Privacy policy

DATA CONTROLLER

The data controller is PARMA CALCIO 1913 S.r.l. (C.F. and VAT No. 02947820342), represented by its legal representative pro tempore, with registered office in Parma, Borgo Venti Marzo no. 4.

The appointed DPO is Avv. Marco Martorana and his email address is dpo@studiolegaleegida.it

PERSONAL DATA AND SOURCE OF THE DATA

When visiting the website https://shop.parmacalcio1913.com/ and/or when creating an account for the purchase of our merchandising products, the following personal data may be collected:

a) personal details, such as first name, surname, place and date of birth, tax code;

b) residential and/or domicile address, or any additional delivery addresses;

c) email address

d) telephone number

               e) username and password

PURPOSE OF DATA PROCESSING

When visiting the website https://shop.parmacalcio1913.com/ and/or when creating an account for the purchase of our merchandising products, you will be asked to provide us with your personal data, which will be processed for one or more of the following purposes:

The personal data referred to above will be processed for the following purposes:

1)       Creation and management of the account

2)  Purchase of products and services on the e-commerce platform, and performance of all related activities (payment processing, scheduling of shipment and delivery of products, etc.)

3)    Enabling the use of and access to services ancillary to the purchase, including, by way of example, after sales assistance;

4)     Processing of support requests (tickets) submitted by the data subject and provision of assistance services;

5) Fulfilment of legal obligations under tax and fiscal legislation

6) Sending advertising and promotional communications relating to the activities of Parma Calcio 1913 srl, not only in connection with the sale of merchandising products but also promotions for season tickets, event tickets, etc.

7)     Sending one notification in the event of ‘cart abandonment’ before the sale is completed, in order to allow the user to recover the contents of the cart before it is deleted.

The above data processing activities are carried out by the data controller using IT tools and also through automated processes.

Please note that account creation on the website https://shop.parmacalcio1913.com/ is managed through an SSO authentication process (so-called ‘Single Sign On’)  which allows users to access other PARMA CALCIO 1913 SRL online applications and platforms using the same credentials.

PROVISION OF DATA 

The provision of the above data is necessary for the aforementioned purposes. If one or more items of personal data are not provided, PARMA CALCIO 1913 S.r.l. will be unable to pursue the corresponding purposes.

In the event of withdrawal and/or failure to provide consent, where consent is provided as the sole legal basis for processing under the following section, the Controller will be unable to process the data for the relevant purpose. In any event, failure to provide consent and/or its withdrawal will not affect the pursuit of processing purposes based on other legal grounds.

LEGAL BASIS FOR DATA PROCESSING

The purposes of processing the data described above will be pursued on the following legal bases:

1.   Creation and management of the account: performance of a contractual obligation
2. Purchase of products and services on the e-commerce platform, and performance of all related activities (payment processing, scheduling of shipment and delivery of products, etc.): performance of a contractual obligation
3. Enabling the use of and access to services ancillary to the purchase, including, by way of example, after-sales assistance; performance of a contractual obligation
4. Processing of support requests (tickets) submitted by the data subject and provision of assistance services; performance of a contractual obligation
5. fulfilment of legal obligations under tax and fiscal legislation: compliance with a legal obligation
6. sending advertising and promotional communications relating to the activities of Parma Calcio 1913 srl, not only in connection with the sale of merchandising products but also promotions for season tickets, event tickets, etc.: consent of the data subject
7. Sending one notification in the event of “cart abandonment” before the sale is completed, in order to allow the user to recover the contents of the cart before it is deleted: legitimate interest of the data controller

Where consent is required, it may be withdrawn at any time, without prejudice to processing carried out up to that point and without any negative consequences in relation to the Contract.

To withdraw consent, the data subject may contact the DPO (e-mail: dpo@studiolegaleegida.it) or carry out the operation independently by accessing their account on the “Identity” system made available by PARMA CALCIO 1913 S.r.l., or by following the procedure indicated in the e-mails sent for marketing purposes.

Following withdrawal of consent, the data controller may no longer process the data for the purposes for which consent has been withdrawn and for which consent is the sole legal basis for processing.

DATA RECIPIENTS AND EXTERNAL DATA PROCESSORS

Personal data will be processed by PARMA CALCIO 1913 S.r.l. internal staff, acting as persons authorised to process the data.

In addition, personal data may be processed by external data processors and external sub-processors, duly identified and appointed, such as providers of the e-commerce platform, accounting, tax and legal consultants, and any other party providing a service necessary for the issue of the season ticket and/or individual admission ticket, access to the event, the administrative and legal management of the Contract and the protection of rights in judicial proceedings.

Finally, the data may be transferred to the competent authorities as required by law.

To receive the complete and up-to-date list of external data processors, the data subject may contact the DPO (email: dpo@studiolegaleegida.it).

TRANSFER OF DATA ABROAD

Personal data may be transferred outside the European Union. In such cases, the Controller will verify the existence of the requirements set out in Articles 44 et seq. of the GDPR.

DATA SUBJECT'S RIGHTS:

At any time, by contacting the DPO at dpo@studiolegaleegida.it, the data subject may exercise the following rights:

•  access their personal data;
• request the rectification and/or updating of their personal data;
• request the erasure of their personal data, where one or more of the conditions listed in Article 17(1) of Regulation 2016/679 apply;
• request restriction of processing, pursuant to Article 18 of EU Regulation No. 679/2016, where at least one of the cases listed therein applies;
• object to processing, under the conditions set out in Article 21 of EU Regulation No. 679/2016
• receive the data in a structured, commonly used and machine-readable format and transmit such data to another data controller, where the requirements of Article 20 of EU Regulation No. 679/2017 are met.

 COMPLAINT TO THE SUPERVISORY AUTHORITY 

DATA RETENTION PERIOD AND METHODS

The data will be retained for a period not exceeding 10 years and, in any event, for the time necessary to demonstrate compliance with legal obligations and until the limitation period for legal actions relating to the contractual relationship has expired.

Personal data processed for marketing purposes will be retained for a period not exceeding 2 years from the date of the last interaction with the communications received. After this period, the user will be asked to renew their consent; otherwise, the data will be deleted.

In the case described in point 7 of the ‘Purposes of data processing’ section, where, despite the communication received, the user does not complete the purchase procedure initiated, the data relating to the order will be deleted within 30 days of the date on which it was entered.

The data will be retained through the implementation of appropriate technical and organisational measures, in compliance with EU Regulation No. 679/2016. The processing will also be carried out electronically.