1. DATA CONTROLLER
The Data Controller is IQUII S.r.l., with its registered offices in Viale dell’Esperanto 71 – 00144 Roma, tax, VAT code and registered with the Chamber of Commerce in Rome under the registration number 11289201003. You can contact the Owner at: firstname.lastname@example.org.
2. PROCESSED DATA
The Users’ personal data, which are the object of this processing, provided by the Users themselves in relation to the single services requested and provided via the Websites, are the following:
2.i. identification and contact data: name, surname, gender, birth date, company, address, headquarter, telephone number and email address;
2.ii. professional or educational data, such as: qualification, work experiences, company or institution with whom the User has a work/collaboration contract, with geographical indications; these personal data are conferred to the Owner by the User in a facoltative way, with specific regard to the single services offered by IQUII (i.e. writing to the email addresses reported in the Websites in case of information request, or filling out the forms in relation to the various services offered – in this case please refer to the specific informatives in the related pages).
2.iii. browsing data: the Websites’ IT systems and software procedures acquire, during their operation, some personal data whose transmission is implicit in the use of Internet protocols, the so-called browsing data. These data and information are not gathered to be associated with the Users, but for their nature could – through elaborations and associations with third party’s data, allow to identify them. In this data category: IP addresses or the domain names of the computers used by the User to access the Websites, the addresses in URI (Uniform Resource Identifier) of the resources requested, the time of the request, the mode used to submit the request to the server, the dimension of the file obtained, the numerical code identifying the status of the server’s response (successful, error, etc.) and other parameters related to the operating system and the IT environment of the User.
3. PROCESSING PURPOSES AND LEGAL BASIS
Data directly provided by the User:
Personal data referring to Art. 2 i) and ii) are conferred by the User in a facoltative way contacting the Owner via the contact details in the Websites or making use, when possible, of the chat services (Facebook, LinkedIn, Instagram) or the forms related to the specific services (i.e. services upon request in the www.sport.iquii.com and www.sportthinking.it websites).
These personal data, once conferred to the Owner, will be used to meet the User’s requests and will be used to:
- create a Report as a useful tool, which is internally developed in order to conduct a market research and/or a statistical analysis;
- create a vertical Report, which will be forwarded to Interspac S.r.l. (registered in REA MI-2531167,Tax code 10433320966). The Report will include the results of the Survey, separating data focused on FC Internazionale from data dealing with other football clubs;
- potentially follow up on future surveys or invite the Interested to an event organized by Interspac in September 2021.
The legal basis for the processing of such data is to be found in the consent expressed by the User to the processing of their personal data (Article 6 letter a of the Regulation).
If needed, these data could be used for the Owner’s interest to carry out defensive actions and/or invoke/defend its rights in court.
The provision of personal data as at Art. 2 i) and ii) is facultative. However, the missed provision of personal data for those purposes (erogation of the requested services) could prevent the Owner from providing its services to the User.
Together with the above, the data as Art. 2 i) and ii) may be used for marketing and profiling purposes, as well as for statistics, market analysis and newsletters (hereinafter “marketing purposes”) promoted by the Owner, subject to the express consent of the User to be expressed at the same time as joining the single service requested.
The legal basis for the processing of your personal data for marketing purposes is to be recognized exclusively in Art. 6 paragraph 1 letter. a) so, consent expressed by the User to the processing of their personal data.
Failure to consent for marketing purposes will therefore not affect the provision of the Survey, whose results will be sent to the Interested person..
The browsing data are acquired automatically and simultaneously with the use of the Websites by the User to obtain statistical information on their use, as well as to monitor their safety and to check their correct functioning. These data could be used to ascertain responsibility in the event of any computer crimes consumed or attempted to damage the Owner.
The legal basis of the processing is to be recognized in art. 6 paragraph 1 letter. c) and f) of the Regulations, that is, the “fulfillment of a legal obligation to which the Owner is subject” and, in the case of requests received from the judicial authorities, in pursuit of a legitimate interest of the Owner itself.
