Below we provide the subjects who come into contact with our Company (the "Interested Parties"), a summary description of the essential characteristics of the processing of their personal data carried out by ActiveSwinGym Srl, based in via del Cristo n. 92/A – Padua (PD), which acts as Data Controller (hereinafter the “Data Controller”). The processing will take place in compliance with Regulation (EU) 2016/679 - General Data Protection Regulation (the “Regulation”) and Legislative Decree 30 June 2003, n. 196 as amended by Legislative Decree 101/2018 hereinafter the “Code”).
By “data” we mean “any information concerning an identified or identifiable natural person” and by “processing” “any operation or set of operations, carried out with or without the with the aid of automated processes and applied to personal data or sets of personal data, such as collection, recording, organisation, structuring, storage, adaptation or modification, extraction, consultation, use, communication by transmission, diffusion or any other form of making available, comparison or interconnection, limitation, cancellation or destruction".
For further details, please refer to the detailed information below.

The information on the processing of personal data concerning the navigation of the Company's website and access to the services provided via E-Commerce is made available, summarized in the following summary table on the processing, which will allow you to easily find the essential information relating to the processing of personal data. However, detailed information is available subsequently, which gives a complete picture of the information that we are required to provide pursuant to art. 13 GDPR.

Who is the Data Controller?

ActiveSwinGym Srl, with headquarters in Via del Cristo n. 92/A – Padua (PD); the contact details are:

• privacy@activeswingym.com
• activegym22@pec.it

What personal data do we process?

For the operation and navigation of the site we deal with:

• Browsing data (including, for example, IP addresses, addresses in URI/URL notation of the requested resources);
• Data possibly collected through cookies, for which please refer to the specific cookie policy;
• Data relating to health status.

For access to the services provided by E-Commerce we deal with:

• Common personal data (name, surname, residential address, shipping address if not coinciding);
• Personal contact details (telephone number and email address)
• Personal identification data for billing (Tax Code or VAT number);
• Billing and payment data.

Why do we process Personal Data? (Purpose)

• To allow you to browse our website;
• To carry out research and/or statistical analysis on aggregate or anonymous data, without the possibility of identifying the user;
• To recommend the most suitable product for the user;
• To register on the ActiveSwinGym Srl E-Commerce portal;
• To execute purchase orders received via E-Commerce;
• For managing relationships with ActiveSwinGym Srl customers (e.g. purchase assistance, response to questions, refund operations).
• In order to be able to forward communications via email for direct marketing purposes, relating to services similar to those sold in e-commerce, promotions and discounts;
• To fulfill all regulatory obligations connected to the management of the purchase contract, such as, for example, invoicing obligations;
• For the need to ascertain, exercise or defend a right in court or whenever the Authorities exercise their functions.

What is the Treatment based on? (Legal Basis)

1. The sub treatment. 1), sub. 2) and sub. 9) is connected to the legitimate interest of the Data Controller.
2. The sub treatment. 3), 4), 5) and 6) refer to the need to implement pre-contractual measures and the purchase contract.
3. The sub treatment. 7) is connected to the expression of free consent by the interested party.
4. The sub treatment. 8), is necessary to fulfill the legal or regulatory responsibilities of the Owner.

How do we process personal data?

In computer mode, with observance of every precautionary measure applied by the Data Controller that guarantees security, confidentiality and control.

To whom do we communicate personal data?(Categories of Recipients)

• Employees, collaborators, subjects appointed and authorized by the Owner;
• Service providers, who act as data controllers pursuant to art. 28 GDPR, such as, for example, the person who manages the website;
• Subjects legally entitled to access the data;
• Subjects to whom communication is necessary for the fulfillment of contractual obligations;
• Public authorities;
• Third Parties.

The personal data processed by the Data Controller are in no way subject to disclosure.

How long do we keep personal data?

