Privacy
Information provided pursuant to Articles 13 and 14 of the EU General Data Protection Regulation no. 2016/679 (GDPR) and Italian Legislative Decree 196/2003, as amended by Legislative Decree 101/2018.
This page explains what data the website collects, why it is collected, who it is shared with and how long it is kept. It applies only to this website and not to other websites reachable through links.
Data controller
The data controller is the Associazione Sportiva Dilettantistica e Culturale Tennis Club Lombardo, with registered office in Via G. Sismondi 8, 20133 Milan, Italy, VAT no. 11185260152.
For any request concerning your data you can write to info@tennisclublombardo.it.
Purposes of processing
The user’s personal data are processed for the following purposes:
- provision of the services requested by the user;
- purposes laid down in the association’s Statute;
- compliance with obligations under laws or regulations to which the controller is subject;
- organisation of teaching, training and recreational activities.
Browsing data
The computer systems and software that run this website collect, in the course of their normal operation, certain data whose transmission is implicit in the use of Internet communication protocols: IP address, browser type and version, operating system and device type, date and time of the visit, referring page and pages visited, name of the connection provider.
This data is used to deliver the website correctly, to keep it secure and to obtain statistical information on its operation. The IP address is personal data and is treated as such: it is used to detect unauthorised access attempts and automated attacks, and it is not combined with other information to identify visitors.
Legal basis: the controller’s legitimate interest in keeping the website working and secure (Article 6(1)(f) GDPR).
Data sent through contact forms
The forms on the website, built with Contact Form 7, collect the data needed to reply to contact requests.
This data is used solely to reply to the request received. It is not used for marketing, and it is never transferred or sold to third parties under any circumstances. Messages are sent by email to the controller and are also stored in the website database through the Advanced CF7 DB plugin, so that requests remain available over time; the CP Pulizia Dati Form plugin deletes them automatically after 24 months.
Legal basis: steps taken at the request of the data subject prior to entering into a contract (Article 6(1)(b) GDPR).
Protection against automated messages
To prevent the forms from being used by automated systems, the website uses two services:
- Google reCAPTCHA v3, which analyses browsing behaviour to tell a person from a program. The service sends Google the IP address and some information about the interaction with the page, and it is activated only when the form appears on the screen. If you leave the page without approaching the form, no data is sent to Google.
- Akismet, which checks submitted messages against a database of spam reports. The service receives the name, email address and IP address of the sender.
Legal basis: the controller’s legitimate interest in protecting the website from abuse and automated submissions.
Visitor statistics
The website uses Google Analytics 4 to understand how many people visit it, where they come from and which pages they read. The tool is activated only after you have given your consent through the cookie banner: if you do not accept it, no statistics cookie is set and no data is sent to Google.
Legal basis: your consent, which can be withdrawn at any time (Article 6(1)(a) GDPR).
Consent log
Every choice made on the cookie banner is recorded in an archive within the website, which stores the date and time of acceptance and the IP address in anonymised form, that is, without its last part and therefore not traceable to a single device.
The log is used to demonstrate, if required, that consent was collected correctly. The data is not shared with anyone and remains on the server hosting the website.
Legal basis: the controller’s obligation to be able to demonstrate the consent given (Article 7(1) GDPR).
Who the data is shared with
In addition to the controller, the data may be accessed by the providers of technical services used by the website, acting as processors or as independent controllers:
- Aruba S.p.A., Via San Clemente 53, 24036 Ponte San Pietro (BG), Italy: provides the web space hosting the website and keeps the server logs (privacy policy).
- Dropbox: receives the website backups, which include the database (privacy policy).
- Google: provides reCAPTCHA, Google Analytics and Google Fonts (privacy policy).
- Automattic: runs the Akismet anti-spam service (privacy policy).
- ManageWP: provides remote technical management and maintenance of the website, with access to the installation and the database (privacy policy).
Data may also be disclosed to the judicial authorities, only in the cases provided for by law and upon a legitimate request.
Transfers outside the European Union
Some of the providers listed above are based in the United States, in particular Google, Automattic, Dropbox and ManageWP. Using their services therefore involves a transfer of personal data outside the European Economic Area.
The transfer is based on the European Commission adequacy decision of 10 July 2023 on the EU-US Data Privacy Framework for the providers that have joined it, and on the standard contractual clauses approved by the European Commission in the other cases.
The fonts used by the website are requested from Google Fonts servers, which receive the visitor’s IP address.
How long data is kept
Data are kept for the time strictly necessary for the purposes stated and in any case not beyond 10 years from collection for compliance with legal obligations, and in any event not beyond the limitation periods set by law. In particular:
- Browsing data and server logs: for the time technically necessary for security and diagnostics, according to the hosting provider’s settings.
- Security logs: for the period set in the protection system, in any case limited in time.
- Messages received through the forms: messages stored in the website database are deleted automatically after 24 months.
- Google Analytics statistics: up to a maximum of fourteen months, according to the property settings.
- Consent log: twelve months from recording, with automatic daily deletion of the oldest entries.
- Backups: contain the data existing when they are created and are replaced by later backups according to the rotation cycle set.
When the period expires the data is deleted, unless it must be kept to comply with a legal obligation or to defend a right in court.
How data is protected
We also inform you that, as provided for by Article 5 GDPR 2016/679, personal data relating to you will be processed lawfully, fairly and transparently; collected for specified, explicit and legitimate purposes and not further processed in a manner incompatible with those purposes; adequate, relevant and limited to what is necessary in relation to the purposes for which they are processed.
