Privacy Policy

In compliance with Legislative Decree 139/2021 and Eu regulation 2016/679 relating to the protection of individuals with regard to the processing of personal data and the free circulation of such data, Sportit keeps a register of the processing activities carried out, containing the following information:

Name and data of the user
Purpose of the processing
Description of the categories of data subjects and of the categories of personal data
Categories of recipients whose personal data are or will be disclosed

The following privacy policy allows users to be informed about the use and protection of personal data. It is important for us to provide clear and transparent information on how the data is collected and used. Per noi è importante apportare un’informazione chiara e trasparente sul modo in cui i Dati sono raccolti e utilizzati.

Lawfulness, correctness and transparency: personal data is processed lawfully, correctly and transparently towards the data subject;

Data minimization: personal data must be adequate, relevant and limited to what is necessary with respect to the purposes
Accuracy: personal data must be accurate and, if necessary, updated; all reasonable steps must be taken to promptly delete or rectify inaccurate data
Limitation of storage: personal data must be stored in a form that allows the identification of data subjects for a period of time not exceeding the achievement of the purposes for which they are processed
Integrity and confidentiality: personal data must be treated in such a way as to ensure adequate security of personal data, including protection from accidental destruction or damage.

This policy details in particular:

What is personal data?
Who is the controller of the personal data?
What data is collected and when?
Minors and third parties
Is it mandatory to provide personal data?
Why is the data collected?
Who will have access to my data?
Is personal data transferred abroad?
How long is the data stored for?
What are my rights and how can I exercise them?
What security for my data?
What are cookies and trackers?
Methods of data processing
Updates on the information

1. What is personal data?

In the context of this policy, the term “”Personal Data” or ” Data”” means any information that directly or indirectly identifies you, such as your name, address, telephone number, e-mail, IP address, and other Data communicated directly on Sportit’s proprietary platforms or generated by your browsing or customer service contacts.

2. Who is responsible for the processing of personal data?

The data controller is the person or body that sets the objectives and methods of processing such data.

Sportit S.r.l. with a registered office in Milan, Piazza Santa Francesca Romana 3, post code 20129, enlisted in the register of companies of Milan under no. MI – 2098729, tax code and VAT number 09545330962, online travel agency authorized by the Municipality of Milan Prot. MI-SUPRO / 0146812 of 08/08/2018 with policy number 1505002199 / Z of Nobis Compagnia di Assicurazioni S.p.A., which can be contacted at [email protected], is responsible for the processing of personal data under the conditions described in this policy.

3. What data is collected and when?

The data we collect and process varies according to the products, services or features that are used. We collect the data provided when our services are used and in particular when:

You navigate and consult Sportit’s proprietary platforms via cookies and trackers;
You create an account to access the services offered;
Products are added to the cart;
You place an order;
You sign up for newsletters and special offers;
You contact customer service by phone, email or chat;
You participate in a satisfaction survey or questionnaire;
You write on our social networks;
You respond to a job offer on our site.

As part of the activities, the data collected is:

Automatic data: IP addresses and domain names of the computers used by users who connect to the site, the addresses in URI (Uniform Resource Identifier) of the requested resources, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response given by the server and other parameters regarding the operating system, the browser and the IT environment used by the user.

Site navigation data collected by cookies and trackers;
Identification data such as name, surname, telephone number, e-mail address and domicile address for delivery;
Data relating to details of orders, payments and deliveries;
Telephone recordings of conversations with customer service (possibility to refuse registration);
Education and career data for job vacancies applicants.

Only in the case of uploading documents to obtain discounts reserved for certain categories:

Facial recognition to compare the photo of the uploaded document and verify its authenticity. All uploaded documents are stored only for the duration it takes to complete the verification process, then they will be removed permanently.

4. Minors and third parties

In case you enter personal data of a third person, you undertake to do so with the agreement of the same person after having informed them of the conditions under which their personal data is collected, used, saved and disclosed.

5. Is it mandatory to provide personal data?

Some information requested in the forms is mandatory and is marked with an asterisk or a specific note. Their collection is essential to the processing of the application. Consequently, in the absence of an answer, it is not possible to follow up on your request.

6. Why is personal data collected?

The processing of personal data has your consent as its legal basis and is carried out for the management of the following purposes:

