Privacy Policy

Privacy Policy regarding the processing of personal data (Art. 13 EU Regulation 2016/679) for the website https://www.sportika.check-point.it/ owned by Check Point S.p.A.

This privacy notice is provided pursuant to Article 13 of EU Regulation 2016/679 for Users of the Web portal. The information provided below specifically concerns the collection of personal data on the Internet, aiming to identify the minimum measures that must be implemented for data subjects to ensure the transparency and lawfulness of such practices.

KEY DEFINITIONS

(From Arts. 4, 37-39 of Regulation (EU) 2016/679, hereinafter also referred to as "the Regulation")

Personal Data: Any information relating to an identified or identifiable natural person ('data subject'); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.

Usage Data: These are information collected automatically by this Application (or by third-party applications that this Application uses), including: the IP addresses or domain names of the computers used by the User who connects to this application, the URI (Uniform Resource Identifier) addresses, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response from the server (successful, error, etc.), the country of origin, the characteristics of the browser and operating system used by the visitor, the various time details of the visit (e.g., the time spent on each page) and the details relating to the itinerary followed within the application, with particular reference to the sequence of pages consulted, the parameters relating to the operating system and the User's IT environment.

Profiling: Any form of automated processing of personal data consisting of the use of personal data to evaluate certain personal aspects relating to a natural person, in particular to analyse or predict aspects concerning that natural person's performance at work, economic situation, health, personal preferences, interests, reliability, behaviour, location or movements.

User: The individual using this application, who must coincide with the Data Subject or be authorized by them, and whose personal data are subject to potential processing.

Processing: Any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.

Data Controller (or Controller): The natural or legal person, public authority, agency or other body which, alone or jointly with others, determines the purposes and means of the processing of personal data; where the purposes and means of such processing are determined by Union or Member State law, the controller or the specific criteria for its nomination may be provided for by Union or Member State law.

Data Processor: A natural or legal person, public authority, agency or other body which processes personal data on behalf of the controller.

This Application or Platform: The hardware or software tool through which Users' personal data are collected.

Data Protection Officer (DPO): A mandatory figure in certain cases provided for by Article 37 of the Regulation. Carries out consulting, monitoring, coordination, and management activities of relations with the supervisory authority regarding personal data processing.

1. THE DATA CONTROLLER

The "Data Controller" of your personal data, potentially processed following the use of this website, pursuant to Article 26 of Regulation (EU) 2016/679, is:

CHECK POINT SPA VIA PARMA, 66 46041 – ASOLA (MN) Phone: +39 0376720359 Email: customerservice@check-point.it

2. PURPOSES AND LAWFULNESS OF DATA PROCESSING

The personal data voluntarily provided by Users who access this website and potentially use the following web services will be as follows:

• "CONTACTS" Section: This section is for Users interested in receiving information about the products/services offered by the Data Controller. The personal data required to access this service are exclusively the following: Name, Surname, Email, Phone Number.

The User's data collected through the sections listed above are used solely for the purpose of performing the requested service or provision. The Controller has defined the purposes of processing as the performance of its own activities. User data is collected to allow the Controller to provide its services, as well as for the following purposes: statistics, advertising, hosting and backend infrastructure, external platforms, and display of content from external platforms. In particular, navigation data is processed exclusively:

• for the operational management of navigation;

• for the processing of statistical data on access and consultation;

• for the management of personal data security.

• Regarding personal data voluntarily provided by the User, they are processed for the following purposes, in addition to those indicated below:

  • processing of anonymous and aggregated usage statistics;

  • protection or defense of rights in judicial proceedings;

  • fulfillment of obligations under current laws or regulations, including accounting and tax matters;

  • satisfaction of specific purposes for which such data were provided by the User (e.g., provision of a service, response to specific questions submitted via contact forms, assistance requests, etc.);

  • management of User registration and/or access to any reserved areas available on the site;

  • sending newsletters to the User, subject to the User's prior consent; User participation in initiatives, in compliance with the rules governing such activities or any regulations published on the site.

