The company Prima S.r.l., with registered office in Piazza Buffoni 5/A, 21013 – Gallarate (VA), as the Data Controller of the website www.primasport.it (hereinafter referred to as the “Site“), informs the interested parties pursuant to Art. 13 d. lgs. 196/2003 and pursuant to Art. 13 of European Regulation no. 2016/679.

DATA PROCESSED.

Personal Data:

Among the Personal Data collected through the Site, either independently or through third parties, are: usage data, email, telephone, first name, last name, zip code/city, company name.

To obtain detailed information on each type of data processed check the section below “Personal Data Processing Details”

Users assume responsibility for third party Personal Data posted or shared through this Site and warrant that they have the right to disclose or disseminate it, releasing the Owner from any liability to third parties.

Navigation data:

The computer systems and software procedures used to operate Site acquire, in the course of their normal operation, some Personal Data whose transmission is implicit in the use of Internet communication protocols.

This information is not collected to be associated with identified data subjects, but by its very nature could, through processing and association with data held by third parties, allow users to be identified.

This category of data includes IP addresses or domain names of computers used by users connecting to individual sites, addresses in notation URI (Uniform Resource Identifier) of the requested resources, the time of the request, the method used in submitting the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response given by the server (successful, error, etc.) and other parameters related to the operating system and computer environment of the Data Subject.

The data, thus collected, could be used to ascertain liability in the event of any computer crimes against the sites.

Data provided directly by the Data Subject

The optional, explicit and voluntary sending of data as requested by various sections of the above Site are used for the purpose of fulfilling the requests of the Data Subject. Specifically, the interested party may provide data directly by sending an email or calling the references indicated in the contact section or by filling out the request form in the same section.

NATURE OF PROVIDING DATA

Browsing data are processed as necessary to give effect to computer and telematic protocols; the provision of Personal Data by users is free and optional.

However, for some sections of the Site, users’ failure to provide certain Personal Data may prevent the Site from providing its services.

MODE OF TREATMENT

The Controller processes Users’ Personal Data by taking appropriate security measures to prevent unauthorized access, disclosure, modification and destruction of Personal Data.

Data Processing is carried out through computer procedures, telematic means and residually on paper media by specially appointed internal persons as well as by external managers in case appointed, and this also according to existing contractual agreements. The data are stored in computer, telematic, and residually paper archives with full assurance of the security measures of security provided by the legislature.

In addition to the Data Controller, in some cases, categories of appointees involved in the organization of the site (by way of example, administrative, sales, marketing, legal, system administrators) or external parties (such as, for example, third party technical service providers, postal couriers, hosting providers, IT companies, communication agencies) also appointed, if necessary, Data Processors by the Data Controller may have access to the Data. An up-to-date list of Data Processors can always be obtained from the Data Controller.

Place of Processing

Data are processed at the Holder’s operational offices and at any other location where the parties involved in the Processing are located. For more information, contact the Holder.

Storage time

Personal data will be processed and retained for as long as necessary to carry out the purposes for which it was collected and in accordance with the retention periods stipulated by applicable regulations, or until the data subject revokes the consent given for the relevant purposes (see below). In particular, data related to the request for quotes/offers will be processed until such quotes/offers are accepted or rejected.

After what has just been stated, the data will be automatically deleted or, alternatively, permanently anonymized.

PURPOSE OF PROCESSING

Users’ Personal Data are collected to enable the Owner to provide its services, through the following activities: statistics, interaction with social networks and external platforms, response to request for quotes.

Personal Data Processing Details

Purpose Description Type
Statistics The services contained in this section allow the Data Controller to monitor and analyze traffic data and serve to track the behavior of the Data Subject.

Google Analytics (Google Inc.)

Google Analytics is a web analytics service. Google uses the Personal Data collected for the purpose of tracking and examining the use of this Site, compiling reports, and sharing them with other services developed by Google.
Google may use Personal Data to contextualize and personalize ads in its ad network.

