Politique de confidentialité

Information document pursuant to Article 13 of EU Regulation 2016/679- GDPR

Information Notice for SPORTCLUBBY SRL APP - Processing of personal data collected from the data subject.

In compliance with the provisions of EU Regulation 2016/679 (European Data Protection Regulation), we are providing you with the necessary information regarding the processing of the personal data provided. The information notice is drawn up in accordance with Article 13 of EU  Regulation 2016/679 and in accordance with Opinion 02/2013 on applications (APPs) for smart devices drawn up by the Article 29 Working Party on Data Protection

1. DATA PROCESSING SUBJECTS

The Data Controller, pursuant to Articles 4 and 24 of EU Regulation 2016/679 is SPORTCLUBBY SRL with registered office in 10128 – Turin, Corso Re Umberto, 54, in the person of its pro-tempore legal representative.

2. TYPE OF DATA PROCESSED

Personal data: any information concerning a data subject, with particular reference to an identifier such as a name, an identification number, location data, an online identifier or one or more characteristic elements of the data subject's physical, physiological, genetic, mental, economic, cultural or social identity - see Article 4, para. 1, no. 1 GDPR.


Special categories of data e.g. racial and ethnic origin, political opinions, religious or philosophical beliefs, trade union membership, biometric or health-related data - see Article 9 GDPR.
Data subject means: “identified or identifiable natural person”.
Your personal, particular and judicial data will be processed within the limits and under the conditions provided for by current legislation.
 

DATI OF MINORS

Article 8 and Recital 38 of EU Regulation 2016/679 - Conditions applicable to the consent of minors, SPORTCLUBBY SRL offers services that are also addressed to minors. Minors deserve specific protection with regard to their personal data, as they may be less aware of the risks, consequences and safeguards involved as well as their rights in relation to the processing of personal data. The processing of personal data is lawful if the minor is at least 16 years old. If he/she is younger, the processing of personal data is lawful only if consent to such processing is given or authorised by the person exercising parental responsibility.
The parent may also create and manage their child/children’s profile directly from their own profile via the multi-account function in the application.
SPORTCLUBBY SRL will make reasonable efforts, taking into account available technology, to verify that consent is given or authorised by the person exercising parental responsibility. The Data Controller will immediately delete any personal data and any material acquired if it ascertains that the information shared by the minor is false. In no case shall it be held liable in any way for any potential false or misleading statements that may be provided by the minor.

3. PURPOSES OF THE PROCESSING | LEGAL BASIS | STORAGE

Finalità del trattamento Base giuridica Periodo conservazione dati
A) Gestione trattamento dati per l’utilizzo dell’APP:
  1. Registrazione all’APP mediante creazione di un account al fine di fruire dei servizi offerti. La registrazione potrà avvenire anche mediante social network Facebook e Instagram: il social network invierà al gestore dell’APP solo i dati personali necessari per la registrazione dell’utente, senza che lei debba inserire manualmente i dati richiesti;
  2. finalità di assistenza e manutenzione nonché gestione del suo account.
  3. l’APP potrà avere accesso a: cronologia e dispositivo, ubicazione, telefono, foto/elementi multimediali/file sul dispositivo, memoria esterna del dispositivo, fotocamera, informazioni sulla connessione, ID dispositivo;
  4. fornire riscontro a eventuali richieste di informazioni che vorrà inoltrarci;
  5. adempimento obblighi contrattuali, di legge e finalità amministrativo-contabili ossia connesse allo svolgimento delle attività di natura organizzativa, amministrativa, finanziaria e contabile, a prescindere dalla natura dei dati trattati. In particolare, perseguono tali finalità le attività organizzative interne, quelle funzionali all'adempimento di obblighi contrattuali e precontrattuali, attività informativa.
  1. Obblighi derivanti dal contratto in essere tra le Parti - art. 6 lett. b) GDPR
  2. Obblighi derivanti dal contratto in essere tra le Parti - art. 6 lett. b) GDPR;
  3. Obblighi derivanti dal contratto in essere tra le Parti – art. 6 lett. b) GDPR
  4. Legittimo interesse | Richiesta interessato – art. 6 lett. f) GDPR e considerando 47: il trattamento è necessario per il perseguimento del legittimo interesse del titolare del trattamento o di terzi, a condizione che non prevalgano gli interessi o i diritti e le libertà fondamentali dell'interessato che richiedono la protezione dei dati personali, tenuto conto delle ragionevoli aspettative nutrite dall’interessato in base alla sua relazione con il titolare del trattamento.
  5. Obblighi di Legge a cui è soggetto il Titolare del trattamento - art. 6 lett. c) GDPR
 Durata iscrizione | Fino ad opposizione (opt – out )
B) Iscrizione alla newsletter di SPORTCLUBBY tramite e-mailing list, mediante compilazione del form dedicato Consenso - art. 6 lett. a) GDPR Durata iscrizione | Fino ad opposizione (opt – out )
C) previo consenso, e fino a sua opposizione, i dati da Lei forniti verranno usati per attività di profilazione da parte di SPORTCLUBBY al fine di inviarle newsletter mirate sulla base delle sue preferenze personali ed interessi relativi a discipline sportive, nonché sulla base dei suoi acquisti. Consenso - art. 6 lett. a) GDPR 1 anno (o fino a opposizione dell’utente se precedente)
D) previo consenso, fino a opposizione per attività di marketing diretto, ricerche di mercato o altre ricerche campionarie e vendita diretta per ricevere - tramite mezzi automatizzati posta elettronica, Sms (Short Message Service) nonchè mediante telefonate tramite operatore e della posta cartacea - materiale informativo, per la rilevazione del grado di soddisfazione, materiale promozionale, commerciale e pubblicitario o inerente eventi ed iniziative, da parte di SPORTCLUBBY per conto di Terzi (Partners Commerciali) operanti nei seguenti settori merceologici fitness, abbigliamento, oggettistica sportiva ecc... a cui i dati non verranno ceduti. L’elenco completo dei settori merceologici verrà fornito dietro richiesta da farsi a privacy@sportclubby.com . Consenso - art. 6 lett. a) GDPR Fino a opposizione (opt-out) | vedi informativa ex art. 14 GDPR che sarà fornita dalla terza parte
E) Connessione account YouTube del Club alle API Sportclubby in caso di attivazione della sezione “Video” presente nel gestionale. I provider di parti terze collegate al sito potranno accedere ai contenuti caricati dal Cliente.
Per ulteriori informazioni legate al trattamento dei dati da parte di terze parti possono essere consultatile seguenti privacy policy

