Informativa Privacy L'Ingorda

EVENT PRIVACY POLICY – L’Ingorda

1 – Data controller and categories of data processed

Participation in the Event and the provision of the services associated with it involve the processing of participants’ personal data such as:

personal data and membership data to sports clubs/entities;
images captured via video and photos; transit times and times at control and/or timing points;
geolocation data for participants who use a geolocation device and associated services;
data and copy of certificates of suitability to practice sports.

Data relating to the health of the interested party may also be processed (i.e. data on pathologies obtainable from medical certificates or declared directly by the interested party), where strictly necessary for the purposes of registration and participation in the Event (for example, for the purposes of registration in a special race category reserved for athletes with disabilities and/or for the purpose of requesting specific assistance) and only with the explicit consent of the interested party. In such cases, the interested party’s consent is necessary for participation in the Event and failure to provide the same prevents the completion of registration.
The data controller is the Organizer Levante Bike ASD.

2 – Purposes and conditions of the processing

The use of the personal data indicated above is inherent in the sporting and public nature of the Event, in its organizational needs and in the offer of the expected services to participants.

The Organizer uses and processes the data, also through its technical and service partners and companies connected to it, for the following purposes:

verification of participation requirements;
timekeeping and tracking services;
medical care services;
photo and video services for the media and participants (also for a fee);
communications to sports and public authorities;
news and documentation of the Event;
promotion and commercial exploitation of the Event.

The prerequisites for the processing therefore consist of:

provision of services connected to the registration of participants in the Event and the regular running of the same (for example, in the case of management of participant registration, tracking of times and publication of results or making photos and information available to participants videos of the Event);
consent of the interested party (for example, in the case of processing of data relating to health or for marketing purposes, as specified below);
pursuit of the legitimate interest of the Organizer and its commercial partners (for example, in the case of publication of images and results to document the Event);
fulfillment of legal obligations (for example, in the case of communications due to public authorities);
safeguarding the vital interests of the interested party or another person (for example, if medical assistance services are necessary during the Event).

The organizer draws the attention of all participants to the fact that during the Event, video and photographic shots will be taken of the participants, both in motion and in fixed poses; based on the assumptions indicated above (in particular, 1. and 3.), the Organizer may use, or allow the sponsors and technical and service partners of the Event to use, such images for the following purposes:

a) news and documentation of the Event;

b) marketing of photographic and video services of the Event with consequent offer, free of charge or for a fee, of photos and videos, for exclusively private use, to all participants and those authorized by them.

The authorization to shoot one’s image in the context of the Event represents a necessary requirement to participate in the Event to the extent that the methods of carrying out the latter, as described in the Regulations, provide for the video-photographic recording of the event for the purpose of documentation and the consequent offer to all participants of services for the purchase of photos and videos of the Event; therefore, failure to authorize the use of one’s image for the aforementioned purposes, as requested in the Release, will make it impossible to register for the Event.

3 – Scope of circulation and dissemination of data

The Organizer informs the participant that the Event is organized and managed also through the services of technical and commercial partners and with the support of sponsors. The services provided by these partners may include: registration services, tracking services, timing services, photographic and video shooting services, participation requirements control and validation services, and any other services. Some of these services may require or presuppose the registration of the interested party on the partner’s platform or in any case processing carried out by the partner in the capacity of independent data controller; in such cases, the interested party is invited to carefully read the privacy information provided by the partner. The interested party can find out the list of partners and sponsors at any time by writing to the Organizer.

In the case of participants with their own ENDU profile (i.e. natural persons registered on ENDU, a platform managed by the company Engagigo S.r.l.) who, in order to integrate their profile, have requested Engagigo to acquire the data processed by the organizers operating through ENDU last (in particular, data relating to registrations for events, as well as copies of documents relating to certificates of suitability to practice sports and memberships), the Organizer will automatically communicate such data to Engagigo. The interested party can read Engagigo’s privacy policy on the latter’s website (endu.net) and directly exercise their rights towards this company.

