INFORMATION NOTICE
PURSUANT TO ARTICLES 13 AND 14 OF REGULATION (EU) 2016/679 (HEREINAFTER "GDPR")
Dear Sir/Madam,
We inform you that Sport e salute S.p.A. (hereinafter "Sport e salute" or "the Company"), with headquarters in Rome, Piazza Lauro de Bosis 15, as Data Controller, will process – for the purposes and in the manner described below – the personal data you provide when filling out the registration form for the use of the Wi-Fi service at the Parco Sportivo del Foro Italico (hereinafter "Wi-Fi").
In particular, Sport e salute will process the following personal data:
a) personal and identification data (e.g., name and surname, date of birth, country and city of residence)
b) contact data (email address, mobile phone number)
These data are collected directly from you through the completion of the registration form for the use of the Wi-Fi. Alternatively, if the so-called "Social Log-In" functionality is used, these data may be transmitted to the Company by the third party, social network, used to simplify the registration operations.
During the use of the Wi-Fi and browsing, data related to the device used and the connection (e.g., date and time of the start and end of the browsing session, amount of traffic exchanged, MAC Address of the device, IP Address of the device, UserAgent of the device, type and language of the device) will also be collected and processed exclusively to provide the service.
Data Protection Officer
The Data Protection Officer, appointed by the Company, can be contacted via email at the following address: Questo indirizzo email è protetto dagli spambots. È necessario abilitare JavaScript per vederlo..
1. Legal Basis and Purpose of Processing
1.1 The processing is aimed at enabling you to register for the use of the Wi-Fi service provided by the Company. The legal basis for pursuing this purpose can be identified in the execution of a contract or pre-contractual measures, specifically pursuant to Article 6, paragraph 1, letter b) of Regulation (EU) 679/2016.
1.2 The processing is also aimed at complying with all legal obligations to which the Company is subject. In relation to this specific purpose, the legal basis is identified in compliance with legal obligations pursuant to Article 6, paragraph 1, letter c) of Regulation (EU) 2016/679.
1.3 Personal data may be processed to protect the rights and interests of the Company or third parties both in judicial and extrajudicial settings. In relation to this specific purpose, the legal basis is identified in the pursuit of the legitimate interest of the Company or third parties to protect their rights and interests pursuant to Article 6, paragraph 1, letter f) of Regulation (EU) 2016/679.
1.4 The personal data collected may be used in a non-fully automated manner to perform aggregate statistical analyses that are not used to support measures or decisions concerning individual persons (e.g., for business intelligence, predictive and behavioral models). In relation to this specific purpose, the legal basis is identified in the pursuit of the legitimate interest of the Company to conduct analyses aimed at directing and improving the effectiveness of its activities and initiatives pursuant to Article 6, paragraph 1, letter f) of Regulation (EU) 2016/679.
1.5 Furthermore, with your explicit consent, personal data may be processed for the sending of promotional material and information related to the "world of sports" and the Company's initiatives, through automated contact systems such as, in particular, email, SMS, and instant messaging systems. In relation to this specific purpose, the legal basis is identified in the consent, freely given by you pursuant to Articles 6, paragraph 1, letter a) and 7 of Regulation (EU) 2016/679; however, if you are a minor, consent will not be collected and the activity will not be carried out.
1.6 Finally, with your explicit consent and only with regard to natural persons, personal data may be processed to analyze your habits and choices (e.g., participation in events, calls for proposals, projects, etc.) in order to personalize promotional communications or conduct specific surveys and investigations. In relation to this specific purpose, the legal basis is identified in the consent, freely given by you pursuant to Articles 6, paragraph 1, letter a) and 7 of Regulation (EU) 2016/679; however, if you are a minor, consent will not be collected and the activity will not be carried out.
2. Methods of Processing
The processing of personal data is carried out also with the aid of electronic means.
The processing is carried out, including through automated systems, with measures suitable to ensure the security of personal data, aimed at preventing unauthorized access, loss, or destruction, in compliance with the provisions of Chapter II (Principles) and Chapter IV (Controller and Processor) of the GDPR.
3. Nature of Data Provision
The provision of data marked with an asterisk is necessary for the pursuit of purposes that do not require your prior consent, and any refusal will result in the inability to use the Wi-Fi service.
4. Scope of Data Communication
4.1 Your data will be processed by the Company's personnel, as authorized data processors pursuant to Article 29 of Regulation (EU) 2016/679, and may also be processed on behalf of the Data Controller by additional external parties formally designated pursuant to Article 28 of Regulation (EU) 2016/679 as Data Processors.
4.2 Furthermore, the data collected during browsing and use of the Wi-Fi are processed by the electronic communication service provider in compliance with the law.
5. Transfer of Data
5.1 Personal data are stored on servers located in Italy. However, it is understood that the Data Controller, if necessary, will have the right to move the servers also outside the EU. In such a case, the Data Controller ensures that the transfer of data outside the EU will be carried out in compliance with applicable legal provisions, particularly those of Title V of the GDPR, or after signing standard contractual clauses approved and adopted by the European Commission.
5.2 Apart from the cases mentioned in point 5.1, the provided data will not be transferred outside the EU.
6. Data Retention Period
The data referred to in letters a) and b), with reference to the purposes mentioned in points 1.1, 1.2, and 1.3, will be retained for the period necessary to achieve the purposes for which they were collected, in accordance with sector regulations and, in any case, subject to different prescription periods provided by law, no longer than 5 years from the last interaction with the Company.
Data processed for the purpose mentioned in point 1.4 will be retained for no longer than 2 years from the date of collection. However, information obtained following the anonymization of data may be retained for a longer period, without allowing the re-identification of the data subject in any way.
Data processed for the purpose mentioned in point 1.5 will be retained until the withdrawal of your consent and, in any case, no longer than 24 months from the date of acquisition, while data processed for the purpose mentioned in point 1.6 will be retained until the withdrawal of your consent and, in any case, no longer than 12 months from the date of collection.
7. Rights of the Data Subject
At any time, data subjects can know the data concerning them, understand how it was acquired, verify if it is accurate, complete, up-to-date, and well-kept, and request its correction or deletion pursuant to Articles 16 and 17 of the GDPR. They will also have the right to receive the personal data provided and processed with consent, in a structured, commonly used, and machine-readable format, and to withdraw consent at any time regarding the data processing. Pursuant to Article 21 of the GDPR, they will have the right to object, in whole or in part, to the processing of data for reasons related to their particular situation. These rights can be exercised through a specific request addressed by registered mail to the Company or by email to: Questo indirizzo email è protetto dagli spambots. È necessario abilitare JavaScript per vederlo..
Data subjects also have the right to lodge a complaint with the Data Protection Authority.
april 28, 2025
Illumina
