PRIVACY POLICY

Dear user,

We inform you that, for the execution of relationships with its users, Enjoy Sport s.a.s di Bernasconi Fermo collects data related to them, acquired also through the website runandbike.it, directly or through third parties, qualified as personal data by Legislative Decree no. 196/2003 and by EU Regulation 2016/679. The legislation on the protection of personal data provides that anyone who processes them is required to provide the interested user with complete information on the elements qualifying the processing.

Therefore, in accordance with EU Regulation 2016/679, we provide you with the following information:

Data Controller

The data controller is Enjoy Sport s.a.s di Bernasconi Fermo, with registered office in Viale Felice Cavallotti 2, 22100 Como (CO), VAT number 03099260139.

Any partner sites that participate in the processing of data autonomously may act as independent data controllers.

Subject of the Processing

Browsing Data

The computer systems and software procedures used to operate this website acquire, during their normal operation, certain personal data which are then implicitly transmitted when using Internet communication protocols.

These are data that, by their nature, could, through associations and processing with data held by third parties, allow users/visitors to be identified (e.g. IP address, email, domain names of the computers used by users/visitors connecting to the site, etc.).

This category of data includes IP addresses or domain names of the computers used by users who connect to the site, the URI (Uniform Resource Identifier) addresses of the resources requested, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response given by the server (successful, error, etc.) and other parameters relating to the user's operating system and computer environment.

This data is used only for statistical information and to check the correct functioning of the site.

Web contact data is not stored for more than seven days, except for any investigations of computer crimes against the site.

No data resulting from the web service will be communicated or disseminated.

Data Provided Voluntarily by the User

Apart from what has been specified above, the provision of personal data by Users is optional, albeit necessary for the provision of certain services: in these cases, therefore, failure to provide the data may compromise or make it impossible to register on the site and/or provide the service. Personal data provided by users who voluntarily interact with the website, provided for the purpose of obtaining certain services (registration for events, subscription to the newsletter, requests for information, sending of email messages, addresses for the selection of clothing items), are used only to provide the requested service or performance and are communicated to third parties only if strictly necessary for the performance of the service itself.

The personal data that the User may voluntarily provide are as follows:

Personal Data collected: name, surname, email, phone number, address.

The provision of data for direct marketing purposes is optional, and the user is free to give their specific and distinct consent for such processing. This consent can be revoked at any time by modifying the data associated with their profile each time they log in to their account on the site. For the processing of personal data, consisting of sending newsletters by email as well as informative material relating to services offered by the Data Controller, it will always be possible to revoke consent by clicking on the Unsubscribe link at the bottom of each email or by sending an email to info@runandbike.it indicating "data cancellation" in the subject line.

Summary information notices are provided or displayed on the pages of the Site prepared for requested services, in order to draw the interested party's attention to the processing of their personal data. In addition, depending on the case, the mandatory or optional nature of the communication of personal data will be highlighted by placing an asterisk (*) next to the mandatory information.

Cookies

In addition to the data expressly provided to the Data Controller, other data deriving from the user's navigation on the site may be recorded: when the user accesses it, the site may send the user a "cookie". A "cookie" is a small text file that the site can automatically send to the user's computer when they view our pages. "Cookies" serve to make navigation more convenient, as well as to obtain information on the user's navigation within the site and to allow the operation of some services that require identification of the user's path through different pages of the site. For any access to the site, regardless of the presence of a "cookie", the Site records the type of browser (e.g. Microsoft Edge, Safari, Chrome, Firefox), the operating system (e.g. Windows OS, macOS) and the host and URL of origin of the user-navigator, as well as data on the requested page. This data can be used in aggregate and anonymous form for statistical analysis of site usage.

Links to Social Network Services

Through the Website, Users are provided with some services provided by third parties, with particular reference to linking to social network services (Facebook, Twitter, Instagram, LinkedIn, etc.). These links set a cookie. The collection and use of information by these third parties are governed by their respective privacy policies to which reference should be made.

Processing Methods

Processing is carried out using automated tools (e.g. using electronic procedures and media) and/or manually (e.g. on paper) for the time strictly necessary to achieve the purposes for which the data was collected and, in any case, in compliance with current legal provisions.

Specific security measures are observed to prevent the loss of data, illicit or incorrect use of the same and unauthorized access, in order to allow access only to authorized personnel or persons appointed in accordance with current legal provisions. The list of persons appointed pursuant to art. 29 of Legislative Decree 196/2003 and 28 of EU Regulation 679/2016 is available at the Data Controller's headquarters.

The personal data acquired, even through paper forms, will be stored electronically, stored and archived on servers owned and/or used by the Data Controller and located at the latter's headquarters, managed in a secure environment with controlled access.

Purposes of Processing

The purposes of the processing carried out by the Data Controller are to be understood as follows:

management and maintenance of the site;
participation through the Site in initiatives organized by the Data Controller (e.g. events);
prevention of fraudulent activities or harmful abuses to the Site;
collection, storage and processing for the establishment and operational and administrative management of the contractual relationship connected to the provision of the service offered on the site;
use of the user's personal data (in particular email address) to make communications related to the performance of the established contractual relationship;
processing of personal data provided and those inferred from navigation on the site in order to provide a service consistent with the indications transmitted during the use of the service;
collection, storage and processing of data to perform statistical analysis in anonymous and/or aggregate form;
to send the newsletter via email;
with the explicit consent of the User, to carry out direct marketing activities and/or profiling with automated tools (in particular via email) and with non-automated tools (operator telephone or postal mail);
compliance with legal obligations and measures of the competent Authorities;
exercise of the rights of the Data Controller, for example the right to exercise a right in court;
communication of commercial information on future initiatives, announcements of new products or services;
market research, statistical and economic analysis;
sending of advertising or promotional material, and for promotional initiatives in general.

