Privacy Policy

WEBSITE INFORMATION INFORMATION ON THE PROCESSING OF PERSONAL DATA pursuant to art. 13-14 of EU Regulation 2016/679

DATA CONTROLLER

Dear user, This information is provided with reference to the site https://andreabandi.com/ The data controller is Andrea Bandi C.F. BNDNDR85C25D872F, VAT number. 12825830016 certified email address bandiandrea@pec.cgn.it email address andrea.bandi85@gmail.com, cell. 340/2916739, domiciled in Cerano via Camerona n. 8, which reserves the right to modify this document at any time, to specify the activities in more detail and comply with the regulations. The information allows you to know the origin and use of navigation information in compliance with current legislation on the protection of personal data, but does not concern sites, applications and services, which have separate information or policies and which do not include or refer to this document.

PURPOSE

https://andreabandi.com/ is a site promoting the services provided by the Owner in the context of the activity and teaching of the skiing/snowboarding discipline.

OBJECT

The website collects different types of personal data, which are processed to enable the user  acquisition of information and possibly purchase of services relating to the activity and teaching of the ski discipline, possible contact request, via the Beebeeboard owned by Poppix s.r.l. platform, with registered office in Aosta, Piazza Chanoux 28, tax code and VAT number 01213200072, in the person of the sole CEO with the sending of information requested by the interested party, appointed pursuant to art. 28GDPR;  navigate the site easily; • IT security with related and possible protection of a right, in court or otherwise • fulfill legal obligations or other obligations defined by the competent Authority;

Web browsing data

This site uses log files in which information collected automatically during user visits is stored. This site uses cookies and other tracking technologies to collect information about the user when he interacts with the site. For further information and details on the specific tools used, please refer to the cookie banner. The categories of information that are collected include:  Internet protocol (IP) address;  type of browser and device parameters used to connect to the site;name of the internet service provider (ISP);  date and time of visit;  web page of origin of the visitor (referral) and exit;  possibly the number of clicks. The aforementioned information is processed in an automated form and collected in an exclusively aggregated form in order to verify the correct functioning of the site, and for security reasons (anti-spam filters, firewalls, virus detection), the automatically recorded data may possibly also include personal data such as the IP address, which could be used, in accordance with the laws in force on the matter, in order to block attempts to damage the site itself or to cause damage to other users, or in any case activities that are harmful or constitute a crime. These data are never used to identify or profile the user, but only for the purposes of protecting the site and its users. As regards the type of cookies used by this Site, please refer to the extended information - cookies policy.

Data communicated voluntarily by the user via the reserved area:

Access to the reserved area of ​​the site is permitted only to customers registered via the authentication and registration profile. When creating the profile, some personal data is required, such as name, surname, email address, mobile number and tax code, necessary to successfully complete the registration, access your reserved area and use the services offered. The registration data, like any data already available to the Data Controller, because acquired in the context of other contractual relationships existing with the same, are managed by another company appointed as responsible pursuant to art. 28 GDPR. The optional, explicit and voluntary sending of messages to the contact addresses indicated by the Owner, as well as the compilation and forwarding of the forms/formats on the site, involve the acquisition of the sender's contact data, necessary to provide information or purchase services, as well as all personal data included in communications. In this case, the Data Controller processes personal, identifying data (for example, name, surname, company name, address, telephone, e-mail, bank and payment details, hereinafter, "personal data" or even "data") communicated to the same upon the conclusion of contracts for the services provided by the same. No particular data is collected pursuant to art. 9 GDPR The Data Controller limits itself to requesting only the identification data strictly necessary to provide the services requested by users, undertaking not to sell them or transmit them to third parties. The data provided that will be processed for purposes related to the activity of the site will be stored and processed in such a way as to guarantee compliance with the GDPR.

