SSD Città di Campobasso Privacy and Cookie Policy

Privacy Policy

INFORMATION ON THE PROCESSING OF PERSONAL DATA
(pursuant to articles 13 and 14 EU Reg. 2016/679 “GDPR”)

This information on the processing of personal data describes the processing of personal data entered or collected on the site www.campobassocalcio.store (“Site”) and any other Sites on which the same is published.

DEFINITIONS

Aggregate Data. Aggregate data means information about groups or categories of users, which does not identify and cannot reasonably be used to identify an individual user.

Anonymous Data. Anonymous data means information that does not directly or indirectly identify and cannot reasonably be used to identify an individual user.

Application. Application means a program or service operated by SSD arl Città di Campobasso hereinafter referred to as Campobasso Calcio (or on behalf of Campobasso Calcio) that may be displayed on various online, mobile or other environments and platforms, including those operated by third parties, that allow us to interact directly with our users.

Data Subject. E ‘the natural person to whom the personal data refer, identified or identifiable, that is, that can be identified even indirectly, by referring to information or characteristic elements, or through the intersection of multiple personal data.

Minors. Minors are individuals identified by us as minors who are not legally able to consent to the collection and processing of personal data.

Data Controller. The natural or legal person who determines the purposes and means of the processing of personal data. The personal data controller responsible for personal information collected through the Sites, Applications or other channels identified above is SSD arl Città di Campobasso – Sede Legale – Contrada Selvapiana Snc – 86100 Campobasso – Italy

Responsible for processing. The person responsible for the processing of personal data is a natural or legal person who deals with the processing of personal data on behalf of one or more data controllers, authorized to perform the processing of data only in accordance with the instructions of the data controller.

Data Protection Officer. The personal data protection officer (also known by the English language term data protection officer – DPO) is a figure provided for by Article 37 of Regulation (EU) 2016/679. It is a person designated by the owner or the controller to perform support and control functions, advisory, training and information relating to the application of the Regulation itself. It cooperates with the Authority and is the point of contact, including with respect to data subjects, for matters related to the processing of personal data.

IP Address. The IP address is associated with the access point through which one connects to the Internet and is usually controlled by the Internet Service Provider (ISP) of the user.

Notification.Notification may be provided to you by email to your last communicated email address, by posting notices of changes on the Sites and Applications, or by other means in accordance with applicable law.

Parents. Parents are those who have parental responsibility for a child.

Personal Data. Personal data means information about a natural person that identifies (directly or indirectly) a specific individual, e.g., name, mailing address, email address, telephone number, browsing data, IP address, features of his or her physical, physiological, genetic, mental, economic, cultural or social identity, choices and habits.

Public Forums. The Site and Applications may offer message boards, talk pages, chat rooms, social community environments, profile pages and other forums whose audiences are not limited. If you provide personal information when using such features, such information may be made public or otherwise disclosed without restriction on use by us or any third party. To request deletion of personal information from the public forum on any of our Sites or Applications, please contact the following email address: amministrazione@sscittadicampobasso.it

The Site, the official online store site: https:// www.campobassocalcio.store

TYPE OF PERSONAL DATA COLLECTED

We collect two basic types of information: personal data and anonymous data; in addition, we may use both personal and anonymous data to create a third type of information: aggregate data. We collect the following categories of personal data: registration data entered when the Data Subject subscribes to the Campobasso Calcio newsletter, which includes first and last name, gender, date of birth, country of birth, contact language, telephone/cell phone, email address and password; transaction data entered when you purchase one of our products or services on our Site: https:// www.campobassocalcio.store through our Applications, or through other channels, which includes information about the products/services purchased, address, social security number, phone number and payment information;data relating to the characteristics, choices and habits of the data subject; information that you provide to us when you communicate with us by phone, email, or through our Site, or when you contact us to report a problem; information about events in which you participate, as well as your personal information and preferences, to the extent that such information is relevant to organizing and managing those events; data entered in public forums on the Sites and Applications; personal information entered when you use the Sites, our Applications, or our Applications on third party platforms or websites, such as social networking sites, or when you link your profile on a third party site or platform with your registration account; user location information when you visit our Site or use our Applications, relating to your IP address, where the processing of such data is permitted by applicable law; usage, display and technical data, including your device identifier or IP address, the time you visit the Site, use our Applications on third party sites and platforms, or open our emails.

