Information in accordance with Art. 13 Regulation UE 2016/679
Dear Fan,
in accordance with Art. 13 of the European Regulation 2016/679 (GDPR), below we provide you with information regarding the processing of personal data that you may provide to Cagliari Calcio during the use of the "TickeOne" ticketing platform and/or in other occasions of purchase of products or services of the company.
1. Data controller
The Data Controller of your personal data is Cagliari Calcio S.p.A., with registered office in Assemini (CA), Località Sa Ruina snc. For all data processing concerning you, as regulated by this information notice, you may contact Cagliari Calcio S.p.A. by sending an e-mail to privacy@cagliaricalcio.com.
2. Data Protection Officer
We inform you, in any case, that Cagliari Calcio S.p.A. has appointed a Data Protection Officer pursuant to Art. 37 of European Regulation 2016/679 (GDPR), which you can contact at dpo@cagliaricalcio.com.
3. Types of data processed
During the purchase of admission tickets (tickets/subscriptions) and fidelity cards from ticketing platforms, as well as in other occasions of purchase of products or services of the company, Cagliari Calcio S.p.A. may process common personal data provided by the interested party (fan making a purchase or requesting a service) directly or through third parties authorised to purchase on your behalf. This data includes, for example, the first name, last name, address, telephone number, e-mail address, details of the identity documents, details of the tax code of the person concerned and their companions, information on the payment instruments used to the extent necessary for the purchase and/or provision of the service. It may also include data relating to events that the person concerned intends to attend or has attended (e.g. time, seat number assigned, fare applied and reason); data relating to the quantity of purchases and amounts spent by the person concerned. To the extent required by the Public Authorities, by specific provisions of law or by FIGC regulations, the processing may also include information relating to criminal convictions and offences or measures in any way prohibiting the purchase of products and services of Cagliari Calcio S.p.A.
4. Purposes of processing: pre-contractual measures - performance of contract - orders by authority
The processing of your personal data is aimed at and necessary for the proper execution of the contract for the purchase of admission tickets (tickets/subscriptions) and/or fidelity cards and/or other services between you and the company Cagliari Calcio S.p.A. The processing is necessary, in particular: to fulfil the pre-contractual, contractual and fiscal obligations arising from the contractual relationship between you and the company Cagliari Calcio S.p.A.; to carry out all the practices provided for by the regulations in force regarding safety in stadiums; to fulfil the obligations provided for by law, by a regulation, by the European Community regulations, by an order of the authority and/or by the FIGC; to protect a legitimate interest of the company and/or to defend a right of the company in court.
The legal basis of the processing, for these purposes, is (i) the performance of the contract or pre-contractual measures requested by the data subject ex Art. 6(1)(b) European Regulation 2016/679; (ii) to comply with a legal obligation to which the data controller is subject ex Art. 6(1)(c) European Regulation 2016/679; (iii) to protect a legitimate interest of the holder ex Art. 6(1)(f) European Regulation 2016/679.
4.1. Purpose of processing: marketing activities
With your consent, Cagliari Calcio S.p.A. may also process your personal data in order to send you commercial, promotional and advertising communications of the company's products and services (direct marketing), to carry out direct sales and market surveys or research, as well as to send you commercial communications of products and services offered by subsidiary, parent or affiliated companies or by third parties, for marketing and sales activities of such products or services. Cagliari Calcio S.p.A. will use, for such purposes, automated contact methods (such as, for example, e-mails, SMS, instant messaging apps such as Whatsapp and Messenger, social networks) or traditional methods (such as, for example, telephone calls with operator and paper mail).
The legal basis for processing for these purposes is your consent. This consent is optional and failure to grant it will not prevent the execution of the contractual relationship between you and Cagliari Calcio S.p.A., but only the possibility that Cagliari Calcio S.p.A. S.p.A. to send you material and/or informative/advertising communications deemed of interest. In any event, where you give your consent, you may revoke it at any time, without affecting the legitimacy of the processing carried out up to that point. We inform you that you may revoke your consent by sending an e-mail to privacy@cagliaricalcio.com.
4.2. Purpose of processing: communication to third parties for marketing purposes
With your consent, Cagliari Calcio S.p.A. may transfer your personal data to third party companies operating in the hotel, clothing, land and sea transport, advertising, food and catering, catering, training, energy, industrial and pharmaceutical sectors for their independent processing with the purpose of marketing and sales of their products or services. These companies will process your personal data as autonomous controllers ('Third Party Processors') and will provide you with appropriate information on their respective processing. In any case, you may exercise your rights vis-à-vis the Third Party Assignees, as listed in section 8 below.