In consideration of the public nature and purpose of the Event, participants also acknowledge and accept that data relating to their image, their times and results or their position in real time, where specific tracking services are active, may be made publicly accessible through dissemination on the websites of the Organizer, sponsors and service partners of the Event and/or communicated to third parties for the purposes of reporting, documentation and promotion of the Event itself, for the provision of specific services connected to the Event , such as the sale of video-photographic services, in the fulfillment of specific legal or regulatory obligations and for the protection of vital interests of the participants (for example, communication to competent authorities and rescue personnel for rescue operations and/or the provision of medical assistance services within the Event).

4 – Consent for the advertising exploitation of the participant’s image

With the specific and free consent of the interested party, the Organizer may exploit the footage that includes his image for the promotion of the Event and other events organized by the Organizer. The interested party may revoke this consent at any time by writing to the Organizer.

5 – Processing for marketing purposes

If the participant uses his/her email address for the purposes of registering for the Event, the Organizer may use this address, without the prior consent of the participant, to send him/her, also through its service partners, communications of a commercial nature relating to its products and services connected to the Event or in any case to other initiatives and events similar to the Event. The interested party may object at any time to the sending of such communications by writing to the Organizer or by following the specific instructions contained within each communication.

Without prejudice to the above, with the specific and free consent of the interested party, revocable at any time, the Organizer may, directly or using its service partners:

use the participants’ contact data (email, address and telephone number) for the purposes of commercial information, market research, surveys, direct offers of its own products and services and/or of products and services of its service and commercial partners, through traditional methods (i.e. paper mail, telephone calls via operator, etc.) and automated communication tools (i.e. pre-recorded telephone calls, e-mail, fax, SMS, MMS, apps, etc.);
transfer to certain categories of third parties (in particular, the companies sponsoring the Event and other companies that provide products and services related to the organization of the Event and, more generally, the world of sporting activities) the contact details of the participants ( email, address and telephone number) for the purposes of commercial information, market research, surveys, direct offers of their products and services carried out through traditional methods (i.e. paper mail, telephone calls via operator etc.) and automated communication tools (i.e. pre-recorded phone calls, e-mails, faxes, sms, mms, apps, etc…). These third parties will act from time to time as independent data controllers, with the consequent burden of providing the interested party with their privacy information in accordance with the law.

6 – Data storage and data controllers

The data of interested parties will be stored in the Organizer’s computer archives and protected by appropriate security measures in line with the provisions of Article 32 of EU Regulation 2016/679.

The data will be kept for the time necessary in relation to the purposes for which they were collected and possibly for a further period of time if data retention is necessary for the protection of a right of the Organizer or of a third party (for example, the data connected to the registration for the Event will be kept for ten years, also in consideration of possible complaints by the interested party in the ordinary ten-year limitation period; the data relating to the results of the Event will be kept for as long as a current interest in the documentation is detectable of the Event itself; the contact data for sending commercial communications will be kept until the interested party exercises his right to object or revokes the consent previously granted; the data relating to the image of the participants will be kept for the entire time in which the Organizer will legitimately have access to filming of the Event).

For the purposes of conservation and, more generally, processing, the Organizer may use third parties under its own responsibility; these subjects, if the legal conditions are met, will be appointed by the Organizer as its Data Processors pursuant to art. 28 of EU Regulation 679/2016. To know the complete list of data controllers appointed from time to time by the Organizer, the interested party can send a request via the contact details indicated in the following art. 9).

7 – Transfer of data outside the EU

In the case of international data transfers starting from the European Economic Area (EEA), where the European Commission has recognized that a country not belonging to the EEA is able to guarantee an adequate level of data protection, the data subject’s data may be transferred on that basis.

For transfers to non-EEA countries whose level of protection has not been recognized by the European Commission, the Organizer will rely on an exemption applicable to the specific situation or will implement one of the following measures to ensure the protection of your data:

standard contractual clauses approved by the European Commission; or
binding corporate rules, where applicable.

To obtain a copy of these measurements or details on where they are available, you can submit a written request as indicated in the next article.

8 – Minors

The registration of minors at the Events is permitted only by persons exercising parental or legal authority over the minor or who have obtained the necessary prior authorization from the latter.

By registering a minor, those exercising parental or legal authority – or any other person expressly authorized for this purpose by the latter – must, in the name and on behalf of the minor, authorize the photographic and video shooting of the minor within the Event for the purposes described in this Information and in the Disclaimer and to provide, where necessary, consent for the processing of the minor’s health-related data.

