Annex 2

PRIVACY POLICY

Pursuant to Article 13 of Regulation (EU) 2016/679 of the European Parliament and of the Council (the "Regulation")

Federazione Italiana Tennis and Padel (the "FITP") wishes to inform you that it needs to proceed to the processing of your personal data collected automatically or provided by you through the navigation or use of the website https://www.ibiaccommodation.com (the "Website"). This Privacy Policy refers exclusively to the Website and does not refer to other websites, pages or online services that may be reached through hypertext links that may be included in the Website.

1. DATA CONTROLLER and DATA PROTECTION OFFICER

The Data Controller is the FITP, based in (00135) Rome, Stadio Olimpico - Curva Nord, Ingresso 44, Scala G (the 'Data Controller') contactable by e-mail: privacy@fitp.it. The Data Protection Officer ("DPO") can be reached at the following address: Federazione Italiana Tennis - Data Protection Officer, (00135) Roma, Stadio Olimpico - Curva Nord, Ingresso 44, Scala G or via PEC at dpo@pec.federtennis.it.    

2. TYPES OF PROCESSED DATA

To enable your use of the Website and its services, including the possibility of making a reservation at hotels affiliated with the FITP (the "Services"), the Data Controller needs to process some of your personal data.

Navigation data

The computer systems and software procedures implemented on the Website acquire, during their normal operation, some personal data whose transmission is implicit in the use communication protocols of the Internet. This category of data includes the IP addresses or domain names of the computers used by users connecting to the Website, the addresses in the URI (Uniform Resource Identifier) notation of the requested resources, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response given by the server (success, error, etc.) and other parameters relating to the user's operating system and computer environment. This data, necessary for the use of the Web Site, are processed only for the purpose of verifying the correct functioning of the Website.

Data provided by the user

The optional, explicit and voluntary sending of personal data to request Services, as well as the e-mail messages requires the acquisition of the sender's e-mail address, which is necessary in order to respond to your requests, as well as any other personal data included in the requests you submit.

3. PURPOSE OF THE DATA PROCESSING AND LEGAL BASIS

The Data Controller exclusively holds those personal data collected or provided by you while navigating the Website and using its services. Such data will be processed for the following purposes:

1. to enable your use of the content of the Website and its Services. The legal basis for processing is legitimate interest and compliance with legal obligations;
2. to enable your use of the booking service at the hotels affiliated with the FITP.  The legal basis for processing is the execution of pre-contractual measures, the performance of a contract to which you are a party and the fulfilment of legal obligations.

4. PERIOD OF RETENTION OF PERSONAL DATA

The Data Controller plans to keep your personal data for a period of time no longer than it is necessary to achieve the purposes for which they were collected, in particular no longer than 10 years from the end of the execution of the contract.  Personal navigation data and those acquired through the use of the Website will not be stored for more than 12 months, except for the possible need to ascertain criminal offences by judicial Authority, or to ascertain, exercise or defend our rights in court.

5. CATEGORIES OF RECIPIENTS OF THE PERSONAL DATA

The processed data are not disclosed to third parties.

The following may, however, come to know your personal data, in relation to the abovementioned processing purposes:

• individuals who may access the data pursuant to European Union law or Member State legislation to which the Data Controller is subject;
• subjects performing in complete autonomy, as separate Data Controllers, or as Data Processors appointed for this purpose by FITP, purposes auxiliary to those activities on the Website, i.e. companies offering IT infrastructures and IT assistance services as well as planning and implementing software and websites, consulting companies.

Furthermore, our employees may also become aware of your personal data, provided that they are previously designated as authorised individuals or as System Administrators. For a complete list of recipients, you can make a request to the Data Controller using the contact details provided.

6. PERSONAL DATA TRANSFER TO THIRD COUNTRIES

The data controller will not transfer your personal data to third countries outside the European Union.

7. POTENTIAL AUTOMATED DECISION MAKING PROCESSES

The data controller does not intend to use automated decision-making processes, including profiling.

8. NATURE OF DATA PROVISION

The provision of personal data for the purposes set out in paragraph 3 B) is mandatory, since your refusal to provide the required personal data may lead to the impossible to allow your use of the booking service at the hotels affiliated with the FITP.

9. DATA SUBJECT’S RIGHTS

You, as a data subject, have the right to:

• withdraw your consent to data processing at any time.
• request to the Data Controller access to your personal data;
• obtain from the Data Controller the rectification and supplementation of your personal data that is considered inaccurate;
• obtain from the Data Controller the erasure of your personal data;
• obtain from the Data Controller the restriction of the processing of your personal data;
• receive from the Data Controller your personal data in a structured, commonly used and machine-readable format, as well as transmit those data to another data controller without hindrance;
• object at any time, on grounds relating to your particular situation, to processing of your personal data pursuant to point e) of Article 6, para 1, of the Regulation;
• lodge a complaint with a supervisory authority or relevant Judicial Authorities if you deem that the processing of your personal data infringes the Regulation.

To exercise your rights, you may contact the Data Protection Officer by sending a communication to the registered office of the FIT in (00135) Rome, Stadio Olimpico - Curva Nord, Ingresso 44, Scala G, or by sending an email to privacy@fitp.it or a PEC at dpo@pec.federtennis.it, providing your name, surname, address and request’s details.