HOW WE COLLECT PERSONAL INFORMATION

We collect personal information that you provide when you request products, services or information, register on the Site, participate in public forums or other activities on our Sites and Applications, communicate with our contact center, respond to questionnaires or surveys, enter a promotion, game, or contest, or otherwise interact with us.

When you provide Personal Data on third party platforms or websites (e.g., through our Applications), the data you submit may be collected separately from the third party site or platform. Personal Data collected by third party sites and platforms is subject to the privacy policies of those third party sites and platforms. The privacy choices you make on third party sites and platforms do not apply to our use of Personal Data collected by us directly through our Applications.

When you register with your social account, we will obtain the personal data you choose to share with us through these social media services based on their privacy settings. This may include your list of friends and reviews from other network users. We may also use social media plug-ins on our Site or Applications. As a result, data will be shared with the social media service and possibly shared on your social media profile. Please refer to the Privacy Policy of these third party social media providers to learn more about these practices.

The computer systems and software procedures used to operate the Sites acquire, during their normal operation, some personal data whose transmission is implicit in the use of Internet communication protocols. This information is not collected to be associated with identified interested parties, but by their very nature could, through processing and association with data held by third parties, allow users to be identified. This category of data includes IP addresses or the domain names of the computers used by users who connect to the Sites, the URI (Uniform Resource Identifier) addresses of the resources requested, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response given by the server (successful, error, etc.) and other parameters relating to the user’s operating system and computer environment. These data are used for the sole purpose of obtaining anonymous statistical information on the use of the Sites and to check their correct functioning and are kept for the time period defined by the relevant legal regulations. The data could be used to ascertain responsibility in case of hypothetical computer crimes against the Sites.

We collect personal data through technological elements such as cookies when you visit our Sites and Applications or when you use our Applications on third party sites and platforms. Please review the Cookie Policy for more information, including how to disable cookies.

PURPOSES, LEGAL BASES OF THE PROCESSING AND DATA RETENTION TIMES

Access to and browsing of the Sites are free, but the possibility of using some of the online services available on the Sites is allowed only upon registration or subscription. The registration process consists in filling in an online form in which the user is asked to indicate his/her personal data – some of which must be entered – for the activation of authentication credentials (username/email + password) with which the interested party will subsequently access all areas and services of the Sites reserved for registered users. Therefore, in the first place, the primary purposes of the processing are represented by the need to allow the completion of the procedure of prior online registration and the creation of an account and to allow the managers of the Sites the generation and subsequent technical and administrative management (including the purpose of providing support and technical assistance on request) of the account, activation codes, passwords and similar authentication credentials to be used on the Sites as created by users during the registration process.

Registered users, once authenticated, are then enabled to use all the services made available online on the Sites. These services are divided into the following areas and are available according to the separate contractual conditions available on the Sites:
E-commerce site https: www.campobassocalcio.store for the purchase of official Campobasso Calcio products;
other services from time to time made available on the Sites and accessible only after user authentication.

Therefore, the processing of personal data (including their registration in the records of Campobasso Calcio) is directed to the achievement of the following purposes:

a) to ensure the registration to the Site, to allow the user to access certain web pages of the Site where it is possible to use specific online services, to ensure the proper provision of services requested to Campobasso Calcio through the Sites, Applications or other channels, and, therefore, to fulfill in a correct and timely manner all obligations arising from the contractual relationship established. The data will be stored for ten years from the date of termination of the contractual relationship;

b) for administrative and accounting purposes, including the possible transmission by e-mail of commercial invoices from Campobasso Calcio and / or companies related to the same in the provision of the service, to send communications to the user regarding the account or transactions with Campobasso Calcio. The data will be stored for ten years from the date of collection;

c) to comply with legal and regulatory provisions, including tax, or to execute an order of judicial or police authorities or supervisory bodies. The data will be kept for ten years from the date of collection;

d) finally, the primary purposes also include certain technical processing carried out by means of so-called “technical cookies” on the basis of what is explained in greater detail in the Cookie Policy. In these specific cases, technical processing is aimed solely at carrying out the transmission of a communication on an electronic communication network to the extent strictly necessary to provide the services explicitly requested by users. The data will be used for the time strictly necessary to manage the functions provided by the cookies.

