PURPOSE

CATEGORIES OF PERSONAL DATA

PRINCIPLE OF LAWFULNESS

PERIOD OF STORAGE

REFERENCE ON RECORDS OF PROCESSING ACTIVITY

Research of new clients (Clubs)

Name

Surname

E-mail

Phone number

City

Country

Execution of a contract

10 years from the contact

S1

Drafting contracts with Clubs

S2

Contact Form / Answering questions of the prospect clients

S3

PURPOSE

CATEGORIES OF PERSONAL DATA

PRINCIPLE OF LAWFULNESS

PERIOD OF STORAGE

REFERENCE ON RECORDS OF PROCESSING ACTIVITY

Marketing communications

Name

E-mail

Phone number

Consent

Up to the withdrawal of the consent

M1

Sending random questionnaires

M3, CS2

Facilitation in navigation

Cookies and IP Address

Legitimate interest

Up to the end of the session

S4

PURPOSE

CATEGORIES OF PERSONAL DATA

PRINCIPLE OF LAWFULNESS

PERIOD OF STORAGE

REFERENCE ON RECORDS OF PROCESSING ACTIVITY

Recruiting candidates

Name

Surname

Contacts

Execution of a contract

1 year from the receiving of the Curriculum Vitae

A1

Management of customers (Club Managers) contractual relationship

10 years from the contact

A3

Invoicing

10 years from the contact

A6

PURPOSE

CATEGORIES OF PERSONAL DATA

PRINCIPLE OF LAWFULNESS

PERIOD OF STORAGE

REFERENCE ON RECORDS OF PROCESSING ACTIVITY

Maintenance, operation and security of IT services

All your personal data

Legitimate interest

Legal obligation

Up to the end of the intervention

CT1

Identification, analysis and management of company data for a proper performance of the business

Name

Surname

E-mail

Legitimate interest

Up to the end of the intervention

B1

DATA PROVISION

In all those cases in which we ask for consent to the processing of your personal data, their provision is purely optional. Consequently, failure to provide your personal data will have no consequences, other than in terms of the impossibility of processing the data for such specific purposes.

In all other cases where we do not require consent to the processing of your personal data, their provision is mandatory and necessary to comply with contractual or legal provisions and for the purpose of the proper conduct of business. Consequently, failure to provide such information would not make it possible to comply with these requirements and to carry out business activities properly.

If the data subject is a legal person, Playtomic does not consider it necessary to acquire personal data relating to its representatives or collaborators; however, in the knowledge that, the characteristics of the email address entered during registration (for example, composed of the string name.surname), may lead to the occurrence of such circumstance, it will also process such data in the manner indicated in this statement that the user therefore undertakes to deliver to all its representatives / collaborators who, for the reasons outlined above, are to transmit to Playtomic their personal data.

CATEGORIES OF RECIPIENTS

In addition to the Data Processors above mentioned, your personal data will be shared with subsidiaries and affiliates companies

AUTOMATED DECISION- MAKING PROCESS

There are no automated decision-making procedures.

TRANSFERS EXTRA EU

OR TO INTERNATIONAL ORGANIZATIONS

Some Data Processors, in providing their services to the Data Controller, may transfer your personal data to servers located in non-EU territory. Please note that not all non-EU countries guarantee the same European safety standards; by giving consent to the processing of your data, where applicable, you also consent to their transfer to servers located in these territories.

LEGITIMATE INTEREST OF DATA CONTROLLER

The legitimate interest of the Data Controller indicated for the following purpose:

(i) Facilitation in navigation / cookies (ref. S4): is the correct and fluid operation of the site;

(ii) Maintenance, operation and security of IT services (ref. CT1) and (iii) Identification, analysis and management of company data for a proper performance of the business (ref. B1): is the proper and safe conduct of the business activity.

RIGHT

DESCRIPTION

ACCESS

(see Article 15 GDPR)

The data subject shall have the right to obtain from the Data Controller confirmation as to whether or not personal data concerning him are being processed, and, where that is the case, access to the personal data and to the following information: purpose of management, categories of processed data, recipients (if any), transfer and adequate guarantees (if any), period for which personal data will be stored, rights of data subjects, existence of an automated decision-making process (if any). The Data Controller provides a copy of personal data. If the request is made by electronic means, information are supplied in a commonly used electronic format, unless otherwise indicated.

RECTIFICATION

(see Article 16 GDPR)

The data subject has the right to obtain the rectification of wrong personal data and the integration of incomplete personal data.

ERASURE

(see Article 17 GDPR)

The data subject shall have the right to obtain from the Data Controller the erasure of his personal data in the following cases:  the personal data are no longer necessary in relation to the purpose for which they were collected or otherwise processed, withdrawal of consent (and there is no other legal bases for the processing), he opposes the processing for the reasons related to his particular situation (and the are no overriding legitimate grounds for the processing), he opposes the processing for direct marketing purposes, the personal data have been unlawfully processed, the personal data have to be erased for compliance with legal obligation, the data have been collected in relation to the offer of information society services. The right shall not apply if the processing is necessary for exercising the right of freedom of expression and information, for compliance with legal obligation, for the performance of a task carried out in the public interest or in the exercise of official authority, for reasons of public interest in the area of public health, for archiving purpose in the public interest, scientific and historical research purpose or statistical purpose, for the establishment, exercise or defence of legal claim.

RESTRICTION OF PROCESSING

(see Article 18 GDPR)

The data subject shall have the right to obtain from the Data Controller the restriction of processing if: the accuracy of the personal data is contested by the the data subject (for a period enabling the Controller to verify the accuracy), the processing is unlawful (but the data subject opposes the erasure of the personal data and requests the restriction of their use rather than erasure), the personal data are required by the data subject for the establishment, exercise or defence of legal claim e, although the Data Controller no longer needs it, he exercised the right to object (while the Data Controller verifies the existence of legitimate and prevailing reasons).

OBJECTION

(see Article 21 GDPR)

The data subject shall have the right of object to processing of personal data if (i) it is based on public interest or legitimate interest and (ii) if personal data are processed for direct marketing purpose, including profiling.

DATA PORTABILITY

(see Article 20 GDPR)

The data subject shall have the right to receive the personal data concerning him or her, which he or she has provided to a data Controller, in a structured, commonly used and machine- readable format (applicable to automated decision- making processes).

WITHDRAWAL

(see Article 13, d.2, d)

The data subject has the right to withdraw the consent any time without affect the lawfulness of processing based on the consent before withdrawal.

COMPLAINT

(see Article 13, d.2, d)

The data subject has the right to pledge a complaint with a supervisory authority.