Privacy Policy of Aeroclub Friulano
Aeroclub Friulano collects some Personal Data from its Users.
Data Controller
Aeroclub Friulano – Ente Morale
Via Santa Caterina, 144
33030 Campoformido (UD), Italy
Data Controller’s email address: info@aeroclubfriulano.com
Types of Data collected
Personal Data collected by Aeroclub Friulano, either directly or through third parties, includes: Cookies, Usage Data, company name, email address, first name, surname, province, state, country, postcode, city, address, website, telephone number, username, password, tax code, VAT number, fax number, billing address, street number, prefix and language.
Full details of each type of Data collected are provided in the relevant sections of this privacy policy or in specific notices displayed before the Data is collected. Personal Data may be freely provided by the User or, in the case of Usage Data, collected automatically when using Aeroclub Friulano. Unless otherwise specified, all Data requested by Aeroclub Friulano is mandatory. If the User refuses to provide it, Aeroclub Friulano may be unable to provide the Service. Where Aeroclub Friulano identifies certain Data as optional, Users may choose not to provide it without affecting the availability or operation of the Service. Users who are unsure which Data is mandatory are encouraged to contact the Data Controller. Unless otherwise specified, any use of Cookies or other tracking tools by Aeroclub Friulano or by the owners of third-party services used by Aeroclub Friulano serves to provide the Service requested by the User, as well as the additional purposes described in this document and in the Cookie Policy, where available.
The User assumes responsibility for third-party Personal Data obtained, published or shared through Aeroclub Friulano and guarantees that they have the right to communicate or disclose it, releasing the Data Controller from any liability towards third parties.
Method and place of processing collected Data
Methods of processing
The Data Controller takes appropriate security measures to prevent unauthorised access, disclosure, modification or destruction of Personal Data. Processing is carried out using computers and/or telematic tools, following organisational procedures and methods closely related to the stated purposes. In addition to the Data Controller, Data may in some cases be accessible to other people involved in the operation of Aeroclub Friulano, including administrative, sales, marketing and legal staff and system administrators, or to external parties such as third-party technical service providers, postal couriers, hosting providers, IT companies and communications agencies. Where necessary, these parties may be appointed as Data Processors by the Data Controller. An updated list of Data Processors may be requested from the Data Controller at any time.
Legal basis of processing
The Data Controller processes Personal Data relating to the User where one of the following conditions applies:
The User has given consent for one or more specific purposes. Note: in some jurisdictions, the Data Controller may be permitted to process Personal Data without the User’s consent or another of the legal bases specified below until the User objects (“opts out”) to such processing. This does not apply, however, where the processing of Personal Data is governed by European data protection legislation;
processing is necessary for the performance of a contract with the User and/or for pre-contractual measures;
processing is necessary to comply with a legal obligation to which the Data Controller is subject;
processing is necessary for a task carried out in the public interest or in the exercise of official authority vested in the Data Controller;
processing is necessary for the legitimate interests pursued by the Data Controller or a third party.
The User may always ask the Data Controller to clarify the specific legal basis for each processing activity and, in particular, whether processing is based on the law, required by a contract or necessary to enter into a contract.
Place
Data is processed at the Data Controller’s operating offices and at any other location where the parties involved in processing are based. For further information, contact the Data Controller. The User’s Personal Data may be transferred to a country other than the one in which the User is located. For further information about the place of processing, the User may consult the section detailing the processing of Personal Data.
The User has the right to obtain information about the legal basis for transferring Data outside the European Union or to an international organisation governed by public international law or established by two or more countries, such as the United Nations, and about the security measures adopted by the Data Controller to protect the Data.
If any of the transfers described above take place, the User may consult the relevant sections of this document or request information from the Data Controller using the contact details provided at the beginning.
Retention period
Data is processed and stored for as long as required by the purposes for which it was collected.
Therefore:
Personal Data collected for purposes related to the performance of a contract between the Data Controller and the User will be retained until that contract has been fully performed.
Personal Data collected for purposes relating to the Data Controller’s legitimate interests will be retained until those interests have been fulfilled. The User may obtain further information about the legitimate interests pursued by the Data Controller in the relevant sections of this document or by contacting the Data Controller.
Where processing is based on the User’s consent, the Data Controller may retain Personal Data for longer until that consent is withdrawn. The Data Controller may also be obliged to retain Personal Data for a longer period to comply with a legal obligation or an order from an authority.
Personal Data will be deleted at the end of the retention period. Consequently, the rights of access, erasure, rectification and Data portability can no longer be exercised after that period has expired.
Purposes of processing collected Data
The User’s Data is collected to enable the Data Controller to provide its Services and for the following purposes: interaction with live chat platforms, analytics, contacting the User, payment management, SPAM protection, advertising, displaying content from external platforms, heat mapping and session recording, and registration and authentication.
User rights
Users may exercise certain rights in relation to Data processed by the Data Controller. In particular, the User has the right to:
Withdraw consent at any time. The User may withdraw previously given consent to the processing of their Personal Data.
Object to the processing of their Data. The User may object to processing based on a legal basis other than consent. Further details about the right to object are provided in the section below.
Access their Data. The User has the right to obtain information about the Data processed by the Data Controller and certain aspects of processing, and to receive a copy of the Data being processed.
Verify and request rectification. The User may check the accuracy of their Data and request that it be updated or corrected.
Obtain restriction of processing. Under certain conditions, the User may request that processing of their Data be restricted. In this case, the Data Controller will process the Data only for storage purposes.
Obtain erasure or removal of their Personal Data. Under certain conditions, the User may request that the Data Controller erase their Data.
Receive their Data or have it transferred to another controller. The User has the right to receive their Data in a structured, commonly used and machine-readable format and, where technically feasible, to have it transferred without hindrance to another controller. This provision applies where Data is processed by automated means and processing is based on the User’s consent, a contract to which the User is a party or related pre-contractual measures. Lodge a complaint. The User may lodge a complaint with the competent data protection supervisory authority or take legal action.
Details about the right to object
Where Personal Data is processed in the public interest, in the exercise of official authority vested in the Data Controller or for the Data Controller’s legitimate interests, Users have the right to object on grounds relating to their particular situation.
Users should note that, where their Data is processed for direct marketing purposes, they may object without providing any reason. To find out whether the Data Controller processes Data for direct marketing, Users may consult the relevant sections of this document.
How to exercise these rights
To exercise their rights, Users may send a request to the Data Controller using the contact details provided in this document. Requests are free of charge and will be handled by the Data Controller as soon as possible and, in any event, within one month.
Legal references
This privacy policy has been prepared on the basis of several legislative frameworks, including Articles 13 and 14 of Regulation (EU) 2016/679.
Unless otherwise specified, this privacy policy applies solely to Aeroclub Friulano.