In all cases described above in points a), b), c), d) Campobasso Calcio is not obliged to acquire the specific consent of the person concerned. All treatments illustrated above in fact pursue primary purposes for which the current legislation excludes the need to acquire a specific consent of the person concerned, either because the treatment is necessary to fulfill an obligation imposed by law, regulation or legislation, or because the treatment is necessary to perform obligations under a contract to which the person concerned is part, or to fulfill, before the conclusion of the contract, to specific requests of the person concerned, or to pursue legitimate interests of the owner also taking into account the reasonable expectations of those concerned.

If the user does not intend to provide the personal data required and necessary on the basis of the above, the consequence would be the impossibility to register on the Site and to use all the services for which registration and the provision of data are still technically and contractually necessary. It would still be possible to browse the Site as a non-registered and anonymous user and view only the content and materials available without registration.

In compliance with current legislation on personal data and the choices of the interested party, personal data may also be processed for the following additional purposes:

e) registration to mailing lists held by Campobasso Calcio, the execution of market surveys and polls (including telephone, online, through forms), the sending of advertising material and information on products and services offered by Campobasso Calcio or partners of Campobasso Calcio, solicitations to purchase, by means of automated systems, such as e-mail, fax, SMS or MMS, or by traditional means (eg paper mail), or by telephone with operator (hereinafter collectively “Treatment for Marketing Purposes”).

Legal basis of this treatment is the consent of the person concerned. The data will be kept for the time necessary to manage the relationship with the person concerned, taking every care to avoid indefinite storage and facilitate the exercise of rights due to the same.

The data can be processed only in case of provision of specific consent. Failure to provide consent will be tantamount to denial.

Therefore, by giving the optional consent, the interested party specifically acknowledges and authorizes such further possible treatments. In any case, even where the person concerned has given consent to pursue the purposes mentioned in paragraph e), will still be free to revoke it at any time, by sending a clear communication to that effect to Campobasso Calcio through the contact channels indicated in this document. Any refusal will not entail any consequence except the inability to be included in statistical analysis and / or profiling and receive promotions, discounts and targeted communications, based on the data provided, or to be informed about any marketing initiatives and promotional advertising. Therefore, for these additional purposes, the treatment will take place exclusively according to the purposes and on the basis of the specific consent given by the person concerned, which can be revoked at any time.

MODALITIES OF DATA PROCESSING

The treatment will be carried out mainly with computerized tools and in any case with the observance of the minimum precautionary measures of security and confidentiality of data. In particular, have been implemented technical, computer, organizational, logistical and procedural security measures to prevent loss, misuse or irrelevant use of data and access to them without permission.

CATEGORIES OF RECIPIENTS, COMMUNICATION AND DISSEMINATION OF DATA

For the purposes indicated above, the data collected may be made accessible or communicated:
to employees of Campobasso Calcio, in their capacity as employees authorized to process data (or so-called “Data Processors”), within the scope of their respective duties and in accordance with the instructions received. These individuals are, however, subject to the obligations of confidentiality and privacy;
third parties who carry out activities in outsourcing on behalf of Campobasso Calcio such as trusted external parties to which Campobasso Calcio entrusts certain activities, or part of them, functional to the provision and distribution of services offered through the Sites (eg. hosting companies, project managers, programmers, systems engineers and database administrators) or whose activity is connected, instrumental or support to that of Campobasso Calcio (eg. subjects to which Campobasso Calcio can entrust the activity of customer care; subjects that perform tasks of a technical or organizational such as the provision of printing services, enveloping, transmission, transport and sorting of communications; consultants). In this case, these subjects will be appointed as Data Processors pursuant to art 28 GDPR. The complete list of managers is available by request to Campobasso Calcio through the contact channels indicated in this document;
all those subjects (including public authorities) who have access to personal data under regulatory or administrative measures;
to all those public and / or private individuals and / or legal entities (legal, administrative and tax consultancy firms, Judicial Offices, Chambers of Commerce, Chambers and Offices of Labor, etc..), if the communication is necessary or functional to the proper fulfillment of contractual obligations assumed, as well as obligations under the law;
to banks and companies that manage national or international payment circuits through which online payments are made for products purchased through the Sites.