Legal Basis of Processing

The legal basis for the processing of Customer data carried out by the Data Controller through the site consists of the contractual relationship established or the pre-contractual agreements with the data subject, while, in the absence thereof, the legal basis is to be found in the legitimate interest of the Data Controller in free economic initiative pursuant to art. 41 of the Constitution. With regard to marketing purposes, the legal basis is the free and express consent as well as the legitimate interest of the Data Controller.

Recipients

In addition to the data controller, in some cases, categories of persons involved in the organizational structure of the Site (administrative, commercial, marketing, legal, system administrators) may have access to the data. Furthermore, the Data Controller may use external parties (such as third-party technical service providers, carriers, hosting providers, cloud services, IT companies, communication agencies) who may be appointed as external Data Processors. The updated list of Data Processors can always be requested from the Data Controller, by contacting the address indicated above.

Transfer to a Third Country

The data controller uses servers located in the following countries for the services offered by the site: Switzerland, and therefore, based on Reg. 2016/679/EU, to be considered suitable as it falls within the EU scope. Data processed by the Data Controller is not subject to dissemination.

Data Processing Location

The processing operations connected to the web services of this site take place at the aforementioned headquarters of the Data Controller and are carried out only by personnel authorized to process them. Personal data provided by users who submit requests for services, performances or information are used only to perform the requested service or performance or to provide the requested information and are communicated to third parties only if necessary for this purpose and therefore, limited to services and performances requested, the data may be transmitted to internal company personnel, collaborators, correspondents and agents, consultants of the company in administrative, commercial, tax and contribution accounting and computer, and telematics matters, to banking and financial institutions, as well as to subjects appointed to protect the interests of the Company in judicial, administrative and extrajudicial proceedings and for the recovery of credits to persons appointed for the shipment of documents and for company control.

Data Retention Times and Location

Processing operations connected to the web services of this site take place at the aforementioned company headquarters and are carried out exclusively by company personnel or by external parties appointed for maintenance and updating operations. No data is subject to dissemination. The data is processed for the time necessary to perform the service requested by the User and then destroyed using secure destruction means, such as document shredders for paper and wiping for data on computer media.

Optional or Mandatory Nature of Data Provision

With the exception of what is specified for navigation data that is automatically acquired, users/visitors are free to provide their personal data or not provide it. Failure to provide it can only result in the impossibility of obtaining what is requested. The optional, explicit and voluntary sending of email to the addresses indicated on this site involves the subsequent acquisition of the sender's address, necessary to respond to requests for services and/or information, as well as any other personal data entered in the message.

Rights of Data Subjects

Data subjects have the right at any time under the GDPR to obtain confirmation of the existence or otherwise of such data and to know its content and origin, verify its accuracy or request its integration or updating, or rectification. Requests should be addressed to Enjoy sport s.a.s di Bernasconi Fermo by post to our address Viale Felice Cavallotti 2, 22100 Como (CO) or directly to the email address info@runandbike.it.

In relation to the processing of this data, the User has the right to obtain from the Data Controller:

confirmation of the existence or otherwise of their personal data, their communication in an intelligible form and knowledge of their origin, as well as the logic on which the processing is based;
the deletion, within a reasonable period, of their data, their transformation into anonymous form or the blocking of those processed in violation of the law;
the updating of data, their rectification or, where interested, their integration;
the attestation that the operations referred to in the previous points have been brought to the attention of those to whom they have been communicated, provided that this is not impossible or does not involve the use of disproportionate means;
the rectification or deletion of data concerning them or the limitation of processing;
information about the existence of an automated decision-making process and, in such cases, significant information on the logic used, as well as the importance and expected consequences of such processing for the data subject;
the User also has the right a) to revoke consent for optional processing not connected to the performance of the contract signed with the Data Controller; b) to obtain human intervention from the Data Controller, to express their opinion and to contest the decision concerning the processing carried out by automated decision-making processes;
the User also has the right to object, for legitimate reasons, to the processing of personal data concerning them, even if relevant to the purpose of the collection, to request portability, to exercise the right to be forgotten, as well as to contact the competent supervisory authority in the field of personal data protection for any violations they believe they have suffered, which for Italy is the Guarantor for the protection of personal data via email, at the address: garante@gpdp.it, via fax: 06 696773785, or by mail, to the Guarantor for the protection of personal data, which is based in Rome (Italy), Piazza di Monte Citorio n. 121, cap 00186.

Minors

This Website and the Data Controller's Services are not intended for individuals under the age of 18, and the Data Controller does not knowingly collect information related to minors. In the event that information about minors is inadvertently recorded, the Data Controller will promptly delete it upon request from users.

This document constitutes the privacy policy of this site and may be subject to updates.

Updated

December 2023

PRIVACY POLICY

Title