This website Privacy Policy is provided by ASPA Bastia, owner of the website www.invernalissima.it (hereinafter the “Site”), pursuant to Article 13 of Regulation (EU) 2016/679 (GDPR), in order to describe how this Site is managed with regard to the processing of the personal data of the Visitors who consult it, and to enable them to know the purposes and methods of the processing of their personal data by ASPA Bastia, should they provide it.
This notice applies only to this Site and does not apply to other websites owned by Third Parties that the Visitor may consult through links on the pages of the Site; ASPA Bastia accepts no responsibility for such websites and offers no guarantee regarding the privacy rules they adopt.
This Privacy Policy is subject to updates and/or changes made by the Data Controller at its discretion, including as a result of changes to applicable laws and/or regulations. We invite Visitors to the Site to check the Privacy Policy regularly to make sure they are aware of any changes made to it. Use of the Site is subject to the Privacy Policy published from time to time on www.invernalissima.it and in force at the time of such use. The Privacy Policy is easy to consult, as it can be accessed from every page of the Site.
Privacy Policy
Data Controller and Data Processors
The Data Controller for any personal data collected through this Site is Roberto Ciurnelli, President of the association ASPA Bastia, with registered office at Viale Giontella c/o Palazzetto dello Sport
06083 BASTIA UMBRA (PG), Tax code and VAT no. 02024460541, Email [email protected]. The Data Controller may appoint other internal or external Data Processors, as well as persons authorised to carry out processing operations. A complete and up-to-date list of Data Processors and authorised persons is available by contacting the Data Controller at the details above.
To protect the Site’s forms (information requests and newsletter) from spam and abuse, the Site uses the Google reCAPTCHA service, which collects certain technical information about the Visitor’s device and browsing. The processing is based on the Data Controller’s legitimate interest in protecting the Site (Article 6(1)(f) GDPR). Google acts as Data Processor: it processes the data on behalf of the Data Controller and solely to provide the service.
Collection of personal data
The computer systems and software procedures used to operate the Site automatically and indirectly acquire, in the course of their normal operation, certain personal data whose transmission is implicit in the use of Internet communication protocols. This information is not collected in order to be associated with identified data subjects, but by its very nature could, through processing and association with data held by third parties, allow Visitors to be identified. This category of data includes the IP addresses or domain names of the computers used by users connecting to the site, the URI (Uniform Resource Identifier) addresses of the resources requested, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response given by the server (successful, error, etc.) and other parameters relating to the Visitor’s operating system and IT environment. These data are used solely to obtain anonymous statistical information on the use of the site and to check that it is working correctly, and are deleted after processing. The data may be used to establish liability in the event of hypothetical computer crimes against the site.
ASPA Bastia asks Visitors to the Site not to send personal data or information that may be classified as sensitive or judicial data within the meaning of Article 4 of the GDPR (i.e. personal data capable of revealing information about health, sexual orientation, political and religious beliefs, membership of parties or political opinions, trade union membership or trade union beliefs, religious faith).
Specific summary notices will be shown or displayed on the pages of the Site set up for particular services on request. In some cases this information may be used for profiling the Visitor or for direct marketing activities. Where this happens, an appropriate notice will be provided and free and specific consent will be obtained for the marketing and/or profiling purposes.
Use of Cookies
This website uses cookies. For information about the cookies used, ASPA Bastia invites Visitors to the Site to refer to its Cookie Policy.
Purposes of the processing of personal data
Visitors to the Site may voluntarily provide their data (first name and surname, email, telephone) in order to:
– request information about the race,
– be contacted.
Visitors’ (non-sensitive) personal data may also be used, solely and exclusively with their prior free, optional, specific and explicit consent, which may be withdrawn at any time, to send communications and promotional and advertising material from ASPA Bastia, including by post, email, fax, SMS, MMS and similar means. After giving their consent, Visitors nevertheless have the right to object, at any time and free of charge, to the processing of their personal data for this purpose.
Personal data will not be disclosed to other companies (Third Parties) without the Visitor’s explicit consent.
Personal data may, however, be sent to public bodies and institutions in order to comply with legal obligations.
Methods of processing personal data
Personal data will be processed mainly by electronic means, in ways and with tools suitable for guaranteeing their security and confidentiality. In particular, all the technical, IT, organisational, logistical and procedural security measures necessary to protect personal data from loss and misuse will be adopted, so as to guarantee the minimum level of protection required by law.
Retention and deletion of data
The information and personal data of Visitors collected by this Site, including data freely provided by filling in the contact forms in order to obtain information and/or to receive information material or other communications, will be kept solely to provide the service requested and for as long as necessary for that purpose. Once the service has been completed, all personal data will be destroyed in accordance with ASPA Bastia’s data retention policies, unless otherwise requested by the authorities and except where retention is required by law.
Exercising the data subject’s rights
At any time, pursuant to Article 15 et seq. of the European Regulation (GDPR) 2016/679, Visitors may check the personal data collected about them through this Site and, where appropriate, have them corrected, updated or deleted, or exercise the other rights granted by law, by writing to the Data Controller at the following address: [email protected].