Those exercising parental or legal authority over the minor may exercise the rights specified in the following article 9) with reference to the minor’s personal data.

The Organizer does not process the minor’s data for marketing purposes and direct offers of products and services; the Organizer may however process the data of the person exercising parental or legal authority for marketing purposes or direct offer of products and services under the conditions indicated in the previous art. 5).

9 – Rights of the interested party

At any time the participant will be able to exercise their rights regarding the processing of personal data pursuant to the articles. 15-22 of the GDPR 2016/679. These rights include:

Access: the interested party can obtain information in relation to the processing of his data and a copy of such data.
Rectification: where you believe that your data is inaccurate or incomplete, you may request that such data be modified accordingly.
Cancellation: the interested party may request the deletion of the data if he revokes his previous consent and there is no other legal basis for the processing or in other cases provided for by law.
Limitation: in the cases provided for by law (for example, if he disputes the legitimacy of the processing or the accuracy of the data), the interested party can obtain the limitation of the processing of the data without them being deleted.
Opposition: the interested party may object to the processing of data if the processing is based on a legitimate interest of the Organizer for reasons related to his particular situation, unless there are compelling reasons why the interest of the Organizer prevails over his rights ( this is the case, for example, in which the processing is necessary to defend a right of the Organizer in court).
Revocation of consent: the interested party can revoke the consent previously given for the purposes of the processing.

The interested party may, at any time, object to the processing of his/her data for marketing purposes and revoke the consent previously given for this purpose, also by following the procedure and instructions reported in the text of each commercial communication.

The participant is aware that his opposition (see previous OPPOSITION section) or the revocation of consent (see previous REVOCATION OF CONSENT section) or authorization (see Disclaimer) to the use of images portraying him will have effects within the limits within which it will be possible to block the publication of such images with reasonable means and costs. The opposition, as well as the revocation, will not in any case undermine the lawfulness of the uses that have occurred in the meantime.

The rights in question may be exercised by sending a written communication to the Organizer at the following address 3mendoclaudio@gmail.com.

In accordance with current legislation, in addition to the above rights, the interested party also has the right to lodge a complaint with the Guarantor for the protection of personal data, Piazza di Monte Citorio n. 121 – 00186, Rome, Fax: (+39) 06.69677.3785, ufficio@pec.gpdp.it.

PRIVACY POLICY – L’Ingorda

This Website collects some Personal Data from its Users.

Data Controller: Levante Bike ASD.

Owner’s email address: info@ingorda.eu

Types of Data collected

Among the Personal Data collected by this Website, independently or through third parties, there are: Tracking Tools; Usage data; first name; surname; telephone number; e-mail.

Complete details on each type of Personal Data collected are provided in the dedicated sections of this privacy policy or through specific information texts displayed before the Data is collected.
Personal Data may be freely provided by the User or, in the case of Usage Data, collected automatically when using this Website.
Unless otherwise specified, all Data requested by this Website is mandatory. If the User refuses to communicate them, it may be impossible for this Website to provide the Service. In cases where this Website indicates some Data as optional, Users are free to refrain from communicating such Data, without this having any consequence on the availability of the Service or its operation.
Users who have doubts about which Data is mandatory are encouraged to contact the Owner.
Any use of Cookies – or other tracking tools – by this Website or by the owners of third-party services used by this Website has the purpose of providing the Service requested by the User, in addition to the further purposes described herein. document and in the Cookie Policy.

The User assumes responsibility for the Personal Data of third parties obtained, published or shared through this Website.

Method and place of processing of the collected data

Treatment methods

The Data Controller adopts appropriate security measures aimed at preventing unauthorized access, disclosure, modification or destruction of Personal Data.
The processing is carried out using IT and/or telematic tools, with organizational methods and logic strictly related to the purposes indicated. In addition to the Owner, in some cases, other parties involved in the organization of this Website (administrative, commercial, marketing, legal, system administrators) or external parties (such as third-party technical service providers, postal couriers) may have access to the Data. , hosting providers, IT companies, communication agencies) also appointed, if necessary, as Data Processors by the Data Controller. The updated list of Managers can always be requested from the Data Controller.

