How we handle your personal data

This English text is a translation of our Italian privacy policy, here to help you read it. If the two versions differ, the Italian one is the binding text.

As data controller, and under article 13 of EU Regulation 2016/679, YES Academy would like to explain why and how your personal data is collected and processed.

Who the data controller is, and how to reach us

The data controller is YES Academy — Associazione fra Maestri di Sci e Snowboard (an association of ski and snowboard instructors), Via Pinerolo 17, 10058 Sestriere (TO), Italy, VAT no. / tax code 10323810019. You can contact the data controller at: tel +39 340 577 2897, email info@yes-academy.it

Browsing data

YES Academy informs you that the personal data you provide (for example name, surname, address, telephone number, email) and that we collect when you ask for information or get in touch, register on the site or use our services from a smartphone or any other device used to reach the internet — together with the data needed to provide those services, including browsing data and the data used for any purchase of the products and services offered by YES Academy, and indeed browsing data alone — is processed in line with the applicable law. The computer systems and the software used to run this website acquire, in the course of their normal operation, some personal data whose transmission is implicit in the use of the internet. This information is not collected to be linked to identified people, but by its very nature it could, once processed and matched with data held by others, make it possible to identify the users browsing the site. This category includes the IP addresses or the domain names of the computers used to connect to the site, the URI (Uniform Resource Identifier) addresses of the resources requested, the time of the request, the method used to send the request to the web server, the size of the file received in reply, the numeric code showing the status of the web server’s answer (successful, error and so on) and other parameters about the user’s operating system and computing environment. This data is used only to draw anonymous statistics about the use of the site and to check that the YES Academy website works properly. Please note that this data could be used to establish responsibility in the event of computer crimes against the YES Academy site, or against other sites connected or linked to it: apart from that, data about web contacts is not kept for more than a few days.

Data you give us

YES Academy collects, stores and processes your personal data in order to provide the products and services offered on the Site, or to meet obligations set by law. For some services, products or promotions, YES Academy may also process your data for commercial purposes. In those cases we ask for specific, separate and optional consent, which you can withdraw at any time in the ways and at the contact details given below.

Sending an email, freely and by choice, to the addresses given in the relevant section of the Website, as well as filling in questionnaires (for example forms), writing on chat, push notifications through an app, social networks, call centres and so on, means we then acquire some of your personal data, including data collected through the use of apps and related services, which we need in order to answer your request. Please also note that when you use a mobile connection to reach digital content and services offered directly by YES Academy or by our Partners, it may be necessary to pass your personal data to those third parties, where this is stated.

Why we use your data, and on what legal basis

Personal data is collected and processed for the following purposes:

1. activities strictly connected and necessary to registration on the site, to the services and/or apps developed or made available by YES Academy, to the use of the related information services, to handling requests for contact or information, and to purchases of the products and services offered through the YES Academy site;
2. ancillary activities connected to handling the User’s/Customer’s requests and to replying to them, which may include sending promotional material through newsletter systems (consent requested as the law provides); completing the purchase order for the products and services offered, including payment by credit card, managing deliveries, handling any right of withdrawal for distance purchases, and updates on the availability of products and services;
3. meeting the legal obligations the data controller is subject to (art. 6(1)(c) GDPR) and performing a contract to which the data subject is party, or taking steps before entering into a contract at their request (art. 6(1)(b) GDPR). Personal data is processed only for the purposes connected to meeting the contractual obligations of the services provided by the data controller;
4. consent to publishing images for promotional purposes by the data controller towards third parties. The images are used by the data controller for marketing activities that promote its own brand. While the service is being provided, the data controller may take and publish photographs and videos showing the data subject and/or the child, for information and promotion about its services. This content is published on digital and traditional channels such as, by way of example, our website, printed promotional material such as brochures and flyers, and social networks such as Facebook, Instagram and YouTube. Consent to the collection and publication of this content is given free of charge, and the signatories therefore waive any payment for the use of the material. This consent is optional;
5. consent to receiving direct marketing and newsletters. The data controller will send promotional messages about products and/or services sold by the data controller and/or its commercial partners to the contact details provided. The data controller will never pass your contact details to third parties, and every commercial message will be sent by the data controller. Consent to receiving these messages is optional.

How we process your data, how long we keep it and how we protect it

Processing is also carried out with electronic or otherwise automated means, and is done by YES Academy and/or by third parties that YES Academy may use to store, manage and transmit the data. Your personal data is organised and processed — including the logs generated by access to and use of the services available over the web, and of the products and services used — in ways connected to the purposes above and, in any case, so as to keep the data secure and confidential. Personal data is kept for the periods set out in the law applicable at the time.

Still on data security: in the sections of the website set up for particular services, where users are asked for personal data, the data is encrypted with a security technology called Secure Sockets Layer, or SSL. SSL encodes the information before it travels over the internet between the user’s computer and the central systems of YES Academy, making it unreadable to anyone who is not authorised and so keeping the information it carries confidential.

On the protection of personal data, users and customers are asked, under art. 33 GDPR, to report to YES Academy any circumstance or event that could lead to a personal data breach, so that it can be assessed at once and any action taken to counter it, by contacting Customer Service. The measures taken by YES Academy do not relieve the Customer of the need to take care when using passwords, where they are required, and to choose ones that are complex enough.

Cookies

Which cookies this site uses, what they do and how to manage them is explained in our cookie policy.

Your rights

You can exercise the rights the law gives you at any time, including the right:

1. to access your personal data, and to be told the purposes pursued by the data controller, the categories of data involved, the recipients it may be disclosed to, how long it is kept and whether there is any automated decision-making;
2. to have inaccurate personal data about you corrected without delay;
3. to have your data erased, in the cases provided for;
4. to have processing restricted, or to object to it, where that is possible;
5. to ask for the portability of the data you have given YES Academy, that is to receive it in a structured, commonly used and machine-readable format, and to pass it to another controller, within the limits and conditions of art. 20 GDPR;

You can also lodge a complaint with the Italian data protection authority, the Garante per la Protezione dei Dati Personali, under art. 77 GDPR.