Personal Data Collected: Cookies and Usage Data.

Place of Processing: USA -https://policies.google.com/privacy?hl=it

Data processed through Google Analytics will be retained for a period of 26 months

Interaction with social networks and external platforms This type of service allows for interactions with social networks, or other external platforms, directly from the pages of this Site.
Interactions and information captured by this Site are in each case subject to the privacy settings of the Data Subject related to each social network.
In the event that a social network interaction service is installed, it is possible that, even if Users do not use the service, it will collect traffic data related to the pages where it is installed.

Facebook Social Widgets (Facebook, Inc.).

Facebook social widgets are interaction services with the social network Facebook, provided by Facebook, Inc.

Personal Data Collected: Cookies and Usage Data.

Place of Processing: USA-https://www.facebook.com/privacy/explanation

Instagram Social Widgets (Instagram Llc)

Instagram social widgets are services for interaction with the Instagram social network, provided by Instagram Llc.

Personal Data Collected: Cookies and Usage Data.

Place of Processing: USA –
https://help.instagram.com/155833707900388/

Twitter Social Widgets (Twitter, Inc.).

Twitter social widgets are Twitter social network interaction services provided by Twitter, Inc.

Personal Data Collected: Cookies and Usage Data.

Place of Processing: USA – https://twitter.com/it/privacy

YouTube Social Widgets (YouTube Llc)

YouTube social widgets are YouTube social network interaction services, provided by YouTube Llc.

Personal Data Collected: Cookies and Usage Data.

Place of Processing: USA – https://www.youtube.com/static?gl=IT&hl=it&template=terms

Google+ social widgets (Google)
The +1 button and Google+ social widgets are services for interacting with the Google+ social network, provided by Google Inc.
Personal data collected: Cookies and Usage data.
Place of processing : USA – https://policies.google.com/privacy?hl=it
Response to request for quotations The services contained in this section allow the Data Controller to send quotes requested by the data subject. Newsletters referred to in this purpose will be sent via …

The data processed will be as indicated in the section “Personal Data”

COMMUNICATION AND DISSEMINATION

Personal Data will not be disseminated by the Owner.

The communication to third parties, other than the Owner, the managers, internal but also external to the corporate structure, and the Data Processors identified and appointed is provided for the pursuit of the purposes indicated and in any case within the limits of the same, to third parties and companies, business partners, engaged in the correct and regular pursuit of the purposes described. In any case, the Processing by third parties must be carried out in accordance with fairness and in compliance with applicable legal provisions.

RIGHTS OF THE DATA SUBJECT

The Interested Party may assert its rights as expressed in Articles 7, 8, 9 and 10 of Leg. June 30, 2003 no. 196, as well as as expressed in Articles 15, 16, 17, 18, 19, 20 and 21 of European Regulation No. 2016/679, by contacting the Data Controller. Specifically:

  • the Interested Party may obtain confirmation of the existence or non-existence of Personal Data concerning him/her, even if not yet registered, and to receive in a structured, commonly used and machine-readable format the Personal Data concerning him/her and to transmit such data to another Data Controller without any impediment from the current Data Controller.
  • The Interested Party has the right to obtain the indication:
  1. Of the origin and categories of Personal Data;
  2. Of the purposes and methods of the Processing;
  3. Of the logic applied in the case of Processing carried out with the aid of automated tools;
  4. of the identification details of the owner, responsible persons and designated representative;
  5. Of the subjects or categories of subjects to whom the Personal Data may be communicated or who may become aware of it as designated representative in the territory of the State, managers or appointees.
  • the Interested Party has the right to obtain:
  1. updating, rectification or, when interested, integration of data;
  2. the cancellation, transformation into anonymous form or blocking of data processed in violation of the law, including data whose retention is not necessary in relation to the purposes for which the data were collected or subsequently processed;
  3. A statement that the operations referred to in paras. (a) and (b) have been brought to the attention, also as regards their content, of those to whom the data have been communicated or disseminated, except where this proves impossible or involves the use of means manifestly disproportionate to the right protected.
  • The Data Subject has the right to request the Data Controller to restrict Data Processing if:
  1. its accuracy is disputed and for the period during which the Holder performs appropriate verifications;
  2. If there is unlawful Data Processing and there is this request instead of opposition;
  3. the Data Controller no longer needs it, but the Personal Data is necessary for the establishment, exercise or defense of a legal claim;
  4. the Data Subject is awaiting, following opposition, verification of whether the legitimate reasons of the Data Controller prevail over those of the Data Subject.
  • The Interested Party has the right to object, in whole or in part:
  1. for legitimate reasons to the Processing of Personal Data concerning him/her, even if relevant to the purpose of collection;
  2. to the Processing of Personal Data concerning him/her for the purpose of sending advertising or direct sales material or for carrying out market research or commercial communication;
  3. to the Processing of Personal Data concerning him/her for profiling or automated processing purposes.
  • the Data Subject has the right to be notified in case of rectification, erasure or restriction of the Processing of Personal Data related to the Data Subject.
  • the Data Subject has the right to appeal to the Privacy Guarantor to exercise his or her rights if there is unlawful Data Processing by the Data Controller.

FURTHER INFORMATION ON TREATMENT

Litigation defense

The Data Subject’s Personal Data may be used by the Data Controller in legal proceedings or in the stages preparatory to its possible establishment for the defense against abuse in the use of this Site or related services by the Data Subject.
The Data Subject declares that he/she is aware that the Data Controller may be required to disclose the data at the request of public authorities.

Specific disclosures

At the request of the Data Subject, in addition to the information contained in this privacy policy, this Site may provide the Data Subject with additional and contextual disclosures regarding specific services, or the collection and Processing of Personal Data.

System logs and maintenance

For needs related to operation and maintenance, this Site and any third-party services used by it may collect System Logs, i.e., files that record interactions and may also contain Personal Data, such as the Interested Party’s IP address.

Information not contained in this policy

More information in relation to the Processing of Personal Data can be requested at any time from the Data Controller using the contact information.

Changes to this privacy policy

The Data Controller reserves the right to make changes to this privacy policy at any time by giving notice to users on this page. Therefore, please consult this page often, taking the date of last modification shown at the bottom as a reference. In case of non-acceptance of the changes made to this privacy policy, the Data Subject is required to cease using this Site and may request the Data Controller to remove his/her Personal Data. Unless otherwise specified, the previous privacy policy will continue to apply to Personal Data collected up to that point.

DATA CONTROLLER AND DATA PROCESSORS

The Owner is the company Prima S.r.l., with registered office in Piazza Buffoni 5/A, 21013 – Gallarate (VA). The Holder provides the following email address for any communication, request and possible exercise of the above rights: info@primasport.it

The Data Controller maintains an up-to-date list of those responsible, if appointed, and ensures that the Data Subject has access to it at the registered office as indicated above.

CONSENT

It is clarified, in compliance with Measure no. 330 of July 04, 2013 from the Garante per la Protezione dei Dati Personali, that the consent given for automated modes also extends to traditional ones. Without prejudice to the rights already expressed in this notice under the section “Rights of the Interested Party.”

DEFINITIONS

Personal Data (or Data)

Personal data is any information relating to a natural person who is identified or identifiable, even indirectly, by reference to any other information, including a personal identification number.

Interested

The natural or legal person to whom the Personal Data refers.

Data Processor (or Manager)

The natural person, legal entity, public administration and any other entity, association or body entrusted by the Controller with the Processing of Personal Data, in accordance with the provisions of this privacy policy.

Data Controller (or Owner)

The natural person, legal entity, public administration and any other entity, association or body that is responsible, including jointly with another owner, for decisions regarding the purposes, methods of the Processing of Personal Data and the tools used, including the security profile, in relation to the operation and use of this Site. The Data Controller, unless otherwise specified, is the owner of this Site.