Privacy policy

privacy information

Winner track with registered office AND OPERATIONAL in the street Piana 1, 14049 Nizza Monferrato (AT) Tel. (+39) 0141-726188 info@pista-winner.com , has drawn up this document to allow you to know our privacy policy and to understand how personal information is handled when our services are used.

We remind you that in the various sections of the website where we collect your personal data are published specific information pursuant to art. 13 of EU Regulation 2016/679 – GDPR (e.g. Cookie Policy) for its necessary reading before the provision of the requested data.

The information and data you provide or otherwise acquired in the context of the use of the various services, such as the registration of domain names, the provision of email accounts, the provision of Certified Electronic Mail (PEC), the provision of web space, provision of hosting services, provision of other ancillary services will be processed in compliance with the provisions of EU Regulation 2016/679 – GDPR and the confidentiality obligations that inspire the activity of PISTA WINNER.

According to the rules of EU Regulation 2016/679 – GDPR, the processing carried out will be based on the principles of lawfulness, correctness, transparency, limitation of purposes and storage, minimisation of data, accuracy, integrity and confidentiality.

index

  1. Data Protection Officer and Data Controller
  2. Personal data subject to processing
  3. navigation data
  4. Data provided voluntarily by the data subject
  5. traffic data
  6. purpose of the processing
  7. Legal basis and compulsory or optional nature of processing
  8. recipients of personal data
  9. transfers of personal data
  10. storage of personal data
  11. rights of the data subject
  12. Data deletion
  13. Owner and Data Protection Officer

The Data Controller of the processing carried out through the Site is PISTA WINNER as defined above. The Owner’s facility has a data protection officer or“DPO“. The DPO is available for any information pertaining to the processing of personal data, including the list of data processors. You can contact the DPO by writing to: info@pista-winner.com

  1. The personal data being processed

Processing of personal data means any operation or set of operations, whether or not involving automated processes, applied to personal data or sets of personal data, such as collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, comparison or interconnection, restriction, erasure or destruction.
Please be advised that the personal data being processed will consist – including depending on your decisions on how to use the Services – of an identifier such as your name, email address, an identification number, location data, an online identifier, purchases made, and other data likely to make you identified or identifiable, depending on the type of Services requested. Specifically, the Personal Data processed through the Site are as follows:

  1. Navigation data

The computer systems and software procedures used to operate the Site acquire, in the course of their normal operation, some Personal Data whose transmission is implicit in the use of Internet communication protocols. This information is not collected in order to be associated with identified data subjects, but by its very nature could, through processing and association with data held by third parties, allow users to be identified. This category of data includes the IP addresses or domain names of the computers used by users connecting to the Site, the URI (Uniform Resource Identifier) notation addresses of the requested resources, the time of the request, the method used in submitting the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response given by the server (successful, error, etc.) and other parameters related to the user’s operating system and computer environment. This data is used for the sole purpose of obtaining anonymous statistical information about the use of the Site and our customers’ sites and to monitor its proper functioning, to identify anomalies and/or abuses, and is deleted immediately after processing. The data could be used to ascertain responsibility in case of hypothetical computer crimes against the site or third parties: except for this eventuality, at present the data on web contacts do not persist for more than 30 days, unless requested by the user.

  1. Data voluntarily provided by the data subject

In using particular Services, processing of Personal Data of third parties sent by you to the Service operator may occur. With respect to these assumptions, you stand as an autonomous data controller, assuming all legal obligations and responsibilities. In this regard, she confers on the point the broadest indemnity with respect to any dispute, claim, claim for damages from treatment, etc. that should be received by PISTA WINNER from third parties whose Personal Data has been processed through its use of the Services in violation of applicable data protection regulations. In any case, if you provide or otherwise process Personal Data of third parties in the use of the Service, you warrant as of now – assuming all related liability – that this particular case of processing is based on an appropriate legal basis (e.g., the consent of the data subject) pursuant to Art. 6 of EU Regulation 2016/679 – GDPR that legitimizes the processing of the information in question.

  1. Traffic data

As part of the e-mail service, PISTA WINNER processes certain data for the purpose of transmitting communications over the electronic communication network. These data are those listed in Legislative Decree May 30, 2008, no. 109, namely are:

  • IP address used and e-mail address and any additional sender identifier;
  • IP address and fully qualified domain name of the mail exchanger host, in the case of SMTP technology or any type of host related to a different technology used for communication transmission;
  • E-mail address, and any additional identifier, of the recipient of the communication;
  • IP address and fully qualified domain name of the host mail exchanger (in the case of SMTP technology), or any type of host (relative to a different technology used), that provided the message delivery;
  • IP address used for receiving or consulting e-mail messages by the recipient regardless of the technology or protocol used;
  • date and time (GMT) of the connection and disconnection of the user of the Internet e-mail service and IP address used, regardless of the technology and protocol used;
  • The Internet service used.

