Privacy policy

The data controller is PRESA B+ APS Associazione Sportiva Dilettantistica, tax code 91465560372, VAT number 04360101200, with registered office at Via Emilio Zago 7/F, 40128 Bologna (BO), Italy.

For privacy requests, you can write to presabpiu@gmail.com.

AICS membership form: to handle your membership request we process the data you enter in the form, i.e. first name, surname, sex, date of birth, citizenship and country, type of place, country and town or locality of birth, availability and any Italian tax code (codice fiscale), residence type and country, street address, postal code, town or locality, province or region, email and phone number. We do not ask for foreign tax identifiers. As proof of consent we also record acceptance of the privacy policy and of the statute/rules, any image consent, the version of the accepted documents, the date/time, the IP address (in protected form) and the browser used to submit.

After payment is confirmed, to create the operational profile in the gym management system we share with Gestione Sportiva only first name, surname, email, mobile number, sex, town and province of birth and the positive privacy-consent flag. The card and identity-document identifiers technically required by the management system are sent as provisional values and do not come from the data subject’s documents.

Fee payment: if you choose to pay online, the payment is handled by the provider SumUp through an external secure page. Card data is processed directly by SumUp and never passes through or is stored on our systems; we only record the payment outcome (paid/unpaid), the date and a transaction identifier.

Contacts: if you contact us by email, phone, WhatsApp or social media, we process the data you choose to share, such as your name, contact details, message content and information needed to reply.

When browsing the website, technical data required for operation may be processed, such as IP address, request date and time, visited page, browser, operating system and security logs generated by hosting/CDN providers.

The website includes images of the gym, spaces and community. Photographs showing identifiable people are published for informational and promotional purposes of the association on the basis of consent or another applicable legal basis.

The legal bases are: performance of the membership relationship and of steps requested by the data subject (membership and payment), compliance with legal, tax and accounting obligations, the controller’s legitimate interest for website security and operation, and consent for purposes that require it (e.g. publication of images).

The website is hosted through Cloudflare Pages/Cloudflare, which may process technical data and logs needed for delivery, security and availability of the website. Membership form data is stored in a Cloudflare database (D1) on behalf of the controller.

Once payment is confirmed, only the data needed to create the operational profile is sent by API to the Gestione Sportiva service provided by Azienda Informatica Genova. The access key is stored exclusively on the server.

Online payments are handled by SumUp (SumUp Limited / SumUp Payments), acting as an independent controller for payment data under its own privacy policy. The payment page is hosted by SumUp: card data does not pass through our systems.

Pages load Google Fonts from Google servers. According to Google Fonts, the service does not set cookies, but Google may receive technical data such as IP address, requested URL, user agent and referrer.

The contact section loads an interactive map through Leaflet from unpkg.com and map tiles from CARTO basemaps. These services may receive technical data connected to the map request.

Links to Google Maps, WhatsApp, Instagram, Facebook and other external websites lead to third-party platforms. After clicking, data processing is governed by the privacy policies of those platforms.

Google Search Console may be used to verify site ownership and monitor indexing. The current code does not include Google Analytics, Google Tag Manager, Meta Pixel or similar profiling tools.

The public website does not use profiling, advertising or analytics cookies. Therefore, no consent banner is currently provided for marketing or non-technical statistics purposes.

Technical tools necessary for browsing, security or displaying content requested by the user may be used, including logs or technical mechanisms from hosting/CDN and map services. Reserved administration areas, including Keystatic and the AICS membership dashboard, may use technical session cookies for authentication and security.

Membership form data and payment data are kept for the duration of the membership relationship and, after it ends, for the time required by legal, tax and insurance obligations (normally up to 10 years for accounting records) or needed to protect rights.

Requests sent by email, phone, WhatsApp or social media are kept for the time needed to reply and manage the relationship with the requester, normally no longer than 24 months, unless legal obligations or rights protection require a longer period.

Technical logs are kept by providers for periods compatible with security, maintenance and legal obligations. For specific retention periods of third-party services, please refer to their privacy policies.

For membership and insurance cover, the necessary data is shared with AICS (Associazione Italiana Cultura Sport), the sports promotion body the association is affiliated with, and with any insurance company connected to the membership card.

Other data may be processed by technical providers (e.g. Cloudflare for hosting and database and Gestione Sportiva for the gym profile), the payment provider (SumUp), accounting consultants, communication platforms and people authorised by the controller, within the limits needed for the purposes described above.

Some providers may be located or process data outside the European Economic Area. Where required, transfers take place under the safeguards provided by applicable law.

You may request access, rectification, erasure, restriction, data portability, objection to processing and withdrawal of consent where processing is based on consent.

To exercise your rights, write to presabpiu@gmail.com. You also have the right to lodge a complaint with the Italian Data Protection Authority.

This policy may be updated if the website, services used or applicable law change. The version published on this page is the current one.

This English version is provided for convenience. In case of inconsistencies, the Italian version prevails.