Privacy Policy

Safety, not just on the track

Pursuant to Article 13 of EU Regulation 679/2016 (the “Regulation”), CREMONA CIRCUIT SRL, as the Data Controller with registered office in Rubano (PD), Via Marconi n. 48/A, wishes to provide you with some information regarding the purposes and methods of processing your personal data.

The data you provide will be used according to the principles of necessity, lawfulness, fairness, proportionality, and transparency for the following purposes:

I) provision of the requested service through the dedicated booking procedure available on the website www.cremonacircuit.it or directly at our motorcycling circuit in San Martino del Lago (CR), Strada Giuseppina n. 2 (the “Circuit”), and the timely fulfillment of all obligations imposed on us by virtue of the contract, including those deriving from laws, regulations, or decisions of authorities, as well as for defense needs;

II) follow up on your questions regarding our services/promotions/offers and be able to contact you to provide you with the requested information;

III) Customer registration on the website www.cremonacircuit.it : the data you provide when registering on the website will be used to create your user account;

IV) Newsletters and other promotional communications : Your email address may be processed for the purpose of sending promotional communications relating to the services we offer, unless you object as further specified below. Cremona Circuit, in fact, if you are already our customer, believes it can process your email address to pursue its legitimate interest in conducting direct marketing activities pursuant to and for the purposes of Article 6, paragraph 1, letter f) of the Regulation. In other cases, however, where we believe we do not have a legitimate interest, we will send you our newsletter only with your express permission;

V) publish the driver’s name or nickname in the “live timing” section of the website www.cremonacircuit.it relating to the free practice day in which the driver participated.

Please note that providing your data for the purposes referred to in points I), II), and III is necessary to conclude and process the contractual relationship and/or your request for information, or to create a personal account. This constitutes the legal basis for the processing, while it is optional for the other purposes referred to in this policy. Specifically, for the purpose referred to in point iv), the legal basis is the same as previously indicated, while for the purpose referred to in point v), your consent is required.

All your data will be recorded and processed by Cremona Circuit using methods strictly related to the purposes set out in this policy and, in any case, in a way that guarantees the security and confidentiality of the data.

Specifically, Cremona Circuit collects and processes data both directly, as the Data Controller, and through authorized data processors or other entities acting as Data Processors pursuant to Article 28 of the Regulation (such as, for example, IT service providers, consultants, and other entities who process Cremona Circuit’s customer data on its behalf).

In any case, the data will not be disclosed , unless this is necessary to comply with legal obligations incumbent on the Data Controller or for defensive purposes before the judicial authorities.

Your personal data will be retained for the time strictly necessary to comply with the regulatory provisions relating to the type of service provided by Cremona Circuit and the administrative and tax regulations.

Specifically, your email address will be retained for 24 months for informational purposes and to send you updates and news about commercial initiatives, other advertising and promotional materials, as well as to inform you about initiatives and other events. This retention period is subject to any further sales and/or requests from you that may occur during this period and/or the need to retain the data for other legitimate purposes of Cremona Circuit.

You can contact us at any time at info@cremonacircuit.it for an updated list of Data Processors, to gain full clarity on the operations we have reported to you, and to exercise your rights to access, rectification, erasure, and restriction of processing, as well as the right to object to processing and to withdraw your consent pursuant to Articles 15 to 22 of the Regulation.

You also have the right to data portability pursuant to Article 20 of the Regulation.

To guarantee your personal data

The authorities

Finally, we inform you that pursuant to Article 77 of the Regulation, if you believe that the processing of your personal data violates the aforementioned Regulation, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State in which you habitually reside, work, or where the alleged violation occurred. In Italy, this authority is the Italian Data Protection Authority (Garante per la protezione dei dati personali), which can be contacted as follows:

Commercial communications

advertising content

If you no longer wish to receive commercial communications from Cremona Circuit, you have the right to withdraw your consent at any time by sending a request to info@cremonacircuit.it , or by clicking the appropriate link in each advertising email to request deactivation of the service.

