LEGAL AREA
1. Personal Data Controller
Your personal data (hereinafter, the Data) will be processed by F.C. Internazionale Milano S.p.A, registered office based in 20124 Milan, Viale della Liberazione n. 16/18, P. IVA 04231750151, as data controller (hereinafter, Inter or the Data Controller), in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with reference to the processing of personal data and its implementing legislation (hereinafter, jointly, GDPR), in order to allow the activities described below on the Inter website, the Inter online store and the official Inter App (hereinafter, jointly, the Website) in accordance with the regulations in force and pursuant to the provisions set forth under this policy.
2. Data collected by Inter and processing purposes
We collect and process your Data for the following purposes:
A. Basic use of the Website
(a) signing up on the Website by creating your personal account;
(b) website browsing;
(c) download and update of Inter’s official App;
B. Using the available services via the Website
(d) customer care;
(e) signing up for specific events;
(f) taking part in activities, games or competitions related to Inter’s world;
(g) candidature (sending CVs, presentation letters);
C. Purchases
(h) making and managing purchase orders via the Website even without signing up on the Website and management of purchase orders;
(i) ticketing (purchase and issuance of tickets, season tickets and/or passes for the G. Meazza stadium in Milan) and relevant assistance;
(l) issuance and management of the Inter Fan Card and/or Inter Club Card;
(m) accreditation of disabled people for dedicated access to the G. Meazza stadium in Milan;
D. Promotional Activities
(n) Inter sending advertising material and performing promotional and marketing activities and/or directly selling products and/or services similar to those previously sold and/or provided by Inter (so-called “soft spam”) unless you decide not to receive such communications when signing up on the Website or subsequently;
(o) following your explicit consent only, sending of newsletters related to the Website and specific activities and/or issues related to Inter’s world;
(p) following your explicit consent only, sending of regular updates and commercial, marketing and promotional communications on discounts, novelties, offers, services or events related to Inter;
(q) following your explicit consent only, sending of commercial and promotional communications on products and/or services of third-party companies affiliated with Inter;
(r) following your explicit consent only, profiling activities;
(s) following your explicit consent only, ending of surveys or customer satisfaction questionnaires related to Inter products and services.
A. BASIC USE OF THE WEBSITE
(a) Signing up on the Website
When signing up on the Website, you will be asked to enter certain Data. In order to sign up on the Website for the purpose of creating your personal account, the following data are mandatory: first name, last name, date of birth, e-mail address and a password of your choice. The Data you enter will also be stored in order to make all information relating to your profile and activities immediately accessible to you at all times.
The aforesaid Data shall be processed by Inter, in accordance with the principles of necessity, lawfulness, correctness, proportionality and transparency for the following purpose: to allow you to sign up on the Website and create a personal account. Therefore, data processing for this purpose does not require your express consent. The legal basis for the processing described above is Article 6.1(b) of the GDPR.
In order to facilitate and accelerate signing-up operations on the Website, you can sign up using a social network account (e.g. Facebook, Google), by means of the so-called "social log-in" function. More specifically, “social log-in” is a function that allows you to share with Inter, in an automated manner and for the purpose of registering on the Website, certain personal data contained in your social network account. Therefore, subject to your express authorisation, the social network you intend to use will send Inter your Data that is necessary for signing up on the Website, without you having to enter such Data manually. For further information on the processing of your Data if the "social log-in" function is used, please read the privacy policies of the relevant social networks, available at the following links:
Facebook: https://www.facebook.com/policy.php
Google: https://policies.google.com/privacy
Wechat: https://www.wechat.com/it/privacy_policy.html
Apple: https://www.apple.com/legal/privacy/en-ww/
It shall be possible to delete a personal account in any moment, sending a request via email to privacy@inter.it.
(b) Website browsing
The computer systems and software procedures used to operate the Website acquire, during their normal operation, certain Data whose transmission is required by Internet communication protocols. This information, by its very nature, may allow your identification as a user by means of processing and association with other Data, although it is not collected for the purpose of association with identified users. This type of information may include IP addresses and other parameters potentially identifying your computing environment.
Browsing Data is processed by Inter (in accordance with the principles of necessity, lawfulness, correctness, proportionality and transparency) exclusively for statistical purposes on the Website browsing and its correct functioning.
The processing of Data for the purposes referred to in this paragraph is carried out on the basis of the Owner's legitimate interest in the proper functioning of the Website and therefore does not require your express consent. The legal basis for the processing described above is Article 6.1 (f) of the GDPR.
For further details see paragraph 7 below and Inter's Cookie Policy, where you will find detailed information on how Data is collected, via cookies, during your Website browsing.
(c) Download and update of Inter’s official App
Should you request it, Inter will process the Data (in accordance with the principles of necessity, lawfulness, correctness, proportionality and transparency) in order to allow you to download, through the Website, the official Inter App and/or to allow you to update it to the latest version available.
The processing of Data for the purpose referred to in this paragraph is carried out in order to execute your request to download and/or update the official Inter App transmitted through the Website and therefore does not require your express consent. The legal basis for the processing described above is Article 6.1(b) of the GDPR.
B. USING THE AVAILABLE SERVICES VIA THE WEBSITE
(d) Customer care
Through the Website, you can make use of the customer care service provided by Inter. Should you use this service, Inter shall process – pursuant to the principles of necessity, lawfulness, correctness, proportionality and transparency – your Data, in particular contact data and any information that might be included in your requests, in order to execute them.
The legal basis for the processing of Data for the purposes referred to under this paragraph is the fulfilment of a contract or of preliminary contractual provisions adopted following your request, pursuant to Art. 6.1(b) of the GDPR. Your express consent is therefore not required.
(e) Signing up for specific events
Should you request it, the Data, in particular your personal and contact Data, shall be processed by Inter (in accordance with the principles of necessity, lawfulness, fairness, proportionality and transparency) in order to allow your signing up and participation to events related to the world of Inter and promoted by Inter from time to time through the Website.
The legal basis for the processing of Data for the purposes referred to in this paragraph is the fulfilment of a contract or of preliminary contractual provisions adopted following your request, pursuant to article 6.1(b) of the GDPR, and/or the fulfilment of a legal obligation to which Inter is subject, pursuant to article 6.1(c) of the GDPR, thus your explicit consent is not required. Only in the limited case in which signing up to the event requires the processing of health data provided directly by you, for example for food security purposes, the legal basis for the processing is your explicit consent pursuant to Article 9.2(a) of the GDPR.
(f) Taking part in activities, games or competitions related to Inter’s world
Only with your express consent will Inter process the Data, in particular, the personal and contact Data and all the Data provided during the activities, games and/or competitions related to Inter and promoted by the latter, from time to time, via the Website (in accordance with the principles of necessity, lawfulness, fairness, proportionality and transparency) to allow your participation in said events.
The processing of the Data for the purposes set out in this paragraph may take place through automated (by email or sms text message), traditional (by phone calls with operator and postal mail) and/or other types of contact (through content shown to you online).
The processing of Data for this purpose necessarily requires your prior consent. The legal basis for such processing is therefore Article 6.1(a) of the GDPR.
In any case, you may revoke your consent at any time, even partially, for example by consenting only to traditional contact tools, by accessing your personal area on the Website and/or by writing an e-mail to privacy@inter.it.
(g) Candidature (sending CVs, presentation letters)
Through the Website, you may apply for possible job positions related to the Inter world. The Data you provide when sending your curriculum vitae and cover letter will be processed by Inter (according to the principles of necessity, lawfulness, correctness, proportionality and transparency) for the following purposes
(i) assessment of your profile, aptitudes and professional skills;
(ii) recruitment and selection of personnel
(iii) planning of selection activities.