4. PROCESSING METHODS
In relation to the aforementioned purposes, the processing of data by the Owner will be based on principles of correctness, lawfulness, transparency and protection of the confidentiality and freedom of the Users.
The data collected will be processed using IT tools strictly related to the purposes indicated in this statement and in any case, in order to guarantee adequate security measures aimed at preventing the loss of data, illicit or incorrect use of the same, as well as unauthorized access to they; the entire process will be carried out in compliance with current legislation on the protection of personal data.
If some of the services offered on the Websites require the insertion of data on forms directly connected to third-party platforms (by way of example and not exhaustive, just think at the chat service offered via Facebook or the use of others social/digital channels such as: Instagram, Twitter, TikTok, LinkedIn, Google network and similar, necessary and functional to the provision of the requested services), it will be the responsibility of the relevant Service Providers to ensure adequate security measures in compliance with current regulations on processing of personal data.
5. DATA COMMUNICATION AND DIFFUSION
The User’s personal data will not be disseminated.
IQUII will not transfer personal data outside the European Union.
As part of the Owner’s organization, personal data may only be processed by subjects belonging to the competent offices in charge of carrying out the individual processing activities.
6. STORAGE PLACE AND TIME
The personal data of the User will be stored on servers located within the European Union.
The data provided directly by the User, pursuant to art. 2. i) and ii), will be kept for the time strictly necessary to process the requests and then canceled, without prejudice to defensive needs that may make further conservation necessary.
The browsing data of Users who access the Websites do not persist for more than seven days and are deleted immediately after their aggregation, except for any need for criminal investigation by the judicial authorities.
7. RIGHTS OF THE USERS AND CONTACTS TO EXERCISE THE RIGHTS PURSUANT TO ART. 15-22 GDPR
At any time, the User may exercise his rights towards the Owner.
On the basis of articles 15-22 of the Regulation, the User has the right:
a) to obtain information in relation to the purposes for which your personal data are processed, the period of processing and the subjects to whom the data are communicated (so-called right of access);
b) to obtain the correction or integration of inaccurate personal data concerning him/her (so-called right of rectification);
c) to obtain the cancellation of personal data concerning him/her in the following cases: (a) the data are no longer necessary for the purposes for which they were collected; (b) the User has withdrawn his consent to the processing of data if they are processed on the basis of his consent; (c) the User has opposed the processing of personal data concerning him/her in the event that they are processed for the benefit of a legitimate interest of the Owner; or (d) the processing of your personal data is not in accordance with the law. However, it should be noted that the retention of personal data by the Owner is lawful if it is necessary to allow the fulfillment of a legal obligation or to ascertain, exercise or defend a right in court (so-called right of cancellation);
d) to obtain that the personal data concerning him/her are only stored without any other use being made of them in the following cases: (a) the User contests the accuracy of the personal data, for the period necessary to allow the Owner to verify the accuracy of such personal data; (b) the processing is unlawful but the User still opposes the cancellation of personal data by the Owner; (c) the personal data are necessary for the User to ascertain, exercise or defend a right in court; (d) the User has opposed the processing and is awaiting verification of the possible prevalence of the legitimate reasons of the Owner with respect to those of the User (so-called right of limitation);
e) to obtain the termination of the processing in cases where your personal data are processed for a legitimate interest of the Owner, and the User disputes the existence of this interest (so-called right of opposition);
f) to receive in a commonly used format, readable by an automatic and interoperable device, the personal data concerning him/her processed by automated means, if they are processed by virtue of a contract or on the basis of his consent (so-called right of portability).
Any requests for the exercise of the rights listed above may be sent, at any time and without formalities, by the User to the e-mail address of the Owner: email@example.com, or, sent to IQUII Srl, Viale dell‘Esperanto, 71 – 00144 Rome (RM) – Italy.
The User also has the right to contact the Guarantor for the protection of personal data (Piazza Venezia n. 11, 00187 – Rome), in order to assert their rights in relation to the processing of personal data.