The legal basis for processing for these purposes is your consent. This consent is optional, and failure to grant it will not prevent the execution of the contractual relationship between you and Cagliari Calcio S.p.A., but only the possibility that Cagliari Calcio S.p.A. may transfer your data to third parties for their independent processing for marketing and sales purposes of their own products or services. In any event, where you give your consent, you may revoke it at any time, without affecting the legitimacy of the processing carried out up to that point. We inform you that you may revoke your consent by sending an e-mail to privacy@cagliaricalcio.com.
4.3. Purpose of processing: profiling activities
With your consent, your personal data may be used and analysed to detect habits and propensity to consume and generate profiles that will allow us to proactively identify your interests and needs, also through correlation with other data acquired (for example) from your interactions with the website and/or with the social network pages of Cagliari Calcio S.p.A. This activity is aimed at sending you offers and communications that better meet your interests and to better target the promotional and marketing activities of the company towards you on the basis of the generated profile.
The legal basis for processing for these purposes is your consent. This consent is optional and failure to provide it will not prevent the execution of the contractual relationship between you and Cagliari Calcio S.p.A., but only the possibility for Cagliari Calcio S.p.A. to carry out the profiling activities described in the previous paragraph. In any event, where you give your consent, you may revoke it at any time, without affecting the legitimacy of the processing carried out up to that point. We inform you that you may revoke your consent by sending an e-mail to privacy@cagliaricalcio.com.
5. Communication and dissemination of data
For the pursuit of the purposes set forth in points 4 and following, your personal data may be disclosed to employees, assimilated personnel and collaborators of Cagliari Calcio S.p.A., who will act as authorised processors. Exclusively in order to comply with legal obligations, your data may also be communicated to Authorities and Supervisory and Control Bodies, including the Gruppo Operativo Sicurezza (G.O.S.), the Polizia di Stato and the Questura, as well as to national and international endo-federal and ex-federal bodies and other sports clubs. In order to ensure that Cagliari Calcio S.p.A. is able to carry out the activities necessary for the running of the business, your data may also be disclosed to professionals appointed by the company, including, specifically: accountants, auditors and lawyers. Lastly, your data may be communicated to suppliers - specifically identified as external data processors - appointed by Cagliari Calcio S.p.A. to carry out activities instrumental to its own, such as, for example: where applicable, companies offering e-mail services for marketing purposes; companies in charge of maintaining the Cagliari Calcio S.p.A. websites; companies that provide freight forwarding services; companies that offer support in carrying out market studies; companies that handle the shipment of products purchased via the Cagliari Calcio S.p.A. online store and the related invoicing.
6. Transfer of data abroad
Your personal data will not be transferred to countries outside the European Union.
7. Period of retention of personal data
With regard to the purposes mentioned in points 4 et seq. above, your personal data will only be kept for as long as necessary to fulfil each purpose. For the purposes for which the data subject's consent is required, your personal data will be kept until the individual consent is revoked. In addition, to the extent that this is necessary to fulfil legal obligations, your data may be kept for 10 years from the date of its collection, subject to any different binding decision by a competent authority and without prejudice to further obligations prescribed by law.
8. Rights of the persons concerned
In relation to the processing operations described in this Policy, as a data subject you may exercise your rights under Articles 15 to 22 of the European Regulation 2016/679 and, in particular, the following rights:
- Right of access - the right to obtain confirmation as to whether or not personal data concerning you are being processed and, if so, to obtain access to your personal data;
- Right of rectification - the right to obtain, without undue delay, the rectification of inaccurate personal data concerning you and/or the integration of incomplete personal data;
- Right to erasure (right to be forgotten) - right to obtain, without undue delay, the deletion of personal data concerning you. The right to erasure does not apply insofar as the processing is necessary for the fulfilment of a legal obligation or the performance of a task carried out in the public interest or for the establishment, exercise or defence of legal claims;
- Right to restriction of processing - right to obtain restriction of processing;
- Right to data portability - the right to receive, in a structured, commonly used and machine-readable format, personal data concerning you and to provide them to another data controller;
- Right of objection - right to object to the processing of personal data concerning you on grounds relating to your particular situation and in any case to the use of your data for marketing purposes;
- Right not to be subject to automated decision-making - the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or significantly affects you in a similar way;
- right to lodge a complaint with the Data Protection Authority: https://www.garanteprivacy.it;
- right to revoke the consent given at any time and as easily as it was given without affecting the lawfulness of the processing based on the consent given before revocation.
You may easily exercise any or all of the above rights by sending an e-mail to privacy@cagliaricalcio.com or, alternatively, dpo@cagliaricalcio.com.