When searching for and selecting personnel, Inter shall only need to collect data relating to your membership of protected categories, if any, without any further details; therefore, please do not include any sensitive data (relating, for example, to your state of health, religious beliefs and political opinions) in your curriculum vitae and/or presentation letter, with the warning that if such data is provided, it will be immediately deleted.
Data processing for the purposes set out under this paragraph shall be carried out in order to process your spontaneous application and therefore does not require your express consent pursuant to Article 111-bis of Legislative Decree 196/2003, as amended (hereinafter, Privacy Code) and Article 6.1(b) of the GDPR.
C. PURCHASES
(h) Making purchase orders via the Website
Signing up on the Website and creating a personal account is not a prerequisite for placing a purchase order through the Website. Alternatively, you can place your purchase order as a "guest" on the Website, by directly entering the Data required during the purchase process, as better indicated below. In this case, you will not need to create a personal account.
When you place a purchase order through the Website, you will be asked to enter the following Data: your first name, last name, date of birth, e-mail address (if you are not already registered on the Website), shipping address, and, optionally, your telephone number, as well as information relating to the payment instrument used (such as issuer, number and expiry date of the credit card used for payment). We invite you to check which Data are indicated as compulsory and which as optional, it being understood that failure to provide the Data marked as compulsory prevents the purchase order from being carried out; failure to provide the Data marked as optional does not prevent the purchase order from being executed, but may make some services and/or some communication channels unavailable.
The aforementioned Data are processed by Inter, according to principles of necessity, lawfulness, correctness, proportionality and transparency for the following purposes (i) to allow you to transmit the purchase order of the desired products through the Website and to proceed with the purchase; (ii) to execute the purchase order of the products and to ship them to the address indicated; to send you all communications relating to the same order (including the sending of service information and to provide you with assistance) (iii) comply with and fulfil the obligations provided for by laws, regulations, EU rules, orders and prescriptions of the competent authorities; (iv) handle complaints and disputes, prevent fraud and unlawful activities, exercise rights and protect the legitimate interests of the Controller such as the right of defence in court. In particular, your telephone number, if issued, will only be used to process requests relating to your order and, if necessary, to notify delivery of products and for no other purpose.
The processing of the Data for the purposes set out under paragraphs (i) and (ii) above is carried out in order to execute the purchase order transmitted by you through the Website and to allow you to proceed with the purchase of the products and their delivery to the address indicated by you and does not therefore require your express consent. The legal basis for the processing described above is Article 6.1 (b) of the GDPR.
The processing of Data for the purposes set out in paragraph (iii) is carried out to comply with legal obligations, and therefore does not require your express consent. The legal basis for the processing described above is Article 6.1 (c) of the GDPR.
The processing of Data for the purposes set out in point (iv) is carried out on the basis of the legitimate interest of the Data Controller in protecting its legal position in claims and litigation and therefore does not require your express consent. The legal basis for the processing described above is Article 6.1 (f) of the GDPR.
(i) Ticketing (purchase and issuance of tickets, season tickets and/or passes for the G. Meazza Stadium in Milan) and relevant assistance
Should you intend to purchase, through the Website, tickets for "F.C. Internazionale" team matches, season tickets for the whole season, or any other access ticket to the G. Meazza Stadium of Milan, Inter (also during the access to the G. Meazza Stadium of Milan) will process (in accordance with the principles of necessity, lawfulness, correctness, proportionality and transparency) the Data, in particular personal Data, contact Data and all Data required by the governing laws, for the following purposes: (i) issuance and management of tickets, access tickets, season tickets and/or passes for the G. Meazza Stadium of Milan, as well as related assistance; (ii) fulfilments related to the purchase of tickets, passes and/or season tickets for the G. Meazza Stadium of Milan or in any case related to the performance of the relevant football events, such as the adoption of medical procedures aimed at the containment of the epidemiological emergency from Covid-19 if provided for by the regulations in force at the time of the purchase (hereinafter, the Procedures) and/or the sending of information/material relating to the events; (iii) administrative-accounting purposes arising from the purchase of tickets, season tickets and/or passes for the G. Meazza Stadium of Milan.
The legal basis for the processing of Data relating to health collected in the implementation of the Procedures for the purposes indicated at point (ii) above is your explicit consent pursuant to art. 9.2 lett. (a) of the GDPR. The legal basis for the processing of other (so-called "common") Data processed for the purposes set out in (i), (ii) and (iii) above is the fulfilment of a contract, or of preliminary contractual provisions adopted following your request, pursuant to Article 6.1(b) of the GDPR, and/or the performance of a legal obligation to which Inter is subject, pursuant to Article 6.1(c) of the GDPR. It should also be noted that, in and around the San Siro Stadium in Milan, a video surveillance system is in operation in compliance with the provisions of the Decree of the Ministry of the Interior of 6 June 2005. The aforementioned video surveillance system is aimed at managing the security of the sports facility and the prevention and suppression of crimes during sports events (for any further information, please refer to the relevant privacy policy displayed at the San Siro Stadium). It should also be noted that, in application of the CODE OF CONDUCT AND REGULATIONS FOR ACCESS TO FOOTBALL EVENTS BY INTER and the Rating System established by the F.I.G.C. Protocol of 4 August 2017, the images taken by the video surveillance system may also be used for the purpose of detecting conduct by fans in violation of the provisions of the Code. In particular, the detection of conduct contrary to the values of sport and the public sense of decency, as well as discriminatory conduct of any kind or damaging to the image of the "F.C. Internazionale" team, may lead to the imposition of interdictory or prohibitory measures against the person responsible.
(l) Issuance and management of the Inter fan card and Inter Club card
Should you request, through the Website, the issuance of a fan card and/or Inter Club card, Inter will process (in accordance with the principles of necessity, lawfulness, correctness, proportionality and transparency) the Data, in particular personal and contact Data and all the Data required by the governing laws, for the following purposes: (i) issuance and management of the fan card and/or Inter Club card, as well as related assistance; (ii) fulfilment of obligations related to the issuance of the fan card and/or Inter Club card; (iii) administrative and accounting purposes deriving from the issuance of the fan card and/or Inter Club card.
The legal basis for the processing of Data for the purposes referred to in points (i), (ii) and (iii) above is the fulfilment of a contract, or of preliminary contractual provisions adopted following your request, pursuant to Art. 6.1(b) of the GDPR, and/or the fulfilment of a legal obligation to which Inter is subject, pursuant to Art. 6.1(c) of the GDPR. Your express consent is therefore not required.
(m) Accreditation of disabled people for dedicated access to the G. Meazza Stadium in Milan
Through the Website, Inter processes the Data of fans with disabilities who purchase tickets for "F.C. Internazionale" team matches, season tickets, fan cards or Inter Club cards. This paragraph is a supplement to paragraphs (i) and (l) above, with particular reference to the transmission of the sensitive Data of the data subject (i.e. those contained in the disability certificate). Such disclosure is a necessary requirement in order to have access to advantageous conditions when purchasing the services indicated above and to benefit from dedicated services during sports events at the G. Meazza Stadium in Milan. The Data is provided directly by the data subject or the data subject's guardian, for the sole purpose of guaranteeing disabled fans access to the aforementioned advantageous conditions and dedicated services.