We do not collect personal data for resale or transfer to third parties for marketing purposes.
Personal data will not be disseminated in any case.

POSSIBLE INDICATION BY THE INTERESTED PARTY OF PERSONAL DATA OF THIRD PARTIES

The user acknowledges that any indication of personal data and contact details of any third party other than the data subject himself represents a processing of personal data with respect to which he is the autonomous owner, assuming all the obligations and responsibilities provided for by current legislation on personal data.

The user confers on this point the widest indemnity with respect to any dispute, claim, request for compensation for damages from treatment or otherwise that would be received by Campobasso Calcio from any third party because of the provision of data indicated by the user in violation of the rules on the protection of personal data applicable.

TRANSFER, STORAGE AND PROCESSING OF PERSONAL DATA INTERNATIONALLY

The management and storage of personal data takes place on servers located within the European Union. It is possible that Campobasso Calcio stores personal data in a cloud, this means that the data may be processed by cloud service providers on behalf of Campobasso Calcio, in any case will be required to cloud service providers that the data is stored on servers located in the European Union. Where our business involves the transfer of personal data to third parties located in different locations around the world, for the purposes described in this Privacy Policy, wherever personal data is transferred, stored or processed by us, we will take appropriate organizational and contractual measures to safeguard personal data and impose similar, but no less restrictive, requirements on cloud service providers, including an obligation to process personal data only for the purposes set out above.

MINORS’ PRIVACY

We do not knowingly collect personal information from Minors in connection with the functionality of the Site. In accordance with applicable laws, the Parent must provide consent to the collection of the Minor’s personal data; therefore, the Minor’s registration on the Site must be authorized by the Parent and performed under the Parent’s supervision, and for this reason the e-mail address provided must be the Parent’s. The Parent has the right to view and request the deletion of the Minor’s personal data.

Only persons over the age of 18, with a valid credit card, may purchase products and/or services offered on the Site:
https://www.campobassocalcio.store

RIGHTS OF THE INTERESTED PARTY

Within the limits and under the conditions provided for by law, the owner has the obligation to respond to requests from the interested party regarding personal data concerning him. In particular, according to current legislation:

Right of access (art. 15) – consists in obtaining from the Data Controller confirmation that there is or is not a processing of personal data concerning him/her and in this case, obtain access to the same data and to certain information regarding the data in question:

– the purposes of the processing;
– the categories of personal data concerned;
– the recipients or categories of recipients to whom the personal data have been or will be communicated, in particular if they are recipients in third countries or international organizations;
– where possible, the expected period of retention of the personal data or, if this is not possible, the criteria used to determine this period;
– the existence of the data subject’s right to request from the data controller the rectification or erasure of personal data or the restriction of the processing of personal data concerning him or her or to object to their processing;
– the right to lodge a complaint with a supervisory authority;
– where the data are not collected from the data subject, all available information on their origin;

  • the existence of an automated decision-making process, including profiling.

Right of rectification (Art. 16) – Consists of giving the data subject the opportunity to amend the data concerning him or her if they are inaccurate without undue delay. Taking into account the purposes of the processing, the interested party has the right to obtain the integration of incomplete personal data, also by providing a supplementary declaration.

Right of cancellation (art. 17) – of personal data concerning him without undue delay and the data controller is obliged to delete without undue delay personal data within the limits and in the cases provided for by current legislation. The data controller shall inform each of the recipients to whom the personal data have been transmitted of any rectification or erasure or restriction of processing within the limits and in the forms provided for by current legislation. Of course, it will not always be possible to comply with the request for deletion. This is the case, for example, when the data is needed to fulfill a legal obligation or is necessary for the defense of a right in court.

