(pursuant to Legislative Decree 196/03 and Regulation (EU) 2016/679) "DATA CONTROLLER," DATA PROCESSOR, AND AUTHORIZED PERSONNEL FOR DATA PROCESSING With regard to Privacy, the consultation of this website by the user entails the acquisition of information of a personal data nature. For these purposes, the Data Controller of the personal data provided by you is the company Legea S.p.A., represented by its legal representative, with its registered office (not open to the public) at Piazza dei Martiri n.30, 80121 Naples (NA), and its operational headquarters at Via Carlo Alberto n. 40, 80045 Pompeii (NA). Within the company itself, the personal data collected is processed by employees acting as “Authorized Personnel,” in compliance with the specific instructions and guidelines provided to them.
The data processing related to the web services of the site www.legea.it takes place at the company headquarters in Pompeii, managed by the Data Controller, and is carried out exclusively by technical staff of the office responsible for data processing, or by individuals tasked with occasional maintenance operations. No data derived from the web service is communicated or disseminated (Article 90 GDPR). The personal data provided by users who submit requests for the transmission of informational materials are used solely for the purpose of performing the requested service or activity and are communicated to third parties only if necessary for that purpose (Article 3 GDPR).
This Privacy Policy aims to describe the management procedures of this website concerning the processing of personal data of users/visitors who browse it. This notice is also provided pursuant to Article 13 of Legislative Decree 196/03 - Code regarding the protection of personal data - to those who access the corporate website of Legea S.p.A and use its web services starting from the address www.legea.it. The site legea.it is owned and operated by Legea S.p.A., which ensures compliance with personal data protection regulations (Legislative Decree 196/03). What is Meant by Personal Data and the Processing of Personal Data The processing of personal data refers to any operation or set of operations, carried out even without the aid of electronic tools, concerning the collection, registration, organization, storage, consultation, processing, modification, selection, extraction, comparison, use, interconnection, blocking, communication, dissemination, deletion, and destruction of data, even if not registered in a database. Types of Data Processed and Purposes of Processing 1) Browsing Data The computer systems and software procedures used for the functioning of this website acquire, during their normal operation, certain personal data, which are implicitly transmitted in the use of Internet communication protocols. These are pieces of information that are not collected to be associated with identified individuals, but by their very nature could, through processing and association with data held by third parties, allow users to be identified. All our activities are governed by strict ethical principles, and we are committed to protecting the privacy of all visitors to our website. For this reason, the way we collect and store data is closely related to how the website and its related services are used. 2) Data Voluntarily Provided by Users/Visitors If users/visitors, while connecting to this website, submit their personal data to access certain services or make email requests, this action results in the acquisition by Legea S.p.A. of the sender’s address and/or other potential personal data, which will be processed exclusively to respond to the request. The personal data provided by users/visitors will only be communicated to third parties if necessary to fulfill the requests of the users/visitors themselves. 3) Cookies Various technologies may be used on our website to improve and make it easier, more effective, and secure. These technologies allow us, or third parties acting on our behalf, to collect data automatically. Examples of such technological solutions include cookies. Cookies are not used to transmit personal information, nor are any persistent cookies used, i.e., systems for user tracking. The use of session cookies (which are not persistently stored on the user’s computer and vanish upon closing the browser) is strictly limited to the transmission of session identifiers (consisting of random numbers generated by the server) necessary for secure and efficient website navigation. The session cookies used on this site avoid the use of other potentially detrimental IT techniques for the confidentiality of user navigation and do not allow the acquisition of personal identification data of the user.
In addition to data automatically collected, we also process data provided by you. Below is an exemplary but not exhaustive list: your contact details, including company name and VAT number, or for individuals, name, surname, and tax code; address (to be indicated on the invoice and for the delivery of goods); email address, fax, website, and date of birth; your phone number or mobile number for individuals, in case it is necessary to ask you questions or for any requests for information regarding your order. Other information necessary to fulfill your order includes, for example, information about the products you ordered, bank account details, IBAN, and SWIFT code. If you have contacted customer service, information related to those interactions and the history of these contacts will also be processed. All this data has in common that it was provided by you. This information will be used for the purposes described in this Privacy Notice. You have the right to rectify your personal data at any time or to prevent its processing (see the Section "Rights of the Data Subject"). How the collected data is used: Purposes We will use your personal data for purposes related to your purchases: for example, to inform you about the status of your purchases or deliveries. We may use your data to verify your creditworthiness by relying on information from third parties. If you have provided us with your personal data, for example during a promotional initiative or event, we may send you emails or other messages pertinent to the service you requested. If you have contacted customer service, we will use your personal data (including the history of your contacts and calls) to facilitate the handling of your requests and to provide you with the best possible service. If you have shared your personal data during the purchase of a product, we will inform you about similar products and services. After purchasing a product or service, we may contact you to learn your opinion. In case of an interruption of a sales operation, we will send you an email to notify you. You can unsubscribe from these communications at any time, free of charge, and with immediate effect, by sending an email (see the Section "Rights of the Data Subject"). With your explicit consent, we may contact you via the contact details you have provided (by ordinary mail, email, SMS, phone, or other electronic means) for marketing, advertising, and survey purposes on behalf of Legea S.p.A. This may include information about products, e-commerce activities, special offers, promotional initiatives, or the opening of Legea S.p.A. stores in your area and their activities, as well as sports events. To be able to provide you with information of interest, data regarding your interaction with Legea S.p.A. will be analyzed and used, combined, for example, with your purchases in Legea physical stores, your participation in loyalty programs, your evaluations and reviews of products, the history of your contacts with customer service, what you clicked/opened from newsletters, the types of newsletters you requested to receive, and your participation in promotions or events. We may provide your contact details to third parties for marketing, advertising, and opinion survey purposes. Personal data will be processed for the following purposes: 1. To comply with legal obligations, regulations, or provisions of European Community law. 2. Execution of the contract or to meet your specific requests before the execution of the contract, in relation to the commercialization and import/export of sports articles. 3. Management of customers and related purchase orders and administrative activities, with related processing in accordance with current legislation, including invoicing and shipments. 4. Implementation of measures aimed at protecting against credit risks, including activities aimed at identifying the economic reliability/solvency of the customer, before or during the contractual relationship. Legea may verify the accuracy of the bank/postal details provided. 5. Execution of activities aimed at market research and studies, direct sales (including by phone), sending commercial information, and advertising/informative material, carried out with “traditional” methods (e.g., postal mail and/or operator calls) or by “automated” contact systems (e.g., SMS and/or MMS, phone calls, emails, fax), pursuant to Article 130, paragraphs 1 and 2 of the Privacy Code and Regulation (EU) 2016/679. The data subject may object to processing at any time by sending a request to the dedicated email address: unsubscribe@legeaitalia.it. 6. Execution of activities by third-party commercial partners, to whom Legea may communicate/transfer acquired data, for market research and studies, direct sales (including by phone), product placement, sending interactive commercial information, and advertising/informative material, carried out with “traditional” methods (e.g., postal mail and/or operator calls) or by “automated” contact systems (e.g., SMS and/or MMS, phone calls, emails, fax), pursuant to Article 130, paragraphs 1 and 2 of the Privacy Code and Regulation (EU) 2016/679. 7. Execution of activities aimed at market research and studies, direct sales (including by phone), sending commercial information, and advertising/informative material, carried out with “traditional” methods (e.g., postal mail and/or operator calls) or by “automated” contact systems (e.g., SMS and/or MMS, phone calls, emails, fax), pursuant to Article 130, paragraphs 1 and 2 of the Privacy Code and Regulation (EU) 2016/679.
The data subject may object to processing at any time by sending a request to the dedicated email address: unsubscribe@legeaitalia.it. 8. Activities by third-party commercial partners, to whom Legea may communicate/transfer acquired data, for market research and studies, direct sales (including by phone), product placement, sending interactive commercial information, and advertising/informative material, carried out with “traditional” methods (e.g., postal mail and/or operator calls) or by “automated” contact systems (e.g., SMS and/or MMS, phone calls, emails, fax), pursuant to Article 130, paragraphs 1 and 2 of the Privacy Code and Regulation (EU) 2016/679. 9. Management of disputes (contractual breaches, warnings, settlements, debt recovery, arbitrations, judicial disputes).
The processing of personal data is generally allowed only with the consent of the data subjects, which must be free, informed, specifically expressed, and documented in writing. The data subject is free to provide the personal data requested on a case-by-case basis; failure to provide, incomplete, or inaccurate provision of such data may result in the inability to provide the requested services (Art. 7 GDPR). Obtaining consent for the processing of personal data is necessary for all the processing operations mentioned above that are connected to and/or required to comply with legal obligations, EU regulations, to fulfill obligations arising from a contract to which the data subject is a party, or to fulfill specific requests made by the data subject before entering into a contract (Purposes: points 1-2-3-4-7). Consent for the processing of personal data for the purposes referred to in points 5-6 is optional and may be revoked at any time as described in the "Rights of the Data Subject" section of this Privacy Policy. The refusal of the data subject to provide consent for points 5 and 6 will result in our inability to send advertising materials and conduct promotional activities. You may revoke your consent to receive commercial communications previously granted, either from Legea or from third-party companies, at any time using the following methods: • Sending a request to unsubscribe@legeaitalia.it. Processing Methods and Data Retention Personal data is processed using paper, electronic, telematic, and automated tools, including profiling (Art. 22 GDPR). Profiling may involve the use of individual or identifying data (e.g., personal details) or aggregated data derived from individual personal data. All processing is conducted in compliance with confidentiality guarantees and the security measures provided for by current regulations, with logic strictly related to the purposes of the processing. Specific security measures are implemented to prevent data loss, unlawful or incorrect use, and unauthorized access. The retention period for data is linked to the purpose of the ongoing processing. Legea will not retain personal information longer than necessary to fulfill the purposes for which such information is processed, including the security of our processing procedures in compliance with regulatory and legal obligations (e.g., auditing, accounting, and statutory retention periods), dispute management, and the establishment, exercise, or defense of legal claims in countries where we conduct business activities. Disclosure of Information One of our fundamental principles is our commitment to treating your data with care and confidentiality. We will never sell your data to third parties. Your data may be disclosed to third parties only if required by law and provided it is permitted under applicable laws. We may use service providers and data processors working on behalf of Legea. These are operators who provide hosting and maintenance services, analytics services, email messaging services, delivery services, payment management, creditworthiness verification, address verification, etc. Such third parties are granted access to the personal data necessary for their specific services. Service providers and data processors are contractually obligated to handle such information in the strictest confidence. The contract prohibits them from using the data for purposes other than those specified in the contract. Legea has taken the necessary steps to ensure that our service providers and data processors working on behalf of Legea protect the confidentiality of your data.
In addition to the employees of Legea S.p.A., certain processing of the user’s personal data may also be carried out by third parties, including companies to which Legea S.p.A. assigns or may assign certain activities related to the consultation of the website. These subjects will act as independent data controllers or as data processors. In the latter case, the Data Controller will provide the data processors with appropriate operational instructions, particularly with regard to the adoption of minimum security measures, in order to ensure the confidentiality, integrity, and security of the data. The user’s data may also be communicated to the Judicial Authority, administrative bodies, or other public entities authorized to request it, as provided by law. For the pursuit of the aforementioned purposes, Legea may disclose and have the personal data of the data subject processed, both within Italy and abroad, including countries outside the European Union, to third parties with whom it has business relations: the third parties will only be provided with the necessary information to perform the requested services, taking all measures to protect the personal data (Art. 44 GDPR). Personal data may also be accessed by employees, self-employed workers, project workers, occasional workers, consultants, temporary workers, and collaborators of Legea, who have been specifically appointed/appointed as data processors or persons in charge of processing. The accounting and billing staff, marketing personnel, agents, and representatives; The above data may be transferred and disclosed to the following categories of subjects: companies operating in the transport sector, our suppliers of sports equipment, our affiliates, our sponsors, Poste Italiane and other mail delivery companies, banks and credit institutions, debt collection agencies, law firms, insurance