The legal basis for the processing of Health Data collected for the purposes referred to in this paragraph is your explicit consent pursuant to Article 9.2(a) of the GDPR. The legal basis for the processing of other (so-called "common") Data is the fulfilment of a contract or of preliminary contractual provisions adopted following your request, pursuant to art. 6.1(b) of the GDPR, and/or the fulfilment of a legal obligation to which Inter is subject, pursuant to art. 6.1(c) of the GDPR.
D. PROMOTIONAL ACTIVITIES
(n) Inter sending marketing and advertising communications concerning products and/or services similar to those already purchased on the Website
If you place an order on the Website, Inter may inform you by e-mail about other products and/or services sold and/or provided by Inter that are similar to those of your previous order.
The processing of Data for the purposes indicated in this paragraph (so-called "soft spam") does not require your prior consent, as it is of legitimate interest for Inter. The legal bases for such processing are therefore Article 6.1(f) of the GDPR and Article 130(4) of the Privacy Code.
You may, however, object, as of now, to the sending of any communication for the purposes indicated in this paragraph, by sending an e-mail to privacy@inter.it or, when sending any communication, by using the "Unsubscribe" functionality that will be made available to you easily and free of charge.
(o) Sending newsletters
Only with your express consent will Inter process (according to principles of necessity, lawfulness, fairness, proportionality and transparency) the Data, in particular personal and contact Data, to enable your subscription to the newsletter.
Subscription is carried out by means of the so-called "double opt-in procedure", whereby an e-mail is sent to you after you have subscribed, in which you are asked for further confirmation. This confirmation is necessary in order to check the e-mail address provided.
The processing of Data for this purpose necessarily requires your prior consent. The legal basis for such processing is therefore Article 6.1(a) of the GDPR.
In any case, you may revoke your consent at any time by accessing your personal area on the Website, by writing an e-mail to privacy@inter.it and/or, when sending any communication, by using the "Unsubscribe" functionality that will be made available to you easily and free of charge.
(p) Regularly sending updates and commercial/promotional communications on discounts, novelties, offers, services or Inter-related events
Only with your express consent will Inter process the Data, in particular personal and contact Data (according to principles of necessity, lawfulness, correctness, proportionality and transparency) for sending advertising material and carrying out promotional activities, marketing and/or direct sales of Inter's products and/or services. The processing of Data for the purposes set forth in this paragraph may take place through automated contact tools (through e-mails or sms text messages), traditional contact tools (telephone calls with operator and postal mailings) and/or other types of contact tools (through promotional contents shown to you online).
The processing of Data for this purpose necessarily requires your prior consent. The legal basis for such processing is therefore Article 6.1 (a) of the GDPR.
In any case, you may revoke your consent at any time, even partially, e.g. by consenting only to traditional contact tools, by accessing your personal area on the Website and/or by writing an e-mail to privacy@inter.it.
(q) Sending commercial and promotional communications on products and/or services of third-party companies affiliated with Inter
Only with your express consent, will Inter process the Data, in particular personal and contact Data (according to principles of necessity, lawfulness, correctness, proportionality and transparency) for sending advertising material and carrying out promotional activities, marketing and/or direct sales of products and/or services of third-party companies affiliated with Inter.
The processing of Data for the purposes set forth under this paragraph may take place through automated contact tools (through e-mails or sms text messages), traditional contact tools (telephone calls with operator and postal mailings) and/or other types of contact tools (through promotional contents shown to you online).
The processing of Data for this purpose necessarily requires your prior consent. The legal basis for such processing is therefore Article 6.1(a) of the GDPR.
In any case, you may revoke your consent at any time, even partially, e.g. by consenting only to traditional contact tools, by accessing your personal area on the Website and/or by writing an e-mail to privacy@inter.it.
(r) Profiling
Only with your express consent, the Data will be processed by Inter (in accordance with the principles of necessity, lawfulness, fairness, proportionality and transparency) in order to carry out profiled marketing activities based on the preferences expressed by you while browsing the Website and/or when purchasing products and/or services therein. The profiling activity in question will involve an automated activity in order to place you in a category of subjects with homogeneous characteristics in terms of purchasing preferences on the basis of your previous purchasing experiences, market analysis and research (including surveys) in which you may have participated, your demographic class (in relation, for example, to gender, age and place of residence) and your activities on the Website and on Inter's other sites. The latter are recorded through cookies on these sites (on which see paragraph 7 below and Inter's Cookie Policy where you will find detailed information, including on how to disable cookies).
The processing of Data for this purpose necessarily requires your prior consent. The legal basis for such processing is therefore Article 6.1(a) of the GDPR.
In any case, you may revoke your consent at any time by accessing your personal area on the Website and/or by writing an e-mail to privacy@inter.it.
(s) Sending customer satisfaction surveys or questionnaires on Inter's products and services
Only with your express consent, the Data, in particular, personal and contact Data, will be processed by Inter (according to principles of necessity, lawfulness, correctness, proportionality and transparency) for sending surveys or questionnaires to survey customer satisfaction in relation to Inter's products and services.
The processing of Data for the purpose referred to in this paragraph may take place through automated contact tools (through e-mails or sms text messages), traditional contact tools (operator phone calls and postal mailings) and/or other types of contact tools (through content shown to you online).
The processing of Data for this purpose necessarily requires your prior consent. The legal basis for such processing is therefore Article 6.1(a) of the GDPR.
In any case, you may revoke your consent at any time, even partially, e.g. by consenting only to traditional contact tools, by accessing your personal area on the Website and/or by writing an e-mail to privacy@inter.it
3. Mandatory and optional provision of Data
The provision of the Data for the purposes set forth under letters (a), (b), (c), (d), (e), (g), (h), (i), (l) and (m) of section 2 is necessary respectively for the purposes of registering to the Website, for allowing your correct browsing of the Website, for the purposes of downloading and updating the official Inter App, for the correct functioning of the customer care service, to allow your signing up to events, to allow your application, to allow you to place purchase orders on the Website, for the purposes of ticketing management, for the purposes of issuing and managing the fan card and/or Inter Club card and, finally, for the purposes of the accreditation of disabled persons for access to the G. Meazza Stadium. Meazza Stadium in Milan. Failure to provide such data will make it impossible for Inter to pursue the respective purpose for which it is required to be collected. The provision of data for the purposes set out in letters (f), (n), (o), (p), (q), (r) and (s) of section 2 is, on the other hand, optional, and your refusal to provide such data will make it impossible for Inter to carry out the activities described therein.
4. Scope of data communication and disclosure
The Data you provide will be processed in compliance with the GDPR and, in any case, in such a way as to guarantee the security and confidentiality of the same, to prevent unauthorised disclosure or use, alteration or destruction. The Data will be processed on paper and/or via telematic means, also with the help of electronic and information means. Inter will process your Data in its own technological infrastructure and/or using the technological infrastructure of third-party suppliers appointed as data processors.
The Data may be communicated, exclusively for the purposes indicated in this information notice, to the categories of subjects listed below having their registered offices in the countries of the European Union and acting, as the case may be, as data processors on behalf of Inter or as separate data controllers, in this case providing the Data Subject, under his/her own responsibility, with appropriate information (a) persons, companies, associations or professional firms that provide services and activities of assistance and consultancy to Inter, with particular but not exclusive reference to accounting, administrative, legal, tax and financial matters and (b) companies that provide, on behalf of Inter, certain services related to the Website and to the management and execution of purchase orders through the Website, with particular but not exclusive reference to the analysis of Data, the management of payment services, the management, shipment and delivery of products purchased on the Website, marketing activities, the management of services provided through the Website and their customisation in your favour.
