Information pursuant to art. 13 EU Regulation 2016/679

Dear Fan,

pursuant to art. 13 of the 2016/679 European Regulation (GDPR), below we provide you with information relating to the processing of personal data that you may provide to Cagliari Calcio during the use of the "TickeOne" ticketing platform and/or on other occasions purchase of the company's products or services.

1. Data controller

The Data Controller of your personal data is Cagliari Calcio SpA, with registered office in Assemini (CA), Località Sa Ruina snc. For all the processing of data concerning you, as governed by this information, you can speak with Cagliari Calcio SpA by writing an email to privacy@cagliaricalcio.com

2. Data Protection Officer

In any case, we inform you that Cagliari Calcio SpA has appointed a Data Protection Officer pursuant to art. 37 of the European Regulation 2016/679 (GDPR) which you can contact at the email address dpo@cagliaricalcio.com

3. Types of data processed 

During the purchase of admission tickets (tickets/season tickets) and fidelity cards from the ticketing platforms, as well as on other occasions for the purchase of the company's products, goods or services, Cagliari Calcio SpA may process common personal data provided by the interested party (fan who makes a purchase or requests a service) directly or through third parties authorized to purchase on your behalf. This data includes, for example, name, surname, address, telephone number, e-mail, details of identity documents, details of the tax code of the person concerned and of your companions, information on the payment instruments used to the extent necessary for purchase and/or provision of the service. It may also include data relating to the events that the interested party intends to attend or has attended (eg: time, number of the assigned seat, applied rate and reason for payment); data relating to the quantity of purchases and the amounts spent by the interested party. To the extent that this is required by the Public Authority, by specific legal provisions or by FIGC regulatory provisions, the processing may also include news relating to criminal convictions and crimes or measures in any case disqualifying the purchase of Cagliari Calcio SpA products and services

4. Purpose of the treatment: pre-contractual measures - execution of the contract - orders from the authority

The processing of your personal data is aimed at and necessary for the correct execution of the contract for the purchase of admission tickets (tickets/season tickets) and/or fidelity cards and/or other goods and services between you and Cagliari Calcio SpA The processing is necessary , in particular: to fulfill the pre-contractual, contractual and tax obligations deriving from the contractual relationship between you and the company Cagliari Calcio SpA, for the completion of all the procedures required by current regulations on safety in stadiums; to fulfill the obligations established by law, by a regulation, by community legislation, by an order of the authority and/or by the FIGC; to protect a legitimate interest of the company and/or to defend a right of the company in court.

The legal basis of the processing, for these purposes, is constituted by (i) the execution of the contract or pre-contractual measures requested by the interested party ex art. 6, paragraph 1, lett. b) European Regulation 2016/679; (ii) to fulfill a legal obligation to which the data controller is subject ex art. 6, paragraph 1, lett. c) European Regulation 2016/679; (iii) to protect a legitimate interest of the owner ex art. 6, paragraph 1, lett. f) European Regulation 2016/679.

4.1. Purpose of the treatment: marketing activities

With your consent, Cagliari Calcio SpA may also process your personal data in order to send you commercial, promotional and advertising communications of the company's products and services (direct marketing), to proceed with direct sales and to carry out surveys or market research , as well as to send you commercial communications of products and services offered by subsidiaries, parent or associated companies or by third-party companies, for marketing and commercialization of such products or services. For these purposes, Cagliari Calcio SpA will use automated methods of contact (such as, for example, e-mail, SMS, instant messaging apps such as Whatsapp and Messenger, social networks) or traditional (such as, for example, telephone calls with an operator and paper mail ).

The legal basis of the processing, for these purposes, is your consent. This consent is optional and failure to give it will not prevent the execution of the contractual relationship between you and Cagliari Calcio SpA, but only the possibility for Cagliari Calcio SpA to send you material and/or information/advertising communications deemed of interest. In any case, where you give your consent, you can revoke it at any time, without this affecting the legitimacy of the processing carried out up to that moment. We inform you that you can revoke your consent by sending an email to privacy@cagliaricalcio.com.

4.2. Purpose of the treatment: communication to third parties for marketing purposes

With your consent, Cagliari Calcio SpA may transfer your personal data to third-party companies operating in the hotel, apparel, land and sea transport, advertising, food and catering, catering, training, energy, industrial and pharmaceutical for their autonomous treatments for marketing and commercialization of their products or services. These companies will process your personal data as independent data controllers ("Third Party Transferees") by providing you with the appropriate information on the respective processing. In any case, you will be able to exercise your rights towards the Third Party Assignees, as listed in the following paragraph 8 of this information.

