PRIVACY POLICY – DOG BREEDING SECTOR (pursuant to EU Regulation 2016/679 – GDPR)
Dear Sir/Madam, Pursuant to Articles 13 and 14 of EU Regulation 2016/679, we inform you that Academy Sport Center SRL will process the personal data it acquires for the purposes and in the manner indicated below:
Data controller
The Data Controller is ACADEMY SPORT CENTER SRL – VAT number 12750720018 with registered office in Oulx (TO), Vicolo San Giusto 12, 10056 and operational headquarters in Beaulard (TO), Via del Mulino SN, 10056 – e-mail: info@lacteadog.it – tel. +39 3398346029
Data Protection Officer: Pursuant to Article 37 of EU Regulation 2016/679, the conditions for appointing this position are not met since the Company's core activities do not require regular and systematic monitoring of data subjects on a large scale and do not consist of the processing, on a large scale, of special categories of personal data pursuant to Article 9 or data relating to criminal convictions and offences pursuant to Article 10.
Type of data processed: personal/identification and contact data (name, surname, date and place of birth, tax code, email, telephone number, address, data contained in communications).
Purpose of the processing: The processing is aimed at: – selling products and/or providing association services for amateur sports and social promotion purposes; – managing the association relationship that allows registration for courses/seminars provided by ACADEMY SPORT CENTER SRL, access to the company's premises and use of equipment, the practice of amateur sports disciplines and the organization of association activities; – fulfilling the obligations required in the tax and comply with the obligations incumbent on the Company and set forth in applicable legislation and sports regulations (for example and not limited to: anti-money laundering, insurance, inclusion in the Register of Amateur Sports Associations and Clubs established by CONI for recognition for sporting purposes pursuant to Article 5, paragraph 2, letter c of Legislative Decree no. 242 of 23 July 1999, etc.); – defend a right in court or before judicial authorities exercising jurisdictional functions; – marketing activities and sending newsletters; – sending communications relating to ACADEMY SPORT CENTER SRL events and initiatives via email and/or text messages and/or instant messaging; – publication of photographs/audiovisual recordings on the Company's website and/or social media channels and/or in its promotional materials.accounting/invoicing fields; –
Legal basis for processing: Processing is lawful because: – it is necessary for the performance of a contract to which you are a party, or for the implementation of pre-contractual measures taken at your request; – it is necessary to fulfill a legal obligation to which the data controller is subject (for example, maintaining and storing accounting records pursuant to tax legislation and compliance with anti-money laundering, privacy, insurance, health and safety at work regulations); – it is necessary for the pursuit of the legitimate interest of the data controller, such as protecting company assets, for the defense of its own rights in court or before judicial authorities; – it is based on your express consent (Article 6, paragraph 1, letter a of EU Regulation 2016/679) under the section "Purpose of processing"
Data processing methods: The processing is carried out, with or without the aid of electronic, telematic, or otherwise automated tools to meet the purposes indicated above, through some/the set of operations indicated in art. 4, no. 2) of EU Regulation 2016/679, namely: collection, recording, organization, structuring, storage, consultation, processing, adaptation, modification, selection, extraction, comparison, use, interconnection, blocking, communication, erasure, and destruction of data.
Data Provision: Providing personal data is not a legal requirement, but is a necessary requirement for the conclusion of the contract. Your refusal to provide some of the requested data, or the provision of incomplete or untruthful data, may make it impossible for ACADEMY SPORT CENTER SRL to complete the registration process and provide the services you have requested. Personal data pursuant to art. 6, paragraph 1, letter a) of EU Regulation 2016/679, provided voluntarily, will be processed by the Data Controller only following your express consent by completing the paper form called "Privacy Consent Form," which will be submitted to you shortly at the operational offices by dog trainers and/or other persons authorized to process the data.
Data Retention: Personal data will be processed and retained for the entire period necessary for the full execution of the contract to which you are a party, as well as for the correct fulfillment of retention obligations for civil and tax purposes or for other purposes provided for by law or sports regulations, as well as for the duration necessary to pursue the legitimate interest of the data controller, for the purposes of defending its rights in court or before judicial authorities and in any case until the statute of limitations of the rights arising from the contractual relationship.