Information

Privacy for newsletters

Data controller
Cremona Circuit srl (hereinafter, Cremona Circuit), with registered office in Rubano (PD), via Marconi n. 48/A, CF and VAT number 04902740283, as Data Controller, informs you of the following:
Pursuant to and for the purposes of art. 13 of EU Regulation 679/2016, your personal data will be
processed in compliance with current legislation for the purposes and in the manner set out in this document
information.

Purpose and methods of processing

Your personal data is used to send you updates and news regarding Cremona Circuit srl’s commercial initiatives, competitions, and other advertising and promotional materials, as well as to inform you of initiatives and other events.

To achieve the aforementioned purposes, the company has collected your personal data in electronic archives and processes it in a manner strictly necessary for the indicated purpose and, in any case, in a manner that guarantees the security and confidentiality of the data provided. Cremona Circuit srl collects your personal data and processes it both directly, as Data Controller, and by engaging other parties acting as Data Processors pursuant to Art. 28 of the Regulation.

Communication and dissemination of data

Your data will be disclosed to specific parties. Specifically, within the limits strictly relevant to the purposes indicated above. Recipients of your personal data may include:

• specifically authorised internal subjects within the company;

• entities that provide services for the management of the information system and telecommunications networks, including e-mail and the newsletter;

• companies that exercise management and control functions over the Data Controller as they belong to the same corporate group.

Personal data processed

The processing will concern the following personal data: contact details (such as email and telephone number); personal data (such as name and surname, date of birth, gender); IT information (IP addresses, cookie data).

Data transfer

The Data Controller does not intend to transfer personal data to entities established in a third country of the European Union or to an international organization.

Duration of treatment

The data used to send updates and news regarding commercial initiatives, competitions, other advertising and promotional material, as well as to communicate initiatives and other events to the user, will be retained until the user unsubscribes and for a period not exceeding seven years from the time of registration.

Rights of the interested party

You may contact Cremona Circuit srl at any time for an updated list of Data Processors, to obtain full clarity on the operations we have reported to you, and to exercise your rights of access, rectification, erasure, restriction of processing (Privacy Policy Newsletter Rev. 1 of 04-04-2024), as well as the right to object to processing, data portability, and withdrawal of consent pursuant to Articles 15 to 22 of the Regulation.
We also inform you that pursuant to Article 77 of the Regulation, if you believe that the processing of your personal data violates the Regulation, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State in which you habitually reside, work, or where the alleged violation occurred. In Italy, this authority is the Italian Data Protection Authority (Garante per la protezione dei dati personali).
You may exercise your rights at any time by sending an email to the following address: info@cremonacircuit.it

We also remind you that you can withdraw your consent at any time without affecting the lawfulness of the processing of your data based on consent before its withdrawal. This right therefore implies the ability to select the unsubscribe option present in each newsletter received.

Legal basis for processing

In order to fulfill the above-mentioned purpose, you must provide your explicit consent pursuant to Art. 6, paragraph 1, letter a) of the Regulation, which constitutes the legal basis for the processing.
Providing your Personal Data for the purposes set out in this policy is optional. However, failure to provide such data will make it impossible for Cremona Circuit srl to send you commercial communications. If you no longer wish to receive such commercial communications from Cremona Circuit srl, you have the right to object to such processing at any time. You can submit your request to info@cremonacircuit.it, or by clicking the appropriate link within each promotional email to unsubscribe from the service.

Accessibility to the information

The information is accessible from the Data Controller. If expressly requested, the information may also be provided verbally, provided the requester’s identity is verified, by telephone request to the Data Controller’s address.

Information on the processing of personal data

Privacy for suppliers

This information (hereinafter, the “Privacy Policy”) relates to the Processing of your Personal Data carried out by Cremona Circuit srl, with registered office in Rubano (PD), Via Marconi n. 48/A, Tax Code and VAT number 04902740283, represented by its legal representative Alessandro Canevarolo (hereinafter, the “Data Controller”), also in compliance with EU Regulation 2016/679 (hereinafter, the “GDPR”).