Within the scope of the purposes indicated above, the data will be kept for the time strictly necessary to achieve the purposes for which they were collected and processed. The criterion for determining the actual data retention period will be represented by the limitation period for actions deriving from an existing relationship with the interested party. The data connected to access to the E-Commerce service are kept for at least 10 years from the conclusion of the contract.

Is the provision of personal data mandatory or optional? What happens in case of refusal to communicate personal data?

If you want to browse the site, you must provide us with your navigation data and the data contained in some cookies (technical cookies). If you fail to provide this information, you may have a less than optimal browsing experience on this website and we may not be able to satisfy your requests. The provision of data for access to E-Commerce services is mandatory for the conclusion of the contract, while the provision of data for purposes related to forwarding the newsletter is optional and subject to independent consent.

What rights does the interested party have?

The interested party has the right to:

• Access the data in our possession and request its communication in an intelligible form;
• Request updating, rectification and/or integration;
• Request cancellation (“right to be forgotten”);
• Request the limitation of processing;
• Request notification of the update, rectification, cancellation, limitation;
• Request data portability;
• Object to the processing;
• Revoke the consent previously given;
• Propose a complaint to a supervisory authority.

1 - Identity and contact details of the Data Controller
Active SwinGym Srl, with headquarters in Via del Cristo n . 92/A- Padua (PD); the contact details are:

• privacy@activeswingym.com
• activegym22@pec.it

2 - Type of Data processed
Visiting and consulting the site generally involves the collection and processing of the user's common personal data, connected to navigation data;
with reference to cookies, please refer to the specific Policy which can be reached at the link https://www.activeswingym.com/en/content/11-privacy-policy.
In any case, the Data Controller collects and processes the data of interested parties for the purposes specified in point 3 below. Below is an example list of the data processed:
For the purposes referred to in points 1) and 2):

• Browsing data (including, for example, IP addresses, addresses in URI/URL notation of the requested resources);
• Data possibly collected through cookies, for which please refer to the specific cookie policy.

For the purposes referred to in points 3), 4), 5), 6), 7), 8):

• Common personal data (name, surname, residential address, shipping address if not coinciding);
• Personal contact details (telephone number and email address)
• Personal identification data for billing (Tax Code or VAT number);
• Billing and electronic payment data.

3 - Purpose and legal basis of data processing
The Data Controller will carry out the processing for the following purposes:

• allow the user to use services and features on the site, on the basis of the legitimate interest of the Data Controller;
• research and/or statistical analysis on aggregate or anonymous data, without the possibility of identifying the user, aimed at measuring the functioning of the site, measuring traffic and evaluating usability and interest of the site (without processing of the data by the owner ), on the basis of the legitimate interest of the Data Controller;
• For registration on the E-Commerce portal on the basis of the need to implement pre-contractual measures and the purchase contract
• To execute purchase orders received via E-Commerce, based on the need to implement pre-contractual measures and the purchase contract.
• For the management of relationships with ActiveSwinGym Srl customers (e.g. purchase assistance, response to questions, refund operations), based on the need to implement pre-contractual measures and to the purchase contract.
• In order to be able to forward communications via email for direct marketing purposes (newsletter), relating to services similar to those sold in e-commerce, promotions and discounts, in exchange for the expression of free and informed consent by the interested party;
• To fulfill all regulatory obligations connected to the management of the purchase contract, such as invoicing obligations, for example, to fulfill the legal or regulatory responsibilities of the Owner;
• For the need to ascertain, exercise or defend a right in court or whenever the Authorities exercise their functions, on the basis of the legitimate interest of the Data Controller.

4 - Methods of data processing
The processing of data will take place with the support of IT means, in compliance with the Regulation and the Code, and, in any case, in such a way as to guarantee the security and confidentiality of the data and prevent their unauthorized disclosure or use, alteration or destruction through efficient physical, logical and organizational security measures.