The Data may also be communicated, exclusively for the purposes indicated in this privacy policy, to the categories of subjects listed below, also based in countries outside the European Union (in this case in compliance with the provisions of the last paragraph of section 4 and acting as Data Processors on behalf of the Data Controller or as autonomous Data Controllers) (a) companies belonging to the same corporate group as Inter, with particular but not exclusive reference to activities of Data analysis in aggregate and anonymised form, identity management of user profiles on the Website, profiling and profiled marketing in relation to users who have given their consent to these activities; (b) subjects to whom the right to access the Data is recognised by provisions of law and secondary regulations; (c) third party companies and clients with whom Inter collaborates as a business partner (e.g. for the promotion of goods and services).
You may request a list of the names of the persons to whom your Data is or may be disclosed by writing to the address indicated in paragraph 8 below. Within Inter's organisation, your Data may be processed by the persons in charge of the departments responsible for carrying out individual processing activities.
Your Data will be stored on the servers available to Inter or to the persons in charge located in the European Union. Should it become necessary for technical and/or operational reasons to use subjects located outside the European Union, or should it become necessary to transfer some of the collected Data to technical systems and services managed in the cloud and located outside the European Union area, the processing will be regulated in compliance with the provisions of Chapter V of the GDPR and/or authorised on the basis of specific decisions of the European Union. In particular, Inter shall adopt for the transfer of data to countries outside the European Union the system of standard contractual clauses approved by the European Commission, as well as any additional measures to ensure compliance with the level of personal data protection required by the European Union.
5. Underage users
Inter encourages parents to monitor their children's use of the Internet for safe and filtered use of its content, including through the use of parental control tools. Besides ensuring an online environment suitable for minors, these tools can prevent the disclosure of personal data by children or young people who do not have their parents' consent. With regard to the collection and processing of personal data, the Data Controller does not process personal data of subjects under 14 years of age. Signing up on the Website is, therefore, only permitted to users who have reached the age of majority or to users who are at least 14 years old. Inter, moreover, encourages the signing up on the Website of parents of registered users who are minors: in this way, parents have the opportunity to keep abreast of the initiatives that Inter makes available to their children, and to check their compliance with their own expectations and educational models and paths. Inter urges all users who are under the age of 14 not to communicate their personal data, under any circumstance, and reserves the right to exclude from the Website any user who has concealed their under-age or who has communicated their personal data despite being aged less than 14.
6. Data storage period and data deletion
The Data collected for the processing purpose indicated in letter (a) of section 2 above shall be kept until your account is deleted, or until you expressly request the deletion of the Data, except in case of exceptional need for the Controller to keep the Data in order to defend its rights, including in relation to disputes existing at the time of the request or upon indication by public authorities.
The Data collected for the processing purposes respectively indicated in letters (a), (b), (c), (d), (e), (g), (h), (i), (l) and (m) of section 2 above shall be kept for the time necessary for the pursuit of such purposes and thereafter until the expiry of the period prescribed by law for the keeping of accounting records and for the prescription of rights in contractual matters, except in case of exceptional necessity of the Data Controller to keep the Data further in order to defend its rights, also in relation to disputes existing at the time of the request or upon indication of public authorities.
The Data collected for the processing purposes respectively indicated in letters (f), (n), (o), (p), (q), (r) and (s) of section 2 above shall be kept until your objection, or the express request of deletion of such Data, except in case of exceptional necessity of the Controller to keep the Data to defend its rights, also in relation to disputes existing at the time of the request or upon indication of public authorities.
7. Website browsing and cookies
A 'cookie' is a small string of data containing an anonymous unique identifier that is sent to your browser by a web server and is subsequently stored on the hard drive of your computer. The cookie is then re-read and recognised by the website that sent it each time you make a subsequent connection. Thanks to cookies, it can be made easier for the Website to recognise the registered user, for example by avoiding the need for authentication (by means of 'log-in' and 'password') each time the Website is accessed. Cookies can also allow users to personalise their use of the Website by saving their preferred settings. Cookies also record certain information about your Website browsing, which may be used to improve the performance of the Website and to offer personalised services or advertising. For more information about cookies, including how to provide consent and how to deactivate them, we recommend that you view our cookie policy by clicking here.
8. Data controller contacts
Your personal data processing controller is F.C. Internazionale Milano S.p.A., with registered office based in 20124 Milan, Viale della Liberazione no. 16/18, VAT no. 0423175015. You can contact the Controller at any time by mail or e-mail at privacy@inter.it.
The Controller has appointed, pursuant to art. 37 ff. of the GDPR, its own Data Protection Officer (also known as the "DPO"), domiciled for the purpose at F.C. Internazionale Milano S.p.A. and who may be contacted for matters relating to the processing of your data at privacy@inter.it . By writing to privacy@inter.it you may also exercise the rights indicated under paragraph 9 below.
9. Your rights
We hereby remind you that you have the following rights:
- the right to obtain information in relation to the purposes for which your Data is processed, the period of processing and the persons to whom the Data is disclosed (the so-called data subject's right of access pursuant to Section 15 of the GDPR);
- the right to obtain rectification or integration of inaccurate Data relating to you (the so-called right of rectification under article 16 of the GDPR);
- the right to obtain the deletion of the Data concerning you in the following cases (a) the Data is no longer necessary for the purposes for which it was collected; (b) you have withdrawn your consent to the processing of the Data where it is processed on the basis of your consent; (c) you have objected to the processing of the Data concerning you where it is processed for a legitimate interest of the Data Controller; or (d) the processing of your Data does not comply with the law. However, please note that the retention of Data by the Data Controller is lawful if it is necessary to enable you to comply with a legal obligation or to establish, exercise or defend a right in court (so-called right of erasure under Article 17 of the GDPR);
- the right to obtain that the Data concerning you is only kept without any other use of the Data in the following cases: (a) you contest the accuracy of the Data, for the period necessary to allow us to verify the accuracy of such Data; (b) the processing is unlawful but you still object to the deletion of the Data by the Controller (c) the Data is necessary for the establishment, exercise or defence of legal claims; (d) you object to the processing and are awaiting verification as to whether the legitimate grounds of the Controller for processing prevail over those of the data subject (so-called right to restrict processing, pursuant to Article 18 of the GDPR);
- the right to obtain the cessation of processing in cases where your Data is processed for marketing purposes, including in relation to products or services identical to those already purchased by the Controller and/or where your Data is processed on the basis of a legitimate interest of the Controller in the context of the balancing of interests pursuant to Article 6.1 (f) of the GDPR (so-called right to object to processing, pursuant to Article 21 of the GDPR);
- the right to receive in a commonly used, machine-readable and interoperable format, a copy of the Data provided to Inter, and to transmit such Data to another Data Controller, without Inter hindering it, should the data processing be based on your consent and has been performed via automated means (so-called right to data portability, pursuant to Article 20 of the GDPR).
Should you reckon that your Data is being processed unlawfully, you may file a complaint with the relevant data protection authority. Please note that in Italy you have the right to turn to the national authority (Garante per la protezione dei dati personali) (Piazza Venezia, 11 - 00187, Rome RM) to assert your rights in relation to the processing of your Data.
Furthermore, by writing to the address privacy@inter.it , indicated under paragraph 8 above, you may exercise the rights set forth under this paragraph.
