Data protection

Privacy
Informative letter pursuant to Section II of the GDPR (EU) 2016/679 of 27th April 2016 and according to art. 13 of the g.v.D. no. 196 of 30th June 2003 regarding the protection of personal data during data processing.

We INFORM that the personal data of customers and suppliers, as well as persons who willingly communicate their personal details to our sales office or management (by telephone, fax or e-mail), as well as persons whose data has been taken over by third parties, for example in the collection of external data for commercial information, public directories, etc., are processed, in the latter case exclusively as personal data of a common/ordinary nature and type.

The association guarantees, within the scope of the law, that the processing of personal data will take place in respect of fundamental rights and freedoms as well as in respect of the dignity of the interested person, with particular reference to confidentiality, to personal identity, and to the right of the protection of personal data.

In the following chapters you will find information about how your personal data are treated. Your data may be collected during your navigation on our website or as a consequence of the services that we provide you. In order to take advantage of all the services offered by our website, it is necessary for us to collect and treat your personal data. The treatment of your personal data may consist in collecting, organising, storing, analysing, interpreting, modifying, selecting, comparing, using, connecting, blocking, communicating, cancelling and destructing data. The treatment of your personal data follows the principles of lawfulness and correctness, in compliance with the current law and EU Regulation 2016/679 of the European Parliament and Council. With this privacy notice, we like to inform you about the data we collect, why the collection is necessary, and also of your rights in connection with the treatment of your data.

Owner of the Treatment
The Owner of the Treatment of your personal data on this website site is ASV Rennerclub Vinschgau Raiffeisen with legal offices at Via Principale 22, 39027 Resia, Italy, VAT ID IT01736890219.
For more information, please contact us using the following addresses:
E-mail: [email protected]
PEC-mail: [email protected] – Recipient code: USAL8PV
Internet: www.reschenseelauf.it

Purpose of data processing
The ASV Rennerclub Vinschgau processes only data that are submitted voluntarily by the visitor to the website.
ASV Rennerclub Vinschgau processes data:

for registration at events
for the fulfilment of legal obligations, obligations arising from regulations, community standards and civil and tax laws
for the fulfilment of activities in connection with the business activities of our company, such as the filling in of internal statistics, for accounting purposes and for the keeping of customer/supplier accounts
to fulfil the obligations from agreements
to provide the information and services you requested
to check the efficiency of the system
for objectives of a business nature such as sending business information and advertising material for our own purposes and for partner events (by post, fax and e-mail)
for objectives of a marketing nature such as the sending of commercial information, promotional material
to protect liabilities (e.g. payments)
to determine customer satisfaction with regard to quality of products and services
for objectives regarding insurances, in particular credit insurances.

Type of treatment
Your personal data are treated manually, but also electronically, mainly through the use of automated processes, depending on the objectives. In this case, we specifically use databases and computerised platforms that may be managed by both us and third parties. Each type of treatment guarantees the respect and the confidentiality of the data treated. We store such data and general information in the database and in the servers as logfiles. In order to provide you with a unique navigation experience, we need to collect some technical data that are necessary for the correct operation of the website:

Browser type and browser version
Operating system
The „referrer“ website
The on our website linked webpages
Date and time of access
IP address
Other similar data and information

The legal basis for this type of treatment is article 6 of the GDPR. By accessing the website, computerised systems and management software automatically and indirectly collect and/or manage this number of data and information.
At first, the collection of these data in anonymous format is static. However, later on the data are treated to ensure a high level of protection and safety for any data that we collect.

Underage visitors (16 years)
The ASV Rennerclub Vinschgau website, which is governed by this privacy policy, is not intended for use by minors. We are aware of the need to protect data concerning minors, especially in the online environment. Therefore, we do not collect and store any data of underage visitors – except in an involuntary way.

Period of data conservation
In compliance with current laws, the owner of the treatment has defined different periods of data conservation depending on their usage:

As far as handling and answering your questions about products and activities, your personal data will be stored for a period of time strictly necessary for processing your request.
As far as managing activities connected with the navigation through our website, your personal data will be stored for a period of time strictly necessary to satisfy your requests.
As far as internal management and operational activities (for example time of conservation of invoices, administration, and tax information), your personal data will be treated for a period of time in line with the legal requirements for the specific purpose.
As far as the handling of disputes and litigations, your personal data will be stored for the whole time strictly necessary for pursuing such matters, and in any case not beyond the applicable prescription limits.

