Privacy Policy

1. Data Controller

2. Categories of Data Collected

During registration and participation in the event, we collect the following categories of data:

• Personal data: first name, last name, email, phone, tax ID, date of birth, gender
• Health data: competitive sports medical certificate, swimming times (400m, 800m, 1500m)
• Financial data: payment information processed through Stripe (we do not directly store card details)
• Identity documents: valid ID document and, for minors, parents' documents

3. Purposes of Processing

Personal data is processed for the following purposes:

• Management of event registration and participation
• Payment processing through Stripe
• Event‑related communications (confirmations, updates, logistical information)
• Compliance with legal obligations (tax, accounting, insurance)
• Participant safety management (medical certificate verification, health assistance)

4. Legal Basis for Processing

Data processing is carried out based on the following legal bases under Article 6 GDPR:

• Contract performance: registration and participation in the event (Art. 6.1.b GDPR)
• Consent: publication of event photos/videos, newsletter subscription (Art. 6.1.a GDPR)
• Legal obligation: retention of tax and accounting data (Art. 6.1.c GDPR)
• Legitimate interest: fraud prevention, safety management (Art. 6.1.f GDPR)

5. Data Recipients

Personal data may be shared with the following recipients:

• Stripe: for secure online payment processing
• Resend: for sending transactional emails (confirmations, updates)
• Neon: for database hosting (secure cloud infrastructure)
• Vercel: for website and application hosting

6. International Transfers

7. Retention Period

Personal data is retained for the following periods:

• Registration data and documents: 5 years from the event date
• Tax and accounting data: 10 years (legal obligation)
• Account data: until deletion request

8. Data Subject Rights

Under Articles 15‑22 of the GDPR, you have the right to:

• Access: obtain confirmation of the existence of your data and receive a copy
• Rectification: correct inaccurate or incomplete data
• Erasure: request deletion of data (right to be forgotten)
• Portability: receive data in a structured format and transfer it to another controller
• Restriction: limit processing in certain circumstances
• Objection: object to processing based on legitimate interest

You also have the right to lodge a complaint with the Italian Data Protection Authority (www.garanteprivacy.it).

9. Cookies

10. Privacy Policy Updates

11. Contact

To exercise your rights or for any privacy‑related requests, you can contact us at: