Via A. Ponchielli, 8 – 06073 Ellera di Corciano (PG) – Tel: + 344 0175190 – +39 0755173779 VAT No.: 03523490542 (hereinafter, the “Data Controller”), in its capacity as data controller, informs you pursuant to Art. 13 of Legislative Decree 196/2003 (hereinafter, the “Privacy Code”) and Art. 13 of EU Regulation 2016/679 (hereinafter, “GDPR”) that your data will be processed in the following ways and for the following purposes:

The Data Controller processes personal and identifying data (for example: name, surname, company name, address, telephone number, email, bank and payment details) – hereinafter “personal data” or “data” – provided by you when entering into contracts for the Controller’s services.

Your personal data are processed: A) Without your express consent (Art. 24 letters a), b), c) of the Privacy Code and Art. 6 letters b), e) GDPR), for the following Service Purposes:
• concluding contracts for the Controller’s services;
• fulfilling pre-contractual, contractual and tax obligations arising from the relationship with you;
• fulfilling obligations required by law, regulations, EU legislation or orders from Authorities (e.g., anti‑money laundering);
• providing personalized services, roadside assistance, claims management, quotations and other services requested by you;
• exercising the Controller’s rights, such as the right of defense in court;

B) Only with your specific and separate consent (Arts. 23 and 130 of the Privacy Code and Art. 7 GDPR), for the following Marketing Purposes:
• sending you via email or post commercial communications and/or advertising material regarding products or services offered by the Controller, and surveys on service satisfaction.

Please note that if you are already our customer, we may send you commercial communications regarding services and products similar to those you have already used, unless you object (Art. 130 paragraph 4 of the Privacy Code).

The processing of your personal data is carried out through the operations indicated in Art. 4 of the Privacy Code and Art. 4 no. 2 GDPR, namely: collection, recording, organization, storage, consultation, processing, modification, selection, extraction, comparison, use, interconnection, blocking, communication, deletion and destruction of data. Your personal data are processed both on paper and electronically and/or automatically. The Controller will process personal data for the time necessary to fulfill the purposes above and in any case for no longer than 10 years from the termination of the relationship for Service Purposes, and no longer than 2 years from data collection for Marketing Purposes.

Your data may be made accessible for the purposes referred to in Art. 2.A) and 2.B):
• to employees and collaborators of the Controller or external companies in Italy or abroad, in their capacity as persons in charge and/or internal processors and/or system administrators;
• to third-party companies or other subjects (e.g., credit institutions, professional firms, consultants) that perform outsourced activities on behalf of the Controller, in their capacity as external processors.

Without the need for express consent (Art. 24 letters a), b), d) of the Privacy Code and Art. 6 letters b), c) GDPR), the Controller may communicate your data for the purposes referred to in Art. 2.A) to supervisory bodies (such as IVASS), judicial authorities, and to those subjects to whom communication is mandatory by law for the aforementioned purposes. These subjects will process the data as independent data controllers. Your data will not be disseminated.

Personal data are stored on servers located in ITALY, within the European Union. It is understood that the Controller, if necessary, may move the servers outside the EU. In such a case, the Controller ensures that the transfer will take place in compliance with applicable legal provisions, subject to the signing of the standard contractual clauses required by the European Commission.

Providing data for the purposes referred to in Art. 2.A) is mandatory. Without such data, we cannot guarantee the Services described in Art. 2.A). Providing data for the purposes referred to in Art. 2.B) is optional. You may therefore decide not to provide any data or to later deny consent to process data already provided: in this case, you will not receive newsletters, commercial communications or advertising material related to the Controller’s Services. You will still be entitled to the Services referred to in Art. 2.A).

As a data subject, you have the rights under Art. 7 of the Privacy Code and Art. 15 GDPR, namely the right to:
i. obtain confirmation of the existence of personal data concerning you, even if not yet recorded, and their communication in an intelligible form;
ii. obtain information on:
  a) the origin of personal data;
  b) the purposes and methods of processing;
  c) the logic applied in case of processing carried out with electronic tools;
  d) the identification details of the controller, processors and designated representative;
  e) the subjects or categories of subjects to whom personal data may be communicated or who may become aware of them;
iii. obtain:
  a) the updating, rectification or, when interested, integration of data;
  b) the deletion, anonymization or blocking of data processed unlawfully;
  c) certification that the operations above have been notified to those to whom the data were communicated, unless impossible or disproportionate;
iv. object, in whole or in part:
  a) for legitimate reasons, to the processing of personal data concerning you, even if relevant to the purpose of collection;
  b) to the processing of personal data for sending advertising material, direct sales, market research or commercial communication via automated systems or traditional methods.

Where applicable, you also have the rights under Arts. 16–21 GDPR (right to rectification, right to erasure, right to restriction of processing, right to data portability, right to object), as well as the right to lodge a complaint with the Supervisory Authority.

You may exercise your rights at any time by sending:
a registered letter with return receipt to Sportx srl – Via A. Ponchielli, 8 – 06073 Ellera di Corciano (PG)
an email to international@sportgest.org

The Data Controller is Sportx srl – Via A. Ponchielli, 8 – 06073 Ellera di Corciano (PG). The updated list of processors and persons in charge is kept at the Controller’s registered office.