Use of cookies
In order to constantly improve the navigation of our website, our company uses cookies. Cookies are text files containing data, which during the navigation to a website are stored in the visitor’s computer through the browser. The storage of these data is necessary for the access recognition. You can delete any cookies stored in your computer at any time through the settings of your browser, or even set the browser so that cookies are no longer stored in the future. Should you decide on the latter, we cannot ensure that you will be able to use our website normally, and some services and functionalities may no longer be available. More information on cookies and their usage is available in the dedicated section.

Contact form
Should you decide to contact us using the contact form on our website, you will be asked to enter some personal data. This enables us to process your query. This is also the reason why the corresponding fields of the contact form are marked with an asterisk, or in any another way, as mandatory fields. The entering of personal or sensitive data other than those marked as mandatory will be at your discretion. Failure to enter, even in part, the mandatory information marked with an asterisk or similar character may result in the impossibility for us to answer your requests or deliver the requested services. The forwarding of requests using the contact form constitutes your implicit acceptance of the treatment of your personal data. The data that you transmit are treated and stored for a period of time strictly necessary for the processing of your request.

ASV Rennerclub Vinschgau does not intend to collect sensitive or judicially relevant personal data via its own website. Within the meaning of Art. 4 of the GDPR 2016/679, sensitive data includes personal information on gender, ethnic origin, religious, philosophical or other beliefs, political opinions, membership of parties, trade unions, associations or organisations with a religious, philosophical, political or trade union background, as well as information on health status or sexual orientation. For the purposes of Art. 4 of the GDPR 2016/679, judicially relevant data includes those personal data that indicate measures based on Art. 3 paragraph 1 letters from a) to o) and from r) to u) of D.P.R. No. 313 of 14 November 2002 on the criminal record, the register of administrative penalties resulting from criminal offences or proceedings pending in relation there to, or the status of accused or suspect within the meaning of Articles 60 and 61 of the Code of Criminal Procedure. We advise the website visitor not to provide such information on our website.

Use of the protected area
The “Registration” section of this website offers the possibility to register for the event. If you choose to provide us with your personal data, it will be processed exclusively for the above -mentioned purposes by persons specifically appointed for this purpose and in accordance with the regular internal administrative processes.

Newsletter
The forwarding of a newsletter containing commercial information complies with your previous consent or with the existing legal requirements. Our newsletter contains information of our company activities, our services, offers and news (for example, new communication platforms, suggestions, travel recommendations and offers, offers that are complementary to your travels, vouchers, competitions, and indications on how to participate to the blog). These communications may also be sent by our commercial partners. The frequency of our newsletter depends on the topics. In any case, before sending our newsletters, we make sure that we have received your preliminary consent through a system called Double Opt-in, in accordance with the provisions of art. 6, paragraph 1, letter b) of the GDPR. The recipient’s details may be transmitted to our technical partners for the newsletter sending. This collaboration is regulated by a personal data treatment sub-owner contract, as required by the GDPR. In compliance with current regulations, it is our duty to monitor and store the received consent for the newsletter. For this purpose, we store your subscription and confirmation of willingness to accept the newsletter. The personal data that you forward to us on such occasion are only used for the personalisation and heading of the newsletter. The subscription can be cancelled at any time in the newsletter itself. The period of conservation of the data is equal to the period of use of the service and the subscription itself.

Profiling
Profiling is any type of automated personal data processing activity that consists in using the information to assess, analyse and predict certain aspects of a natural person. For this type of marketing activities we signed agreements with third parties.

Collaboration with third parties
When we work with our suppliers and use third-party services, we make sure that they are contractually obliged to apply the same privacy/safety standards that we apply, and that such standards are also followed. Such third parties, who act as owners of the treatment of the personal data, guarantee that the data received are not stored and used for purposes other than the contractually agreed. Within the framework of these technical agreements, the mail addresses made available to them are encrypted using technologies such as “hashing”, so that any other parties are unable to obtain the original addresses.
It may happen that we need to transfer your data to third parties in Non-European Countries (EEC). The EEC (European Economic Area) consists of the countries of the European Union, plus Switzerland, Iceland, Lichtenstein and Norway. These countries guarantee the same safety standards for the treatment of personal data. This transfer of the data may be necessary if the servers (meaning the physical locations where the data are stored) or if the premises of our suppliers are in countries outside the EEC area. Should we be forced to transfer your data to a country outside the European Economic Area (EEC), it is our responsibility to ensure that they are treated with appropriate safety standards.