To pursue the processing purposes described above, this site uses the following services, listed by processing purpose:

Hosting and backend infrastructure. This type of service hosts data and files that allow the site to function, enable its distribution, and provide a ready-to-use infrastructure to deliver specific functionalities of this application. Some of these services operate through servers geographically located in different places, making it difficult to determine the exact location where Personal Data is stored. The website www.check-point.it is activated through a hosting service managed in collaboration with digital marketing companies.

Interaction with external platforms. This type of service allows interaction with external platforms directly from the pages of www.check-point.it, and it is possible that, even if Users do not use the service, it collects traffic data related to the pages where it is installed. Interactions and acquired information are in any case subject to the User's privacy settings relating to each platform.

Facebook social widget (Facebook Inc.). The "Like" button and Facebook social widgets are services for interacting with the Facebook social network, provided by Facebook Inc. and Facebook Ireland Ltd. Personal Data collected: Cookies and Usage Data. Place of processing: USA and Ireland – Privacy Policy: https://www.facebook.com/privacy/explanation

Instagram widget (Instagram). Instagram is an image viewing service managed by Facebook Ireland Ltd. that allows the website to integrate such content into its pages. Personal Data collected: Cookies and Usage Data. Place of processing: USA – Privacy Policy: https://help.instagram.com/155833707900388

3. LEGAL BASIS FOR PROCESSING

By using the services listed in point 2), the data subject expresses consent to the processing of their personal data for the purposes described above, pursuant to Article 6, paragraph 1, letter a) of Regulation (EU) 2016/679.

4. LEGITIMATE INTERESTS PURSUED BY THE DATA CONTROLLER

At the same time, the Data Controller pursues its own legitimate interests pursuant to Article 6, paragraph 1, letter f) of Regulation (EU) 2016/679.

5. COMMUNICATION AND RECIPIENTS OF PERSONAL DATA

Communication will occur solely and exclusively to employees and direct collaborators of the Data Controller for the sole purpose of performing the service potentially requested by the User, unless disclosure is required by legal obligations.

The optional, explicit, and voluntary sending of emails to the addresses indicated on the website implies, by its very nature, the subsequent acquisition of the sender's address, necessary to respond to requests, as well as any other personal data included in the communication. We invite our Users, in service requests or queries, not to send names or other personal data of third parties that are not strictly necessary, or data defined as "special categories" and judicial data referred to in Articles 9 and 10 of Regulation (EU) 2016/679, within the limits and for the purposes specified in this policy.

6. PROCESSING METHODS AND MEANS

Personal data are processed with automated tools, for the time necessary to achieve the purposes for which they were collected.

Specific security measures are observed to prevent data loss, unlawful or incorrect use, and unauthorized access, in compliance with the obligation to adopt adequate security measures. All data will be acquired and stored in accordance with Articles 32, 33 and subsequent articles of EU Regulation 2016/679.

The Controller is not responsible for errors, content, cookies, publication of unlawful immoral content, advertising, banners, or files that do not comply with current regulatory provisions by sites not managed by the Controller.

7. TRANSFER OF DATA TO A THIRD COUNTRY

No data transfer to a third country is foreseen.

8. AUTOMATED DECISION-MAKING PROCESS

No automated decision-making process is present.

9. DURATION OF PROCESSING

The personal data acquired, also through the "CONTACTS" service, will be retained for the period necessary to carry out the activities requested by the User and can, in any case, be deleted at any time by check-point.

The retention period may be extended and involve the subsequent acquisition of additional data if the User requests further services; in such a case, the processing duration for administrative, accounting, tax, and contractual purposes may extend up to 10 years from the termination of the relationship, as provided by current regulations (Article 2220 of the Civil Code, Article 22 of the Presidential Decree of 29/09/1973 no. 600 and Article 2200 of the Civil Code).