LEGAL BASIS AND PURPOSE

Personal data is collected only when the owner has a legal basis, provided for by current legislation, to collect and process the data. The collections of personal data previously described are carried out only because they are: • NECESSARY FOR THE LEGITIMATE INTEREST OF THE DATA CONTROLLER (so-called legitimate interest). In this case, the Owner ensures to take into consideration any potential impact that this collection may have on users of the site. If we consider that your interests or fundamental rights and freedoms outweigh legitimate interests, your personal data will not be used on this basis and your specific consent will be requested. • NECESSARY TO COMPLY WITH LEGAL OBLIGATIONS (so-called legal obligation).• Some data may also be retained to comply with legal obligations and defend our interests in the event of disputes or legal action. • NECESSARY FOR THE EXECUTION OF A CONTRACT in which the interested party is a party, only by completing the booking form and purchasing the requested service • BASED ON THE CONSENT FREELY GIVEN BY THE INTERESTED PARTY (so-called consent). In the event that user data are collected and processed for commercial purposes, initiatives and commercial offers, as well as to conduct market research and activities aimed at detecting the quality of the services offered. For the pursuit of the purposes for which the consent of the interested party is legally required, personal data will be processed exclusively with the express consent of the user.

DATA RETENTION PERIOD

Personal identification data, collected via the Beebeeboard owned by Poppix s.r.l. platform. , are kept for up to one year from collection, unless there is any opposition by the interested party which can be exercised at any time in the manner reported in the "Rights of the interested party" section of this information. Once the retention periods indicated above have expired, the personal data will be destroyed, deleted or made anonymous, compatibly with the technical cancellation and backup procedures. The emails sent are kept for 24 months. In the case of purchase of the services provided, the necessary data will be kept for up to ten years for billing purposes.

ACCESS TO DATA AND RECIPIENTS

The personal data processed by the Data Controller will not be disclosed, or will not be disclosed to indeterminate subjects, in any possible form, including that of making them available or simple consultation. The data, for the purposes listed above, may be communicated to third parties as managers pursuant to art. 28 GDPR or Autonomous Data Controllers and precisely to: • provider for services connected to the domain; • professionals (accountant) • credit and insurance institutions • competent authorities for compliance with legal obligations and/or Personal data may also be communicated to workers who work for the Data Controller and to some subjects who collaborate with them. Finally, they may be communicated to subjects entitled to access them pursuant to legal provisions, regulations and community legislation. Access to the data and/or the portability request will be fulfilled within a maximum of 30 days, subject to impediments and/or complexity in the completion. For the release of further copies of the personal data being processed, a fee will be charged based on the administrative costs incurred.Even without express consent pursuant to art. ex art. 6 lett. b) - c) and art. 13 lett. e) GDPR 679/2016, the Data Controller may communicate the data for the purposes indicated to Supervisory Bodies, Judicial Authorities, as well as to all other subjects to whom communication is mandatory by law. The updated list of Data Processors is available at the registered office of the Data Controller and will be provided upon written request.

DATA TRANSFER

The management and storage of personal data will take place on servers located within the Data Controller's European Union, while third-party companies appointed and duly appointed as Data Processors may transfer, limited to the purposes indicated above, to EU countries or safe States. Non-EU. In any case, it is understood that the Data Controller, if necessary, will have the right to move the location of the servers to Italy and/or the European Union and/or non-EU countries. In this case, the Data Controller hereby ensures that the transfer of non-EU data will take place in compliance with the provisions of applicable law.

RIGHTS OF THE INTERESTED PARTY AND METHOD OF EXERCISE OF RIGHTS

The interested party may exercise one of the following rights at any time: • Right of access, i.e. the right to ask the Data Controller to confirm whether or not personal data concerning him is being processed, obtaining all the information indicated in the art. 15 GDPR (e.g. purposes of processing, categories of personal data processed, etc.); • Right of rectification, i.e. the possibility of correcting inaccurate data or requesting its integration if it is incomplete (art. 16 GDPR); • Right to cancellation in the cases indicated by the art. 17 GDPR; • Right to limit processing if one or more of the hypotheses provided for by the art. 18 GDPR; • Right to object, at any time, to the processing of personal data concerning him if the conditions indicated by the art. 21 GDPR; The rights listed above can be exercised by communicating to the Owner via the contact details indicated above. Furthermore, the interested party has the right to lodge a complaint with a supervisory authority (Guarantor for the protection of personal data). The form can be downloaded at the following link: https://www.garanteprivacy.it/) You may exercise the above rights at any time by sending: • e-mail: andrea.bandi85@gmail.com, • pec: bandiandrea@pec.cgn.it

DATA BREACH AND NOTIFICATION TO THE PRIVACY GUARANTOR AND/OR COMMUNICATION OF THE BREACH TO THE INTERESTED PARTY

In the event of a breach of personal data - to be understood as a breach of security which accidentally or unlawfully leads to the destruction, loss, modification, unauthorized disclosure or access to personal data transmitted, stored or otherwise processed - in which the risk for the rights and freedoms of people is to be considered probable and/or high, the Data Controller will notify the Privacy Guarantor without delay and in any case no later than 72 hours giving a description of the nature of the data breach, therein including the number of people affected e the categories of data involved.

