PRIVACY NOTICE PURSUANT TO REGULATION (EU) 2016/679 (GDPR)

2. Types of Data Collected
The Data Controller collects only the data necessary for the provision of the service:

  • Personal identification data (first name, last name, date of birth)
  • Contact data (email address, phone number)
  • Technical data (IP address, access logs)
  • Any data voluntarily provided by the user

No data exceeding the stated purposes are collected.

3. Purpose of Processing
Personal data are processed for the following purposes:

  • Provision of the requested service (registration, participation in competitions, account management)
  • Legal and administrative compliance
  • System security and fraud prevention
  • Marketing (only with explicit consent)

4. Legal Basis for Processing
The processing is based on:

  • Contract → for the provision of services
  • Legal obligation → for regulatory compliance
  • Explicit consent → for marketing and optional activities

Consent may be withdrawn at any time.

5. Processing Methods
Data are processed:

  • lawfully, fairly, and transparently
  • using electronic and/or manual tools
  • by adopting appropriate security measures

6. Disclosure of Data to Third Parties
Data may be disclosed exclusively to:

  • technical service providers (hosting, IT platforms)
  • consultants (legal and tax advisors)
  • competent authorities (where required by law)

Data are not sold to third parties.

7. Data Transfers Outside the EU
Any transfers outside the European Union shall take place only to countries:

  • subject to an adequacy decision by the European Commission, or
  • providing appropriate safeguards (e.g., Standard Contractual Clauses – SCCs)

8. Data Retention Period
Data are retained for:

  • the duration of the contractual relationship
  • up to 10 years to comply with legal obligations
  • until consent is withdrawn for marketing purposes

After these periods, data will be deleted or anonymized.

9. Data Subject Rights
Users have the right to:

  • access their data
  • request rectification or erasure
  • restrict or object to processing
  • request data portability
  • withdraw consent

These rights may be exercised by contacting: [email]

10. Complaint to Supervisory Authority
Users may lodge a complaint with the competent supervisory authority (Data Protection Authority).

11. Nature of Data Provision
Provision of data is:

  • mandatory for the provision of the service
  • optional for marketing purposes

Failure to provide mandatory data may prevent access to the service.

12. Special Processing Activities (IMPORTANT)
Any processing of:

  • images
  • audio
  • video

will take place only upon explicit, separate, and specific consent, with clear indication of:

  • purpose
  • duration
  • methods of use

In the absence of consent, such data will not be collected.

13. Changes to This Privacy Notice
This Privacy Notice may be updated. Any changes will be communicated to users.

Last updated: 05/05/2025

Se vuoi, posso anche adattarlo in versione bilingue ITA/ENG oppure renderlo ancora più “compliance-ready” per un sito web specifico (es. e-commerce, app, concorsi, ecc.).