ATHLETE INFORMATION NOTICE MOD04 REV01 09/04/2024
Dear Sir/Madam,
The undersigned company wishes to inform you that, for the establishment and management of the contractual relationship with you, it is necessary to process some information concerning you, which is considered personal data pursuant to Articles 13 and 14 of EU Regulation 2016/679.
DATA CONTROLLER
The Data Controller, i.e., the company that will decide the purpose and means of processing your personal data, is “Rossignol Lange S.r.l.” located at Via San Gaetano, 243 – 31044 Montebelluna (TV) Tel. 0423616611 Email. reception.montebelluna@rossignol.com
PURPOSE OF PROCESSING
The personal data we need to process is necessary:
- To fulfill all administrative, accounting, and tax obligations;
- To manage relationships with the athlete;
- To send informational and commercial communications regarding products and services promoted by our company (newsletter).
LEGAL BASIS FOR PROCESSING
The legal bases for processing are:
- Legal obligation with reference to regulations (e.g., tax);
- The contract with reference to the processing of personal data related to obligations based on the contract itself;
- Express consent with reference to the processing of special data for the requested service;
- Express consent with reference to newsletter activities.
CONSEQUENCES OF FAILURE TO PROVIDE PERSONAL DATA AND CONSENT
Regarding personal data related to the execution of the contract you are a part of or related to the fulfillment of a legal obligation (e.g., obligations related to keeping accounting and tax records), failure to provide personal data prevents the contractual relationship from being established. Failure to provide consent for the processing of special data will result in the inability to perform the requested service. Failure to provide consent for newsletter activities will result in the inability to activate the service.
CATEGORIES OF PERSONAL DATA PROCESSED
In particular, we inform you that we may process the following categories of personal data:
- Personal and tax data;
- Contact data;
- Bank codes;
- Data related to any contractual defaults.
Within the contractual relationship, the company may also process data, provided by you, that the law defines as “special” (formerly sensitive data) as they are suitable for revealing, for example:
- A general state of health (indications of pathologies and/or motor dysfunctions provided to better identify the product that the company can offer you);
- Biometric data (foot mold).
PARTIES WITH WHOM WE MAY SHARE YOUR PERSONAL DATA
Your personal data will be treated with strict confidentiality; in particular, the following parties may have access to your data:
- Public entities (e.g., tax offices);
- Agencies for the processing of tax documents;
- Credit institutions;
- Professionals and consultants.
PLACE OF PROCESSING
All processing will be carried out within the European Economic Area. More specifically, the processing will mainly take place at the data controllers’ premises and will be carried out by them. Without prejudice to communications made in compliance with legal and contractual obligations, the personal data collected may be transferred to non-EU countries. In this case, the Data Controller will ensure the adequacy, where possible, of the applicable regulations in the destination countries. Otherwise, the Data Controller may transfer your personal data only where strictly necessary for the execution of the existing contract, as provided for in Art. 49 para. 1 letter b).
DATA PROCESSORS
For their respective areas of competence, external data processors are appointed, such as professionals or service companies for business administration and management that operate on behalf of our company. If you wish, you can obtain the list of external data processors by contacting the Data Controller, identified above.
PROCESSING METHODS
Data processing is carried out through automated and non-automated tools, in accordance with the purposes indicated and in compliance with confidentiality requirements and the most appropriate security measures. We also guarantee that, as provided for by Art. 5 of GDPR 2016/679, the personal data relating to you will be:
- Processed lawfully, fairly, and transparently;
- Collected for specified, explicit, and legitimate purposes;
- Processed in a manner consistent with those purposes;
- Adequate, relevant, and limited to what is necessary in relation to the purposes for which they are processed; accurate and, where necessary, kept up to date;
- Stored in a form that permits identification of data subjects;
- Processed in a manner that ensures appropriate security of personal data, including protection against unauthorized or unlawful processing and against accidental loss, destruction, or damage, using appropriate technical and organizational measures.
DATA RETENTION PERIOD
All data will be retained for the time strictly necessary for the purposes for which they are processed and for the additional period required by current tax regulations. For newsletter activities, data will be retained until consent is withdrawn.
DATA SUBJECT RIGHTS
Data subjects are granted the rights provided for in Articles 15, 16, 17, 18, 20, 21 of the aforementioned EU Regulation, in particular:
- The right of access, i.e., the right to know what personal data our company processes;
- The right to request corrections of any errors and/or omissions;
- The right to obtain the deletion of data;
- The right to restrict data processing;
- The right to data portability, i.e., the right to receive all personal data processed by our company in a structured and machine-readable format;
- The right to object to the inclusion of all information.