COOKIES POLICY (extended information)

WHAT ARE COOKIES

Cookies are small text files that the sites visited by users send to their terminals, where they are stored before being re-transmitted to the same sites on the next visit. The cookies of the so-called "third parties" are, however, set by a website other than the one the user is visiting. This is because on each site there may be elements (images, maps, sounds, specific links to web pages of other domains, etc.) that reside on servers other than that of the site visited.

WHAT ARE COOKIES FOR?

Cookies are used for different purposes: performing computer authentication, monitoring sessions, storing information on specific configurations regarding users who access the server, storing preferences, etc.

TYPES OF COOKIES

Cookies are divided into two macro-categories: "technical" cookies and "profiling" cookies. Technical cookies These are cookies that are used to navigate or provide a service requested by the user. They are not used for other purposes and are normally installed directly by the website owner. Without the use of these cookies, some operations could not be carried out or would be more complex and/or less secure, such as home banking activities (viewing the account statement, bank transfers, payment of bills, etc.), for such as cookies, which allow the user to be identified and maintained within the session, are essential. Profiling cookies Profiling cookies are aimed at creating profiles relating to the user and are used to send advertising messages in line with the preferences expressed by the user when browsing the internet.Session Cookies Among the technical cookies there are session cookies which are stored on the user's computer for mere technical-functional needs, for the transmission of session identifiers necessary to allow safe and efficient exploration of the site; they are deleted at the end of the "session" (hence the name) by closing the browser. This type of cookie avoids the use of other IT techniques that are potentially detrimental to the privacy of users' browsing.Persistent Cookies Instead of disappearing when you close your browser, as is the case with session cookies, persistent cookies expire on a specific date or after a specific period of time. This means that, for the entire lifespan of the cookie (which can be long or short depending on the expiry date decided by its creators), its information will be transmitted to the server every time the user visits the website, or every time the user views a resource belonging to that site from another site (for example an advertisement).For this reason, persistent cookies can be used by advertisers to record information about a user's web browsing habits over an extended period of time. However, they are also used for "legitimate" reasons (such as keeping users registered in their accounts on the websites, in order to avoid having to enter credentials to access the websites at each visit).Third Party Cookies Cookies stored on behalf of third parties and can themselves be session or persistent.

COOKIES USED BY THIS SITE

No cookies are used to profile users, nor are other tracking methods used. Instead, technical cookies are used - by the aforementioned data controller - in a manner strictly limited to what is necessary for safe and efficient navigation of the sites. All technical cookies do not require consent, therefore they are installed automatically following access to the site.

CHECK AND DELETE COOKIES

If you wish to change the way your browser uses cookies, or block or delete cookies from this site (or any other site), you can do so by changing your browser settings. In order to monitor cookies, most browsers allow the user to accept or reject all of them, accept only some types or will ask each time if you want to save a cookie from a particular site. It is equally easy to delete cookies that have already been saved by the browser on your device. The process for controlling and deleting cookies varies depending on the browser used. To find out how to do this with a particular browser, you can use the “Help” function in your browser menu. To limit the receipt of cookies through your browser you can visit the following sites to understand how to prevent your device from receiving cookies (depending on the browser you use):Internet Explorer https://support.microsoft.com/it-it/help/17442/windows-internet-explorer-delete-manage-cookies Google Chrome https://support.google.com/accounts/answer/61416?hl=it Mozilla Firefox https://support.mozilla.org/it/kb/protezione-antitracciamento-avanzata-firefox-desktop?redirectlocale=en-US&redirectslug=Enabling+and+disabling+cookies Safari https://www.apple.com/it/legal/privacy/

For more information, you can visit the page https://www.garanteprivacy.it/temi/cookie

RIGHTS EXERCISE FORM