Youtube Term of Services Google Privacy Policy 		Consenso - art. 6 lett. a) GDPR Fino a opposizione (opt-out) | vedi informativa ex art. 14 GDPR che sarà fornita dalla terza parte.
Il cliente può revocare in qualsiasi momento il proprio consenso cliccando su link

Google security setting page
F) Connessione account Stripe all’interno del gestionale per effettuare pagamenti da app.
Il Cliente dovrà collegare il suo profilo Stripe al gestionale di Sportclubby, in caso di malfunzionamento o problemi tecnici Sportclubby potrà controllare i pagamenti ricevuti dalla applicazione.		 Consenso - art. 6 lett. a) GDPR Fino a opposizione (opt-out) | vedi informativa ex art. 14 GDPR che sarà fornita dalla terza parte.
www.stripe.com

3. RECIPIENTS OR CATEGORIES OF RECIPIENTS OF THE DATA

Data of a personal nature provided may be communicated to recipients, appointed pursuant to Article 28 of EU Regulation 2016/679, who will process the data as data processors and/or as natural persons acting under the authority of the Data Controller and Data Processor, in order to fulfil contracts or related purposes. Specifically, the data may be communicated to recipients belonging to the following categories - Subjects that provide services for the management of SPORTCLUBBY SRL's information system and communication networks (including electronic mail); - Firms or companies providing assistance and consultancy; - Competent authorities for the fulfilment of legal obligations and/or provisions of public bodies, upon request; - For administrative-accounting purposes, data may possibly be transmitted to commercial information companies for the assessment of solvency and payment habits and/or to subjects for debt collection purposes. The subjects belonging to the above categories act as Data Processors, or operate completely independently as separate Data Controllers. The list of designated Data Processors is constantly updated and available at the registered office of SPORTCLUBBY SRL.

4. TRANSFER OF DATA TO A THIRD COUNTRY AND/OR INTERNATIONAL ORGANISATION

Data of a personal nature supplied will not be transferred abroad either within or outside the European Union. Should such a need arise, this transfer will take place within the limits and under the conditions set out in Articles 44 et seq. of EU Regulation 2016/679, in order to fulfil purposes related to the transfer. By registering for the APP via social platforms, we inform you that the transfer of such data outside the European Union will then be handled as set out in the general terms and conditions and privacy policies of the social networks.