Right to Oppose (art. 21) – The possibility to oppose the processing, should be guaranteed when the legal basis is the legitimate interest or the performance of a task of public interest. Even this right has its limits as there may be cases where the legitimate interest of the owner prevails over that of the person concerned, fundamental will be to make the right balance, or the treatment is necessary for a task of public interest or the establishment, defense or exercise of a right before a judge.

Right to portability (art. 20) – provides that, where a processing is based on contract or consent, upon request, the data subject is provided with his/her personal data in a structured and machine-readable format (json, xml, csv), this right applies only to data provided spontaneously and not to inferred or derived data.

Right of revocation (art. 7) – In the event of signing any form of consent to the processing required by SSD arl Città di Campobasso, it should be noted that the interested party may revoke it at any time, without prejudice to the mandatory requirements of the legislation in force at the time of the request for revocation, by contacting the Data Controller at the above address, or by email, specifying the object of his request, the right he intends to exercise and attaching a photocopy of an identity document certifying the legitimacy of the request.

Right to complain- The interested party has the right to complain to the Guarantor Authority for the protection of personal data, Piazza Montecitorio 121, 00186 Rome (RM).

All these rights may be exercised by sending a request to the Data Controller through the contact channels indicated in this notice.

DATA CONTROLLER AND DATA PROTECTION OFFICER

The Data Controller is SSD arl Città di Campobasso with registered office in Contrada Selvapiana Snc – 86100 Campobasso – Italy – which you can contact by writing to the following e-mail address: amministrazione@sscittadicampobasso.it

Cookie Policy

Cookies are made up of portions of code installed in the browser that assist the Owner in providing the Service according to the purposes described. Some of the purposes for which Cookies are installed may also require the User’s consent. When Cookies are installed on the basis of consent, this consent can be freely revoked at any time by following the instructions contained in this document.

Technical and aggregate statistics cookies
Activities Strictly Necessary for Operation
This Website uses Cookies to save the User’s session and to perform other activities strictly necessary for the operation of this Website, for example in relation to traffic distribution.

Saving preferences, optimization and statistical activities
This Website uses Cookies to save browsing preferences and optimize the User’s browsing experience. These Cookies include, for example, those for setting the language and currency or for the management of statistics by the Website Owner.

Other types of Cookie or third party tools that may install them
Some of the services listed below collect statistics in aggregate and anonymous form and may not require the User’s consent or may be managed directly by the Owner – depending on what is described – without the help of third parties. If, among the tools indicated below, there are services managed by third parties, these may – in addition to what is specified and also without the knowledge of the Owner – carry out tracing activities on the User. For detailed information, we recommend that you consult the privacy policies of the services listed.

Tag management
This type of service is functional for the centralized management of tags or scripts used on this Website.
The use of these services involves the flow of User Data through them and, if necessary, their retention.

Google Tag Manager (Google LLC)
Google Tag Manager is a tag management service provided by Google LLC.
Personal Data collected: Cookies and Usage Data.
Place of processing: United States – Privacy Policy. Privacy Shield Adherent.

Remarketing and behavioral targeting
This type of service allows this Website and its partners to communicate, optimize and serve advertisements based on your past use of this Website. This activity is carried out through the tracking of Usage Data and the use of Cookies, information that is transferred to the partners to which the remarketing and behavioral targeting activity is linked. In addition to the opt-out possibilities offered by the services below, the User may opt out of receiving cookies related to a third-party service by visiting the Network Advertising Initiative opt-out page.

Google Ads Remarketing (Google LLC)
Remarketing Google Ads is a remarketing and behavioral targeting service provided by Google LLC that links the activity of this Website with the Google Ads advertising network and the DoubleClick Cookie.
Users may opt out of Google’s ad personalization cookies by visiting Google’s Ads Settings.
Personal Data Collected: Cookies and Usage Data.
Place of processing: United States – Privacy Policy – Opt Out. Privacy Shield Adherent.