Aim	Legal basis (legitimacy)	Further information on data use
Executing and following product orders	Execution of the purchase agreement	Issuing invoices, managing the payment of products, deliveries and returns after purchase.
Executing and following product orders	Consent	The storage of your Payment Card data for future purchases is done only at your request.
Executing and following product orders	Legitimate interest	At the end of a purchase we can carry out checks to prevent fraud, especially with the help of automatic data processing.
Executing and following product orders	Legitimate interest	After a purchase, we can carry out surveys and questionnaires designed to analyze the degree of customer satisfaction to improve the quality of our products and services.
Enabling and managing membership of Sportit’s proprietary platforms	Execution of the contract	By creating an account as a user of Sportit’s proprietary platforms, you enter personal data necessary to identify you in order to access the different services.
Enabling and managing membership of Sportit’s proprietary platforms	Execution of the contract	By creating an account as a user of Sportit’s proprietary platforms, you enter personal data necessary to identify you in order to access the different services.
Commercial and marketing prospecting actions	Consent	By subscribing to the newsletter you access the exclusive access services to daily event sales and you will receive e-mails to inform you about the start of sales and news. If you accept the methods and conditions applicable (in particular to social networks), we may repost on our Site or our social networks official pages the photographs or stories that you will share publicly or with us.
Managing communication with customer service	Execution of the contract	If the question relates to the order, the processing of the data is necessary for the execution of the contract and the proper management of the after-sales service.
Managing communication with customer service	Legitimate interest	Handling questions and complaints and answering your questions.
Managing communication with customer service	Legitimate interest	When contacting our Customer Service, telephone conversations may be recorded for quality control and training purposes.
Managing communication with customer service	Legal Obligations	If the question concerns the exercise of the rights set out in paragraph 10 “” What are my rights and how to exercise them? “” we will need to process your data to comply with our legal obligations.
Improving the Site and your customer experience	Legitimate interest	Ensuring the functioning of the Site and allowing you to take full advantage of its features.
Improving the Site and your customer experience	Legitimate interest	Ensuring the security of the Site.
Improving the Site and your customer experience	Legitimate interest	Measuring the attendance of the Site and carrying out anonymous statistics on visits based on legitimate interest.
Hiring management	Execution of the contract (pre-contractual measures)	We review and respond to all applications we receive for work or internships.
Hiring management	Legitimate interest	Creating a collection of CVs.
Management of a pre-litigation or litigation	Legitimate interest	To sanction violations of the general conditions of the Site or any other identified violation or to manage disputes.

In addition, the data will be processed in anonymized and / or aggregated form to improve the web browsing experience and to monitor the proper functioning of the portal, as well as for its protection. Finally, your data will be processed for the fulfillment of obligations under EU laws and regulations, or if ordered by the supervisory and control authorities; In this case, the legal basis of the processing is the fulfillment of the legal obligations to which the data controller is subject. This site processes your data in a lawful and correct manner, by adopting the appropriate security measures to prevent unauthorized access, disclosure, modification or unauthorized destruction of your data.

7. Who will have access to my data?

Your personal data is processed by the Sportit authorized staff. We may be required to disclose your personal data to:

Business partners who provide the service ordered by the customer (eg: rental centers, ski schools, hotels).
Sub-suppliers such as:
- IT service providers;
- payment and anti-fraud services providers;
- logistic service providers;
- transport service providers;
- marketing solutions providers;
- commercial prospecting and communication management providers;
- customer service providers;
- providers of competitive games;
- customer satisfaction research providers;
- service providers.
Lawyers or judicial auxiliaries, the administrative or judicial authorities involved in a possible dispute, in compliance with the legal obligations incumbent on Sportit or to allow Sportit to ensure the defense of its rights and interests;

8. Is my data transferred abroad?

The collected data is not subject to transfer abroad.

9. How long is my data kept for?

The data collected will be kept for a period of time not exceeding the achievement of the purposes for which they are processed (“conservation limitation principle”, Article 5, GDPR) or on the basis of the deadlines set by law. The verification of the obsolescence of the data stored in relation to the purposes for which they were collected is carried out periodically.

10.What are my rights and how can I exercise them?

10.1 The content of your rights

You will benefit from the following rights related to your data.

Right of access: this right allows you to obtain access to the data processed by us and to the information relating to their processing.
Right of rectification: possibility to ask to update or modify the data.
Right of cancellation: right to be forgotten that allows you to obtain the cancellation of data, unless they are necessary for the execution of the services or for Sportit to comply with its legal obligations or for you to ascertain and exercise your rights;
Right to define directives relating to the fate of the data after one’s death by designating a trusted third party, certified and in charge of enforcing the will of the deceased.

You also have:

the right to obtain the limitation of a processing: this right allows you to have the data blocked in some cases provided for by the regulation in force.
the right of portability of the data provided: this right allows you to recover the data or have it transferred to another body in the event that they are the subject of a treatment based on your consent or on a contractual relationship
a right to object: it consists on the right not to appear in the processing of the data or not to appear there again.

10.2 The exercise of your rights

The exercise of rights is carried out by contacting Sportir via email at [email protected], specifying information to allow verification of your identity.

11. What security for my data?

Technical and organizational measures have been put in place to protect personal data, especially against any violations likely to happen, in accidental or unlawful cause, destruction, loss, alteration, access or unauthorized disclosure.

These measures ensure an appropriate level of security and take into account the state of knowledge, the costs of implementation with respect to the risks and the nature of the data to be protected.

12. What are cookies and trackers?

When you use our site, information related to navigation is recorded in the form of cookies and trackers. You can change your preferences regarding the recording of this data at any time by accepting or blocking cookies or trackers.

13. Methods of data processing

The personal data you provide will be the subject of processing operations in compliance with the aforementioned legislation and the confidentiality obligations which inspire the activity of the owner. The data will be processed both with IT tools and on paper and on any other type of suitable support, in compliance with the appropriate security measures pursuant to Article 5 par. 1 letter F of the GDPR.

The information is not to be considered valid for other websites that may be consulted via links on the websites under the domain of the Owner, who is not to be considered in any way responsible for the websites of third parties.

14. Information updates

We inform you that this Information, provided pursuant to art. 13 of the Privacy Code will be subject to periodic updates.

Date of last modification: This information was updated on 24/10/2022.