Information pursuant to Articles 13 and 14
of European Regulation 679/2016
Article 13 of European Regulation 2016/679 (hereinafter GDPR) states that every individual, referred to as the “data subject,” must be informed clearly, simply, and comprehensively about how their personal data is processed.
In addition to personal data (information capable of identifying a natural person, even indirectly), so-called browsing data may also be processed. For further information on browsing data, please refer to the privacy policy available on the website www.pistamotocrosschieve.it.
1) Data Controller and Data Processor
The Data Controller is SSD Motoclub Zeta MX Park a r.l., represented by its legal representative Zetti Federica, with registered office at 26827 Terranova dei Passerini (LO) – via IV Novembre 18 – VAT Number: 10905100961, hereinafter also referred to simply as “SSD Motoclub Zeta” or “The Company.”
The Data Processor is Mr. Zetti Alberto, with an elected domicile at the Company’s office.
Currently, a Data Protection Officer (DPO) has not been appointed, as the activity does not involve large-scale data processing or systematic monitoring of data subjects.
2) Purpose and Legal Basis of Data Processing
| Purpose of Processing | Legal Basis |
|---|---|
| ACCESS TO AND USE OF THE FACILITY | Contract Legal/regulatory obligations |
| BROWSING ON THE WEBSITE WWW.PISTAMOTOCROSSCHIEVE.IT Processing of anonymous data to improve navigation and monitor the proper and lawful operation of the website, as described in the website’s privacy policy | Contract |
| NEWSLETTER SUBSCRIPTION Subscribing to the newsletter entails the sending of communications via email, SMS, WhatsApp (including group participation), etc., containing information about the Company’s activities | Data subject’s consent (always revocable) |
| SENDING COMMERCIAL COMMUNICATIONS Messages via SMS, WhatsApp, email, social networks, phone calls containing promotional and/or informational content about the Company’s and/or partners’ products and/or services | Data subject’s consent (always revocable) |
| PUBLICATION AND DISSEMINATION OF IMAGES ON THE WEBSITE AND SOCIAL NETWORKS Images collected solely in the public context of sporting events | Consent for athletes Legitimate interest |
| ADMINISTRATIVE, ACCOUNTING, AND TAX COMPLIANCE Compliance with obligations imposed by laws and regulations | Legal obligations |
| LEGAL DEFENSE OF THE COMPANY’S INTERESTS Protection of the Company’s interests | Legitimate interest |
3) Consequences of Failing to Provide Personal Data
For participation in activities, providing personal data is mandatory. Failure to provide such data prevents participation.
If the required consent is not given (where necessary), participation in the related activity will not be possible.
4) Methods of Data Processing
Data processing (including special categories of data under Article 9 of this notice or data relating to minors) will be limited to organizing the use of the facility and educational activities, sports competitions, and events, as well as administrative, tax, and accounting management.
All data processing operations will be conducted in accordance with the principles of fairness, legality, transparency, and confidentiality to ensure the integrity and availability of personal data and prevent unauthorized access.
Personal data may be processed using both paper and electronic archives (including portable devices) and handled with methods strictly necessary to achieve the purposes outlined above.
For institutional purposes (e.g., facility use by athletes and/or publicly recognized teams), the Company may disseminate photos, videos, names, and voices through paper and electronic means related to the public event.
5) Data Retention
Personal data processed for the purposes outlined above will be retained only for the time required by tax laws, legal regulations, or for the protection of the Company’s rights against potential legal claims.
6) Data Communication
Personal data may be disclosed to the following parties:
- Employees and/or collaborators authorized to process the data within their respective duties;
- CONI, the Italian Motorcycling Federation, or other Sports Promotion Entities, as well as other organizers of sporting events with whom the Company collaborates to achieve its institutional purposes;
- Insurance companies;
- Consultants responsible for carrying out legal and/or tax activities;
- Public authorities and law enforcement agencies;
- Other entities when communication is necessary or functional for establishing and managing the relationship as described above.
7) Data Transfer to Third Countries and/or International Organizations
Pursuing institutional purposes does not involve the transfer of data to countries and/or organizations outside the European Union.
8) Data Profiling and Dissemination
Your personal data is not subject to any entirely automated decision-making processes, including profiling.
9) Special Categories of Personal Data
Pursuant to Articles 9 and 10 of EU Regulation 2016/679 (GDPR), you may also provide the Company with data classified as “special categories of personal data.” These include data revealing “racial or ethnic origin, political opinions, religious or philosophical beliefs, trade union membership, genetic data, biometric data for uniquely identifying a natural person, health data, or data concerning a person’s sex life or sexual orientation.” Such data will only be processed for the necessary institutional purposes specified above and, in some cases, with your free and explicit written consent.
10) Data Subject’s Rights
Under the GDPR, you have the right to withdraw consent at any time and to lodge a complaint with a Supervisory Authority (Data Protection Authority – www.garanteprivacy.it) for any violations regarding data processing.
Furthermore, according to Articles 15-22 of the GDPR, you have the right to request access to your personal data, rectify inaccurate data, delete data, limit processing under certain conditions, object to processing, and obtain the portability of data provided, if processed by automated means based on your consent.
You can exercise your rights by writing to the following address: