Privacy Policy

Last updated: 28 luglio 2026

Information notice on the processing of personal data

Pursuant to artt. 13 e 14 del Regolamento (UE) 2016/679 ("GDPR") and to D.Lgs. 196/2003, as updated by D.Lgs. 101/2018 ("Codice Privacy").

This notice describes how the personal data of users who browse this website and use the contact forms on it are processed. It is provided solely for this website and not for other websites that may be reached through links.

1. Data Controller

• Name: GiZeta Sport Ssdrl — Società Sportiva Dilettantistica a Responsabilità Limitata, non-profit
• Registered office: Via Fulda 9, 22100 Como (CO)
• P.IVA and Codice Fiscale: 04175450131
• REA number: CO-425377
• Email: info@gizetasport.it
• Phone: +39 375 5673887

For any matter concerning the processing of their personal data, the data subject may write to info@gizetasport.it.

2. Data processed, purposes and legal bases

The site provides contact forms, published on several pages (Contact, the course and location pages, "Rent our spaces", "Work with us"). In every case the form collects the same data: full name (required), email address (required), phone number (optional) and message (required). Submitting requires ticking a consent box, not pre-filled, linking to this notice. There is also a technical anti-spam field (honeypot) that does not collect any user data.

Please do not include unnecessary data in the message and, in particular, special categories of data (art. 9 GDPR) unless strictly indispensable.

• Requests for information (Contact, courses, locations, space rental): the purpose is to respond to the user's requests and manage the ensuing communication. Legal basis: performance of pre-contractual measures taken at the data subject's request (art. 6.1.b GDPR) and consent given through the dedicated box (art. 6.1.a GDPR).
• Applications ("Work with us"): the purpose is to assess the unsolicited application with a view to possible collaborations. Legal basis: pre-contractual measures at the data subject's request (art. 6.1.b GDPR) and consent (art. 6.1.a GDPR).
• Site security: prevention of automated submissions and form abuse. Legal basis: legitimate interest of the Controller (art. 6.1.f GDPR).

Providing the required data is necessary in order to respond to the request; without it, the request cannot be handled. The site consists of pre-generated pages and does not keep the form data in a database of its own: the data is transmitted and delivered to the Controller by email.

3. Providers and recipients of the data

For the operation of the site and the forms, the Controller uses the following providers which, where they process personal data on the Controller's behalf, act as data processors pursuant to art. 28 GDPR:

• Web3Forms — the tool used to transmit the forms: it receives the data sent by the user and forwards it by email to the Controller. The provider operates with servers located outside the European Union; the related transfer takes place on the basis of the safeguards provided for by Chapter V of the GDPR (standard contractual clauses and/or adequacy mechanisms).
• Umami — a usage-statistics tool without cookies (cookieless), hosted on the technical agency's servers. It collects only aggregated and anonymous data (page views, referral source, country, browser and device type), with no profiling and without storing the raw IP address, and it respects the browser's Do Not Track signal. Legal basis: the Controller's legitimate interest in measuring the site's performance anonymously (art. 6.1.f GDPR).
• Google Maps — the location pages may show a map provided by Google, loaded only at the user's request (click-to-load): when the page is simply opened the map is not loaded and Google is not contacted. Only if the user clicks to open the map can Google LLC (USA) receive the IP address and set its own cookies. The related processing is governed by Google's privacy policy: policies.google.com/privacy.
• Hosting provider — the site is delivered through a hosting/CDN provider that processes technical connection metadata (including the IP address) for security and correct delivery of the pages. Legal basis: legitimate interest of the Controller (art. 6.1.f GDPR).

The typefaces are hosted directly on the site (no external font service). Any links to WhatsApp and to social profiles are plain links: no data is transmitted until the user voluntarily uses them. Apart from the providers indicated above, the data is not disclosed to third parties, except for legal obligations or requests from the authorities.

4. Data of minors

The site may collect requests relating to the enrolment of minors in the courses. In such cases the minor's data is provided and managed by those holding parental responsibility (parents or guardians), who, by sending the request, warrant that they are entitled to do so. In line with art. 2-quinquies del Codice Privacy, a minor who has reached the age of 14 may give consent to information-society services; below that age, consent is given by the holder of parental responsibility. Please do not include data of minors beyond what is necessary for the purpose of the request.

5. Retention periods

The data is kept for the time strictly necessary for the purposes indicated and to comply with legal obligations. Once those purposes have ceased, the data is deleted or made anonymous.

6. Rights of the data subject

Within the limits and conditions set out in artt. 15–22 GDPR, the data subject may exercise the rights of access, rectification, erasure, restriction, portability and objection to processing based on legitimate interest. No automated decision-making is carried out on the site.

To exercise these rights, it is enough to write to info@gizetasport.it. The Controller normally replies within one month of the request.

The data subject also has the right to lodge a complaint with the supervisory authority, the Garante per la protezione dei dati personali (www.garanteprivacy.it), if they believe that the processing infringes the applicable legislation.

7. Changes

The Controller reserves the right to update this notice to reflect regulatory or organisational changes. The updated version is published on this page, stating the date it was last updated.

Last updated: 28 luglio 2026