PRIVACY

This privacy policy has been drafted and customized for the website store.virtus.it (the "Site") and our services (the "Services") and does not apply to third-party websites that may be referenced via links or banners within the Site.

Specific summary notices are progressively provided or displayed on the Site’s pages prepared for particular on-demand services involving data collection forms.

We also inform you that, to provide a complete service, our Site may contain links to other websites not managed by Virtus Pallacanestro Bologna S.P.A. Virtus Pallacanestro Bologna S.P.A. is not responsible for any errors, content, cookies, publication of morally illicit content, advertising, banners, or files that do not comply with current regulatory provisions, nor for the Privacy compliance of sites not managed by the Data Controller.

1 • Introduction

When you browse our website or use our services, we collect personal information and data about you. For this reason, in compliance with Regulation EU no. 679/2016 (hereinafter "GDPR") and any implementing laws, we have created this document (hereinafter "Privacy Policy") to describe which personal data we collect, the purposes and methods of processing it, and the security measures we adopt to protect it.

This Privacy Policy constitutes the notice to data subjects issued under the applicable regulations on personal data protection and was prepared in accordance with Recommendation no. 2/2001, adopted on May 17, 2001, by the Working Party on the Protection of Individuals - Art. 29 regarding the minimum requirements for online data collection within the European Union.

2 • Source and Purpose of Data Processing

2.1 Browsing Data

The computer systems responsible for operating the Services acquire, during their normal operation, some of your personal data, the transmission of which is implicit in the use of Internet communication protocols. This information is not collected to identify you but could lead to identification if combined with data held by third parties. This category of data includes your IP address, the domain name of your computer, the URI (Uniform Resource Identifier) addresses of requested resources, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numerical code indicating the server’s response status, and other parameters related to your operating system. We use this data solely to obtain anonymous statistical information on the use of the Services and to check their correct functioning. We delete this data immediately after processing. The data could be used to determine liability in the event of computer crimes committed against the Site or Services.

2.2 Registration and Additional Information

Browsing our Site does not require creating a personal account. However, to access certain pages reserved for registered users, you can create a personal account and thus become a registered user. When creating the account, we will ask you to provide your first and last name, date of birth, gender, email address, country, occupation (providing this data is not mandatory to complete registration), and to create a password.

In certain sections of the Site, it is possible to fill out a contact form to request or provide information. In such cases, the data processed will be only those you provide, such as your first name, last name, email address, and any personal data entered in the message text.

If you collect, process, and communicate information related to third parties, you must do so in compliance with GDPR requirements, providing them with prior information about the processing and, if necessary, obtaining their free and explicit consent before processing.

2.3 Purpose of Processing

We process your data to allow you to browse the Site and create an account. The processing is based on the legitimate interest of the Data Controller in ensuring the correct operation of the website and fulfilling your registration request. Providing your data for this purpose is mandatory to create an account or use our Services. Refusal to provide it would limit your ability to browse our Site and prevent you from using our Services.

We also process your data to sell Virtus Bologna products and merchandise. When you place an order on our Site, we process your personal and contact information and billing, shipping, and payment details to receive and process your order. Processing is based on the performance of contractual obligations between the parties. Providing your data for this purpose is mandatory; otherwise, it will not be possible to receive or process your order. The sale is subject to the terms and conditions indicated at the following link: General Terms and Conditions of Sale.

2.4 Additional Purposes of Processing

With your explicit consent, we will use the information you provide for additional purposes beyond those listed above. These include, with your express consent, processing for marketing purposes, such as sending promotional materials regarding products, services, initiatives, and events we offer via automated means (email, SMS, MMS, fax, autoresponders) and non-automated means (paper mail, telephone with operator). With your consent, we will also process your personal data to create individual or group profiles to send personalized communications aligned with your interests. Moreover, subject to your express consent, we will share your personal data with our commercial partners for their marketing purposes using automated and non-automated means.

Providing data for the above-mentioned additional purposes is optional. Refusal to provide this data would not affect your ability to use our Services or browse our Site. In any case, you can always withdraw your consent to the collection and processing of your data, object to receiving promotional communications by all or only certain contact methods indicated above, or choose which contact methods to receive such advertising material by adjusting your account settings or emailing us at: storecustomercare@virtus.it. A specific notice on data processing is available upon registration.

2.5 Information Collected Through Cookies and Other Technologies

For information on cookies used on this site, click here.