The legal basis of the processing, for these purposes, is your consent. This consent is optional and its non-release will not prevent the execution of the contractual relationship between you and Cagliari Calcio SpA, but only the possibility that Cagliari Calcio SpA transfers your data to third parties for their independent processing for marketing and commercialization purposes of their own products or services. In any case, where you give your consent, you can revoke it at any time, without this affecting the legitimacy of the processing carried out up to that moment. We inform you that you can revoke your consent by sending an email to privacy@cagliaricalcio.com.

4.3. Purpose of the treatment: profiling activity

With your consent, your personal data may be used and analyzed to detect consumption habits and propensities and generate profiles that will allow us to proactively identify your interests and needs, also through correlation with other acquired data (for example example) from your interactions with the website and/or with the social network pages of Cagliari Calcio SpA This activity is aimed at sending you offers and communications that are more responsive to your interests and at better directing the promotional and marketing activities of the company towards you based on the generated profile.

The legal basis of the processing, for these purposes, is your consent. This consent is optional and failure to give it will not prevent the execution of the contractual relationship between you and Cagliari Calcio SpA, but only the possibility for Cagliari Calcio SpA to carry out the profiling activities described in the previous paragraph. In any case, where you give your consent, you can revoke it at any time, without this affecting the legitimacy of the processing carried out up to that moment. We inform you that you can revoke your consent by sending an email to privacy@cagliaricalcio.com.

5. Communication and dissemination of data

For the pursuit of the purposes referred to in points 4 and following, your personal data may be known by employees, similar personnel and collaborators of Cagliari Calcio SpA who will operate as subjects authorized to process it. Exclusively to fulfill legal obligations, your data could also be communicated to Supervisory and Control Authorities and Bodies including the Security Operations Group (GOS), the State Police and the Police Headquarters, as well as to national and international endofederal and exofederal bodies and other sports clubs. To ensure that Cagliari Calcio SpA can carry out the activities necessary for running the business, your data could also be communicated to professionals appointed by the company including, specifically: accountants, auditors and lawyers. Finally, your data may be communicated to suppliers – specifically identified as external data processors – appointed by Cagliari Calcio SpA to carry out activities instrumental to its own and so, for example: where the conditions are met, companies that offer services sending e-mails for marketing purposes; companies that deal with the maintenance of the Cagliari Calcio SpA websites; companies that deal with freight forwarding services; companies that offer support in carrying out market studies; companies that handle the shipment of products purchased through the Cagliari Calcio SpA online store and the related invoicing.​

 

6. Transfer of data abroad

Your personal data will not be transferred to countries outside the European Union.

7. Retention period of personal data

With reference to the purposes mentioned in points 4 and following, your personal data will be kept only for the time necessary to fulfill each purpose. For the purposes for which the consent of the interested party is required, according to the Provision of the Privacy Guarantor n. 181 dated 15 October 2020, your personal data are kept until the revocation of the single consent and in any case no later than 60 months from the relative acquisition. Furthermore, to the extent that this is necessary to fulfill legal obligations, your data may be kept for 10 years starting from the relative collection, without prejudice to any different binding decision issued by a competent authority and without prejudice to further prescribed obligations by the legal system.

8. Rights of the interested parties

In relation to the treatments described in this Information, as an interested party you may exercise the rights set out in articles 15 to 22 of the European Regulation 2016/679 and, in particular, the following rights:

• right of access – right to obtain confirmation as to whether or not personal data concerning you are being processed and, in this case, obtain access to your personal data;
• right of rectification – right to obtain, without unjustified delay, the rectification of inaccurate personal data concerning you and/or the integration of incomplete personal data;
• right to erasure (right to be forgotten) – right to obtain, without unjustified delay, the cancellation of personal data concerning you. The right to erasure does not apply to the extent that the processing is necessary for compliance with a legal obligation or for the performance of a task performed in the public interest or for the establishment, exercise or defense of legal claims. in court;
• right to restriction of processing – right to obtain the limitation of the treatment;
• right to data portability – right to receive, in a structured format, in common use and readable by an automatic device, the personal data concerning you and to provide them to another Data Controller;
• leadership of the opposition – right to object to the processing of your personal data for reasons related to your particular situation and in any case to the use of your data for marketing purposes;
• right not to be subjected to an automated decision-making process – right not to be subjected to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or which significantly affects your person in a similar way;
• right to lodge a complaint with the Guarantor Authority for the protection of personal data: http://www.garanteprivacy.it;
• right to withdraw consent provided on every occasion and with the same ease with which it was provided without prejudice to the lawfulness of the processing based on the consent given before the revocation.

You can easily exercise one or all of the above rights by sending an email to privacy@cagliaricalcio.com or, alternatively, dpo@cagliaricalcio.com.