PRIVACY POLICY | ULTRABIKING SARDINIA 790
1. Data controller and categories of data processed
Participation in the Event and the provision of associated services involve the processing of personal data of the participants such as:
- personal data and membership of sports companies / bodies;
- images shot through video and photos;
- times and times of transit at checkpoints and / or timing;
- geographic location data for participants who use a geographic location detection device and associated services.
Data relating to the health of the interested party may also be processed (ie data on pathologies obtainable from medical certificates or declared directly by the interested party), where strictly necessary for the purposes of registration and participation in the Event and only with the explicit consent of the interested party. . In such cases, the consent of the interested party is required for participation in the Event and failure to perform the same prevents the completion of the registration
The data controller is the organizer ULTRABIKING SARDINIA ASD.
2. Purpose and conditions of the processing
The use of the personal data indicated above is inherent in the sporting and public nature of the Event, in its organizational needs and in the offer to participants of the services provided.
The Organizer uses and processes the data, including through its technical and service partners and the companies connected to it, for the following purposes:
- erification of participation requirements;
- timing and tracking services;
- medical assistance services;
- photo and video services for the media and participants (also for a fee);
- communications to sports and public authorities;
- chronicle and documentation of the Event;
- promotion and commercial exploitation of the Event.
The conditions for the processing therefore consist of:
a) provision of services related to the registration of participants in the Event and the regular performance of the same (for example, in the case of management of the participant's registration, detection of times and publication of results or making available to participants of the photos and videos of the Event);
b) consent of the interested party (for example, in the case of the processing of data relating to health or for marketing purposes, as specified below);
c) pursuit of the legitimate interest of the Organizer and its business partners (for example, in the event of the publication of images and results to document the Event);
d) fulfillment of legal obligations (for example, in the case of communications due to public authorities);
e) safeguarding the vital interests of the interested party or another person (for example, in the event that medical assistance services are required during the Event).
The Organizer draws the attention of all participants to the fact that during the course of the Event, video and photographic shots of the participants will be made, both in motion and in fixed poses on the basis of the aforementioned assumptions (in particular point a-c).
The Organizer may use, or allow sponsors and technical and service partners of the Event to use, such images for the following purposes:
- chronicle and documentation of the Event;
- marketing of photographic and video services of the Event with consequent offer, free of charge or for a fee, of photos and videos, for private use only, to all participants and subjects authorized by them.
The authorization to shoot one's own image in the context of the Event represents a necessary requirement to participate in the Event to the extent that the procedures for carrying out the latter, as described in the Regulations, provide for the video-photographic recording of the event for the purpose documentation and the consequent offer to all participants of services for the purchase of photos and videos of the Event; therefore, failure to authorize the use of one's image for the aforementioned purposes, as requested in the Release, will make it impossible to register for the Event.
3.Area of circulation and dissemination of data
The Organizer informs the participant that the Event is organized could also be managed through the services of technical and commercial partners and with the support of sponsors. The services provided by such partners may include:
- registration services;
- tracking services;
- timing services;
- photo and video shooting services;
- any other services.
Some of these services may require or require the registration of the interested party on the partner's platform or in any case processing carried out by the partner in the capacity of independent Data Controller; in such cases, the interested party is invited to carefully read the privacy information provided by the partner. The interested party can know the list of partners and sponsors at any time by writing to the Organizer.
In consideration of the public nature and purpose of the Event, participants also acknowledge and accept that the data relating to their image, their times and results or their position in real time, where appropriate tracking services are active, may be made publicly accessible through dissemination on the websites of the Organizer, sponsors and service partners of the Event and / or communicated to third parties for the purpose of reporting, documentation and promotion of the Event itself, for the provision of specific services connected to the Event , such as the sale of video-photographic services, in the fulfillment of specific legal or regulatory obligations and for the safeguarding of vital interests of the participants (for example, communication to competent authorities and rescue personnel for rescue operations and / or the supply of medical assistance services as part of the Event).
4. Consent for the advertising exploitation of the participant's image
With the specific and free consent of the interested party, the Organizer may take advantage of the footage that includes his image for the promotion of the Event and other events organized by the Organizer. The interested party can revoke this consent at any time by writing to the Organizer.
5. Treatments for marketing purposes
If the participant uses his own e-mail address for the purpose of registering for the Event, the Organizer may use this address, without the prior consent of the participant, to send him, also through his service partners, communications of a commercial nature relating to to its own products and services connected to the Event or in any case to other initiatives and events similar to the Event. The interested party may object to the sending of such communications at any time by writing to the Organizer or by following the specific instructions contained within each communication.
