Privacy Policy

(pursuant to Art. 13 of Regulation (EU) 2016/679 (“GDPR”))

One of the primary objectives of S.S.C. Napoli S.p.A. is the protection of users’ privacy, who are invited to read this privacy notice provided pursuant to and for the purposes of Art. 13 of European Regulation 679/2016 on the protection of personal data. This notice describes the methods of processing personal data of users visiting this website. This notice applies only to the website store.sscnapoli.it and not to any other websites that users may access through links contained therein.

1. DATA CONTROLLER

The data controller is S.S.C. Napoli S.p.A. (hereinafter the “Controller” or “SSCN”), with registered office at Via del Maio di Porto, 9 - 80133 Naples, Italy. You may contact the Controller at any time to exercise your rights as described below.

2. TYPES OF DATA PROCESSED

When browsing this website, the following types of data may be processed:

1. Personal identification data: name, surname, or pseudonym associated with

2. Contact data: email address.
   
   

3. PURPOSES AND LEGAL BASIS OF PROCESSING

SSCN processes personal data specifically to achieve the following purposes:

1. To allow registration and management of user accounts. This processing is legally based on the execution of pre-contractual or contractual measures to which the data subject is a party, pursuant to Art. 6(b) GDPR;

2. To allow you to subscribe to the newsletter service. This processing is also legally based on the execution of pre-contractual or contractual measures to which the data subject is a party, pursuant to Art. 6(b) GDPR.

3. Where you have given your consent, to send commercial communications and/or for marketing purposes. The legal basis is therefore consent pursuant to Art. 6(1)(a) GDPR. You may revoke your consent at any time directly via the command in the communication or by writing to dpo@sscn.it
   
   

4. DATA PROTECTION OFFICER

The Data Protection Officer (DPO) can be contacted at: dpo@sscn.it

5. VOLUNTARY PROVISION OF DATA

Providing personal data is optional. Failure to provide such data will not prevent browsing the website, but it will make it impossible to pursue the purposes for which the data are requested.

6. METHODS OF DATA PROCESSING AND STORAGE

Personal data are processed by authorized personnel, including through the use of IT tools, in compliance with the GDPR, respecting principles of lawfulness, fairness, relevance, and non-excessiveness. Specific security measures are observed to prevent unauthorized access, loss, or unlawful or improper use. Regarding data retention:

1. For purpose 3.a, data will be retained for the duration of your account.

2. For purpose 3.b, data will be retained until you unsubscribe from the newsletter service.

3. For purpose 3.c, data will be retained until consent is withdrawn and in any case no longer than 24 months from your last interaction.
   
   

7. PLACE OF DATA PROCESSING

Processing related to the services mainly takes place at the Controller’s registered office, and always within the territory of the European Union. Processing is carried out solely by authorized technical personnel. If necessary, data related to the service may be processed by personnel of the company responsible for maintaining the technological aspects of the website (processor under Art. 28 GDPR). Except as stated in this notice, no data is shared or disseminated.

8. RIGHTS OF DATA SUBJECTS

With regard to the processing described in this Privacy Policy, you, as a data subject, may exercise the rights provided under Articles 15 to 21 GDPR, including:

• Right of access (Art. 15 GDPR): to obtain confirmation of whether your personal data is being processed and, if so, access to your personal data, including a copy.

• Right to rectification (Art. 16 GDPR): to obtain, without undue delay, the correction of inaccurate personal data and/or the completion of incomplete personal data.

• Right to erasure (right to be forgotten, Art. 17 GDPR): to obtain, without undue delay, the deletion of personal data concerning you.

• Right to restriction of processing (Art. 18 GDPR): to obtain limitation of processing when:

1. you contest the accuracy of the data, for the time necessary for the controller to verify its accuracy;

2. the processing is unlawful and you oppose deletion and request restriction instead;

3. the data are needed for the establishment, exercise, or defense of legal claims;

4. you have objected to processing under Art. 21 GDPR, pending verification of legitimate grounds of the controller versus yours.

• Right to data portability (Art. 20 GDPR): to receive your personal data in a structured, commonly used, machine-readable format and transmit it to another controller, where processing is based on consent and automated means. You also have the right to have your data transmitted directly to another controller if technically feasible.

• Right to lodge a complaint (Art. 77 GDPR): You have the right to lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali), Piazza Venezia 11, 00187 Rome, email: rpd@gpdp.it
  

These rights may be exercised by contacting the Controller or the DPO at: dpo@sscn.it. Exercising your rights is free pursuant to Art. 12 GDPR. However, for manifestly unfounded or excessive requests, the Controller may charge a reasonable administrative fee or refuse to comply. Requests should be addressed to the Data Controller or the Data Protection Officer at: dpo@sscn.it.