companies, professional firms and/or companies and/or associations of businesses and entrepreneurs that provide us with certain accounting and/or tax services, welfare institutions, etc. RIGHTS OF THE DATA SUBJECTS Legea reminds the data subject that, pursuant to Art. 7 of the Privacy Code, Legislative Decree 196/03 and Regulation 2016/679, it is possible, at any time, to obtain confirmation of the existence or non-existence of data and to know its content and origin, as well as the logic on which the processing is based, verify its accuracy, or request its integration or updating, or rectification. Pursuant to the same article, the data subject has the right to request the deletion, anonymization, or blocking of data processed in violation of the law, as well as to oppose the processing of their data for legitimate reasons in any case. For processing related to direct marketing (both "traditional" and "automated" forms), it will always be possible to revoke consent and exercise the right to object. In the absence of any indication to the contrary, the opposition will apply to both traditional and automated communications. To exercise the rights mentioned above, the data subject should send a request to the dedicated email address: unsubscribe@legeaitalia.it. YOUR RIGHTS If you provide us with your personal data via our websites or other channels, this is done voluntarily. If you choose not to provide the requested information, you may lose access to various opportunities available to customers. There are cases where only those who have provided us with the necessary personal data can order products, use certain services, and take advantage of activities and offers available on our website. Given the importance we place on transparency and fairness, we offer several options, appropriate to the circumstances, to help you maintain control over your data. These options may include viewing and modifying your data online. It may also be possible to unsubscribe or obtain information about the data we hold by writing to: unsubscribe@legeaitalia.it. RIGHT TO REQUEST INFORMATION You have the right to receive at any time information about the personal data we hold that relates to you, its origin, and the recipients, as well as the purposes for which it has been stored. Information about stored personal data can be obtained by contacting us at the email address: infousers@legeaitalia.it. The data subjects have the right to obtain confirmation of the existence or non-existence of the data at any time, to know its content and origin, verify its accuracy, or request its integration or updating (Art. 7 of Legislative Decree 196/03 and Regulation 2016/679). RIGHT TO RECTIFICATION You have the right to rectify, integrate, update, delete your personal data stored, or have its storage blocked. Within four weeks of receiving your request, we will notify you if, and if so, to what extent we will satisfy your request. If for any reason we are unable to meet your request, we will inform you of the reasons (Art. 7 of Legislative Decree 196/03 and Art. 12 and 16 GDPR). RIGHT TO OBJECT AND TO UNSUBSCRIBE Pursuant to the same article, you have the right to request the deletion, anonymization, or blocking of data processed in violation of the law, as well as to object, for legitimate reasons, to the processing in any case (Art. 21 GDPR). Emails sent by Legea that contain, for example, a newsletter or marketing messages, offer the possibility to stop receiving such emails (unsubscribe). If you no longer wish to receive our emails, simply send an email to "unsubscribe," and we will stop sending you emails immediately. If you no longer wish to receive promotional information and sales offers in general, including by regular mail, email, SMS, phone, or other electronic means, or if you wish to revoke your consent, you can do so at any time by writing to Legea S.p.A., Via Carlo Alberto No. 40, 80045 Pompei (NA), with the subject reference: "data protection," or by sending an email to unsubscribe@legeaitalia.it. If there is any doubt about your identity, you may be asked to provide a proof of identity (e.g., a photocopy of your identity document) (Art. 17 GDPR). SECURITY OF INFORMATION AND DATA INTEGRITY We have adopted technical and organizational measures to protect personal data from accidental or unlawful destruction, loss, alteration, and unauthorized use, disclosure, or access, especially where processing involves the transmission of data over a network and against any other form of unlawful processing and abuse. PROTECTION OF MINORS' PERSONAL DATA The protection of minors' personal data is of utmost importance. Legea is aware of its obligation to protect the privacy of minors, and it refuses to collect data from minors under the age of 16. We encourage parents and other guardians to navigate the Internet and send emails with their children and to use the Internet responsibly. If a minor under the age of 16 attempts to provide personal information, they must first obtain the consent of a parent. The data submitted by the minor, or that concerns the minor, collected during their visit (e.g., via cookies), may be used as described above. If a minor under 16 attempts to submit their data through a form, it will be rejected, with a message stating that such requests from minors under 16 are not accepted. For this reason, we ask parents and other guardians to supervise and monitor the minor's use of the Internet for their safety (Art. 8 GDPR).