5. NATURE OF PROVISION AND REFUSAL

The provision of personal data for purpose A) of this information document is compulsory, as it is strictly necessary to fulfil the Data Controller’s contractual and legal obligations. Failure to provide such data will prevent the completion of the contractual relationship between the parties.
The provision of personal data and consent to processing for purpose B) is optional. Failure to provide it will make it impossible for you to receive the newsletter.
The provision of personal data and consent to processing for the purposes referred to in point C) is optional. Failure to provide it will make it impossible for you to receive targeted communications.
The provision of personal data and consent to processing for the purposes referred to in point D) is optional. If you fail to provide it, your data will not be transferred or passed on to third parties for marketing purposes.
The granting of consent for the purposes referred to in point E) of this information document is to be considered compulsory because it is indispensable in order to activate the section in the management system at the Customer’s request.
The granting of consent for the purposes referred to in point F) of this information document is to be considered compulsory because it is indispensable in order to activate the section in the management system at the Customer’s request.
The content of this document is valid only in reference to SportClubby Srl. It does not refer to the processing carried out by each Club participating in the service.

6. RIGHTS OF DATA SUBJECTS

You may exercise your rights as expressed in Articles 15, 16, 17, 18, 19, 20, 21, 22 of EU Regulation 2016/679, by writing to privacy@sportclubby.com. You have the right, at any time, to ask the data controller for access to your personal data, to rectify them, to erase them or to restrict their processing. Furthermore, you have the right to object, at any time, to the processing of your data (including automated processing, e.g. profiling), as well as to the portability of your data. Without prejudice to any other administrative and judicial remedy, if you consider that the processing of your data violates the provisions of EU Regulation 2016/679, pursuant to Article 15(f) of the aforementioned EU Regulation 2016/679, you have the right to lodge a complaint with the Italian Data Protection Authority (“Garante per la protezione dei dati personali”) and, with reference to Article 6(1)(a) (consent) and Article 9(2)(a) (consent for individual data purposes ), you have the right to withdraw your consent at any time.

In the cases provided for, you have the right to the portability of your data, in which case the data controller will provide you with the personal data concerning you in a structured, commonly used and machine-readable format.

Deletion requests should be addressed to privacy@sportclubby.com or by using the “Delete account” function in the “user profile” section of the mobile app.

A – What are cookies?

Cookies are short fragments of text (letters and/or numbers) that allow the web server to store information on the client (the browser) to be reused during the same visit to the website (session cookies) or later, even after several days (persistent cookies). Cookies are stored, based on User preferences, by the individual browser on the specific device being used (computer, tablet, smartphone).

Cookies are useful because they allow a website to recognise the User’s device. They have various purposes, such as enabling efficient navigation between pages, remembering favourite sites and, in general, improving the browsing experience. They also help to ensure that advertising content displayed online is more targeted to Users and their interests. Depending on their function and purpose, cookies can be classified as technical cookies, analytical cookies or profiling cookies. All cookies are distinguished as either first-party cookies, which are installed directly by the Site operator, or third-party cookies that are installed, through the Site, by different third parties. This Site only makes use of technical cookies and third-party profiling cookies.

Depending on the characteristics and use of cookies, we can distinguish between different categories:

1. Technical cookies

Technical cookies are those used for the sole purpose of “transmitting a communication over an electronic communication network, or to the extent strictly necessary for the provider of an information company service explicitly requested by the subscriber or User in order to provide such a service” (see Article 122, para. 1, of the Code). They are not used for any other purposes and are usually installed directly by the owner or operator of the website. They can be divided into browsing or session cookies, which guarantee normal browsing and use of the website; analytics cookies, similar to technical cookies when used directly by the site operator to gather information, in aggregate form, on the number of users and how they visit the website in question; functionality cookies, which allow users to browse based on a series of selected criteria in order to improve the service provided to them. Prior consent from users is not required in order to install such cookies. These cookies can be deactivated and/or deleted via the browser settings. All modern browsers allow you to change cookie settings. You can usually find these settings in the “options” or “preferences” menu of your browser. To understand these settings, the following links may be helpful. Alternatively, you can use the “Help” option in your browser for more information. Cookies are small text files that sites visited by the user send to his terminal – computer, laptop, tablet, smartphone, etc.  – where they are stored and then transmitted back to the same sites the next time the same user visits them. When browsing on this site, you will only receive cookies sent directly from our site and managed by our company.

If the use of cookies is blocked, the service offered to the User through the Site will be limited, thus affecting the experience of using the Site.

The name, purpose of use and retention time for each technical cookie used are listed below.

Nome cookie Scopo Durata
cb-enable Memorizza in forma anonima le preferenze di navigazione del visitatore del sito (ad esempio la scelta di disabilitare il cookie di Google Analytics). Non è possibile disattivarlo. Negare il consenso a questo cookie impedisce la corretta navigazione del sito. 180 giorni
intercom-id Cookie utilizzato da Intercom messenger. 9 mesi