Dissemination of the data
The personal data will not be disclosed to other companies unless required by law or requested by the judicial authority or other bodies and institutes. An exception are the companies that take the times of the competitions. These also have the possibility to publish the results of the competitions in the results lists.

In principle, the personal data are not forwarded. Only in some specific cases, personal data may be disclosed to the following suppliers:

Subcontractors for technical checks and analysis, payments, identification and addressing services, suppliers of analysis services or credit insurance companies
Public administration or authorities, should this be required by law
Credit institutions with whom we undertake commercial relations for the handling of credits / debits, financial reasons
Any physical or legal persons, public and/or private (legal, administrative and fiscal consultants, courts of laws, chambers of commerce, etc.), if the data transfer is necessary or relevant for providing our service activities.

User rights
The affected person’s rights may be exercised by the same, and/or by a named person, by sending a written request with acknowledgement of receipt or e-mail to the owner of the treatment, at the operational address of the company ASV Rennerclub Vinschgau Raiffeisen, Via Principale 22, 39027 Resia, Italy. The affected person has the right to obtain a copy of the data in our possession, which will be made available in accordance with the terms of current regulations.
In specific cases, we do reserve the right to store some information for legal purposes (for example in case of suspected fraud, or breach of the general terms and conditions). Should you believe that your rights have been violated, you can contact the relevant data protection authorities or take legal action.
Below we are summarizing the rights of an affected person:

Right to receive confirmation of the data treatment
Each affected person has the right to ask the owner of the personal data treatment if the data are being treated. Anyone wishing to exercise this right may contact us at any time.
Right of information
Each affected person has the right to obtain at any time and free of charge information regarding the treatment of their own personal data. The notification must contain the following information:
- the purposes of the treatment
- the types of personal data being treated
- the recipients and/or the categories of recipients to which the treated personal data may have received, with particular reference and attention to any recipients outside the EEC, or international organizations. Moreover, as far as transfer of the data to countries outside the EEC area, the user also has the right to receive additional information regarding the safety guarantees in place during the treatment
- the period of conservation contemplated for the treatment and the storage of the personal data
- the possibility to issue a complaint with the data protection authorities
- in those cases when the personal data were not collected or treated by the company, the possibility of obtaining appropriate information on their source and origin
- the possibility of automated decisions, even when contemplated by art. 22, par. 1 and 4 of the GDPR on the profiling of personal data, and in this case obtain appropriate and supported information regarding the logics followed for such decisions and the possible consequences that this solution may bring for the the affected person.
Right of correction of personal data
The affected person has the right to request the immediate correction of any errors in their own personal data.
Right of cancellation
The affected person has the right to ask the owner of treatment to immediately delete their own personal data, if at least one of the following conditions is met and that the processing of the personal data is not required:
- The affected person have been collected and processed in a different way and are no longer necessary.
- The data subject withdraws the authorisation to the treatment, granted in accordance with art. 6, paragraph 1, letter a) of the GDPR, or art. 9, paragraph 2, letter a) of the GDPR, but also if the treatment is in violation of other data protection regulations.
- The affected person dissagrees the treatment according to art. 21, paragraph 1, of the GDPR, and demonstrates that there are no legitimate reasons for their processing.
- The personal data are not being treated in a compliant way.
- The cancellation of the personal data is required to fulfil a legal obligation contemplated by national or EU laws, to which the owner of treatment must abide.
- The personal data have been treated following the requests of services by a minor, in compliance with the provisions of art. 8, paragraph 1 of the GDPR.
Right of limitation of the treatment
The affected person has the right to ask the owner of treatment to limit the processing if one of the following conditions persists:
- The correctness of the personal data is disputed by the affected person. The limitation shall apply for a period of time that will give the responsible person the possibility to verify the correctness of the personal data.
- The treatment is not in compliance with current laws; the affected person refuses the cancellation of the personal data, asking instead their limitation.
- The owner of the treatment no longer needs the personal data for the purpose of the treatment, but the data subject requires the same to assert, exercise or defend their rights for legal action.
- The affected person has disagreed to current treatment according to art. 21, paragraph 1 of the GDPR and it has not yet been clarified if the legitimate reasons of the owner of the treatment have priority on those of the affected person.
Right of data transmission
The affected person has the right to receive, in a structured format, or in any case in a format readable by a data processing machine, the personal data originally delivered to the owner of treatment. The affected person has the right to transfer these data to another owner of treatment. Moreover, based on the provisions of art. 20, paragraph 1 of the GDPR, the affected person has the right to request that data will be directly transferred from the original owner to the new owner if a technical solution for both parties is available.
Right of disagreement
The affected person has the right to object at any time to the treatment of their own personal data due to reasons resulting from their specific situation. This also applies to profiling. In case of objection to the treatment of personal data, we will interrupt the treatment, unless we can provide valid reasons to continue and such reasons do not affect the interests, the rights and the freedom of the affected person in a negative way and unless the treatment is necessary for affirmation, exercising and defence of legal affairs.
For this purpose, it is necessary to contact the person responsible for data processing or the data protection officer via the e-mail [email protected]
Automated decisions, including profiling
The affected person has the right to disagree on automated data treatment, including profiling, that has legal consequences and a significant impact, unless the decision is taken to fulfil or abide to the terms of a contract between the affected person and the owner of the treatment. If the terms of a contract between the affected person and the owner of treatment include processing a certain request, with the explicit consent of the same, we will implement reasonable measures to safeguard the rights and freedom of the affected person.
Right to withdraw the consent to the data treatment
The affected person has the right to withdraw at any time the consent to the treatment of their own personal data previously granted to the owner of the treatment.