Without prejudice to the above, with the specific and free consent of the interested party, which can be revoked at any time, the Organizer may, directly or using its service partners:
a) use the contact details of the participants (e-mail, address and telephone number) for purposes of commercial information, market research, surveys, direct offers of its products and services and / or products and services of its partners service and commercial, through traditional methods (i.e. paper mail, telephone calls via operator, etc.) and automated communication tools (i.e. pre-recorded telephone calls, e-mails, faxes, sms, mms, apps, etc.)
b) transfer the contact details of the participants (email, address and telephone number) for commercial information purposes, market research, surveys, direct offers of their products and services carried out through traditional methods (i.e. paper mail, telephone calls via operator, etc.) and automated communication tools ( i.e. pre-recorded phone calls, e-mails, faxes, sms, mms, apps, etc.). These third parties will act from time to time as independent Data Controllers, with the consequent burden of providing the data subject with their own privacy information in accordance with the law.
6. Data retention and data processors
The data of the interested parties will be stored in the Organizer's computer archives and protected by appropriate security measures in line with the provisions of Article 32 of EU Regulation 2016/679. The data will be kept for the time necessary in relation to the purposes for which they were collected and possibly for a further period of time if the retention of the data is necessary for the protection of a right of the Organizer or of a third party (for example, the data connected to the registration for the Event will be kept for ten years, also in consideration of possible complaints by the interested party in the ordinary ten-year limitation period; the data relating to the results of the Event will be kept as long as a current interest in the documentation is detectable of the Event itself; the contact data for sending commercial communications will be kept as long as the interested party does not exercise his right to object or revoke the consent previously granted; the data relating to the image of the participants will be kept for the entire time in which the Organizer can legitimately dispose of the filming of the Event).
For the purposes of conservation and, more generally, of the processing, the Organizer may use third parties under its own responsibility; these subjects, applying the conditions of the law, will be appointed by the Organizer as its Data Processors pursuant to art. 28 of EU Regulation 679/2016. To find out the complete list of Data Processors appointed by the Organizer from time to time, the interested party can send a request through the contact details indicated in the following art. 8)
7. Data transfer outside the EU
In the case of international data transfers starting from the European Economic Area (EEA), where the European Commission has recognized that a country not belonging to the EEA is able to guarantee an adequate level of data protection, the data of the interested party may be transferred on that basis
For transfers to countries not belonging to the EEA whose level of protection has not been recognized by the European Commission, the Organizer will rely on an exemption applicable to the specific situation or will implement one of the following measures to ensure the protection of your data: contractual clauses standards approved by the European Commission; o binding corporate rules, where applicable
To obtain a copy of these measures or details on where they are available, you can send a written request as indicated in the next article
8. Rights of the interested party
At any time, the participant can exercise their rights regarding the processing of personal data pursuant to art. 15-22 of the GDPR 2016/679. These rights include:
a) Access: the interested party can obtain information in relation to the processing of his data and a copy of such data;
b) Rectification: if you believe that your data is inaccurate or incomplete, the interested party may request that such data be modified accordingly;
c) Cancellation: the interested party can request the cancellation of data if he revokes his previous consent and there is no other legal basis for the processing or in the other cases provided for by law;
d) Limitation: in the cases provided for by law (for example, if he disputes the legitimacy of the processing or the accuracy of the data), the interested party can obtain the limitation of the processing of the data without their being deleted;
e) Opposition: the interested party may oppose the processing of data if the processing is based on a legitimate interest of the Organizer for reasons connected to his particular situation, unless there are compelling reasons for which the Organiser's interest prevails over his rights (this is the case, for example, in which the processing is necessary to defend a right of the Organizer in court;)
f) Withdrawal of consent: the interested party can revoke the consent previously given for the purposes of the processing.
The interested party may, at any time, oppose the processing of his data for marketing purposes and revoke the consent previously given for this purpose, also by following the procedure and instructions contained in the text of each commercial communication.
The participant is aware that his opposition (see previous letter e) or revocation of consent (see previous n.4) or authorization (see Disclaimer) to the use of images that portray him will have effects within the limits within which it will be possible to block the publication of such images with reasonable means and costs. The opposition, as well as the revocation, will not, however, undermine the lawfulness of the uses that have occurred in the meantime.
The rights in question may be exercised by sending a written communication to the Organizer at the following email address: info@ultrabikingsardinia.com
In accordance with current legislation, in addition to the aforementioned rights, the interested party also has the right to lodge a complaint with the Guarantor for the protection of personal data, Piazza di MonteCitorio n. 121 - 00186, Rome, Fax: (+39) 06.69677.3785, Protocol@pec.gpdp.it