PRIVACY POLICY
1. Personal Data Controller
Your personal data (hereinafter, the Data) will be processed by F.C. Internazionale Milano S.p.A, registered office based in 20124 Milan, Viale della Liberazione n. 16/18, P. IVA 04231750151, as data controller (hereinafter, Inter or the Data Controller), in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with reference to the processing of personal data and its implementing legislation (hereinafter, jointly, GDPR), in order to allow the activities described below on the Inter website, the Inter online store and the official Inter App (hereinafter, jointly, the Website) in accordance with the regulations in force and pursuant to the provisions set forth under this policy.
2. Data collected by Inter and processing purposes
We collect and process your Data for the following purposes:
A. Basic use of the Website
(a) signing up on the Website by creating your personal account;
(b) website browsing;
(c) download and update of Inter’s official App;
B. Using the available services via the Website
(d) contact form and customer care service;
(e) signing up for specific events;
(f) taking part in activities, games or competitions related to Inter’s world;
(g) candidature (sending CVs, presentation letters);
C. Purchases
(h) making and managing purchase orders via the Website even without signing up on the Website and management of purchase orders;
(i) ticketing (purchase and issuance of tickets, season tickets and/or passes for the G. Meazza stadium in Milan) and relevant assistance - footage and photographs inside the San Siro Stadium;
(l) issuance and management of the Inter Fan Card and/or Inter Club Card;
(m) accreditation of disabled people for dedicated access to the G. Meazza stadium in Milan;
D. Promotional Activities
(n) Inter sending advertising material and performing promotional and marketing activities and/or directly selling products and/or services similar to those previously sold and/or provided by Inter (so-called “soft spam”) unless you decide not to receive such communications when signing up on the Website or subsequently;
(o) following your explicit consent only, sending of regular updates and commercial, marketing and promotional communications on discounts, novelties, offers, services or events related to Inter;
(p) following your explicit consent only, sending of commercial and promotional communications on products and/or services of third-party companies affiliated with Inter;
(q) following your explicit consent only, profiling activities;
(r) following your explicit consent only, ending of surveys or customer satisfaction questionnaires related to Inter products and services.
A. BASIC USE OF THE WEBSITE
(a) Signing up on the Website
When signing up on the Website, you will be asked to enter certain Data. In order to sign up on the Website for the purpose of creating your personal account, the following data are mandatory: first name, last name, date of birth, e-mail address and a password of your choice. The Data you enter will also be stored in order to make all information relating to your profile and activities immediately accessible to you at all times.
The aforesaid Data shall be processed by Inter, in accordance with the principles of necessity, lawfulness, correctness, proportionality and transparency for the following purpose: to allow you to sign up on the Website and create a personal account. Therefore, data processing for this purpose does not require your express consent. The legal basis for the processing described above is Article 6.1(b) of the GDPR.
In order to facilitate and accelerate signing-up operations on the Website, you can sign up using a social network account (e.g. Facebook, Google), by means of the so-called "social log-in" function. More specifically, “social log-in” is a function that allows you to share with Inter, in an automated manner and for the purpose of registering on the Website, certain personal data contained in your social network account. Therefore, subject to your express authorisation, the social network you intend to use will send Inter your Data that is necessary for signing up on the Website, without you having to enter such Data manually. For further information on the processing of your Data if the "social log-in" function is used, please read the privacy policies of the relevant social networks, available at the following links:
Facebook:https://www.facebook.com/policy.php
Google:https://policies.google.com/privacy
Wechat: https://www.wechat.com/it/privacy_policy.html
Apple: https://www.apple.com/legal/privacy/en-ww/
It shall be possible to delete a personal account in any moment, sending a request via email to privacy@inter.it.
(b) Website browsing
The computer systems and software procedures used to operate the Website acquire, during their normal operation, certain Data whose transmission is required by Internet communication protocols. This information, by its very nature, may allow your identification as a user by means of processing and association with other Data, although it is not collected for the purpose of association with identified users. This type of information may include IP addresses and other parameters potentially identifying your computing environment.
Browsing Data is processed by Inter (in accordance with the principles of necessity, lawfulness, correctness, proportionality and transparency) exclusively for statistical purposes on the Website browsing and its correct functioning.
The processing of Data for the purposes referred to in this paragraph is carried out on the basis of the Owner's legitimate interest in the proper functioning of the Website and therefore does not require your express consent. The legal basis for the processing described above is Article 6.1 (f) of the GDPR.
For further details see paragraph 7 below and Inter's Cookie Policy, where you will find detailed information on how Data is collected, via cookies, during your Website browsing.
(c) Download and update of Inter’s official App
Should you request it, Inter will process the Data (in accordance with the principles of necessity, lawfulness, correctness, proportionality and transparency) in order to allow you to download, through the Website, the official Inter App and/or to allow you to update it to the latest version available.
The processing of Data for the purpose referred to in this paragraph is carried out in order to execute your request to download and/or update the official Inter App transmitted through the Website and therefore does not require your express consent. The legal basis for the processing described above is Article 6.1(b) of the GDPR.
B. USING THE AVAILABLE SERVICES VIA THE WEBSITE
(d) Contact form and customer care service
Through the Website, you can get in touch with Inter and make use of the customer care service provided by Inter. Should you fill out the contact form and/or use the customer care service, Inter shall process – pursuant to the principles of necessity, lawfulness, correctness, proportionality and transparency – your Data, in particular contact data and any information that might be included in your requests, in order to execute them.
The legal basis for the processing of Data for the purposes referred to under this paragraph is the fulfilment of a contract or of preliminary contractual provisions adopted following your request, pursuant to Art. 6.1(b) of the GDPR. Your express consent is therefore not required.
(e) Signing up for specific events
Should you request it, the Data, in particular your personal and contact Data, shall be processed by Inter (in accordance with the principles of necessity, lawfulness, fairness, proportionality and transparency) in order to allow your signing up and participation to events related to the world of Inter and promoted by Inter from time to time through the Website.
The legal basis for the processing of Data for the purposes referred to in this paragraph is the fulfilment of a contract or of preliminary contractual provisions adopted following your request, pursuant to article 6.1(b) of the GDPR, and/or the fulfilment of a legal obligation to which Inter is subject, pursuant to article 6.1(c) of the GDPR. Your express consent is therefore not required.
(f) Taking part in activities, games or competitions related to Inter’s world
Should you request it, the Data, in particular your personal and contact Data and all the Data provided during the activities, games and/or competitions related to Inter and promoted by the latter, from time to time, via the Website (in accordance with the principles of necessity, lawfulness, fairness, proportionality and transparency) shall be processed by Inter to allow your participation in said events.
The legal basis for the processing of Data for the purposes referred to in this paragraph is the fulfilment of a contract or of preliminary contractual provisions adopted following your request, pursuant to article 6.1(b) of the GDPR, and/or the fulfilment of a legal obligation to which Inter is subject, pursuant to article 6.1(c) of the GDPR. Your express consent is therefore not required.
(g) Candidature (sending CVs, presentation letters)
Through the Website, you may apply for possible job positions related to the Inter world. The Data you provide when sending your curriculum vitae and cover letter will be processed by Inter (according to the principles of necessity, lawfulness, correctness, proportionality and transparency) for the following purposes
(i) assessment of your profile, aptitudes and professional skills;
(ii) recruitment and selection of personnel
(iii) planning of selection activities.
When searching for and selecting personnel, Inter shall only need to collect data relating to your membership of protected categories, if any, without any further details; therefore, please do not include any sensitive data (relating, for example, to your state of health, religious beliefs and political opinions) in your curriculum vitae and/or presentation letter, with the warning that if such data is provided, it will be immediately deleted.