Place of the data treatment
The treatment of the personal data that you have transmitted is mainly happening within our working structures, in the departments where the individual responsible for such treatment is located. The agreed contractual activities will only take place in an EU or EEC country.
Any transfers, in part or in full, of the contracted services to a different country shall be subjected to the approval of the customer, and can only take place if the data guarantee and safety conditions do agree with art. 44 and subsequent of the GDPR.
For further information, please contact us at the addresses indicated in the “Copyright” section.

Data security
All necessary technical and organisational security measures are taken by ASV Rennerclub Vinschgau to protect personal data against loss and misuse. ASV Rennerclub Vinschgau uses internationally recognised security standards and procedures to protect personal data against unauthorised access, use or disclosure, alteration, loss and accidental or unlawful destruction.

Google Analytics
This website uses Google Analytics, a Google Inc. (“Google”) advertising efficiency analysis service. Google Analytics uses so-called “cookies”, small text files that are stored on the visitor’s computers and allow assessing the use of the website. The information (including the user’s IP address) is collected through cookies and sent to a server in the USA, where it is stored. Google then uses this information to analyse the navigation of our website, create reports of the activities on the website and provide different services. In some cases, Google may also transfer the information to third parties, for example if required by law or to other companies that process data on its behalf. Your IP address can under no circumstances be used by Google for purposes other than those indicated above. By visiting the website users agree to the treatment of their own personal data by Google for the above purposes. The installation of cookies on your computer may be prevented by adjusting your browser settings accordingly. However, in this case you need to be aware that the disabling of cookies could limit the quality of your navigation through the website, or your use of the same. To prevent Google from collecting and processing data as explained above, you need to download and install the fllowing plugin: https://tools.google.com/dlpage/gaoptout?hl=gb. Further information on the conditions of use and the Google Analytics data protection policy is available at the following link: https://www.google.com/analytics/terms/gb.html or https://support.google.com/analytics/answer/6004245?hl=gb. The website uses Google Analytics in IP-Masking mode, to ensure that IP addresses are collected in an anonymous format. It is important to point out that we use Google Analytics to evaluate and analyse AdWords data for statistical purposes, and also Double-Click-Cookie. Should you not be happy with this activity, you can disable it by visiting https://adssettings.google.com/?hl=gb.

Use of Google AdWords, Google Tag Manager and Remarketing
This website uses cookies for remarketing campaigns, with the objective of addressing visitors with advertising campaigns later on. The affected person has the possibility to disable these types of cookies by visiting the following link: https://adssettings.google.com/?hl=gb.

Facebook Pixel
Anyone visiting our website should be aware that the Facebook Remarketing Tag has been reintroduced. With this type of tag, when visiting this website, the user is automatically resent to the Facebook servers. In specific, the Facebook servers receive information on the website navigation and will use it for managing your profile. Further information on the data collection and policy is available at the following link: https://www.facebook.com/about/privacy/. As an alternative, it is also possible to disable Remarketing by Facebook by visiting the following link: https://www.facebook.com/settings/.

