PRIVACY NOTICE ON THE PROCESSING OF PERSONAL DATA

Welcome to the website of LOTTO SPORT ITALIA. ("Website").

On this page, we provide you with the information notice pursuant to Article 13 of Regulation (EU) 2016/679 ("GDPR") regarding the processing of your personal data that we collect when you browse the Website and interact with its related services.

This privacy notice is provided only for this Website and its possible subdomains, and not for other websites that may be consulted via hyperlinks or links.

Please read this privacy notice carefully before providing us with your personal data.

1. DATA CONTROLLER

Lotto Sport Italia S.p.A., ("Lotto Sport Italia") with registered office at Via Montebelluna, 5/7, 31040 Trevignano (TV), email address: legal.office@lottosport.com.

Lotto Sport Italia S.p.A. has appointed a Data Protection Officer (DPO), who may be contacted by writing to the following address: dpo@lottosport.com.

2. CATEGORIES OF PERSONAL DATA COLLECTED AND SOURCE OF THE DATA

a) Browsing data

Browsing the Website and accessing its related services involve the acquisition of certain personal data relating to your browsing activity, such as, by way of example, IP addresses or domain names of the computers you use to connect to the Website, URI (Uniform Resource Identifier) addresses of the requested resources, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response provided by the server (successful, error, etc.), and other parameters relating to the operating system and IT environment you use.

b) Personal data voluntarily provided

Personal data you voluntarily provide when you register on the Website, access its services, purchase a product or interact with customer support, such as personal details, contact information, purchase-related data and banking details.

c) Cookies

The Website uses so-called cookies. For further information on cookies and their use on the Website, please consult the dedicated page https://www.iubenda.com/privacy-policy/73526199/cookie-policy, where all information regarding processing by the Data Controller is provided.

Data may be collected directly from the data subject or through external platforms (via landing pages).

3. PURPOSES, LEGAL BASIS AND DATA RETENTION PERIOD

Your personal data will be processed by Lotto Sport Italia for the following purposes:

PURPOSES	LEGAL BASIS	RETENTION PERIOD
A Website registration (personal account): to allow you to create your personal account on the Website and access and use related services.	Performance of a contract or pre-contractual measures requested by you.	Until you request deletion of the account or termination of the service. In the event of prolonged inactivity (24 months), data will be deleted after prior notice.
B Sale of products: for the performance of the sales contract for products offered on the Website, delivery of products, as well as management and response to requests you submit in relation to products purchased on the Website (e.g. returns, complaints and refunds).	Performance of a contract or pre-contractual measures requested by you.	For the time necessary to process the purchase order (without prejudice to further retention, where necessary, for the purposes below).
C Disputes and prevention of unlawful activities: to defend or enforce a right and/or for the detection and prevention of fraud and other crimes or unlawful activities.	Legitimate interest in exercising or defending a right.	For the period necessary for the purposes for which the data are collected, in accordance with applicable law (e.g. limitation periods).
D Brand product assistance: to respond to your request for general information about products or the company.	Performance of a contract or pre-contractual measures requested by you (response to requests submitted by the data subject).	For the time necessary to respond to your request.
E Marketing: to send informational and commercial communications, including promotional content, regarding Lotto Sport Italia products and services via digital channels.	Consent.	Purchase data are deleted 24 months after collection. Other data you provide (such as your contact details and, where indicated, gender or geographical area) are retained until you withdraw your consent.
E-bis Management of consent and withdrawal: the Data Controller processes personal data to confirm that subscription to marketing communications occurs with verified consent (double opt-in). The Data Controller records withdrawals of consent to avoid sending further communications to those who do not wish to receive them (blacklist).	Legitimate interest of the Data Controller in collecting valid consent and keeping records of withdrawals to avoid unwanted contacts.	Data are retained for 1 month from registration. If included in a blacklist, they are retained for 3 years.
F Profilation: data are processed to analyse behaviours, habits and purchasing preferences in order to meet specific needs and improve the products and services offered by the Data Controller.	Consent.	Data are retained for 12 months from data registration.