Place

The Data is processed at the Owner’s operational offices and in any other place where the parties involved in the processing are located. For further information, contact the Owner.
The User’s Personal Data may be transferred to a country other than the one in which the User is located. To obtain further information on the place of processing, the User can refer to the section relating to details on the processing of Personal Data.

Retention period

Unless otherwise indicated in this document, Personal Data is processed and stored for the time required by the purpose for which it was collected and may be stored for a longer period due to any legal obligations or on the basis of User consent.

Purpose of the Processing of Collected Data

The User’s Data is collected to allow the Owner to provide the Service, fulfill legal obligations, respond to requests or enforcement actions, protect its rights and interests (or those of Users or third parties), identify any malicious activities or fraudulent, as well as for the following purposes: Statistics, Displaying content from external platforms, Tag management and Contacting the User.

To obtain detailed information on the purposes of the processing and the Personal Data processed for each purpose, the User can refer to the “Details on the processing of Personal Data” section.

Details on the processing of Personal Data

Personal Data is collected for the following purposes and using the following services:

Contact the user

The services contained in this section allow the Data Controller to monitor and analyze traffic data and serve to keep track of the User’s behavior.

Google Analytics (Universal Analytics)

Google Analytics (Universal Analytics) is a web analysis service provided by Google LLC or by Google Ireland Limited, depending on how the Data Controller manages the processing of Data, (“Google”). Google uses the Personal Data collected for the purpose of tracking and examining the use of this Website, compiling reports and sharing them with other services developed by Google.
Google may use Personal Data to contextualize and personalize the ads of its advertising network.

Personal Data processed: Usage data; Tracking Tools.

Place of processing: Place of processing: United States (view Google Analytics Privacy Policy); Ireland (view Google Analytics Privacy Policy).

Contact form (this Website)

By filling in the contact form with their Data, the User consents to their use to respond to requests for information, quotes, or any other nature indicated by the form header.

Personal Data processed: surname; e-mail; first name; telephone number.

Tag management

This type of service is functional to the centralized management of tags or scripts used on this Website.
The use of these services involves the flow of User Data through them and, if applicable, their retention.

Google Tag Manager

Google Tag Manager is a tag management service provided by Google LLC or by Google Ireland Limited, depending on how the Owner manages the processing of Data.

Personal Data processed: Usage data; Tracking Tools.

Place of processing: United States (view Google Analytics Privacy Policy); Ireland (view Google Analytics Privacy Policy).

Viewing content from external platforms

This type of service allows you to view content hosted on external platforms directly from the pages of this Website and interact with them. These services are often called widgets, which are small elements inserted into a website or application. They provide specific information or perform a particular function and often allow interaction with the user.
This type of service could still collect data on web traffic relating to the pages where the service is installed, even when users do not use it.

Google Fonts

Google Fonts is a character style visualization service managed by Google LLC or by Google Ireland Limited, depending on how the Data Controller manages the processing of Data, which allows this Website to integrate such content within its pages.

Personal Data processed: Usage data; Tracking Tools.

Place of processing: United States (view Google Analytics Privacy Policy); Ireland (view Google Analytics Privacy Policy).

COOKIE POLICY – L’Ingorda

This Website uses Tracking Tools. To find out more, Users can consult the Cookie Policy.

Legal basis of the processing

The Owner processes Personal Data relating to the User if one of the following conditions exists:

the User has given consent for one or more specific purposes; Note: in some jurisdictions the Owner may be authorized to process Personal Data without the User’s consent or another of the legal bases specified below, until the User objects (“opt-out”) to this treatment. However, this is not applicable if the processing of Personal Data is regulated by European legislation on the protection of Personal Data;
the processing is necessary for the execution of a contract with the User and/or the execution of pre-contractual measures;
the processing is necessary to fulfill a legal obligation to which the Data Controller is subject;
the processing is necessary for the execution of a task of public interest or for the exercise of public powers vested in the Data Controller;
the processing is necessary for the pursuit of the legitimate interest of the Data Controller or third parties.

