PRIVACY POLICY - www.technogymschool.com
Pursuant to Regulation (EU) 2016/679 (GDPR)This Privacy Policy explains what personal data is collected, for what purposes, and how it is processed when you visit and use www.technogymschool.com (hereinafter, the "Site”).Summary
1. Data Controller2. Data Protection Officer (DPO)3. Scope of Application4. Why Do We Process Your Data, What Is the Legal Basis, and What Data Do We Process?5. To Whom Do We Disclose Personal Data?6. Transfers Outside the EU7. How Long Do We Retain Personal Data?8. Minors9. Data Subject Rights
1. Data controller
The data controller for personal data collected through the Site is Technogym S.p.A., with registered office at Via Calcinaro 2861, 47521 Cesena (FC), Italy (hereinafter, also referred to as the "Controller”).You may contact the Controller by post, addressed to Technogym S.p.A., Via Calcinaro 2861, 47521 Cesena (FC), Italy, for the attention of the Data Protection Officer, or by email at dpo@technogym.com.2. Data Protection Officer (DPO).
Technogym has appointed a Data Protection Officer (“DPO”) who may be contacted at dpo@technogym.com.To learn about your rights as a data subject, please refer to the "Data Subject Rights" section below.3. Scope of Application
This Privacy Policy applies to the processing of personal data carried out by the Controller through the Site www.technogymschool.com, as well as to the processing carried out through the same Site when accessed via QR codes distributed at in-person events and exhibitions (hereinafter, "Events"). Through the Site, users may also access Technogym's official website; for processing activities conducted through that website, please refer to the relevant privacy policy available at https://www.technogym.com/en-INT/privacy-policy/.This Privacy Policy does not apply to the processing of personal data carried out by third parties acting as independent data controllers, even where such parties may be reached via links, social buttons, or integrated content available on the Site.By way of example and without limitation, this category includes:social networking platforms (e.g. Instagram, Facebook, TikTok, LinkedIn);providers of video-sharing or multimedia content services;other external platforms or services accessible via links from the Site.Any interaction by the user with such platforms (for example, by clicking on social buttons or viewing embedded content) entails the processing of personal data by the respective data controllers, in accordance with the privacy policies and terms of use independently established by each of them.The Controller exercises no control over processing activities carried out by such third parties and therefore invites users to review their respective privacy policies.4. Why Do We Process Your Data, What Is the Legal Basis, and What Data Do We Process?
The following sets out in a transparent manner the individual processing activities carried out through the Site, specifying for each: the user's action, the purposes of the processing, the categories of data processed, and the applicable legal basis under the GDPR.| Action | Purpose | Data Collected | Legal Basis |
| Submission of a form on the Site to receive further information — including via QR codes distributed at in-person Events | We collect your data in order to: respond to your enquiries; keep you informed about the opening of enrolment periods, including by telephone; and provide you with pre-contractual information. | First name, last name, gender, age, country, city, postcode, email address, telephone number, and any additional data voluntarily provided by the User in the 'your request' field. | Performance of a contract or pre-contractual measures at the request of the data subject.Art. 6(1)(b) GDPR. |
| Submission of an application form on the Site to apply for enrolment in the Technogym Business School | In the dedicated enrolment application section, you may enter information you wish to provide in support of your application. We will use this data to: respond to your enquiries; contact you by telephone and/or email; provide pre-contractual information; and manage your application and the selection process. | First name, last name, gender, age, country, city, postcode, email address, telephone number, educational qualifications, and any other information you freely choose to share in support of your application. | Performance of a contract or pre-contractual measures at the request of the data subject.Art. 6(1)(b) GDPR. |
| Participation in Technogym's direct marketing activities | Subject to your explicit consent, we process your data to send you direct marketing and promotional communications.For further information on processing activities carried out by Technogym for marketing purposes, please refer to the relevant privacy policy available on Technogym's official website: https://www.technogym.com/en-INT/privacy-policy/ | First name, last name, age, email address, city, country. | Consent of the data subject.Art. 6(1)(a) GDPR. |
| Compliance with legal obligations and/or orders of public authorities | We process personal data in order to fulfil any obligations arising from applicable law or from orders of competent authorities, including accounting and tax obligations. | All data collected through the Site. | Compliance with a legal obligation to which the Controller is subject.Art. 6(1)(c) GDPR. |
| Soft spam | Sending promotional communications by email regarding products or services similar to the Technogym Business School. Users may object to receiving such communications at any time by clicking the opt-out link included in each email. | First name, last name, email address. | Legitimate interests of the Controller.Art. 6(1)(f) GDPR. |
| Browsing the Site | We analyse how the Site is used for statistical purposes and to improve its content, functionality, and performance, including through analytics tools such as Google Analytics 4 (GA4). | Browsing data, IP address, device and browser information, Site usage events. | Consent of the data subject, expressed via the cookie banner and the OneTrust CMP.Art. 6(1)(a) GDPR. |
| Interaction with the Site | We analyse user behaviour on the Site (e.g. mouse movements, scrolling, interactions) in order to improve the user experience and the effectiveness of content, including through tools such as Mouseflow and Sleeknote. | Browsing data, interaction data with the Site, device technical data. | Consent of the data subject.Art. 6(1)(a) GDPR. |
| Use of the Site | To ensure system security and to prevent unauthorised access, fraud, and misuse of the Site and the services offered. | Access logs, IP address, device technical data. | Legitimate interests of the Controller in ensuring the security of its systems and the information processed.Art. 6(1)(f) GDPR. |
5. To Whom Do We Disclose Personal Data?
Your personal data may be disclosed to:- technology vendors and hosting providers;
- web agencies and IT service providers;
- Technogym group companies;
- competent authorities, where required by applicable law.
6. Transfers Outside the EU
Any transfer of personal data to third parties established outside the European Union is carried out in compliance with the requirements of Regulation (EU) 2016/679 (GDPR), by adopting appropriate safeguards to legitimise the transfer to third countries.7. How Long Do We Retain Personal Data?
Personal data are retained:- for the period necessary to fulfil the purposes for which they were collected;
- for additional periods where required by statutory or regulatory obligations;
- for the duration of the requested service;
- until consent is withdrawn, in relation to profiling and marketing activities.