Privacy Policy
In compliance with the General Data Protection Regulation (EU) 2016/679 – “GDPR”, and in particular pursuant to Article 13, we provide the following information regarding the processing of personal data provided. This privacy notice is not to be considered valid for other websites that may be accessible via links on the domain holder’s website, which is therefore not responsible in any way for the websites of third parties.
This notice is also inspired by Recommendation No. 2/2001 issued by the European authorities for the protection of personal data, gathered in the Group established under Article 29 of Directive No. 95/46/EC, adopted on May 17, 2001, to identify certain minimum requirements for the collection of personal data online, particularly the methods, timing, and nature of the information that data controllers must provide to users when they access web pages, regardless of the purpose of the access, as well as the provisions of Directive 2002/58/EC, as updated by Directive 2009/136/EC, on Cookies.
Personal Data (Art. 4 GDPR): any information relating to an identified or identifiable natural person (“data subject”); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier, or one or more factors specific to the physical, physiological, genetic, mental, economic, cultural, or social identity of that natural person (C26, C27, C30).
Browsing Data
The computer systems and software procedures used to operate this website acquire, during their normal operation, some personal data whose transmission is implicit in the use of Internet communication protocols. This category of data includes IP addresses or domain names of the computers and terminals used by users, URI/URL (Uniform Resource Identifier/Locator) addresses of the requested resources, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numerical code indicating the status of the server response (successful, error, etc.), and other parameters related to the user’s operating system and computer environment.
Data Provided Voluntarily by the Data Subject
The optional, explicit, and voluntary sending of messages to the contact addresses, as well as the completion and submission of the forms on the Data Controller’s website, entails the acquisition of the sender’s contact data, necessary to respond, as well as all personal data included in the communications.
The Data Controller, pursuant to Articles 4 and 24 of EU Regulation 2016/679, is Cantù Arena Spa, with registered office at Via Como 216, 22063, Cantù (CO), represented by its legal representative pro tempore, who can be contacted for any information via email: info@cantuarena.com
Cookies
For more information on the cookies used by this website, see the cookie policy at the following link.
| Purpose of Processing | Legal Basis | Data Retention Period | Nature of Provision |
|---|---|---|---|
| Website browsing | Legitimate interest of the Controller (Art. 6, par. 1, lett. f) GDPR): activities strictly necessary for website operation and service provision. | Until the end of the browsing session | The provision of browsing data is necessary to allow navigation on the website. Failure to provide such data will make it impossible to browse the website. |
| Completion of contact request forms | Pre-contractual measures (Art. 6, par. 1, lett. b) GDPR): execution of pre-contractual measures taken at the request of the data subject. | 1 year | The provision of data is necessary to receive a response from the Controller. Failure to provide data will make it impossible to obtain what is requested. |
| Management of your requests and those of other data subjects, pursuant to Articles 15 et seq. of the GDPR (data subject rights) | Processing is necessary to comply with a legal obligation to which the data controller is subject (C45). Art. 6, par. 1, lett. c) of the GDPR | 5 years after the request is closed, unless legal disputes arise | The provision of personal data is mandatory as it is essential to fulfill legal obligations. |
Recipients
The personal data provided may be communicated to recipients who will process the data as independent data controllers or as data processors (Art. 28 GDPR) or as persons authorized to process data under the authority of the Controller (Art. 29 GDPR), in order to fulfill contracts in place with the Company or for related purposes. Specifically, the data may be communicated to recipients belonging to the following categories:
entities that provide services for the management of the IT system used by the Controller and of the telecommunications networks (including the website and email);
professionals, firms, or companies within the context of assistance and consultancy relationships;
competent authorities for compliance with legal obligations and/or provisions of public bodies, upon request.
The list of data processors is constantly updated and available at the Controller’s registered office.
Data Transfer to a Third Country and/or International Organization
The personal data provided will not be transferred outside the European Economic Area (EEA).
Automated Processing
There is no fully automated decision-making process. However, through operator involvement, the Controller performs profiling activities, in particular by processing consumer profiles and analyzing consumption habits and choices to improve the commercial offer and services provided.
Data Subject Rights | Complaint to Supervisory Authority
You may exercise your rights as expressed in Articles 15 et seq. of EU Regulation 2016/679 by contacting the Data Controller via email at info@cantuarena.com. You have the right at any time to request access to your personal data, its rectification, deletion, or restriction of processing. Furthermore, where applicable, you have the right to object at any time to the processing of your data. Where applicable, you have the right to data portability; in such cases, the Data Controller will provide you with your personal data in a structured, commonly used, machine-readable format. You also have the right to object at any time to processing based on legitimate interest and, where applicable, to withdraw consent without affecting the lawfulness of processing based on consent before its withdrawal. To stop receiving any marketing communication, simply send an email at any time to info@cantuarena.com with the subject “unsubscribe marketing”.
Without prejudice to any other administrative or judicial remedy, if you believe that the processing of your data violates the provisions of EU Regulation 2016/679, you have the right to lodge a complaint with the Data Protection Authority (https://www.garanteprivacy.it/), pursuant to Article 15 letter f) of the aforementioned Regulation.
Changes to the Privacy Notice
The Controller reserves the right to modify, update, add, or remove parts of this privacy notice at its discretion and at any time. To facilitate this verification, the notice will contain the date of the last update.
Date of last update: January 27, 2025