These data are processed and stored by PISTA WINNER in order to provide the service and by legal obligation notably, for the purpose of investigating and prosecuting crimes – and with stringent security measures that make them accessible only to specially authorized persons in writing, who access them only following a request from the judicial authority accompanied by a reasoned decree of a public prosecutor and in any case with particularly sophisticated authentication techniques provided for in the legislation. By legal obligation, the data are kept by PISTA WINNER for the purpose of investigation and prosecution of crimes for six years after their generation. Data are also processed by PISTA WINNER for ordinary business processing related to the provision of the service (e.g., for documentation purposes in the event of an invoice dispute or payment claim, for fraud detection, to perform analysis on behalf of clients), pursuant to regulatory requirements. In this case, the data are kept, with stringent security measures applied in accordance with the law, for six months after their generation, and then deleted.

  1. Purpose of processing

The processing we intend to carry out, upon your specific consent where necessary, has the following purposes:

  • To enable the provision of the Services you have requested, including the collection, storage and processing of data for the purposes of the establishment and subsequent operational, technical and administrative management of the relationship related to the provision of the Services and the making of communications related to the conduct of the relationship established;
  • To allow browsing and consultation of the PISTA WINNER websites;
  • Respond to requests for assistance or information, which we will receive via e-mail, telephone;
  • Fulfilling legal, accounting and tax obligations;
  • To carry out direct e-mail marketing for services similar to those you have subscribed to, unless you have objected to such processing initially or in subsequent communications, in pursuit of PISTA WINNER’s legitimate interest in promoting products or services in which you may reasonably be interested;
  • To process studies, research, market statistics; to send you advertising, informative, commercial information or surveys to improve the service via e-mail and/or through the use of operator telephone and/or through the official pages of PISTA WINNER on social networks;
  • Make personalized business proposals based on the products or services you purchased, or were interested in by browsing our Site, or based on the customer group to which you belong (profiling);
  • for the exclusive purposes of security and prevention of fraudulent conduct, the Owner implements an automatic control system that involves the detection and analysis of user behavior on the site associated with the processing of Personal Data including IP address. The consequences of such treatment are that if a person attempts to engage in fraudulent conduct on the Site, PISTA WINNER reserves the right to exclude that person from the services in use to take any other appropriate measures for its own protection.
  1. Legal basis and mandatory or optional nature of processing

The legal basis for the processing of Personal Data for the purposes in Section 6(a-b-c) is Art. 6(1)(b) of EU Regulation 2016/679 – GDPR as the processing operations are necessary for the provision of the contracted services. The provision of Personal Data for these purposes is optional but failure to provide it would result in the inability to activate the Services requested.
The purpose referred to in Section 6(d) represents legitimate processing of Personal Data within the meaning of Article 6(1)(c) of EU Regulation 2016/679 – GDPR. Once Personal Data is provided, the processing may indeed be necessary to comply with legal obligations to which PISTA WINNER is subject.
The processing performed for marketing purposes and third-party communication described is based on the release of your consent under Art. 6(1)(a) of EU Regulation 2016/679 – GDPR. Providing your Personal Data for these purposes is entirely optional and does not affect your enjoyment of the Services. On the other hand, processing performed for e-mail marketing purposes on products or services similar to those purchased by you, finds its legal basis, pursuant to Art. 6.1.f of EU Regulation 2016/679 – GDPR, in the legitimate interest of PISTA WINNER to promote its products or services in a context in which the data subject can reasonably expect this type of processing, to which, moreover, he or she may object at any time. In fact, should you wish to object to the processing of your data for marketing purposes, you may do so at any time by sending an email request to info@pista-winnercom.

The processing of profiling to which you may object at any time is based on the legitimate interest of the Controller, according to Article 6.1.f. of EU Regulation 2016/679 – GDPR, to personalize its commercial communications. The processing under Section 6(h) is also based on the legitimate interest of the Controller in detecting fraud and scams carried out against him, in accordance with Art. 6.1.f of EU Regulation 2016/679 – GDPR.