4. NATURE OF DATA PROVISION

Provision of data for the purposes referred to in paragraph 3, letters A), B), C) and D) above is necessary in order to register on the Website, use related services and purchase products on the Website, and failure to provide such data will make it impossible to obtain the requested products and services.

With reference to the marketing purposes referred to in paragraph 3, letters E), E-bis and F), provision of data is optional and any refusal will prevent Lotto Sport Italia from processing the data you provide for marketing and profiling purposes, but will not prevent you from registering on the Website, purchasing products and using related services.

5. CATEGORIES OF RECIPIENTS OF PERSONAL DATA AND DATA DISCLOSURE

For the pursuit of the purposes for which data are collected, Lotto Sport Italia may rely on the following categories of recipients to whom data may be disclosed or who may become aware of them:

IT service providers, such as internet service providers and cloud computing providers;
companies providing website assistance and consulting services in the marketing and promotional field for Lotto Sport Italia;
entities carrying out sales, logistics, warehousing, promotion and delivery activities for products;
companies providing assistance, consulting and services of a professional nature, e.g. legal, tax, accounting, economic-financial, technical-organisational, data processing and communication;
entities performing anti-fraud checks on payments;
public authorities and supervisory and control bodies.

Where necessary and not already indicated, the above entities will be appointed as Data Processors pursuant to applicable law.

Exclusively for the purposes specified above, your personal data may also be accessed by authorised internal personnel in accordance with their respective duties. No data collected through the Website are disclosed.

6. TRANSFER OF DATA TO THIRD COUNTRIES AND/OR INTERNATIONAL ORGANISATIONS

Your data may be transferred to third parties located outside the European Economic Area that provide services connected with the processing described in this Privacy Notice.

Where applicable, such transfers will be governed, depending on the recipients, by standard contractual clauses adopted by the European Commission under Decision 2021/914 of 4 June 2021 and any subsequent amendments, or alternatively on the basis of an adequacy decision of the Commission and/or any other instrument permitted by law. To obtain information on the place where the data have been transferred, the data subject may contact the Data Controller using the contact details provided in the "Data Subject Rights" section.

7. DATA SUBJECT RIGHTS

With regard to the personal data you provide, you have the right at any time to request:

confirmation as to whether or not personal data concerning you are being processed and, if so, to obtain access to the personal data and a copy thereof (Article 15 GDPR);
rectification of inaccurate personal data concerning you, as well as completion of incomplete data, always in relation to the purposes of processing (Article 16 GDPR);
erasure of personal data in the cases provided for in Article 17 GDPR;
restriction of processing in the cases provided for in Article 18 GDPR;
to object to the processing of personal data as provided for in Article 21 GDPR;
data portability, where processing is based on your consent or a contract and is carried out by automated means (Article 20 GDPR);
where you have given explicit consent to the processing of such personal data for one or more specific purposes (Article 6(1)(a) GDPR), withdrawal of consent without affecting the lawfulness of processing based on consent prior to withdrawal.

To exercise these rights, you may write to: legal.office@lottosport.com

We also remind you that, where the relevant conditions are met, you have the right to lodge a complaint with the competent supervisory authority. The complaint may be lodged with the authority of the Member State in which the data subject habitually resides, works, or where the alleged infringement occurred.

For Italy, the competent authority is the Italian Data Protection Authority (www.garanteprivacy.it); for users residing in France, the competent authority is the Commission Nationale de l'Informatique et des Libertés (www.cnil.fr); for users residing in Spain, the Agencia Española de Protección de Datos (www.aepd.es); for users residing in Germany, the Federal Authority is the Die Bundesbeauftragte für den Datenschutz und die Informationsfreiheit (www.bfdi.bund.de); for users residing in the United Kingdom, the competent authority is the Information Commissioner's Office (www.ico.org.uk).