Data processing for the purposes set out under this paragraph shall be carried out in order to process your spontaneous application and therefore does not require your express consent pursuant to Article 111-bis of Legislative Decree 196/2003, as amended (hereinafter, Privacy Code) and Article 6.1(b) of the GDPR.
C. PURCHASES
(h) Making purchase orders via the Website
Signing up on the Website and creating a personal account is not a prerequisite for placing a purchase order through the Website. Alternatively, you can place your purchase order as a "guest" on the Website, by directly entering the Data required during the purchase process, as better indicated below. In this case, you will not need to create a personal account.
When you place a purchase order through the Website, you will be asked to enter the following Data: your first name, last name, date of birth, e-mail address (if you are not already registered on the Website), shipping address, and, optionally, your telephone number, as well as data relating to the payment instrument used (such as issuer, number and expiry date of the credit card used for payment) and any other information necessary to properly process your purchase order. We invite you to check which Data are indicated as compulsory and which as optional, it being understood that failure to provide the Data marked as compulsory prevents the purchase order from being carried out; failure to provide the Data marked as optional does not prevent the purchase order from being executed but may make some services and/or some communication channels unavailable.
The aforementioned Data are processed by Inter, according to principles of necessity, lawfulness, correctness, proportionality and transparency for the following purposes (i) to allow you to transmit the purchase order of the desired products through the Website and to proceed with the purchase; (ii) to execute the purchase order of the products and to ship them to the address indicated; to send you all communications relating to the same order (including the sending of service information and to provide you with assistance) (iii) comply with and fulfil the obligations provided for by laws, regulations, EU rules, orders and prescriptions of the competent authorities; (iv) handle complaints and disputes, prevent fraud and unlawful activities, exercise rights and protect the legitimate interests of the Controller such as the right of defence in court. In particular, your telephone number, if issued, will only be used to process requests relating to your order and, if necessary, to notify delivery of products and for no other purpose.
The processing of the Data for the purposes set out under points (i) and (ii) above is carried out in order to execute the purchase order transmitted by you through the Website and to allow you to proceed with the purchase of the products and their delivery to the address indicated by you and does not therefore require your express consent. The legal basis for the processing described above is Article 6.1 (b) of the GDPR.
The processing of Data for the purposes set out in point (iii) is carried out to comply with legal obligations, and therefore does not require your express consent. The legal basis for the processing described above is Article 6.1 (c) of the GDPR.
The processing of Data for the purposes set out in point (iv) is carried out on the basis of the legitimate interest of the Data Controller in protecting its legal position in claims and litigation and therefore does not require your express consent. The legal basis for the processing described above is Article 6.1 (f) of the GDPR.
(i) Ticketing (purchase and issuance of tickets, season tickets and/or passes for the G. Meazza Stadium in Milan) and relevant assistance- footage and photographs inside the San Siro Stadium;
Should you intend to purchase and/or manage, through the Website or other third-party sites related to the Website (e.g. Vivaticket), tickets for "F.C. Internazionale" team matches, season tickets for the whole season, or any other access ticket to the G. Meazza Stadium of Milan, Inter (also during the access to the G. Meazza Stadium of Milan) will process (in accordance with the principles of necessity, lawfulness, correctness, proportionality and transparency) the Data, in particular personal Data, contact Data and all Data required by the governing laws, for the following purposes: (i) issuance and management of tickets, access tickets, season tickets and/or passes for the G. Meazza Stadium of Milan, as well as related assistance; (ii) administrative-accounting purposes arising from the purchase of tickets, season tickets and/or passes for the G. Meazza Stadium of Milan.
The legal basis for the processing of other (so-called "common") Data processed for the purposes set out in (i) and (ii) above is the fulfilment of a contract, or of preliminary contractual provisions adopted following your request, pursuant to Article 6.1(b) of the GDPR, and/or the performance of a legal obligation to which Inter is subject, pursuant to Article 6.1(c) of the GDPR.
It should also be noted that the interior and surrounding areas of the San Siro Stadium in Milan, are subject to video surveillance and video and photographic filming. The aforementioned video surveillance system and footage are aimed at (i) managing the security of the sports facility and the prevention and suppression of crimes during sports events in accordance with the provisions of the Decree of the Ministry of the Interior dated June 6, 2005 (for any further information, please refer to the relevant privacy policy displayed at the San Siro Stadium); (ii) applying the CODE OF CONDUCT AND REGULATIONS FOR ACCESS TO FOOTBALL EVENTS BY INTER and the Rating System established by the F.I.G.C. Protocol of 4 August 2017, by virtue of which the images taken by the video surveillance system may also be used for the purpose of detecting conduct by fans in violation of the provisions of the Code. In particular, the detection of conduct contrary to the values of sport and the public sense of decency, as well as discriminatory conduct of any kind or damaging to the image of the "F.C. Internazionale" team, may lead to the imposition of interdictory or prohibitory measures against the person responsible; and (iii) documenting the sports event and attendance inside the San Siro Stadium in Milan.
The processing of the Data consisting of the images of data subjects attending sports events taking place at the San Siro Stadium in Milan for the purposes referred to in point (i) is carried out to fulfill legal obligations, and therefore does not require your express consent. The legal basis for the processing described above is Article 6.1 letter (c) of the GDPR. The processing of Data for the purposes indicated in points (ii) and (iii) is carried out on the basis of the legitimate interest of the Data Controller respectively to protect its legal position and the collective and category interest in the peaceful execution of sports events in accordance with the provisions set forth in the Protocol of the F.I.G.C. of August 4, 2017 (as to point (ii)) and to document the execution of, and participation in, sports events taking place at the San Siro Stadium in Milan (as to point (iii)). These processing operations therefore do not require your express consent. The legal basis for the processing operations in points (ii) and (iii) is Article 6.1 letter (f) of the GDPR.
(l) Issuance and management of the Inter fan card and Inter Club card
Should you request, through the Website, the issuance of a fan card and/or Inter Club card, Inter will process (in accordance with the principles of necessity, lawfulness, correctness, proportionality and transparency) the Data, in particular personal and contact Data and all the Data required by the governing laws, for the following purposes: (i) issuance and management of the fan card and/or Inter Club card, as well as related assistance; (ii) fulfilment of obligations related to the issuance of the fan card and/or Inter Club card; (iii) administrative and accounting purposes deriving from the issuance of the fan card and/or Inter Club card.
The legal basis for the processing of Data for the purposes referred to in points (i), (ii) and (iii) above is the fulfilment of a contract, or of preliminary contractual provisions adopted following your request, pursuant to Art. 6.1(b) of the GDPR, and/or the fulfilment of a legal obligation to which Inter is subject, pursuant to Art. 6.1(c) of the GDPR. Your express consent is therefore not required.
(m) Accreditation of disabled people for dedicated access to the G. Meazza Stadium in Milan
Through the Website, Inter processes the Data of fans with disabilities who purchase tickets for "F.C. Internazionale" team matches, season tickets, fan cards or Inter Club cards. This paragraph is a supplement to paragraphs (i) and (l) above, with particular reference to the transmission of the sensitive Data of the data subject (i.e. those contained in the disability certificate). Such disclosure is a necessary requirement in order to have access to advantageous conditions when purchasing the services indicated above and to benefit from dedicated services during sports events at the G. Meazza Stadium in Milan. The Data is provided directly by the data subject or the data subject's guardian, for the sole purpose of guaranteeing disabled fans access to the aforementioned advantageous conditions and dedicated services.