  1. Recipients of personal data

Your Personal Data may be shared, for the purposes set out in Section 6 above, with:

  1. Individuals who typically act as data controllers viz:
    • persons, companies, or professional firms that provide assistance and advice to PISTA WINNER in accounting, administrative, legal, tax, financial, and debt collection matters relating to the provision of the Services;
    • parties with whom it is necessary to interact for the provision of the Services (e.g., domestic and foreign Registration Authorities to whom the Maintainer’s technical and administrative documentation and forms must be transmitted, authorities that manage the WHOIS database that contains the personal data of domain name assignees, parties that provide the credit card payment service, etc.
    • or entities delegated to perform technical maintenance activities (including maintenance of network equipment and electronic communication networks);
  2. subjects, entities or authorities to whom it is mandatory to communicate your personal data by virtue of provisions of the law or orders of the authorities (for example, in the course of investigations of a criminal nature PISTA WINNER may receive requests from the judicial authorities to provide computer traffic logs);
  3. persons authorized by PISTA WINNER to process Personal Data necessary to perform activities closely related to the provision of the Services, who have committed to confidentiality or have an appropriate legal obligation of confidentiality, such as employees of PISTA WINNER;
  4. business partners for their own, autonomous and separate purposes only if you have given specific consent.
  5. Transfers of personal data

Some of your Personal Data is shared with Recipients who may be located outside the European Economic Area, PISTA WINNER ensures that your Personal Data is processed by these Recipients in accordance with EU Regulation 2016/679 – GDPR. Indeed, transfers can be based on an adequacy decision or on Standard Contractual Clauses approved by the European Commission. More information is available from the Holder. As part of domain name registration services, data are disclosed to the entities listed in Section 8 of this policy: such processing in some cases involves the transfer of such data outside the European Economic Area. In view of the fact that said transfer is necessary for his enjoyment of the service, according to current privacy regulations, it is justified under Art. 49(1)(b) of EU Regulation 2016/679 – GDPR.

  1. Data retention

Personal Data processed for the purposes set out in Section 6(a-b-c) will be kept for as long as is strictly necessary to achieve those purposes. In any case, since the processing is carried out for the provision of Services, PISTA WINNER will process Personal Data for as long as permitted by Italian law to protect its interests (Art. 2946 c.c. et seq.).
Personal Data processed for the purposes set forth in Section 3(d) will be retained for as long as required by the specific applicable legal requirement or rule.
On the other hand, for the purposes referred to in Section 6 (e)(f), your Personal Data will be processed until your consent is revoked or until one year after you cease to be a customer of PISTA WINNER. This is without prejudice in any case to the possibility for PISTA WINNER to retain your Personal Data for as long as permitted by Italian law to protect its interests (Art. 2947(1)(3) c.c.). More information regarding the data retention period and the criteria used to determine this period can be requested by writing to the Data Controller or the DPO.

  1. Rights of data subjects

As a data subject you will be able to exercise your rights under Art. 16 to 22 of EU Regulation 2016/679 – GDPR.

Article 16 – Right of Rectification

You have the right to obtain from the data controller the rectification of inaccurate personal data concerning you without undue delay. Taking into account the purposes of the processing, you have the right to obtain the integration of incomplete personal data, including by providing a supplementary statement.

Art. 17 – Right to cancellation

You have the right to obtain from the data controller the erasure of personal data concerning you without undue delay, and the data controller is obliged to erase the personal data without undue delay if any of the following grounds exist:

  • personal data are no longer necessary in relation to the purposes for which they were collected or otherwise processed; 4.5.2016 EN Official Journal of the European Union L 119/43
  • withdraw the consent on which the processing is based in accordance with Article 6(1)(a) or Article 9(2)(a) and if there is no other legal basis for the processing;
  • you object to processing under Article 21(1) and there is no overriding legitimate reason for processing, or you object to processing under Article 21(2);
  • personal data have been unlawfully processed;
  • personal data must be deleted in order to comply with a legal obligation under Union or Member State law to which the data controller is subject;
  • personal data were collected in connection with the provision of information society services referred to in Article 8(1).

The data controller, if it has made personal data public and is obliged under paragraph 1 to delete it, taking into account available technology and implementation costs shall take reasonable measures, including technical measures, to inform data controllers who are processing personal data of your request to delete any link, copy or reproduction of your personal data.

Paragraphs 1 and 2 do not apply to the extent that the treatment is necessary:

  • for the exercise of the right to freedom of expression and information;
  • for the establishment, exercise or defense of a right in court.

Article 18 – Right to limitation of processing.

You have the right to obtain from the data controller the restriction of processing when one of the following occurs:

  • disputes the accuracy of personal data, for the period necessary for the data controller to verify the accuracy of such personal data;
  • processing is unlawful and you object to the deletion of your personal data by instead requesting that their use be restricted;
  • although the data controller no longer needs it for processing purposes, your personal information is necessary for the establishment, exercise or defense of a legal claim;
  • you objected to the processing under Article 21(1), pending verification as to whether the data controller’s legitimate grounds prevail over those of the data subject.

