to our products and services. The user may in any case freely and free of charge revoke his or her consent to the processing of personal data for marketing purposes at any time, including selectively (for example, by communicating his or her wish to stop receiving communications by e-mail, wishing to receive only communications by SMS/MMS or other modalities), by making a request to us in the manner indicated in paragraph 5.8 below In relation to promotional communications sent by e-mail, the user may revoke his or her consent to the processing of his or her e-mail address for marketing purposes also by clicking on the unsubscribe (opt-out) link in each promotional e-mail. We specify that, in the event that you do not consent to the processing of your personal data for marketing purposes, your ability to browse the Site or obtain what you have requested will not be affected in any way.
4.3. Transfer and assignment of data
Any transfers of your personal data to third parties will take place only with your consent. Exceptions to this are transfers of data that are obligatory by law, such as when we have to disclose data about our users at the request of public authorities. In particular, with your optional consent, the personal data you enter in our contact forms (forms) on the Site will be communicated to other companies that provide services on behalf of Admiral Sport Srl, so that they can process them for marketing purposes and send you promotional communications, offers and promotions by mail, e-mail, SMS/MMS, WhatsApp and telephone with operator. If you do not consent, the possibility of obtaining what you have requested will not be affected in any way. You may revoke your consent at any time by contacting us in the manner set forth in Section 5.8 below. Our employees and workers who maintain and operate the Site may have access to your personal data. Our third party suppliers who, acting as data controllers under Article 28 GDPR, provide us with IT and consulting services may also have access to your personal data, it being understood that these entities will have to provide sufficient safeguards to implement adequate technical and organizational measures to the extent that the processing of personal data complies with the requirements of the GDPR and ensures the protection of the rights of the data subject.
4.4. Data Security.
The technologies employed by AS to process the user’s personal data (hardware, software, network, infrastructure) comply with the state of the art in terms of security aspects. Suitable technical and organizational measures have been taken for such procedures to ensure compliance with the requirements of the GDPR.
5. INFORMATION TO BE DISCLOSED
In this section, we present a disclosure indicating what personal data is processed within the Site, how it is processed, and the rights granted by the GDPR to data subjects.
5.1. Categories of personal data
Within the Site, personal data provided voluntarily through the completion of our forms (forms) are processed. Our Company will process the user’s personal data exclusively for the purposes for which the data was voluntarily entered while exercising the right of informational self-determination. The optional, explicit and voluntary sending of your personal data to the mailing addresses, e-mail or fax numbers published on the Site or the communication of your personal data during calls made by you to our telephone numbers entails the subsequent acquisition of such data, which are necessary to respond to requests you send in connection with the Site (art. 6, co. 1, let. b) of the Regulations). You are free not to provide such data. However, failure to provide it may result in the impossibility of obtaining what you have requested. We will retain the personal data you have provided us with your request for a maximum period of 12 months, at the expiration of which we will proceed with their deletion.
5.2. Right of access to personal data
In accordance with the provisions of the GDPR, the data subject has the right to receive information, at any time, regarding the data processed by AS as data controller, the origin of such data, any recipients to whom the data may be disclosed, and the purposes of the processing. Information will be received, following a written request from the user, see Section 5.10 below. Once all legal requirements for processing the request submitted by the user for access to personal data have been met, we will follow up by granting the user access to personal data within the 1-month period.
5.3. Right to erasure
According to the provisions of the GDPR, the data subject has the right, at any time, to obtain the deletion of his or her personal data being processed by AS, provided that the request for deletion does not conflict with any retention periods imposed by law or other legal obligations. Once all the prerequisites necessary for the acceptance of the erasure request submitted by the user have been met, we will follow up on the request and proceed to erase the data within the period of 1 month.
5.4. Right to object
According to the provisions of the GDPR, the data subject has the right to object, at any time, on grounds relating to his or her particular situation, to the processing of personal data concerning him or her pursuant to Article 6(1)(e) or (f) of the GDPR, including profiling on the basis of these provisions. Where personal data are processed for direct marketing purposes, the data subject shall have the right to object at any time to the processing of personal data concerning him or her carried out for such purposes, including profiling insofar as it is related to such direct marketing.
5.5. Right to limitation of processing
According to the provisions of the GDPR, the data subject has the right to obtain the restriction of the processing of personal data when certain specific conditions are met. Once all legal requirements are met, we will restrict the processing of your personal data within the period of 1 month.
5.6. Transfer of data
There is no transfer to recipients in a third country (outside the European Union/European Economic Area) or to an international organization.
5.7. Right to data portability
According to the provisions of the GDPR and based on the manner and purpose of processing of personal data carried out by the Site, there is no right to data portability of the data subject’s data.
5.8. Revocation of consent
In accordance with the provisions of the GDPR, the data subject has the right to withdraw, where required, his or her consent to the processing of his or her personal data at any time, without the obligation to provide reasons. In case of withdrawal of consent exercised by the user, we will stop the processing of the data subject’s personal data and delete them, taking into account any retention periods established by law, within the period of 1 (one) month.
5.9. Complaints to the Competent Authority
In accordance with the provisions of the GDPR and Italian privacy and data protection legislation, the data subject has the right to lodge a complaint with the Garante per la protezione dei dati personali (www.garanteprivacy.it) or to the different Competent Authority of the EU Member State where he/she lives or works, if he/she believes that the processing of his/her personal data violates the GDPR or Italian data protection legislation.5.10. Further Information
Your trust is very important to us, if you have any further questions regarding the processing of your personal data by AS and if you wish to exercise your data subject rights, please contact us in writing by mail at our company’s registered office located at Via Benedetto Croce 122-124, Rome, c.a.p. 00142 or by e-mail at firstname.lastname@example.org. Finally, we inform you that we have appointed a Data Protection Officer who can be contacted by mail at the registered office of the Company located at Via Benedetto Croce 122-124, Rome, c.a.p. 00142 or by e-mail at email@example.com or at the ordinary e-mail address firstname.lastname@example.org