Privacy and Cookie Policy

1. Data Controller

The Data Controller for the processing of personal data carried out through this website is:

2. Data that may be processed

During normal use of the website, the IT systems and services used for its operation may process certain technical information related to browsing, such as IP address, browser and device type, operating system, date and time of requests, requested pages and technical information necessary for the security and provision of the service.

The website does not provide for public account registration, newsletters or contact forms through which visitors' messages are stored in the website database.

Personal data may instead be provided directly by the data subject when they choose to contact A.S.D. Etrea by email, telephone, WhatsApp or other channels indicated on the website. In these cases, the data necessary to receive and manage the communication and respond to the request are processed.

3. Purposes and legal bases of processing

Data may be processed for the following purposes:

• to enable the operation, security and correct display of the website;
• to prevent or detect malfunctions, abuse and unauthorised access;
• to respond to requests voluntarily submitted by users through the contact details provided;
• to manage requests relating to sporting activities, events, horses, the restaurant and reservations;
• to obtain aggregate statistics on the use of the website, useful for understanding its operation and improving its content and services;
• to comply with any obligations required by law or respond to requests from the competent authorities.

Depending on the processing activity, the legal basis may be the performance of measures requested by the data subject, compliance with legal obligations, the legitimate interest of the Data Controller in the security and proper operation of its systems or, where necessary, the consent of the data subject.

4. Contact by email, telephone and WhatsApp

The website provides links that allow users to voluntarily make a telephone call, send an email or use WhatsApp.

Simply loading the website pages does not result in the content of such communications being sent to A.S.D. Etrea. Data processing takes place when the user chooses to use one of these communication channels.

When communication services provided by third parties are used, such as WhatsApp or the user's email provider, the processing carried out by those parties is also governed by their respective terms and privacy policies.

5. Vercel and technical browsing data

The website is hosted and distributed through technological infrastructure provided by Vercel. In providing the service, technical data necessary to receive requests, deliver website pages and resources, and ensure the security, reliability and operation of the infrastructure may be processed.

This information may include technical network data and information relating to requests made by devices accessing the website, in accordance with the procedures established by the service provider.

6. Vercel Web Analytics

The website uses Vercel Web Analytics to obtain aggregate statistics relating to page views and the use of certain features.

According to the provider's documentation, Web Analytics is designed not to associate statistical data with an individual or an IP address and does not use third-party cookies to identify visitors. The data available to the website operator are used in aggregate form.

Statistical information may include, for example, the page or path visited, the source of the visit, approximate geographic area, browser, operating system, device type and information relating to specific interactions with the website.

The website may also record statistical events relating to the opening of competition documents, clicks on sponsor links, contact methods used for reservations and the opening of the menu. These events are used for aggregate statistics and do not intentionally include names, email addresses, telephone numbers or other data entered by the user.

7. MongoDB Atlas

Some content and data necessary for the operation of the application are managed through MongoDB Atlas.

The database is mainly used to manage editorial and operational content published on the website, such as competitions, news, menus, sponsors and related files and images. The website does not use MongoDB Atlas to create browsing profiles of visitors or to store messages from a public contact form.

Where content managed through this infrastructure includes personal data, the relevant processing is carried out within the purposes for which such content is published or managed and in accordance with the organisational and technical measures adopted by the Data Controller and the provider.

8. Google Maps

An interactive map provided by Google Maps is available on certain pages.

The map is not loaded automatically. On initial access, an information area is displayed without the interactive map. A connection to Google services is established only when the user voluntarily selects the "View map" button.

After activation, the browser connects to Google services and Google may receive technical information relating to the request, such as the IP address, browser and device information, the date and time of the request and other information provided for in its terms and privacy policies. Google may also use cookies or similar technologies as part of its services.

The choice to display the map is not stored by the website as a permanent preference: when the page is loaded again, the map is once again presented in its inactive state.

9. Links to social networks, sponsors and external websites

The website may contain links to social networks, sponsors, partners and other external websites or services.

These links do not, in themselves, cause content from external websites to be loaded automatically. When users choose to follow a link, they leave the Etrea Sport Horses website and access the third party's service, which will process any data in accordance with its own privacy policy.

10. Photographs, videos and editorial content

The website may publish photographs, videos, sporting results, news and other content relating to the activities of A.S.D. Etrea, competitions, events and life at the centre.

Where such content includes personal data or images of identifiable individuals, its use is assessed in relation to the nature of the event, the association's informational and institutional purposes and the applicable provisions, with particular attention to cases requiring specific authorisations or safeguards.

To report concerns relating to photographs, videos or other content published on the website, the Data Controller may be contacted using the contact details provided in this policy.

11. Recipients of data

Data may be processed by persons authorised by A.S.D. Etrea and, where necessary, by providers supplying technical, IT, hosting, maintenance, communication or other services necessary for the purposes described in this policy.

Data may also be disclosed to public bodies, authorities or other recipients where required by law or necessary to comply with a legal obligation.

12. Transfers of data to countries outside the EU/EEA

Some technology providers used by the website belong to international groups or may use infrastructure, affiliated companies or subprocessors located outside the European Union or the European Economic Area.

Where processing involves an international transfer of personal data, it is managed on the basis of the mechanisms provided for by applicable law, such as adequacy decisions, Standard Contractual Clauses or other safeguards provided for by Regulation (EU) 2016/679, as applicable to the individual provider and service.

13. Retention period

Any personal data processed through the website or received through the indicated contact channels are retained for the time necessary for the purposes for which they were collected and, where necessary, for the period required by law or necessary to protect the rights of the Data Controller.

Technical data related to browsing and security, as well as aggregate statistical data, are managed according to the characteristics, configurations and retention periods of the technological services used.

14. Security

A.S.D. Etrea adopts technical and organisational measures appropriate to the nature of the data processed and the risks associated with the processing, with the aim of protecting data against unauthorised access, loss, disclosure, alteration or destruction.

However, no IT system can guarantee the complete absence of risk; security measures are therefore assessed and updated in relation to the evolution of the services and technologies used.

15. Cookies and technical preferences

For its own functionality, the website uses cookies or technical mechanisms necessary for browsing, security or storing preferences requested by the user.

The website does not currently use Google Analytics, Meta Pixel or other advertising profiling tools integrated into its pages.

Cookies or technologies belonging to third parties may be used by the relevant providers when the user chooses to activate an external service, such as Google Maps, or to visit an external website through a link.

16. Rights of the data subject

In the cases provided for by Regulation (EU) 2016/679, data subjects may exercise the rights granted by applicable law, including:

• obtaining confirmation as to whether their personal data are being processed;
• obtaining access to their personal data;
• requesting their rectification or updating;
• requesting their erasure, where applicable;
• requesting restriction of processing;
• objecting to processing in the cases provided for by law;
• obtaining data portability where the relevant requirements are met;
• withdrawing consent, where processing is based on consent, without affecting the lawfulness of processing carried out before its withdrawal.

Requests may be sent to scuderia@etrea.it or by certified email (PEC) to asdetrea@pec.it.

Data subjects also have the right to lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali) if they believe that the processing of their personal data infringes applicable data protection law.

17. Changes to this policy

This Privacy and Cookie Policy may be updated to reflect regulatory, technical or organisational changes or the introduction, modification or removal of website services and features.

The updated version is published on this page together with the date of the latest update.