Privacy Policy
In force from 25 October 2026
This is an English-language translation of the Italian privacy notice, provided for the convenience of non-Italian-speaking users. The Italian version is the legally binding reference.
1. Who we are
This notice covers the personal data processed by A.S.D. Frenzi, an Italian amateur sports association with registered office at Via Francesco Renda 53, 91011 Alcamo (TP), Italy, tax code and VAT number 02975900818, represented by its President Francesco Cruciata («Frenzi», «we»). Frenzi is the Data Controller for the data collected through the website, the members' area and the association's activities.
For any privacy request you can write to privacy@frenziclub.com. Given the size and type of activity of the association, appointing a Data Protection Officer is not mandatory (Article 37 GDPR).
2. What data we process
The data we process depends on your relationship with us. We group it into the following categories, referred to in the tables of section 3:
- Identification data: first and last name, date and place of birth, sex, tax code, identity document details, account credentials.
- Contact data: email address, phone number, home address.
- Form data: the information you enter in forms and in your profile, such as sports preferences, availability and size for association merchandise, and the consents given with date and time.
- Participation data: bookings for sessions, courses and passes, and attendance recorded at check-in.
- Images: your profile photo, if you choose to upload one, and group photos and videos taken during activities.
- Payment data: amount, description, date and method of payments. Card data is processed only by the payment provider: we only see the outcome of the transaction.
- Health data: the sports medical certificate required to take part in activities. It is kept in a restricted archive, accessible only to those who need it for their role.
- Device and browsing data: IP address, device and browser type, pages visited, referring site or ad, and cookie identifiers. Statistics and marketing cookies are activated only with your consent.
- Data of other people: the data of a person other than you that you provide, for example that of the parent giving consent for an underage member.
You are not required to provide your data. Without some of it, however, we cannot create your account, book you into sessions or register your membership.
3. Why we process data
Purposes, legal bases and retention periods depend on the relationship. Each profile also includes the ones before it: a member, for example, is also a website visitor and a participant.
3.1 If you visit the website or write to us
| Purpose | Data | Legal basis | Retention |
|---|---|---|---|
| Answering your requests, sent by email, through the website forms or by other means | Identification, contact, form data | Your request (Art. 6.1.b GDPR) | As long as needed to handle the request |
| Sending you the newsletter and promotional communications | Identification, contact data | Consent (Art. 6.1.a GDPR; Art. 130 Italian Privacy Code) | Until consent is withdrawn |
| Measuring how the website is used, to improve it | Device and browsing data | Consent (Art. 6.1.a GDPR; Art. 122 Italian Privacy Code) | The cookie duration stated in the Cookie Policy |
| Measuring the results of our advertising campaigns, including by linking them to payments | Device and browsing data; if you make a purchase, also identification data in encrypted form and payment data | Consent (Art. 6.1.a GDPR; Art. 122 Italian Privacy Code) | The cookie duration stated in the Cookie Policy; payment data as for the accounts |
| Counting website visits in aggregate form, without cookies | Device data, in aggregate form | Legitimate interest (Art. 6.1.f GDPR) | No data identifying you is retained |
3.2 If you create an account and take part in sessions
| Purpose | Data | Legal basis | Retention |
|---|---|---|---|
| Creating and managing your account and access to the members' area | Identification, contact data | Performance of the requested service (Art. 6.1.b GDPR) | Until the account is deleted; without membership, at most 24 months after the last activity |
| Managing bookings for sessions, courses and passes, and related support | Identification, contact, form, participation data | Performance of the requested service (Art. 6.1.b GDPR) | Same as the account |
| Sending you service communications, such as confirmations, reminders and notices | Identification, contact data | Performance of the requested service (Art. 6.1.b GDPR) | Same as the account |
| Suggesting the sessions that suit you and planning activities | Form, participation data | Performance of the requested service (Art. 6.1.b GDPR) | Until you change or delete the data in your profile |
| Handling payments, issuing receipts and keeping the accounts | Identification, payment data | Legal obligation (Art. 6.1.c GDPR; Art. 2220 Italian Civil Code) | 10 years |
| Documenting the association's activities with group photos and videos | Images | Legitimate interest (Art. 6.1.f GDPR) | Historical archive of the association; removed on your request |
| Using images in which you are recognisable for promotional purposes, for example on the website and social media | Images | Consent (Art. 6.1.a GDPR) | Until consent is withdrawn |
3.3 If you become a member
| Purpose | Data | Legal basis | Retention |
|---|---|---|---|
| Managing your membership and the association relationship | Identification, contact, form, participation data | Performance of the membership relationship (Art. 6.1.b GDPR) | Duration of the membership and the following 24 months |
| Registering the membership with the sports promotion body and providing insurance cover | Identification, contact data | Performance of the membership relationship (Art. 6.1.b GDPR) | Duration of the membership and the following 24 months |
| Verifying fitness for sport | Health data | Explicit and separate consent (Art. 9.2.a GDPR) | Validity of the certificate, and in any case no longer than the membership |
| Recognising you at the entrance of members-only sessions | Images (profile photo) | Legitimate interest (Art. 6.1.f GDPR) | Until you remove it from your profile, and in any case no longer than the membership data |
| Issuing the membership form and meeting administrative and accounting obligations | Identification, contact, payment data | Legal obligation (Art. 6.1.c GDPR; Art. 2220 Italian Civil Code) | 10 years |
| Letting you use the club's agreements with partners | Identification, participation data | Performance of the membership relationship (Art. 6.1.b GDPR) | Duration of the membership and the following 24 months |
| Publishing the reviews you choose to write, with your first name and the initial of your last name | Identification, form data | Your request (Art. 6.1.b GDPR) | Until you delete it, and in any case no longer than the membership data |
| Keeping proof of consents and signatures | Identification, form data | Legal obligation (Arts. 5.2 and 7.1 GDPR) | 10 years (Art. 2946 Italian Civil Code) |
3.4 In all cases
We also process the data needed to meet legal obligations, respond to requests from the Authorities, protect the security of the website and services, prevent abuse and establish or defend our rights. This processing is based on legal obligations and on our legitimate interest, and lasts as long as necessary, in any case no longer than 10 years after the end of the relationship. We do not take decisions based solely on automated processing.