Technical navigation cookies (described below) will be stored solely to allow the correct technical functioning of the site itself and will automatically expire when the browser is closed.

10. TYPE OF NAVIGATION DATA PROCESSED

The computer systems and software procedures used to operate this website acquire, during their normal operation, some personal data whose transmission is implicit in the use of Internet communication protocols.

This information is not collected to be associated with identified data subjects, but by its very nature could, through processing and association with data held by third parties, allow Users to be identified.

This category of data includes IP addresses or domain names of the computers used by Users connecting to the site, URI (Uniform Resource Locator) addresses of the requested resources, the time of the request, the method used in submitting the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response given by the server (successful, error, etc.) and other parameters relating to the operating system and the User's IT environment.

This data is used solely to obtain anonymous statistical information on the use of the site and to check its correct functioning.

The data in question could be used to ascertain responsibility in case of hypothetical computer crimes against our site.

11. RIGHTS OF DATA SUBJECTS

Data subjects, pursuant to Article 13 of EU Regulation 2016/679, have the right at any time to obtain confirmation of the existence or otherwise of their personal data and to know its content and origin, verify its accuracy, or request its integration, updating, or rectification. Data subjects also have the right to request the erasure, transfer of data to other controllers, transformation into an anonymous form, or blocking of data processed in violation of the law, as well as to object in any case, for legitimate reasons, to their processing. Data subjects also have the right to lodge a complaint with a supervisory authority (Privacy Guarantor).

Requests relating to Article 13 of EU Regulation 2016/679 must be addressed to the Data Controller at phone number +39 0376 720359, or email address: customerservice@check-point.it

Rights of the Data Subject

(European Regulation 2016/679) Article 13 "Information to be provided where personal data are collected from the data subject"

1. Where personal data relating to a data subject are collected from the data subject, the controller shall, at the time when personal data are obtained, provide the data subject with all of the following information: a) the identity and the contact details of the controller and, where applicable, of the controller's representative; b) the contact details of the data protection officer, where applicable; c) the purposes of the processing for which the personal data are intended as well as the legal basis for the processing; d) where the processing is based on Article 6(1)(f), the legitimate interests pursued by the controller or by a third party; e) the recipients or categories of recipients of the personal data, if any; f) where applicable, the fact that the controller intends to transfer personal data to a third country or international organisation and the existence or absence of an adequacy decision by the Commission, or in the case of transfers referred to in Article 46 or 47, or the second subparagraph of Article 49(1), reference to the appropriate or suitable safeguards and the means by which to obtain a copy of them or where they have been made available.

2. In addition to the information referred to in paragraph 1, the controller shall, at the time when personal data are obtained, provide the data subject with the following further information necessary to ensure fair and transparent processing: a) the period for which the personal data will be stored, or if that is not possible, the criteria used to determine that period; b) the existence of the right to request from the controller access to and rectification or erasure of personal data or restriction of processing concerning the data subject or to object to processing as well as the right to data portability; c) where processing is based on point (a) of Article 6(1) or point (a) of Article 9(2), the existence of the right to withdraw consent at any time, without affecting the lawfulness of processing based on consent before its withdrawal; d) the right to lodge a complaint with a supervisory authority; e) whether the provision of personal data is a statutory or contractual requirement, or a requirement necessary to enter into a contract, as well as whether the data subject is obliged to provide the personal data and of the possible consequences of failure to provide such data; f) the existence of automated decision-making, including profiling, referred to in Article 22(1) and (4) and, at least in those cases, meaningful information about the logic involved, as well as the significance and the envisaged consequences of such processing for the data subject.

3. Where the controller intends to further process the personal data for a purpose other than that for which the personal data were collected, the controller shall provide the data subject prior to that further processing with information on that other purpose and with any relevant further information as referred to in paragraph 2.

4. Paragraphs 1, 2 and 3 shall not apply where and to the extent that the data subject already has the information.

12. UPDATES

This site's Privacy Policy is subject to updates; Users are therefore invited to periodically check its content.