Where processing is restricted under paragraph 1, such personal data shall be processed, except for storage, only with your consent or for the establishment, exercise or defence of a right in a court of law or for the protection of the rights of another natural or legal person or for reasons of substantial public interest of the Union or a Member State. L 119/44 EN Official Journal of the European Union 4.5.2016 3.
If you have that you have obtained restriction of processing under paragraph 1 you are informed by the data controller before that restriction is lifted.

Article 19 – Right to obtain notification from the data controller in cases of rectification or erasure of personal data or deletion of personal data

The controller shall notify each of the recipients to whom the personal data have been transmitted of any rectification or erasure or restriction of processing carried out pursuant to Article 16, Article 17(1), and Article 18, unless this proves impossible or involves a disproportionate effort. The data controller will notify you of these recipients if you request it.

Article 20 – Right to portability

You have the right to receive, in a structured, commonly used, machine-readable format, personal data concerning you that you have provided to a data controller, and you have the right to transmit such data to another data controller without hindrance from the data controller to whom you have provided it if:

  • processing is based on consent in accordance with Article 6(1)(a) of the (a), or Article 9 (2) (a). (a), or on a contract under Article 6(1)(a). b);
  • the processing is carried out by automated means.

In exercising your rights regarding data portability under paragraph 1, you have the right to obtain direct transmission of personal data from one data controller to another, if technically feasible.
The exercise of the right referred to in paragraph 1 of this Article is without prejudice to Article 17.
The right referred to in paragraph 1 must not infringe on the rights and freedoms of others.

Article 21 – Right of Opposition

You have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data concerning you in accordance with Article 6(1), letters (e) or (f), including profiling on the basis of these provisions. The data controller shall refrain from further processing personal data unless the data controller demonstrates compelling legitimate grounds for processing that override your interests, rights and freedoms or for the establishment, exercise or defense of a legal claim. Where personal data is processed for direct marketing purposes, you have the right to object at any time to the processing of personal data about you carried out for such purposes, including profiling insofar as it is related to such direct marketing. If you object to processing for direct marketing purposes, your personal data will no longer be processed for such purposes. 4.5.2016 EN Official Journal of the European Union L 119/45 4. The right referred to in paragraphs 1 and 2 is explicitly brought to your attention and is presented clearly and separately from any other information at the latest at the time of the first communication with you. In the context of using information society services and subject to Directive 2002/58/EC, you can exercise your right to object by automated means using specific techniques. Where personal data are processed for scientific or historical research purposes or for statistical purposes pursuant to Article 89(1),you, on grounds relating to your particular situation, have the right to object to the processing of personal data concerning you, unless the processing is necessary for the performance of a task carried out in the public interest.

Art. 22 – Right to reject automated process.

You have the right not to be subjected to a decision based solely on automated processing, including profiling, that produces legal effects concerning you or significantly affects you in a similar way. Paragraph 1 does not apply in case the decision:

  • is necessary for the conclusion or performance of a contract between you and a data controller;
  • is authorized by the law of the Union or the Member State to which the data controller is subject, which also specifies appropriate measures to protect your rights, freedoms and legitimate interests;
  • Is based on your explicit consent.

In cases referred to in paragraph 2 (a) and (c), the controller shall implement appropriate measures to protect your rights, freedoms and legitimate interests, at least the right to obtain human intervention by the controller, to express your opinion and to challenge the decision.
Decisions under paragraph 2 shall not be based on the special categories of personal data referred to in Article 9(1) unless Article 9(2)(a) or (g) applies and appropriate measures are in place to protect your rights, freedoms and legitimate interests.

As such, you will be able to access your data to:

  • Verify its veracity
  • Modify them if they become inaccurate
  • Supplement them even with supplementary declaration
  • Request cancellation
  • Limit its treatment
  • Objections to treatment

The data controller is obliged to respond without undue cause.

  1. Data deletion

PISTA WINNER in compliance with the corresponding right of access to the data subject, has set up procedures whereby you can request the deletion without undue delay of your personal data or the restriction of the processing of personal data concerning you for the following reasons:

  • Because the data are no longer needed for the purposes for which they were collected
  • Why did you revoke consent
  • Why do you object to the treatment
  • Because the data are processed unlawfully.

Inquiries should be addressed to info@pista-winner.com

In any case you always have the right to lodge a complaint with the competent supervisory authority (Data Protection Authority), pursuant to Art. 77 of the EU Regulation 2016/679 – GDPR, if you believe that the processing of your data is contrary to the legislation in force.

This privacy policy is effective as of 05/25/2018 and PISTA WINNER may change or update its contents.
To that end, we encourage you to visit the Privacy section to check the updated version.

© NetWareHouse Ltd. All Rights Reserved | VAT IT02764150922