The legal basis for the processing of Health Data collected for the purposes referred to in this paragraph is your explicit consent pursuant to Article 9.2(a) of the GDPR. The legal basis for the processing of other (so-called "common") Data is the fulfilment of a contract or of preliminary contractual provisions adopted following your request, pursuant to art. 6.1(b) of the GDPR, and/or the fulfilment of a legal obligation to which Inter is subject, pursuant to art. 6.1(c) of the GDPR.
D. PROMOTIONAL ACTIVITIES
(n) Inter sending marketing and advertising communications concerning products and/or services similar to those already purchased on the Website
If you place an order on the Website, Inter may inform you by e-mail about other products and/or services sold and/or provided by Inter that are similar to those of your previous order.
The processing of Data for the purposes indicated in this paragraph (so-called "soft spam") does not require your prior consent, as it is of legitimate interest for Inter. The legal bases for such processing are therefore Article 6.1(f) of the GDPR and Article 130(4) of the Privacy Code.
You may, however, object, as of now, to the sending of any communication for the purposes indicated in this paragraph, by sending an e-mail to privacy@inter.it or, when sending any communication, by using the "Unsubscribe" functionality that will be made available to you easily and free of charge.
(o) Regularly sending updates and commercial/promotional communications on discounts, novelties, offers, services or Inter-related events
Only with your express consent will Inter process the Data, in particular personal and contact Data (according to principles of necessity, lawfulness, correctness, proportionality and transparency) for sending advertising material and carrying out promotional activities, marketing and/or direct sales of Inter's products and/or services. The processing of Data for the purposes set forth in this paragraph may take place through automated contact tools (through e-mails, sms text messages and/or WhatsApp messages), traditional contact tools (telephone calls with operator and postal mailings) and/or other types of contact tools (through promotional contents shown to you online).
The processing of Data for this purpose necessarily requires your prior consent. The legal basis for such processing is therefore Article 6.1 (a) of the GDPR.
In any case, you may revoke your consent at any time, even partially, e.g. by consenting only to traditional contact tools, by accessing your personal area on the Website, by writing an e-mail to privacy@inter.it and/or, when sending any communication, by using the “Unsubscribe” functionality that will be made available to you easily and free of charge. In addition, 5 years after you have given consent, Inter will offer you the choice of whether to renew or not such consent.
(p) Sending commercial and promotional communications on products and/or services of third-party companies affiliated with Inter
Only with your express consent, will Inter process the Data, in particular personal and contact Data (according to principles of necessity, lawfulness, correctness, proportionality and transparency) for sending advertising material and carrying out promotional activities, marketing and/or direct sales of products and/or services of third-party companies affiliated with Inter.
The processing of Data for the purposes set forth under this paragraph may take place through automated contact tools (through e-mails, sms text messages and/or WhatsApp messages), traditional contact tools (telephone calls with operator and postal mailings) and/or other types of contact tools (through promotional contents shown to you online).
The processing of Data for this purpose necessarily requires your prior consent. The legal basis for such processing is therefore Article 6.1(a) of the GDPR.
In any case, you may revoke your consent at any time, even partially, e.g. by consenting only to traditional contact tools, by accessing your personal area on the Website and/or by writing an e-mail to privacy@inter.it and/or, when sending any communication, by using the “Unsubscribe” functionality that will be made available to you easily and free of charge. In addition, 5 years after you have given consent, Inter will offer you the choice of whether to renew or not such consent.
(q) Profiling
Only with your express consent, the Data will be processed by Inter (in accordance with the principles of necessity, lawfulness, fairness, proportionality and transparency) in order to carry out profiled marketing activities based on the preferences expressed by you while browsing the Website and/or when purchasing products and/or services therein. The profiling activity in question will involve an automated activity in order to place you in a category of subjects with homogeneous characteristics in terms of purchasing preferences on the basis of your previous purchasing experiences, market analysis and research (including surveys) in which you may have participated, your demographic class (in relation, for example, to gender, age and place of residence) and your activities on the Website and on Inter's other sites. The latter are recorded through cookies on these sites (on which see paragraph 7 below and Inter's Cookie Policy where you will find detailed information, including on how to disable cookies).
The processing of Data for this purpose necessarily requires your prior consent. The legal basis for such processing is therefore Article 6.1(a) of the GDPR.
In any case, you may revoke your consent at any time by accessing your personal area on the Website and/or by writing an e-mail to privacy@inter.it. In addition, 5 years after you have given consent, Inter will offer you the choice of whether to renew or not such consent.
(r) Sending customer satisfaction surveys or questionnaires on Inter's products and services
Only with your express consent, the Data, in particular, personal and contact Data, will be processed by Inter (according to principles of necessity, lawfulness, correctness, proportionality and transparency) for sending surveys or questionnaires to survey customer satisfaction in relation to Inter's products and services.
The processing of Data for the purpose referred to in this paragraph may take place through automated contact tools (through e-mails or sms text messages), traditional contact tools (operator phone calls and postal mailings) and/or other types of contact tools (through content shown to you online).
The processing of Data for this purpose necessarily requires your prior consent. The legal basis for such processing is therefore Article 6.1(a) of the GDPR.
In any case, you may revoke your consent at any time, even partially, e.g. by consenting only to traditional contact tools, by accessing your personal area on the Website and/or by writing an e-mail to privacy@inter.it. In addition, 5 years after you have given consent, Inter will offer you the choice of whether to renew or not such consent.
3. Mandatory and optional provision of Data
The provision of the Data for the purposes set forth under letters (a), (b), (c), (d), (e), (f), (g), (h), (i), (l) and (m) of section 2 is necessary respectively for the purposes of registering to the Website, for allowing your correct browsing of the Website, for the purposes of downloading and updating the official Inter App, for the correct functioning of the customer care service and to execute the requests made through contact form, to allow your signing up to events, to allow your application, to allow you to place purchase orders on the Website, for the purposes of ticketing management, for the purposes of issuing and managing the fan card and/or Inter Club card and, finally, for the purposes of the accreditation of disabled persons for access to the G. Meazza Stadium. Meazza Stadium in Milan. Failure to provide such data will make it impossible for Inter to pursue the respective purpose for which it is required to be collected. The provision of data for the purposes set out in letters (n), (o), (p), (q), and (r) of section 2 is, on the other hand, optional, and your refusal to provide such data will make it impossible for Inter to carry out the activities described therein.
4. Scope of data communication and disclosure
The Data you provide will be processed in compliance with the GDPR and, in any case, in such a way as to guarantee the security and confidentiality of the same, to prevent unauthorised disclosure or use, alteration or destruction. The Data will be processed on paper and/or via telematic means, also with the help of electronic and information means. Inter will process your Data in its own technological infrastructure and/or using the technological infrastructure of third-party suppliers appointed as data processors.
The Data may be communicated, exclusively for the purposes indicated in this information notice, to the categories of subjects listed below having their registered offices in the countries of the European Union and acting, as the case may be, as data processors on behalf of Inter or as separate data controllers, in this case providing the Data Subject, under his/her own responsibility, with appropriate information (a) persons, companies, associations or professional firms that provide services and activities of assistance and consultancy to Inter, with particular but not exclusive reference to accounting, administrative, legal, tax and financial matters and (b) companies that provide, on behalf of Inter, certain services related to the Website and to the management and execution of purchase orders through the Website, with particular but not exclusive reference to the analysis of Data, the management of payment services, the management, shipment and delivery of products purchased on the Website, marketing activities, the management of services provided through the Website and their customisation in your favour.
