PRIVACY POLICY

INFORMATION ON THE PROCESSING OF PERSONAL DATA CCM SKI SCHOOL

- CUSTOMERS and STUDENTS-

This information is prepared pursuant to art. 13 of EU Regulation 2016/679, relating to the protection of natural persons with regard to the processing of personal data, as well as the free circulation of such data and which repeals Directive 95/46/EC (in short, “GDPR”) in order to provide all the main information regarding the processing of personal data carried out by the Scuola Italiana Sci Campo Carlo Magno in the context of the contractual relationship. This information replaces any previous versions released before now.

Data Controller

The Data Controller of your personal data is the Scuola Italiana Sci Campo Carlo Magno (hereinafter also “Scuola Sci CCM”), VAT number 01382460226, with registered office in Madonna di Campiglio (TN), Via Zeledria n.8, which you can contact by writing to the email address info@scuolasciccm.it.

Purpose of processing and legal basis

The Scuola Sci CCM collects and processes the personal data of its customers and students for the purposes listed below.

PURPOSE LEGAL BASIS OBLIGATION TO PROVIDE
A Management of the contractual relationship, namely:

• registration for courses and activities proposed;
• management of the School's activities, assignment of the instructor, division into groups, etc.;
• fulfillment of legal, accounting and administrative obligations;
• carrying out internal management controls and statistical analyses.

Sometimes it may be necessary to process data relating to the health of students (e.g. allergies, intolerances, disabilities, traumas):

• to ensure the correct and safe management of activities;
• possible defense in the event of disputes, complaints, claims. The processing of data is legitimate because it is necessary for the management of the contractual relationship (art. 6, co. 1, lett. b GDPR), as well as to fulfill the legal obligations to which the CCM Ski School is subject in fiscal, accounting and administrative matters (art. 6, co. 1, lett. c GDPR).

The processing of health data is legitimate because it is based on the consent of the interested party (art. 9, co. 2, lett. a GDPR) or, in the event of an accident, on the right of defense of the CCM Ski School (art. 9, co. 2, lett. f GDPR). For this purpose, the interested parties are required to provide their personal data where such provision is necessary to allow the correct execution of the contract.

B Communication and promotion of activities and events, such as:

• sending institutional communications and information about courses, lessons, activities and news of the CCM Ski School to customers by email;
• inviting customers to events promoted by the CCM Ski School. The processing of data is legitimate because it is based on the legitimate interest of the CCM Ski School to keep its customers informed of the activities carried out (art. 130, paragraph 4 of the Privacy Code). It is possible to oppose the sending of such communications at any time by contacting the CCM Ski School or by clicking on the unsubscribe button present in each email. For this purpose, the interested parties provided their data at the time of the conclusion of the contract.

C Sharing of your personal data with partner companies and sponsors of the CCM Ski School, for the promotion of its services.

The processing of data is legitimate because it is based on the free consent of the interested party (art. 6, paragraph 1, letter c GDPR). Without your express consent, the CCM Ski School will not share your personal data with Lenergy S.p.A. You have the right to withdraw your consent at any time by contacting the CCM Ski School. For this purpose, the provision of personal data is optional. Failure to provide it does not affect the conclusion of the contract with the CCM Ski School.

Data retention periods

The CCM Ski School retains your personal data for a period of time no longer than that necessary to achieve the purposes for which it is processing them. Specifically, the data will be retained for the entire duration of the contractual relationship and, after its conclusion, for a maximum period of 10 years. At the end of this period, the data may be anonymized or deleted.

Rights of interested parties

Any interested party may at any time exercise the rights provided for by Articles 15 and following of Regulation (EU) 2016/679, namely:

• right to access personal data and to receive information relating to the processing;
• right to obtain the rectification, integration, erasure and limitation of the processing of personal data, in the presence of certain conditions;
• right to receive the personal data concerning you provided to the CCM Ski School in a structured format and to transmit such data to another data controller;
• right to object to the processing of personal data, in the presence of certain conditions;
• right not to be subjected to an automated decision-making process;
• right to revoke the consent given.

Each interested party can exercise their rights by sending a request to the email address of the CCM Ski School (info@scuolasciccm.it), which will respond as soon as possible and, in any case, no later than 30 days from the request.

Complaint

Each interested party can submit a complaint regarding the methods through which their data are processed by the CCM Ski School or regarding the management of a complaint submitted by submitting a request directly to the Supervisory Authority according to the methods indicated on the website www.garanteprivacy.it.