However, it is always possible to ask the Data Controller to clarify the concrete legal basis of each processing and in particular to specify whether the processing is based on the law, provided for by a contract or necessary to conclude a contract.

Therefore:

Personal Data collected for purposes related to the execution of a contract between the Owner and the User will be retained until the execution of this contract is completed.
Personal Data collected for purposes attributable to the legitimate interest of the Owner will be retained until such interest is satisfied. The User can obtain further information regarding the legitimate interest pursued by the Owner in the relevant sections of this document or by contacting the Owner.

When the processing is based on the User’s consent, the Data Controller may retain the Personal Data for longer until such consent is revoked. Furthermore, the Owner may be obliged to retain Personal Data for a longer period in compliance with a legal obligation or by order of an authority.

At the end of the retention period, the Personal Data will be deleted. Therefore, upon expiry of this deadline the right of access, cancellation, rectification and the right to data portability can no longer be exercised.

User Rights

Users can exercise certain rights with reference to the Data processed by the Owner.

In particular, within the limits established by law, the User has the right to:

revoke your consent at any time. The User can revoke consent to the processing of their Personal Data previously expressed.
object to the processing of their Data. The User can object to the processing of their Data when it takes place by virtue of a legal basis other than consent.
access their Data. The User has the right to obtain information on the Data processed by the Owner, on certain aspects of the processing and to receive a copy of the Data processed.
verify and request rectification. The user can verify the correctness of their data and request its updating or correction.
obtain the limitation of treatment. The User may request the limitation of the processing of their Data. In this case the Owner will not process the Data for any purpose other than their conservation.
obtain the cancellation or removal of your Personal Data. The User may request the deletion of their Data by the Owner.
receive your Data or have it transferred to another owner. The user has the right to receive their data in a structured, commonly used and machine-readable format and, where technically feasible, to obtain its transfer without obstacles to another owner.
lodge a complaint. The user can lodge a complaint with the competent personal data protection supervisory authority or take legal action.

Users have the right to obtain information regarding the legal basis for the transfer of data abroad also to any international organization regulated by international law or constituted by two or more countries, such as the UN, as well as regarding the measures of security adopted by the Owner to protect their Data.

Details on the right to object

When Personal Data is processed in the public interest, in the exercise of public powers vested in the Owner or to pursue a legitimate interest of the Owner, Users have the right to object to the processing for reasons related to their particular situation.

Users are reminded that, if their Data is processed for direct marketing purposes, they can object to the processing at any time, free of charge and without providing any reason. If Users object to processing for direct marketing purposes, the Personal Data will no longer be processed for these purposes. To find out whether the Owner processes Data for direct marketing purposes, Users can refer to the respective sections of this document.

How to exercise your rights

To exercise their rights, Users can direct a request to the Owner’s contact details indicated in this document. The request is free and the Owner will respond as quickly as possible, in any case within one month, providing the User with all the information required by law. Any rectifications, cancellations or limitations of processing will be communicated by the Data Controller to each of the recipients, if any, to whom the Personal Data has been transmitted, unless this proves impossible or involves a disproportionate effort. The Owner communicates these recipients to the User if he requests it.

Defense in court

The User’s Personal Data may be used by the Owner in court or in the preparatory stages of its possible establishment for the defense against abuse in the use of this Website or related Services by the User.
The User declares to be aware that the Owner may be obliged to reveal the Data by order of public authorities.

Specific information

Upon request of the User, in addition to the information contained in this privacy policy, this Website may provide the User with additional and contextual information regarding specific Services, or the collection and processing of Personal Data.

System logs and maintenance

For needs related to operation and maintenance, this Website and any third-party services used by it may collect system logs, i.e. files that record interactions and which may also contain Personal Data, such as the User IP address.

Information not contained in this policy

Further information in relation to the processing of Personal Data may be requested at any time from the Data Controller using the contact details.

Changes to this privacy policy

The Data Controller reserves the right to make changes to this privacy policy at any time by notifying Users on this page and, if possible, on this Website as well as, if technically and legally feasible, by sending a notification to Users through one of the extremes contact number he has. Please therefore consult this page frequently, referring to the date of last modification indicated at the bottom.

If the changes affect processing whose legal basis is consent, the Owner will collect the User’s consent again, if necessary.