Data communication: Personal data may be communicated to, or become known to, for the purposes set out above and to provide, improve, protect, and promote our services: – entities authorized to process data; – data processors and related additional processors and authorized entities, such as, by way of example and not limited to: accountants, labor consultants, insurance brokers and insurance companies, for policy activation, IT service providers, and related technical personnel in charge; – judicial or administrative authorities, for the fulfillment of legal obligations or for the execution of received assignments; – banking institutions; – other entities that process data in compliance with specific legal obligations.
Profiling: Personal data may be subject to fully automated decision-making processes, including profiling.
Transfer of data abroad: Your personal data may be transferred to third countries outside the European Union, as the Data Controller uses IT services provided by third-party companies such as: META, Microsoft and Google, including, but not limited to: “Facebook”, “Facebook Messenger”, “YouTube”, “Skype”, etc. provided by data controllers and related additional data controllers and authorised parties located outside the European Union, and to whom reference is made for viewing the respective privacy policies and specific data processing methods, without prejudice to compliance with Chapter V (Articles 44-50) of EU Regulation 2016/679 pursuant to the EU-US Privacy Shield regulations where applicable, and in accordance with the standard contractual clauses set out in the Annex to the European Commission Decision of 5 February 2010, no. 2010/87/EU and on the basis of the conditions indicated in the same decision (Article 6 of the European Commission Decision of 5 February 2010, No. 2010/87/EU). The list of certifications relating to the EU-US Privacy Shield is available at the link https://www.privacyshield.gov/list. Your personal data may be transferred to third countries outside the European Union by using the services "Google Analytics," "Google Tag Manager," and "Google Maps Widget," located at 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA, and "YouTube Video Widget," located at 901 Cherry Avenue, San Bruno, CA 94066, USA, offered by Google Inc. ("Google LLC"), which uses offices in the United States. Google Inc., however, complies with the EU-US Privacy Shield Framework, as set forth by the U.S. Department of Commerce, regarding the collection, use, and retention of personal data from the European Union transferred to the United States. To view Google Inc.'s Privacy Shield certification, please visit: https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI. To view Google's privacy policy and learn how it processes your data, please visit: https://policies.google.com/privacy?hl=en.
Data Subject Rights: Pursuant to Articles 15-18 and 20-21 of EU Regulation 2016/679, you have the right to obtain confirmation of the existence or otherwise of personal data concerning you, regardless of their being already recorded, and communication of such data in an intelligible form. You have the right to obtain information on: a) the source of the personal data; b) the purposes and methods of the processing; c) the logic applied in the event of processing carried out with the aid of electronic means; d) the identification details of the data controller and any data processors; e) the persons or categories of persons to whom the personal data may be communicated or who may become aware of such data in their capacity as data processors or persons in charge of processing. You have the right to obtain information on: a) the source of the personal data; b) the purposes and methods of processing; c) the logic applied in the event of processing carried out with the aid of electronic means; d) the identification details of the data controller and any data processors; e) the entities or categories of entities to whom the personal data may be communicated or who may become aware of it as data processors or persons in charge of processing. You also have the right to obtain: a) the updating, rectification, or, where applicable, integration of the data; b) the deletion, anonymization, or blocking of data processed unlawfully, including data whose retention is unnecessary for the purposes for which the data was collected or subsequently processed; c) certification that the operations referred to in letters a) and b) have been brought to the attention, including with regard to their content, of those to whom the data were communicated or disseminated, except in the case in which such fulfillment proves impossible or involves the use of means manifestly disproportionate to the right protected. You have the right to object, in whole or in part: a) on legitimate grounds, to the processing of your personal data, even if pertinent to the purpose of collection; b) to the processing of your personal data for the purpose of sending advertising or direct selling materials or for conducting market research or commercial communications. You have the right to data portability, meaning to receive your personal data in a structured, commonly used, and machine-readable format, and you have the right to transmit such data to another data controller without hindrance. You also have the right to lodge a complaint with a supervisory authority (in Italy, the Italian Data Protection Authority: www.garanteprivacy.it). You can exercise your rights by sending a written request to the Data Controller, by email to the contact address: info@academydogcenter.it
Data Controllers: The list of data controllers, with reference to their respective responsibilities, is available to you upon request addressed to the Data Controller by email to the contact address: info@lacteadog.it