4. Who we share data with
Data is shared only with those who need it for the purposes above:
- Authorised personnel: members of the Board, staff and collaborators of the association, each only for the data needed for their role and bound by confidentiality.
- Service providers: the companies providing website hosting, the database, email delivery and statistics tools. They act as data processors, following our instructions.
- Payment providers and advertising platforms: they process data as independent controllers, under their own privacy notices.
- Partner businesses: they receive only the data needed to recognise you when you use an agreement.
- Sports bodies and insurance: the sports promotion body the association is affiliated with, sports federations and insurance companies, for membership registration and members' cover. They process data as independent controllers.
- Advisers and professionals: the accountant and legal advisers, for administrative and tax obligations and to protect the association's rights.
- Authorities: when disclosure is required by law.
We do not sell your data. The up-to-date list of providers is available on request at privacy@frenziclub.com.
5. Where data is kept
Members' data, such as personal details, certificates and payments, is kept within the European Union. Some services we use for the website, visit statistics and advertising belong to companies based in the United States, which may process browsing data there. These transfers take place with the safeguards provided by the GDPR.
6. Your rights
At any time you can ask us to:
- access your data and receive a copy of the data we hold (Art. 15 GDPR);
- correct inaccurate or incomplete data (Art. 16 GDPR);
- delete your data, except what we must keep by law (Art. 17 GDPR);
- restrict the processing of your data (Art. 18 GDPR);
- receive your data in a structured format or have it transmitted to another controller (Art. 20 GDPR);
- object to processing based on our legitimate interest (Art. 21 GDPR);
- withdraw a consent you gave, without affecting processing carried out before the withdrawal (Art. 7.3 GDPR).
You can also withdraw consent to promotional communications through the link in every email, and change your cookie choice through the «Manage cookies» link at the bottom of every page of the website.
To exercise your rights write to privacy@frenziclub.com, to the certified email address frenziasd@pec.it or by letter to the association's registered office. We reply within one month, extendable by two further months for complex requests (Art. 12.3 GDPR). To handle the request we may ask you for information needed to identify you.
You also have the right to lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali, Piazza Venezia 11, 00187 Rome, www.garanteprivacy.it).
7. Minors
Under the age of 14, consent to processing, including membership processing, is given by whoever holds parental responsibility (Art. 2-quinquies Italian Privacy Code). If we learn that an account was created by a person under 14 without this consent, the account is suspended until the situation is regularised.
8. Cookies
The website uses technical cookies, needed for it to work, and, only with your consent, statistics and marketing cookies. You make your choice in the banner on your first visit and can change it at any time through the «Manage cookies» link. The full list of cookies is in the Cookie Policy, which is part of this notice.
9. Correct use of other people's data
If you give us the data of another person, for example that of a parent or of someone you invite to a session, you must be authorised to do so and inform them of this notice. In these cases you are responsible for the data you provided and you hold the association harmless from any resulting claim or request for damages.
Photos and videos you take during activities are your responsibility: for those images you are the data controller, not the association. Please respect other people, do not film in places where privacy is expected, such as changing rooms, and ask for the consent of anyone pictured before publishing an image.
10. What this notice does not cover
This notice does not cover processing related to the relationship with the association's collaborators, coaches and volunteers, who receive a dedicated notice. Nor does it cover processing carried out as independent controllers by other parties, such as commercial partners, social media platforms and external websites reachable from ours: their own notices apply.
11. Changes to this notice
This notice is in force from the date shown at the top of the document and may be updated for new activities, new services or regulatory changes. In case of substantial changes we will inform everyone who has an account.