Facebook Remarketing (Facebook, Inc.)
Facebook Remarketing is a remarketing and behavioral targeting service provided by Facebook, Inc. that links the activity of this Website with the Facebook advertising network.
Personal Data Collected: Cookies and Usage Data.
Place of processing: United States – Privacy Policy – Opt Out. Privacy Shield adherent.

Remarketing with Google Analytics (Google LLC)
Remarketing with Google Analytics is a remarketing and behavioral targeting service provided by Google LLC that links the tracking activity performed by Google Analytics and its Cookies with the Google Ads advertising network and the Doubleclick Cookie.
Personal Data Collected: Cookies and Usage Data.
Place of processing: United States – Privacy Policy – Opt Out. Party to the Privacy Shield.

Statistics
The services contained in this section allow the Data Controller to monitor and analyze traffic data and serve to track the behavior of the User.

Google Analytics (Google Inc.)
Google Analytics is a web analysis service provided by Google Inc. (“Google”). Google uses the Personal Data collected in order to track and examine the use of this Website, compile reports and share them with other services developed by Google.
Google may use Personal Information to contextualize and personalize ads in its ad network.
Personal Data Collected: Cookies and Usage Data.
Place of processing: United States – Privacy Policy – Opt Out. Privacy Shield Adherent.

Facebook Ads conversion tracking (Facebook pixel) (Facebook, Inc.)
Facebook Ads Conversion Tracking (Facebook pixel) is a statistical service provided by Facebook, Inc. that links data from the Facebook ad network with actions taken within this Website. The Facebook pixel monitors conversions that can be attributed to Facebook, Instagram, and Audience Network ads.
Personal Data Collected: Cookies and Usage Data.
Place of processing: United States – Privacy Policy. Privacy Shield Adherent.

Conversion tracking by Google Ads (Google Inc.)
Google Ads conversion tracking is a statistical service provided by Google Inc. that links data from the Google Ads network with actions taken within this Website.
Personal Data Collected: Cookies and Usage Data.
Place of processing: United States – Privacy Policy. Privacy Shield member.
Displaying content from external platforms. This type of service allows you to view content hosted on external platforms directly from the pages of this Website and interact with them. If a service of this type is installed, it is possible that, even if Users do not use the service, it collects traffic data relating to the pages where it is installed.

YouTube Video Widget (Google Inc.)
YouTube is a video content display service operated by Google Inc. which allows this Website to integrate such content into its pages.
Personal Data Collected: Cookies and Usage Data.
Place of processing: United States – Privacy Policy. Privacy Shield Adherent.

How can I consent to the installation of cookies?
In addition to what is stated in this document, the User can manage the preferences relating to Cookies directly within their browser and prevent – for example – third parties from installing them. You can also use your browser preferences to delete any cookies you have set up in the past, including any cookies in which you have consented to the installation of cookies by this website. The User can find information on how to manage Cookies with some of the most popular browsers at the following addresses for example: Google Chrome, Mozilla Firefox, Apple Safari and Microsoft Internet Explorer.

With reference to Cookies installed by third parties, the User can also manage their settings and revoke their consent by visiting the relevant opt out link (if available), using the tools described in the privacy policy of the third party or by contacting them directly.

Notwithstanding the foregoing, Users are advised that they may take advantage of information provided by YourOnlineChoices (EU), Network Advertising Initiative (USA) and Digital Advertising Alliance (USA), DAAC (Canada), DDAI (Japan) or other similar services. With these services it is possible to manage the tracking preferences of most advertising tools. The Data Controller, therefore, advises Users to use these resources in addition to the information provided herein.

Data Controller
CITTA’ DI CAMPOBASSO S.S. Srl
C.da Selvapiana snc – 86100 Campobasso – Italy
Owner’s email address: amministrazione@sscittadicampobasso.it

Since the installation of Cookies and other tracking systems operated by third parties through the services used within this Website cannot be technically controlled by the Owner, any specific reference to Cookies and tracking systems installed by third parties is to be considered indicative. To obtain complete information, the User is invited to consult the privacy policy of any third party services listed in this document.

Given the objective complexity of identifying technologies based on Cookies, the User is invited to contact the Owner if he/she wishes to receive any further information on the use of Cookies through this Website.