Privacy Policy

PRIVACY POLICY

Pursuant to and in accordance with Legislative Decree 196/2003, as amended and supplemented by Legislative Decree 101/2018 and Art. 13 of Regulation 2016/679 EU (hereinafter also "GDPR") this document describes the methods of processing of personal data of users who consult and use the services on the Website of Spezia Calcio Srl (hereinafter also "Spezia Calcio" or "Owner") accessible electronically at the following address: https://acspezia.com. This information does not concern other sites, pages or online services accessible via hypertext links that may be published in the site but refer to resources outside the domain of Spezia Calcio.

MAIN DEFINITIONS AND LEGAL REFERENCES

Personal data

Any information relating to an identified or identifiable natural person ("data subject"); an identifiable person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of the natural person.

Special Categories Of Personal Data

Data revealing "racial or ethnic origin, political opinions, religious or philosophical beliefs, or trade union membership, as well as genetic data, biometric data intended to uniquely identify a natural person, data concerning a person's health or sex life or sexual orientation" and judicial data.

Interested party

The natural person to whom the Personal Data refers. In the case of navigation on the site, the individual who uses the site and who must coincide with the Data Subject (or person authorized by him) and whose Personal Data is being processed.

Processing
Any operation or set of operations, carried out with or without the help of automated processes and applied to personal data or sets of personal data, such as collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, comparison or interconnection, restriction, erasure or destruction.

Data controller

The natural or legal person, public authority, service or other body which, individually or jointly with others, determines the purposes and means of the processing of personal data; where the purposes and means of such processing are determined by Union or Member State law, the Data Controller or the specific criteria applicable to its designation may be established by Union or Member State law.

Data Protection Officer (DPO)

The natural or legal person who informs and advises the Data Controller on the processing of personal data, monitors compliance with the GDPR, provides opinions on the impact assessment (DPIA), cooperates and acts as a point of contact with the Data Protection Authority.

Processor

a natural or legal person, public authority, agency or other body which processes personal data on behalf of the controller.

Authorized person

It is the natural person who materially carries out the processing operations on personal data.

Recipient
a natural or legal person, public authority, agency or another body, to which the personal data are disclosed, whether a third party or not. However, public authorities which may receive personal data in the framework of a particular inquiry in accordance with Union or Member State law shall not be regarded as recipients; the processing of those data by those public authorities shall be in compliance with the applicable data protection rules according to the purposes of the processing.

Usage data

The information collected automatically by this site or by third party applications that this site uses, including: IP addresses or domain names of computers used by the interested party connecting with this site, URI (Uniform Resource Identifier) addresses, the time of access, the method used to submit the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response from the server (successful, error, etc.. ), the country of origin, the characteristics of the browser and the operating system used by the visitor, the various temporal connotations of the visit (e.g. the time spent on each page) and the details of the itinerary followed within the site, with particular reference to the sequence of the pages consulted, the parameters relating to the operating system and the computer environment of the interested party.

Website and Data Base

The computer tool within which the Personal Data of the Data Subjects are also collected.

Cookie
Small portion of data stored within the Data Subject's device.

Legal references

Legislative Decree 196/2003, and Legislative Decree 101/2018 and EU Regulation 2016/679 (GDPR).

DATA CONTROLLER AND DATA PROTECTION OFFICER (DPO)

The holder of the treatment of the data conferred is Spezia Calcio Srl, Via dei Pioppi, Ingresso snc, Stadio Comunale A. Picco, 19123 La Spezia (SP) Italy, T. +39 0187 711322 e-mail info@acspezia.com

The Data Protection Officer (DPO) of Spezia Calcio Srl is Gesta Srl, in the person of Dr. Renato Goretta, Via Fontevivo, 21/m, 19125, La Spezia (SP), Italy, e-mail goretta@gestaconsulenza.it.

TYPES OF PROCESSED DATA

Following consultation and use of the website, data relating to identified or identifiable natural persons may be processed.

1) Navigation Data

The computer systems and software procedures used to operate this Site acquire, during their normal operation, some personal data, the transmission of which is implicit in the use of Internet communication protocols.

This category of data includes IP addresses or domain names of computers and terminals used by users, URI/URL (Uniform Resource Identifier/Locator) of requested resources, the time of the request, the method used to submit the request to the server, the size of the file obtained in reply, the numerical code indicating the status of the response from the server (successful, error, etc..) and other parameters regarding the operating system and computer environment.

This information is captured through cookies, small text files that websites transmit to the device used by the user (PC, smartphone, tablet). For more information on cookies please see the "Cookie Policy" page of this site.

