Puresport s.r.l., with headquarters in via Galileo Galilei n. 15, 20856 Correzzana (MB), as Data Controller, informs users of the processing of personal data deriving from placing an order on the site https://www.puresport.com.pl.
Data controller
The data controller is Puresport s.r.l., with headquarters in via Galileo Galilei n. 15, 20856 Correzzana (MB).
Data subjects
Users using internet services interested in purchasing the services offered by the Controller (gift vouchers, track rides, etc.) and in the possible (optional) creation of a personal account.
Processed data
The personal data processed are provided by the user and are of a common nature. In particular, the following data are processed:
- name and surname;
- tax ID code;
- address;
- telephone and cell phone;
- e-mail address;
- payment details.
| Purpose of the processing | Legal basis of the processing |
|---|
| Allow the user to purchase the services offered by the Owner. | Art. 6, letter. b), GDPR: processing is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract. |
| Creation of a personal account on the website https://www.puresport.com.pl and access to the reserved area. | Art. 6, letter. b), GDPR: processing is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract. |
| Sending communications about products and services similar to those already purchased. | Art. 6, letter. f), GDPR: processing is necessary for the purposes of the legitimate interests pursued by the controller or by a third party. |
Nature of the contribution
The provision of personal data for the purposes referred to in points a) and b) is mandatory as it is necessary for the execution of the contract. Failure to provide data will make it impossible for the Data Controller to follow up on contractual requests.
Treatment methods
The data processing is carried out through IT procedures or electronic means and paper supports by internal or external subjects specifically appointed for this purpose, authorized and committed to confidentiality. The data is processed and stored with suitable tools to guarantee its security, integrity and confidentiality through the adoption of adequate measures as required by law.
Data retention
The data collected for the purposes referred to in point a) will be processed for the time strictly necessary to fulfill the aforementioned purposes, in compliance with the principles of minimization and limitation of conservation referred to in the art. 5 GDPR. In any case, the data will be kept for no longer than 10 years from the termination of the contractual relationship. The data processed for the purpose referred to in point b) will be kept until the purpose is achieved and in any case for 5 years from the request to cancel the account.
Communication, diffusion, transfer
The data collected will not be disclosed, sold or exchanged with third parties without the express consent of the Data Subject, except for any communications to authorized third parties committed to confidentiality or appointed as Data Processors pursuant to art . 28 of Regulation (EU) 2016/679. The complete and updated list of data controllers is available, upon request, through the methods indicated in this information. The data may be communicated to the competent authorities, according to the terms of the law.
The transfer of data outside the European Union is not foreseen.
Rights of Data Subjects and methods of exercise
At any time, pursuant to articles. 15 et seq. GDPR, Data Subjects have the right to access their personal data, to request its rectification, updating and relative deletion. It is also possible to oppose the processing and request its limitation.
The Data Controller has created a policy for the exercise of the rights of Data Subjects which can be consulted at the following link:
https://puresport.blob.core.windows.net/pdf/Procedura-gestione-esercizio-diritti-interessati.pdf
Requests can be exercised, subject to identification of the Data Subject, by sending:
- - an e-mail to info@puresport.it;
- - a registered letter with return receipt to the address via Galileo Galilei n. 15, 20856 Correzzana (MB).
Furthermore, if it is believed that the processing has been carried out in violation of the legislation on the protection of personal data, the right to lodge a complaint with the Guarantor Authority for the protection of personal data, based in Piazza Venezia n. 11, 00187 Rome.