Data subjects are also granted the right to lodge a complaint with the supervisory authority.
INFORMATION NOTICE FOR MINOR ATHLETES
MOD17
REV01 – 09/04/2024
Dear Sir/Madam,
Our Company would like to inform you that, for the establishment and management of the ongoing contractual relationship, we need to process some of your and the minor’s information, which is considered personal data under Articles 13 and 14 of EU Regulation 679/2016.
DATA CONTROLLER
The Data Controller, meaning the entity that decides the purposes and means of processing your personal data, is Rossignol Lange S.r.l., with headquarters at Via San Gaetano, 243 – 31044 Montebelluna (TV), Tel. 0423616611, Email: reception.montebelluna@rossignol.com.
PURPOSES OF DATA PROCESSING
We need to process personal data for the following purposes:
- Compliance with all administrative, accounting, and tax obligations;
- Management of relations with the athlete;
- Sending informational and commercial communications regarding products and services promoted by our Company (newsletter).
LEGAL BASIS FOR PROCESSING
The legal bases for processing are:
- Legal obligation, in compliance with applicable regulations (e.g., tax regulations);
- Contract, referring to the processing of personal data necessary to fulfill contractual obligations;
- Explicit consent, for the processing of special categories of data required for the requested service;
- Explicit consent, for newsletter activities.
CONSEQUENCES OF FAILURE TO PROVIDE PERSONAL DATA AND CONSENT
- Failure to provide personal data necessary for the execution of the contract or for compliance with legal obligations (e.g., accounting and tax records) will prevent the contractual relationship from being finalized.
- Failure to provide consent for the processing of special categories of data will prevent the requested service from being performed.
- Failure to provide consent for the newsletter activity will prevent the activation of this service.
CATEGORIES OF PERSONAL DATA PROCESSED
The categories of personal data we may process include:
- Identification and tax data;
- Contact details;
- Bank codes;
- Data related to any contractual defaults.
In the context of the contractual relationship, we may also process “special categories” of data (formerly “sensitive data”), including:
- General health status (e.g., information on conditions or motor impairments provided to better identify a suitable product);
- Biometric data (e.g., foot cast).
ENTITIES WITH WHOM WE MAY SHARE YOUR PERSONAL DATA
Your personal data will be processed confidentially. However, they may be shared with:
- Public entities (e.g., tax offices);
- Agencies for the processing of tax documents;
- Credit institutions;
- Professionals and consultants.
DATA PROCESSING LOCATION
All data processing will take place within the European Economic Area (EEA). However, in specific cases, data may be transferred to non-EU countries. In such cases, the Data Controller will ensure compliance with the applicable laws of the destination countries. If compliance cannot be ensured, the transfer of personal data will only occur if strictly necessary for the execution of the contract, in accordance with Article 49(1)(b) of the GDPR.
DATA PROCESSORS
External data processors may include professionals or service companies involved in the administration and business management on behalf of our Company. You may request a list of these processors by contacting the Data Controller.
PROCESSING METHODS
Data processing will be carried out using both automated and non-automated tools, in compliance with the stated purposes and following confidentiality and security standards.
In accordance with Article 5 of GDPR 2016/679, we guarantee that your personal data will be:
- Processed lawfully, fairly, and transparently;
- Collected for specified, explicit, and legitimate purposes;
- Processed in a manner consistent with these purposes;
- Adequate, relevant, and limited to what is necessary;
- Accurate and updated when necessary;
- Stored in a way that allows identification of the data subjects;
- Processed with adequate security measures to prevent unauthorized or unlawful processing, as well as accidental loss, destruction, or damage.
DATA RETENTION PERIOD
Data will be retained only for the time strictly necessary to achieve the stated purposes and for the period required by tax regulations.
For newsletter activities, data will be retained until consent is withdrawn.
DATA SUBJECTS’ RIGHTS
Under Articles 15-21 of EU Regulation 679/2016, data subjects have the right to:
- Access their personal data to know what data is being processed;
- Request corrections for any errors or omissions;
- Request data deletion;
- Restrict data processing;
- Data portability, meaning the right to receive all personal data in a structured, machine-readable format;
- Object to the processing of all information.
Data subjects also have the right to lodge a complaint with the Data Protection Authority.