3 • Data Processing and Data Retention

We process your personal data using electronic tools and always in compliance with the security requirements prescribed by the applicable law. Our security measures include contractual tools with any contractor (e.g., service providers) or agent to ensure the protection of the security and confidentiality of your personal data in compliance with applicable personal data protection regulations.

We retain your personal data as long as your account remains active. Even after its closure, we will retain the data to the extent necessary to comply with legal obligations, protect our rights, prevent fraud, or enforce this Privacy Policy. Specifically concerning documentation related to purchases made on our Site, we retain data for ten years following applicable tax and accounting requirements.

Regarding marketing and profiling activities, in line with the Data Protection Authority’s recommendations, we retain your purchase data for 24 months and 12 months from the event, respectively.

4 • Scope of Data Disclosure

4.1 Internal and External Disclosure of Personal Data

Your personal data will only be processed by individuals who are previously authorized to process it or by our data processors. Specifically, your data may be disclosed to the following categories of external entities: professional and/or technical service providers, such as the website manager, credit institutions, or payment service providers, lawful recipients as required by law, such as authorities or public bodies, and, with your consent as specified above, Virtus Pallacanestro Bologna S.P.A. for independent marketing activities. The data recipients act as controllers, processors, or authorized parties per applicable law. If we are involved in a reorganization, acquisition, or sale of our company or parts thereof, we will disclose your data to third parties involved in the procedure.

Any third party that is a recipient of your data under this procedure may use it within the limits set by this Privacy Policy. To receive an updated list of processors and the list of recipients of your data, please contact us by sending an email to: storecustomercare@virtus.it.

4.2 Data Transfer Abroad

We may transfer your data outside Italy to third-party recipients established within the European Union, as such transfer is free because each EU country ensures an adequate level of data protection. However, we may also transfer your data to non-EU countries that do not guarantee the same level of data protection. Please note that such transfer to non-EU countries will always occur in compliance with the GDPR, by obtaining your consent when necessary or by adopting all measures needed to ensure the security of the data being transferred, e.g., by entering into Standard Contractual Clauses approved by the European Commission.

5 • Data Subject’s Rights
At any time, you may exercise the rights granted under the GDPR, as follows:

• Request for access to your personal data: You have the right to obtain confirmation from the data controller as to whether or not personal data concerning you is being processed, and, if so, to access it. This access allows you to know certain information, including the purposes of the processing, the categories of personal data processed, and the recipients to whom the data is disclosed. However, there is no absolute right of access, and the interests of other individuals may limit your right of access. You also have the right to obtain a copy of the personal data undergoing processing. For additional copies, an administrative fee may apply.
• Rectification of your personal data: You have the right to obtain the correction of inaccurate personal data concerning you, as well as to have incomplete personal data completed, including by providing a supplementary statement.
• Erasure of your personal data: You have the right to obtain from the data controller the erasure of personal data concerning you without undue delay. The data controller is obliged to delete the personal data without undue delay when certain conditions are met, including when the data is no longer necessary for the purposes for which it was collected or if consent has been withdrawn.
• Restriction of the processing of your personal data: In limited circumstances—such as when you contest the accuracy of the data—you have the right to request the restriction of the processing of personal data concerning you.
• Data portability: You have the right to receive, in a structured, commonly used, and machine-readable format, the personal data concerning you that you have provided to a data controller and the right to transmit such data to another data controller without hindrance from the controller to whom you provided it, provided that processing is based on consent and is carried out by automated means.
• Objection to processing: You have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data concerning you.

Furthermore, you have the right to lodge a complaint with the competent supervisory authority (the Data Protection Authority) or to contact the authority if the exercise of your rights is subject to restrictions, in accordance with the law.
To exercise these rights, please contact us using the contact details provided below.

6 • Data Controller
The data controller is Virtus Pallacanestro Bologna S.P.A., headquartered at Via dell'Arcoveggio, 49/2 - Bologna (Italy), email: comunicazione@virtus.it; the website is managed by the data processor FANATICS ITALY S.R.L., based at Via Magistretti 10, 20128 Milan, acting in accordance with the instructions provided by the data controller.
The Data Protection Officer for Virtus Pallacanestro Bologna S.P.A., domiciled at the company’s headquarters, can be contacted at the following email address: support@logital.it.

7 • Changes to this Privacy Policy
The data controller reserves the right to update this privacy policy to comply with new legal requirements, as well as to take into consideration suggestions from employees, customers, collaborators, and users. In such cases, a visible notification of the changes made will be provided.