PRIVACY POLICY
Information on the processing of personal data pursuant to articles 13 and 14 of Regulation (EU) 2016/679
1. Introduction
this privacy policy describes how ASD Flamingo Surf Club Apulia is the personal data of the users that visit our site, www.flamingosurfclub.it, fill out our contact form, request information, membership or reservations, participate in the activities of the Club or interact with the Club through the channels indicated on the website.
The information has been drawn up in accordance with Regulation (EU) 2016/679, of the legislative decree 196/2003 as amended by legislative decree 101/2018, to the measures of the Guarantor for the protection of personal data and the applicable legislation relating to the cookie and trace tools. The text is crafted with a conversational style to enable the person concerned to understand clearly who is the data, for what purpose, on what legal basis, for how long and with what rights.
2. The controller and contact details
The holder of the treatment is ASD Flamingo Surf Club Puglia, tax code and VAT 08615610725, with a registered office or place of performance of the activities indicated in the district of Marshes, 76125 Trani (BT). The holder can be contacted at the email address flamingosurfclub@gmail.it or to the number +39 388 9415868, unless subsequent updates of the contact details published on the website.
As of the date of this disclosure is not shown on the website a Data Protection officer. In the event the Club to appoint a DPO, or RPD, the contact data will be published in this privacy policy or communicated with in a manner appropriate.
3. Categories of processed data
When the user browses the site, the Club and the technical suppliers may process browsing data, such as IP address, identifiers, online, information on the browser and on the device, the date and time of access, pages visited, technical data necessary for the operation of the site and information collected by cookies or similar tools, as indicated also in the cookies policy and in the management panel of the consent.
When the user fills out a contact form, request information, membership, bookings or collaboration, the Club is the data entered voluntarily by the user, such as name and surname, email, phone number, content of the message, the preference of contact, information related to the discipline or to the course of interest and any further data communicated spontaneously.
When you proceed with the registration, reservation, purchase or participation in the activities, the Club can deal with identification data, contact details, payment details, tax or accounting purposes, information on participation in the classes, the technical level, age, data of the parent or guardian in case of minors, the documentation requested to access the activities and, where provided for by the legislation of sport or to meet the requirements of safety, the information relating to fitness to practice sports or medical certifications.
The Club invites users not to enter in online forms data that is not needed, the data belonging to particular categories, health information, personal opinions, or data of third parties, unless this is necessary for the specific request, and that the user is entitled to communicate.
4. Purposes of processing and legal basis
The navigation data are processed to allow the technical operation of the website, ensuring the security of our systems, to prevent any abuse, obtaining anonymous statistical techniques and fulfill the requirements of the law. The legal basis is established, depending on the case, from the need to make available to the service requested by the user, by the fulfillment of legal obligations and legitimate interest of the holder to the security and proper functioning of the site.
The data entered in the contact form are processed to respond to user requests, provide information about the courses, lessons, membership, collaborations, or other activities of the Club, as well as to manage the communications consequential damages. The legal base is the execution of pre-contractual measures requested by a data subject or, in cases of mere request information, in the legitimate interest of the Club to provide feedback to those who contact him.
The data processed in relation to reservations, purchases, lessons, courses, packages, and membership are used to arrange and provide the services requested, to manage the calendar, payments, documentation, insurance, operational communications, associative relationships, and administrative requirements. The legal base is the execution of the contract or pre-contractual measures, for the fulfillment of legal obligations, the management of the association relationship and the legitimate interest of the Club to the proper organization of the activities.
In the event the Club strokes, medical certificates, information on the suitability for the practice of a sport or other health data, the processing will take place only when necessary to fulfil the obligations provided for by the legislation of sports, to protect the safety of the participants or to allow participation in the activities under the appropriate conditions. In such cases, the treatment will be limited to what is strictly necessary, and will be based on the applicable legislation and, where required, on the explicit consent of the data subject or of the person who exercises parental responsibility.
Any promotional communications, newsletters, campaigns, not strictly related to a request from the user or the activities of direct marketing will be carried out only in the presence of a suitable legal basis, and in particular the consent of the interested party when it is required. The consent may be revoked at any time, without prejudice to the lawfulness of the processing carried out prior to the revocation.
Any images, photographs, pictures or videos collected during events, lessons, or activities of the Club may be used for the purposes of documentation, membership, promotion or communication only in compliance with applicable law and, when necessary, subject to the acquisition of a specific agreement, separate and documented, especially in the case of minors.
5. Provision of data
The provision of the navigation data is technically necessary is essential to allow access to the site. The provision of the data requested in the contact forms is required to receive a response to the request sent; in the absence, the Club may not be able to contact you or provide the requested information.
The provision of data necessary for registration, booking, payment, or participation in the activities, it is necessary to establish and manage their relationship. Failure to provide it may prevent admission to the Club, the confirmation of the booking, the provision of the service or participation in the activity. The provision of data for promotional purposes, or for the use of cookies non-technical it is optional and the possible lack of consent does not prevent the navigation of the website, or the use of essential services.