Data is processed with IT tools and with methods strictly related to the purposes stated. Data sent through the website is encrypted with the HTTPS protocol. Access to the administration area is protected by personal credentials and by a security system that limits unauthorised access attempts.
The website is protected by the Wordfence security system, which records IP addresses and access attempts (privacy policy).
No system is absolutely secure, however, and the total inviolability of information transmitted over the Internet cannot be guaranteed.
Your rights
As data subjects you may exercise the rights provided for by Articles 15 to 22 GDPR, and in particular:
- obtain confirmation that processing is taking place and access your data;
- ask for it to be corrected or updated if inaccurate or incomplete;
- ask for it to be erased;
- ask for processing to be restricted;
- receive the data in a readable format and transfer it to another controller;
- object to processing based on legitimate interest;
- withdraw the consent given at any time, without affecting the lawfulness of processing carried out before.
To exercise these rights, simply write to info@tennisclublombardo.it. Requests will be handled without undue delay and in any case within one month; only in particularly complex cases or because of the number of requests may this period be extended by a further two months.
If you believe the processing breaches the law, you may lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali).
Cookie policy
Cookies are small text files that websites save on the visitor’s device and that the browser reads back on each later visit. This section follows the guidelines of the Italian Data Protection Authority of 10 June 2021.
Technical cookies
They are needed for the website to work and do not require consent. On this website they are used to remember your choice on the cookie banner, to manage the browsing session and for security functions. Some expire when the browser is closed, others last longer, as shown in the table.
| Name | Origin | Duration | Purpose |
|---|---|---|---|
| cookie_notice_accepted | tennisclublombardo.it | 6 months | Remembers the choice made on the cookie banner |
| PHPSESSID | tennisclublombardo.it | Session | Keeps the browsing session, expires when the browser is closed |
| _GRECAPTCHA | google.com | 6 months | Tells people from automated systems filling in the forms (reCAPTCHA) |
| wfwaf-authcookie-… | tennisclublombardo.it | 1 year | Recognises legitimate requests for the Wordfence security system |
Statistics cookies
They are set only if you accept the banner and come from Google Analytics 4. They are used to count visits and understand how the website is used. If you reject the banner or make no choice, these cookies are not set and Google Analytics is not loaded.
| Name | Origin | Duration | Purpose |
|---|---|---|---|
| _ga | tennisclublombardo.it | 2 years | Assigns an anonymous identifier to distinguish visitors |
| _ga_P04C2F2X1L | tennisclublombardo.it | 2 years | Keeps the session state for the website’s Analytics property |
Third-party services
Google reCAPTCHA, as described above, is a technical security component loaded from Google servers.
How to withdraw consent
You can change your choice at any time using the consent withdrawal link at the bottom of this page.
How to manage cookies from the browser
Every browser lets you block or delete cookies already on the device. Please note that disabling technical cookies may prevent some website functions from working properly. Instructions are available on the pages of Mozilla Firefox, Google Chrome, Microsoft Edge, Apple Safari and Opera.
Copyright
All content on this website, texts, graphics and photographs, is the property of Tennis Club Lombardo, unless otherwise stated.
Any third-party content, such as logos and images belonging to others, remains the property of the respective owners. Anyone who believes that content has been published in breach of their rights may report it to info@tennisclublombardo.it and it will be removed.
Terms of use
This website is governed by the following Terms of Use; if you do NOT accept them, please do NOT use the website.
Liability
In no event shall www.tennisclublombardo.it be liable for any direct, indirect, incidental, special or consequential damages, or damages of any kind, including, for example, loss of profits, revenue or the like, arising from the use of or inability to use the materials available on this website or any linked website, including, without limitation, damages for loss of data, work stoppage, accuracy of results or computer malfunction.
www.tennisclublombardo.it EXPRESSLY disclaims any liability for damages of any kind caused by, arising from or in any way connected with:
- errors or omissions in the content, including inaccuracies and mistakes;
- content of third-party websites linked directly or indirectly;
- unavailability of the website or any of its components;
- use of this website by third parties for illegal purposes;
- use of any information on the website.
Indemnity
The user agrees to hold www.tennisclublombardo.it harmless from any claim for damages arising from the use of the website.
Accuracy and completeness of information
www.tennisclublombardo.it endeavours to ensure that the information on this website is accurate and reliable as far as possible; however, it gives no guarantee as to the correctness and reliability of such information and accepts no liability for any damage caused by errors or omissions in the content.
Changes
www.tennisclublombardo.it periodically reviews the information, services and resources on this website and reserves the right to make changes without any obligation to inform users. It may, at its sole discretion, change the content of this website at any time, including texts, photographs, graphics and links to other websites.
Prohibited use
The user agrees to use www.tennisclublombardo.it and the information it contains in accordance with the law; any illegal use or action is expressly prohibited by these terms of use.
Links to third parties
www.tennisclublombardo.it may contain links to other websites owned and operated by third parties and not maintained or managed by this website, which is therefore not responsible for their content and gives no guarantee as to the content or accuracy of the material on such websites. Viewing such third-party websites is entirely at your own risk.
Jurisdiction and venue
Civil disputes are subject to these Terms of Use and to Italian law.
By using this website, the user accepts the jurisdiction of the court of Milan, Italy, for any action arising.
Updates to this policy
This policy may be updated to reflect changes in the law or in the services used by the website. The version published on this page is always the one in force.
Policy updated on 1 October 2026.
Withdraw cookie consent