Purpose of the processing and legal basis of the processing

Personal data will be processed for the following purposes:

a) For contractual purposes and/or related to the execution of pre-contractual measures adopted at your specific request, as well as to fulfill any legal obligations related to these purposes. In this case, the legal basis for processing is the need to execute the contract and/or manage pre-contractual relationships.

b) For purposes related to relevant legal obligations, if processing has been carried out for the purposes referred to in letter a). In this case, the legal basis is the Data Controller’s legal obligation to process such personal data in accordance with applicable national legislation.

Treatment methods

With regard to personal data processed and stored for the purposes referred to in points a) and b) of this privacy policy (contractual and pre-contractual purposes and regulatory obligations), processing will be carried out using paper-based tools, automated systems, and CRM management software, which will allow for the best management of contractual and regulatory obligations.

Source from which personal data originates

Only data provided in accordance with this policy will be processed. Personal data from publicly accessible sources will not be processed.

Recipients and possible categories of recipients of personal data

Recipients of personal data may be:

• companies offering information society services, including, in particular, those offering hosting services;

• banking institutions for the management of collections and payments;

• tax consultants for the fulfillment of legal obligations;

• financial administrations or public institutions in compliance with regulatory obligations;

• companies and law firms for the protection of contractual rights;

• client and/or contractor under the procurement/subcontracting agreement;

• public administration;

• companies that exercise management and control functions over the Data Controller as they belong to the same corporate group.

Data categories

Personal data will be processed, including but not limited to: personal details and contact information. Under no circumstances will special categories of data pursuant to Art. 9 of the GDPR be processed.

Data transfer

The Data Controller does not intend to transfer Personal Data to entities established in a third country outside the European Union or to an international organisation.

Period of retention of personal data

Personal data processed and stored for the purposes referred to in point a) number 1 of this notice (contractual and pre-contractual purposes) are processed for a period of time not exceeding 10 (ten) years from the termination of the contract, in the event of its conclusion, and, in the case of mere pre-contractual negotiations, for a period not exceeding 10 years from the termination of negotiations.
However, there are exceptions to this rule where longer data retention is required due to specific legal obligations.

Right to object

The data subject has the right to object within the limits set forth in Article 21 of the GDPR.

Other rights

The Data Controller also intends to inform you of the existence of the following rights:

• Right of access: the interested party has the right to obtain confirmation from the Data Controller as to whether or not personal data concerning him or her are being processed, and, where that is the case, to obtain access to the personal data and specific information, in accordance with art. 15 of the GDPR;

• Right to rectification: The data subject has the right to obtain from the Data Controller without undue delay the rectification of inaccurate personal data concerning him or her. Taking into account the purposes of the processing, the data subject has the right to have incomplete personal data completed, including by providing a supplementary statement, pursuant to Art. 16 of the GDPR;

• Right to erasure, including the right to withdraw consent: the data subject has the right to obtain from the Data Controller the erasure of personal data concerning him or her without undue delay, and the Data Controller has the obligation to erase personal data without undue delay, or to withdraw consent, if the reasons defined in Article 17 of the GDPR apply. Regarding the right to withdraw consent, the data subject also has the right to withdraw consent at any time without affecting the lawfulness of processing based on consent before its withdrawal;

• Right to restriction of processing: the data subject has the right to obtain from the Data Controller restriction of processing when the hypotheses defined in art. 18 of the GDPR apply;

• Right to data portability: the data subject has the right to receive the personal data concerning him or her, which he or she has provided to the Data Controller, in a structured, commonly used and machine-readable format and has the right to transmit such data to another controller without hindrance from the Data Controller in the cases and under the conditions specified in art. 20 of the GDPR;

• Right of the contractor to object to commercial communications: the contractor has the right to object at any time, free of charge, to receiving commercial communications.

Exercise of rights

Requests to exercise the rights indicated in this policy, including, in particular, the right to erasure and the right to withdraw consent given, must be addressed directly to the Data Controller at the email address info@cremonacircuit.it