6. Processing means and security measures
The treatment is carried out with tools, electronic and, where necessary, on paper, in accordance with the principles of lawfulness, correctness, transparency, minimization, accuracy, integrity and confidentiality. The Club shall adopt the technical and organisational measures appropriate to the risk, with the objective of protecting the data from unauthorized access, loss, destruction, dissemination undue or use not in accordance with the declared purpose.
The access to the data is permitted only to authorized persons or to vendors operating on behalf of the Club, within the limits of their respective tasks and according to instructions, consistent with applicable laws and regulations. The Club will not use your data for automated decision processes suitable to produce legal effects on the person concerned, or to affect in a similar way significantly on his person.
7. The recipients of the data
The data may be communicated to subjects that support the Club in its activities, such as it service providers, hosting providers, maintainers of the site, consultants, administrative, fiscal, or legal, payment institutions, insurance companies, sports promotion bodies, federations, associations, instructors, employees, partners, organizational and public authorities, where this is necessary for the purposes indicated or required by law.
Suppliers that process data on behalf of the Club are, where necessary, the designated responsible for the treatment, pursuant to article 28 of Regulation (EU) 2016/679. The data is not disseminated indiscriminately. The publication of images, videos, contacts, or content related to the interested parties will only take place when there is an appropriate legal basis and, where required, subject to your consent.
8. Transfers to third Countries
The Club aims to process data within the European Economic area. However, the use of suppliers in technology, social platforms, messaging services, analysis tools, hosting services or payment systems may result in transfers or access to data by third Countries. In such cases, the transfer will be done only in the presence of the conditions provided for by Regulation (EU) 2016/679, such as the decisions of adequacy, standard contractual clauses, additional measures or other warranties allowed by law.
The user who interacts with social pages, maps, messaging tools, or external platforms must consider that these services are managed by independent holders of the treatment and are governed by their respective privacy policies.
9. Storage time
The data is kept for the time necessary to achieve the purposes for which they were collected and, subsequently, for the period imposed or permitted by law for administrative, tax, accounting, evidence or for the protection of rights.
The data collected through contact forms are kept for the time necessary to manage your request and, as a rule, not more than twenty-four months from the last contact, unless the communication gives rise to a contractual relationship, the association or the need for subsequent conservation. The data relating to bookings, payments, contractual, and administrative documentation shall be kept for the period provided for by the civil law, tax and accounting, normally up to ten years from the conclusion of a relationship or from the last recording relevant.
The data relating to the membership and participation of the membership are maintained for the duration of the relationship and subsequently for the period necessary to fulfill regulatory obligations, insurance, tax, or to protect the rights of the Club and of the interested party. Any health information or medical certifications are kept only for the time strictly necessary for the verification of the suitability and according to the terms provided for by the legislation sporting applicable. The data processed for promotional purposes are retained until the withdrawal of consent or, in the absence of interactions, for a period proportionate to the aim pursued. The data collected through cookies are stored as described in the cookies policy and in the management panel of the consent.
10. Cookies and tool tracking
this site uses cookies and similar technologies to ensure the technical functioning of the pages and, subject to your consent when required, preferences, statistics, marketing, or other purposes indicated in the banner and in the cookie policy. Technical cookies are necessary for navigation or to provide a service requested by the user, and do not require the consent, without prejudice to the information. Cookies profiling, marketing tools or non-technical can be used only after the user has made a free and informed choice.
The user can manage or change the preferences through the panel consensus is available on the website. The cookie policy should indicate how up to date the categories of cookies used, their duration, purpose, and all the third parties involved and how to withdraw or modify your consent.
11. Minor
The Club pays particular attention to the treatment of personal data of minors, especially in relation to membership, bookings, lessons, sports activities, parental permissions and images. When the service involves a minor, the data must be provided by those who exercise parental responsibility or by a person entitled, except in cases where the law permits otherwise.
The use of images or videos of minors for the purposes of promotion, social media, website, or external communication requires particular caution and, where necessary, a specific consent of the parents or those with parental responsibility, as distinct from the acceptance of the conditions of participation or membership.
12. Rights of the interested party
The interested party may exercise, in the cases and within the limits set by Regulation (EU) 2016/679, the right of access to personal data, rectification, deletion, limitation of treatment, opposition, portability of data, revoke your consent if the processing is based on consent, as well as the right not to be subjected to decisions based solely on automatic processing when the circumstances so require.
Requests can be sent to the data controller using the contact details set out in this statement. The owner may ask you for information necessary to identify the person concerned and will respond in the terms established by the legislation. The exercise of rights is, in principle, free of charge, except where requests are manifestly unfounded, excessive or repetitive, in the limits allowed by the Regulation.
The data subject also has the right to lodge a complaint to the Guarantor Authority for the protection of personal data, with headquarters at Piazza Venezia 11, 00187 Rome, or referring the matter to the competent judicial authority, if it considers that the processing of their personal data takes place in violation of applicable laws and regulations.
13. Updates to this privacy statement
The Club may update this privacy statement to reflect changes in regulatory, technical, organizational, operational, or to the services actually offered through the site. The updated version will be published on the website with the indication of the date of the last update.
The user is invited to consult the privacy policy periodically, and especially before you submit any personal data through the forms, or participate in new activities of the Club.
Last revision 11.06.2026