5 - Recipients of the data
The data may be disclosed (limited to the respective area of competence and for the sole purpose of implementing the purposes described):
a ) subjects to whom the communication of data is necessary for the functioning of the website, who act as Data Controllers, pursuant to written agreements stipulated with the Data Controller, such as for example the manager of the website;
b) appointees and persons authorized by the Data Controller who are committed to confidentiality or are subject to an adequate legal obligation of confidentiality (e.g. employees and collaborators of the Data Controller);
The data will not be disclosed.
In order to fulfill legal obligations, regulations, community legislation or contractual obligations, as well as to exercise any rights in court, the following third parties may have access to the data of the interested party (i) tax, legal or accounting consultants; (ii) companies that provide the Data Controller with services instrumental to the management of the contractual relationship (e.g. suppliers of management applications, couriers and shippers); (iii) public and private supervisory and control authorities and bodies (e.g. Revenue Agency, judicial authority, etc.).

6 - Data retention period
Within the scope of the purposes indicated above, the data will be retained for the time strictly necessary to achieve the purposes for which they were collected and processed . The criterion for determining the actual data retention period will be represented by the limitation period for actions deriving from an existing relationship with the interested party. Without prejudice to the need to retain the data for the purposes of fulfilling legal obligations of the Data Controller or for the assessment, exercise or defense of the Data Controller's rights in court, the data of the interested party will not be retained for a period exceeding 10 years from the termination of the relationship, unless specifically interrupted by the statute of limitations, after which the same data will be irreversibly destroyed or made anonymous, unless their further conservation is necessary to fulfill legal obligations or to fulfill orders given by Public Authorities and/or o Supervisory Bodies. The data collected for direct marketing purposes (newsletter) will be retained until the interested party revokes consent.

7 - Mandatory and optional nature of providing personal data
In order to navigate the site, the user must provide navigation data and the data contained in some cookies (technical cookies). In case of failure to provide the data, the user may have a less than optimal browsing experience on this website, and we may not be able to satisfy the related requests. The provision of data for access to E-Commerce services is mandatory for the conclusion of the contract, while the provision of data for purposes related to forwarding the newsletter is optional and subject to independent consent.

8 - Rights of the interested party
By sending a communication to the registered office of the owner or to the address privacy@activeswingym.com each interested party may at any time exercise the rights referred to in the articles . from 15 et seq. of the Regulation, including: (i) obtain confirmation as to whether or not Data concerning him is being processed; (ii) obtain access to your Data and the information indicated in the art. 15 of the Regulation; (iii) obtain the rectification of inaccurate Data concerning him without unjustified delay or the integration of incomplete Data; (iv) request the deletion of the Data concerning him without unjustified delay; (v) request the limitation of the processing of Data concerning him; (vi) be informed of any rectifications or cancellations or limitations of processing carried out in relation to the data concerning him; (vii) receive the Data concerning him in a structured, commonly used and machine-readable format; (viii) object at any time, for reasons related to your particular situation, to the processing of data concerning you carried out on the basis of the legitimate interest of the Data Controller; (ix) withdraw the consent given for newsletter activities at any time, without any cost; The complete list of rights of the interested party can be found on https://www.garanteprivacy.it/Regolamentoue/diritti -of-the-interested parties.
The exercise of the above-mentioned rights is not subject to any formal constraints and is free of charge. We will respond to the interested party's request within one month of receiving it. In case of particular complexity, the deadline could be extended; in these cases, the Owner undertakes to provide at least one interlocutory communication within one month of receiving the request.
In case of exercise of one of the rights provided for by the Regulation, the Owner reserves the right to verify the identity of the requesting party, requesting to send a photocopy of an identity document certifying the legitimacy of the request. Once the identity of the requesting party has been confirmed, the photocopy received will be immediately destroyed.

9 - Complaint to the Supervisory Authority
If the interested party believes that the processing that concerns him violates the provisions of the Regulation, he can always lodge a complaint with the Guarantor authority for the protection of personal data (www.garanteprivacy.it), or to the Guarantor authority of the country in which he habitually resides, works or the place where the alleged violation occurred.

At this address you can view the Cookie Policy: https://www.activeswingym.com/en/content/12-cookie-policy