The data thus acquired are necessary for the following purposes:

       i. use of web services;

      ii. to obtain statistical information on the use of services (most visited pages, number of visitors per hour or per day, geographical areas of origin, etc.);

     iii. control activities on the functioning of navigation and services offered.

Navigation data will be stored, in an anonymized form, for statistical purposes.

2) Data communicated by the User for registration on the site and navigation in the reserved area

These are the personal data conferred spontaneously by the user during the registration to the reserved area.

In the section "Registration on acspezia.com" there are fields related to the following types of data:

A. personal data, residence, gender;

B. access credentials;

C. electronic mail address;

D. telephone number.

The user can access the area dedicated to registered users also through the use of his/her Facebook profile.

PURPOSE AND DURATION OF TREATMENT

The personal data collected by SPEZIA CALCIO are necessary for:

1) Site registration;

2) Delivery of virtual content;

3) Newsletter;

4) Fulfilment of obligations of Law.

The conferment of data for the purposes necessary and connected to the registration to the site and to the use of the services dedicated to the members has obligatory nature and the missed conferment, also partial, of the data expressly indicated as obligatory from an asterisk placed to the fields of filling of the area of registration to the site, will determine the impossibility to obtain how much demanded.

It is optional the processing of data provided for the purpose of newsletters.

The legal bases for the processing, pursuant to Art. 6 of Regulation 2016/679 EU, are:

(a) for data provided by users for registration in the reserved area: the processing is necessary for the performance of a contract to which the data subject is a party or the execution of pre-contractual measures taken at the request of the same;

b) for data required for processing and communications imposed by law: the fulfillment of legal obligations to which the data controller is subject;

c) for the use of data for newsletters: consent.

Personal data will be stored until the expiry of the relevant contractual or legal terms. The revocation of consent to the use of data provided by the user at the time of registration involves the cancellation of the user profile and the inability to use the services offered by Spezia Calcio. The withdrawal of consent to the use of data for newsletters involves the inability to receive communications from Spezia Calcio and its partners. The revocation of consent by the interested party does not affect the lawfulness of the treatment carried out by Spezia Calcio and based on consent given before the revocation.

PROCESSING METHODS

Personal data collected through the Site are processed in accordance with EU Regulation 2016/679 and Legislative Decree no. 196/2003, as amended and supplemented by Legislative Decree 101/2018. Personal data are processed by the Data Controller and by personnel authorized by the Data Controller, in compliance with the principles of lawfulness, correctness and transparency.

The staff of SPEZIA CALCIO will manage and archive, with automated tools and / or paper, personal data collected through the use of the site and its various features that can be activated at the request of the user.

RECIPIENTS

Personal data are processed mainly by employees/collaborators of SPEZIA CALCIO, under specific instructions regarding the purposes and methods of processing. All data collected through the site https://www.acspezia.com/ may also be disclosed to service companies for technical and informational purposes (hosting companies, project managers, programmers, systems engineers and database administrators, etc..) or to external suppliers whose activities are connected, instrumental or support that of Spezia Calcio (eg subjects to which is entrusted the customer care; subjects who perform tasks of a technical or organizational such as the provision of services printing, mailing, transmission, transport and sorting of communications). In this case, the recipients will be appointed as Data Processors. The complete list of the persons in charge of the treatment is available making request through the modalities indicated in the section "RIGHTS OF THE INTERESTED PARTIES" of the present informative report.

For the purposes of the Law, SPEZIA CALCIO is also obliged to carry out transfers of information to the territorial and national Authorities in charge of controlling sports events, security, health and public order.

RIGHTS OF THE INTERESTED PARTIES

At any time, the Data Subject may exercise, pursuant to Articles 15 to 22 of the GDPR, the right to:

a) request from the Data Controller access to personal data, obtain information about the purposes of the processing, the categories of personal data, the recipients or categories of recipients to whom the personal data have been or will be communicated and, when possible, the storage period;

b) request the rectification or erasure of the same and the limitation of processing;

c) exercise the right to data portability, object to the processing, object to an automated decision-making process concerning natural persons, including profiling;

d) revoke consent at any time, without prejudice to the lawfulness of the processing based on the consent given before revocation;

e) propose a complaint to the Guarantor Authority for the Protection of Personal Data (garante@gdpr.it or protocollo@pec.gdpr.it).

The interested party may exercise his/her rights with a written request sent to the aforementioned Data Controller. The request will be processed within 30 days.

Last revision 26/02/2021