The Data may also be communicated, exclusively for the purposes indicated in this privacy policy, to the categories of subjects listed below, also based in countries outside the European Union (in this case in compliance with the provisions of the last paragraph of section 4 and acting as Data Processors on behalf of the Data Controller or as autonomous Data Controllers) (a) companies belonging to the same corporate group as Inter, with particular but not exclusive reference to activities of Data analysis in aggregate and anonymised form, identity management of user profiles on the Website, profiling and profiled marketing in relation to users who have given their consent to these activities; (b) subjects to whom the right to access the Data is recognised by provisions of law and secondary regulations; (c) third party companies and clients with whom Inter collaborates as a business partner (e.g. for the promotion of goods and services).
You may request a list of the names of the persons to whom your Data is or may be disclosed by writing to the address indicated in paragraph 8 below. Within Inter's organisation, your Data may be processed by the persons in charge of the departments responsible for carrying out individual processing activities.
Your Data will be stored on the servers available to Inter or to the persons in charge located in the European Union. Should it become necessary for technical and/or operational reasons to use subjects located outside the European Union, or should it become necessary to transfer some of the collected Data to technical systems and services managed in the cloud and located outside the European Union area, the processing will be regulated in compliance with the provisions of Chapter V of the GDPR and/or authorised on the basis of specific decisions of the European Union. In particular, Inter shall adopt for the transfer of data to countries outside the European Union the system of standard contractual clauses approved by the European Commission, as well as any additional measures to ensure compliance with the level of personal data protection required by the European Union.
5. Underage users
Inter encourages parents to monitor their children's use of the Internet for safe and filtered use of its content, including through the use of parental control tools. Besides ensuring an online environment suitable for minors, these tools can prevent the disclosure of personal data by children or young people who do not have their parents' consent. With regard to the collection and processing of personal data, the Data Controller does not process personal data of subjects under 14 years of age. Signing up on the Website is, therefore, only permitted to users who have reached the age of majority or to users who are at least 14 years old. Inter, moreover, encourages the signing up on the Website of parents of registered users who are minors: in this way, parents have the opportunity to keep abreast of the initiatives that Inter makes available to their children, and to check their compliance with their own expectations and educational models and paths. Inter urges all users who are under the age of 14 not to communicate their personal data, under any circumstance, and reserves the right to exclude from the Website any user who has concealed their under-age or who has communicated their personal data despite being aged less than 14.
6. Data retention period and data deletion
The Data collected for the processing purpose indicated in letter (a) of section 2 above shall be retained until your account is deleted, or until you expressly request the deletion of the Data, except in case of exceptional need for the Data Controller to keep the Data in order to defend its rights, including in relation to disputes existing at the time of the request or upon indication by public authorities.
The Data collected for the processing purposes respectively indicated in letters (a), (b), (c), (d), (e), (f), (g), (h), (i), (l) and (m) of section 2 above shall be retained for the time necessary for the pursuit of such purposes and thereafter until the expiry of the period prescribed by law for the keeping of accounting records and for the prescription of rights in contractual matters, except in case of exceptional necessity of the Data Controller to keep the Data further in order to defend its rights, also in relation to disputes existing at the time of the request or upon indication of public authorities.
The Data collected for the processing purpose indicated in letter (n) of section 2 above shall be retained until you object or expressly request the deletion of such Data, and in any case no longer than 5 years from the last purchase made, except in the case of exceptional need for the Data Controller to retain the Data to defend its rights, including in relation with disputes existing at the time of the request or upon indication of public authorities.
The Data collected for the processing purposes respectively indicated in letters (o), (p), (q) and (r) of section 2 above shall be kept until the withdrawal of the relevant consent (or the non-renewal after 5 years from the time it was given) or until the express request for deletion of such Data, and in any case no longer than 5 years after their collection, except in case of exceptional necessity of the Controller to keep the Data to defend its rights, also in relation to disputes existing at the time of the request or upon indication of public authorities.
7. Website browsing and cookies
A 'cookie' is a small string of data containing an anonymous unique identifier that is sent to your browser by a web server and is subsequently stored on the hard drive of your computer. The cookie is then re-read and recognised by the website that sent it each time you make a subsequent connection. Thanks to cookies, it can be made easier for the Website to recognise the registered user, for example by avoiding the need for authentication (by means of 'log-in' and 'password') each time the Website is accessed. Cookies can also allow users to personalise their use of the Website by saving their preferred settings. Cookies also record certain information about your Website browsing, which may be used to improve the performance of the Website and to offer personalised services or advertising. For more information about cookies, including how to provide consent and how to deactivate them, we recommend that you view our cookie policy.
8. Data controller contacts
Your personal data processing controller is F.C. Internazionale Milano S.p.A., with registered office based in 20124 Milan, Viale della Liberazione no. 16/18, VAT no. 0423175015. You can contact the Controller at any time by mail or e-mail at privacy@inter.it.
The Controller has appointed, pursuant to art. 37 ff. of the GDPR, its own Data Protection Officer (also known as the "DPO"), domiciled for the purpose at F.C. Internazionale Milano S.p.A. and who may be contacted for matters relating to the processing of your data at privacy@inter.it. By writing to privacy@inter.it you may also exercise the rights indicated under paragraph 9 below.
9. Your rights
We hereby remind you that you have the following rights:
- the right to obtain information in relation to the purposes for which your Data is processed, the period of processing and the persons to whom the Data is disclosed (the so-called data subject's right of access pursuant to Section 15 of the GDPR);
- the right to obtain rectification or integration of inaccurate Data relating to you (the so-called right of rectification under article 16 of the GDPR);
- the right to obtain the deletion of the Data concerning you in the following cases (a) the Data is no longer necessary for the purposes for which it was collected; (b) you have withdrawn your consent to the processing of the Data where it is processed on the basis of your consent; (c) you have objected to the processing of the Data concerning you where it is processed for a legitimate interest of the Data Controller; or (d) the processing of your Data does not comply with the law. However, please note that the retention of Data by the Data Controller is lawful if it is necessary to enable you to comply with a legal obligation or to establish, exercise or defend a right in court (so-called right of erasure under Article 17 of the GDPR);
- the right to obtain that the Data concerning you is only kept without any other use of the Data in the following cases: (a) you contest the accuracy of the Data, for the period necessary to allow us to verify the accuracy of such Data; (b) the processing is unlawful but you still object to the deletion of the Data by the Controller (c) the Data is necessary for the establishment, exercise or defence of legal claims; (d) you object to the processing and are awaiting verification as to whether the legitimate grounds of the Controller for processing prevail over those of the data subject (so-called right to restrict processing, pursuant to Article 18 of the GDPR);
- the right to obtain the cessation of processing in cases where your Data is processed for marketing purposes, including in relation to products or services identical to those already purchased by the Controller and/or where your Data is processed on the basis of a legitimate interest of the Controller in the context of the balancing of interests pursuant to Article 6.1 (f) of the GDPR (so-called right to object to processing, pursuant to Article 21 of the GDPR);
- the right to receive in a commonly used, machine-readable and interoperable format, a copy of the Data provided to Inter, and to transmit such Data to another Data Controller, without Inter hindering it, should the data processing be based on your consent and has been performed via automated means (so-called right to data portability, pursuant to Article 20 of the GDPR).
Should you reckon that your Data is being processed unlawfully, you may file a complaint with the relevant data protection authority. Please note that in Italy you have the right to turn to the national authority (Garante per la protezione dei dati personali) (Piazza Venezia, 11 - 00187, Rome RM) to assert your rights in relation to the processing of your Data.
Furthermore, by writing to the address privacy@inter.it, indicated under paragraph 8 above, you may exercise the rights set forth under this paragraph.