"Internazionali BNL D'Italia - IBI21".
The Italian Tennis Federation ("FIT") wishes to inform you that, pursuant to Article 13 of Regulation (EU) 2016/679 of the European Parliament and of the Council ("Regulation"), it needs to proceed with the processing of your personal data, collected automatically or provided by you through the application "Internazionali BNL D'Italia - IBI21" ("App") and the use of services ("Services").
Art. 1 - Data Controller and Data Protection Officer
The Data Controller is FIT with registered office in (00135) Rome, Stadio Olimpico - Curva Nord, Ingresso 44, Scala G ("Data Controller"), email email@example.com .
The Data Protection Officer ("DPO") can be reached at the FIT's address and by certified e-mail at firstname.lastname@example.org .
Art. 2 - Type of data processed
We may process the following personal data:
The computer systems and software procedures used to operate the App acquire, during their normal operation, some personal data whose transmission is implicit in the use of Internet communication protocols. This category of data includes IP addresses or domain names of electronic devices used by users who connect to the App, URI (Uniform Resource Identifier) addresses of the resources requested, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response given by the server and other parameters relating to the operating system and the user's computer environment.
These data, necessary for the use of the App, are processed for the sole purpose of obtaining statistical information on the use of the Services (most used Services, number of users per time slot or per day, geographical areas of origin, etc.) and to check the correct functioning of the Services offered.
Data provided by the user
The use of some Services of the App, the creation of your personal area and the subscription to our newsletter imply the acquisition of your name, surname and email address, and, in case of connection to the App through the social network Facebook or Apple Sign-in, of the identification code of your Facebook account ("Facebook ID") and of your Apple Sign-in account ("Apple ID") and of the image of the profile. Finally, the Data Controller may become aware of any other personal data optionally entered by the user in their personal area.
Art. 3 - Purpose of the processing and legal basis
The data will be processed exclusively to:
A) allow you to take advantage of some of the Services made available through the App, including the possibility to access your personal area.
The legal basis for this processing is the performance of a contract to which you are a party and (iii) the fulfilment by FIT of legal obligations.
B) to allow us to keep you up to date with FIT's activities and promotions, sending you communications and commercial and marketing information on FIT's services and offers, discounts and any other promotional and loyalty initiatives adopted by FIT, as well as the newsletters, both through traditional and fully automated contact systems.
The legal basis for this processing is your express consent to the processing.
Art. 4 - Period of storage of personal data
We intend to keep your personal data for a period not exceeding that necessary to achieve the purposes described.
1) the navigation data and those acquired through the use of the App will not be kept for more than seven days;
2) the data referred to in purpose 3A, will be kept for a period not exceeding 10 years;
3) the data relating to promotional activities referred to in 3B, will be deleted within 24 months from the registration time;
The retention period is always subject to the right to retain data to fulfill regulatory obligations or to ascertain, exercise or defend rights in courts.
Art. 5 - Categories of data recipients
The processed data will not be disclosed to third parties. They can however be disclosed to:
- the subjects who can access the data by virtue of law or other regulatory provision;
- the subjects who carry out as data processors, activities auxiliary to the purposes of art. 3, for example (not exhaustive): companies that offer advertising, marketing and communication services, computer companies, law firms;
- our employees, previously designated as authorized persons or as System Administrator.
For a complete list, please contact the Data Controller at the contact details indicated.
Art. 6 - Transfer of personal data to third countries
We may transfer your personal data to third countries outside the European Union, including the United States of America, for the management of the services offered through the sending of the newsletter.
Such transfer is always subject to adequate safeguards, including Standard Contractual Clauses.
Art. 7 - Possible automated decision-making processes
We do not intend to use automated decision-making processes, including profiling.
Art. 8 - Nature of the provision
The provision of your personal data for the purposes referred to in paragraph 3.A is optional, failure to provide them may prevent access to some features of the App for which the login is required.
The provision of your personal data for the purposes referred to in paragraph 3.B is optional, and failure to provide it may prevent us from allowing you to take full advantage of the benefits we offer to our community through information of an advertising and commercial nature, to allow you receiving our newsletter or to inform you about additional services, events and promotions.
Art. 9 - Rights of the interested party
You, as a data subject, have the right to withdraw your consent to the processing at any time.
You also have the right to request access to your personal data, to obtain its rectification and integration, its erasure, the limitation of its processing, where applicable, to receive the personal data concerning you in a structured, commonly used and machine-readable format, as well as the right to transmit such data to another data controller without delay, to object it at any time, for reasons related to your particular situation, to the processing of your personal data carried out pursuant to art. 6, paragraph 1, letters e) or f), of the Regulation. You also have the right to lodge a complaint with a supervisory authority.
To exercise each of your rights, you may contact the Data Controller by addressing a communication to the registered office of (00135) Rome, Stadio Olimpico - Curva Nord, Ingresso 44, Scala G, or by sending an e-mail to email@example.com or you may contact the DPO by sending a certified e-mail to firstname.lastname@example.org , providing us with the following data:
- first name, last name and postal address;
- details of the request.