YouTube
This website uses the services of YouTube LLC, 901 Cherry Avenue, San Bruno, CA 94066, USA, represented by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA, with the purpose of incorporating video feeds. When users visit a page with incorporated video feeds, their IP addresses are automatically collected and sent to YouTube. During this stage, cookies are also normally installed on the computer. We have incorporated YouTube videos in full compliance with the expanded privacy policy. Also in this case, YouTube will contact Google. However, according to the Google privacy declaration, no personal data are treated. This means that YouTube will not collect additional information about the visitor until the visitor actually watches the video. However, should the visitor watch the video, the IP address will be forwarded to YouTube. If you are logged in, YouTube stores the information in your personal profile. We are unable to provide further information on the possible collection of data. For more information visit the following link: www.google.de/intl/de/policies/privacy/.

Google Fonts
This website uses Web Fonts to ensure the correct display of the graphic content made available by Google. When loading our website, your browser also loads the necessary fonts in the Cache area of the browser itself, so that graphic content is displayed correctly.
In order to do so, the browser needs to connect to the Google server, which will then receive the information that your IP address has loaded our website. The use of Web Fonts by Google ensures a clean and visually enjoyable navigation experience. This represents a legitimate interest also according art. 6, paragraph 1, letter f) of the GDPR. Further information on the use of Web Fonts is available at the following link: https://developers.google.com/fonts/faq , or can be found in the privacy notice of Google itself at https://www.google.com/policies/privacy/.

SSL certificate
We treat personal data collected on the website using computerised processes. Personal data are protected by Secure Socket Layer (SSL) encryption. This technology protects the user from the risk of unintentional disclosure of personal data when using an unprotected connection.
The user is notified when accessing a protected connection by a padlock icon. By clicking the padlock icon, the user can then make sure that the SSL certificate is valid and up to date.

Blog activities

We collect information when you use our discussion forum.
We partner with DISQUS to provide and host a a public sharing platform. Please remember that anything you post on the forum is public and not coverd by the privacy policy.
We collect information when you suggest a link
We collect information when you communicate with us directly.

Links to other websites
This website contains links to other sites that are not owned or controlled by us.
Please be aware that we are not responsible for the privacy practices of other sites.

Google Maps
This website uses Google Maps owned by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.
Using Google Maps simplifies locating the places of your interest.
To use Google Maps, it is necessary to save your IP address. This information is transferred to the Google servers located in the USA. We do not have any impact on Google’s data treatment.
The data treatment is regulated by art. 6 (1) (f) GDPR.
Please find further information reading Google’s privacy policy: https://policies.google.com/privacy?hl=en-GB

Social Wall
We like to keep you up-to-date. And for delivering always the latest news we use a social wall. On our social wall you’ll find the latest posts coming from our social media platforms. The content does automatically appear on our website. For all the content published on our social media channels we refer to the provider’s privacy policies.

Photographing at events
As part of our association activities we organise events and take part in events. In order to be able to remember these moments in the future, we capture some of them on camera. Please note that a part of the pictures will be published on our website for our website visitors or our social media for our fans to see. The photos will not be taken in secret or with hidden cameras and will not be used for commercial purposes.

Images
The Participant accepts that the Event may be televised, filmed and/or otherwise recorded and that photographs and/or footage may be taken, all of which may record the Participant’s participation in the Event. By participating in the Event, the Participant grants the Organiser and persons authorised by the Organiser the free and unrestricted right to use such photographs, film footage and recordings for any purpose it deems appropriate, including but not limited to publication, exhibition, sale and distribution by means of film, television, radio, print media, internet, promotional material or other new media now or in the future.

Official Photographer
In addition, the participant accepts and acknowledges that our official photographer may photograph the participant while participating in an event. This means:

The organiser and official photographer may identify the participant in a picture with reference to the race number;
The Organiser and Official Photographer may advertise and sell photographs of the Participant taking part in the Event on the Organiser’s and Official Photographer’s website; and
Whilst such photographs are intended for purchase by the Participant, friends and family (to commemorate the Participant’s participation in an Event) and third parties may also purchase such photographs by entering a name or race number in the search function on the Official Photographer’s website.

By registering and paying the relevant fee, the participant agrees to the above terms, conditions, and privacy policy without exception.

Borlabs Cookie
This website uses a Borlabs Cookie, which sets a technically necessary cookie (borlabs-cookie) to store your cookie preferences. Borlabs Cookie does not collect any personal data.
The borlabs-cookie cookie stores the consent you have given when you entered the website. If you wish to revoke these consents, simply delete the cookie from your browser. If you re-enter/reload the website, you will be asked again for your cookie consent.

Further topics