By virtue of the principles of correctness, lawfulness, transparency, protection of confidentiality and the rights of the data subject regarding the processing of their data, pursuant to Article 13 of EU Regulation 2016/679, the following information is provided.

DATA CONTROLLER

The data controller is NORDIC SKI WM VAL DI FIEMME 2003 s.r.l. with head office in VIA REGOLANI, 6 - 38033 CAVALESE (Trento - Italy), telephone +39 0462 352013, E-mail info@fiemmeworldcup.com, PEC finfiemme2013@pec.it.

DATA PROTECTION OFFICER

The Data Protection Officer designated, pursuant to Article 37 of Reg. 2016/679, may be contacted at the following e-mail address info@fiemmeworldcup.com.

PURPOSE AND LEGAL BASIS FOR PROCESSING

The personal data provided may be processed for the following purposes:

• for the fulfilment of legal obligations
• for the fulfilment of contractual obligations
• in order to provide you with the requested information and provide the agreed services
• for examining the efficiency of the system
• for the implementation of marketing activities such as the sending of commercial information, advertising material and market research
• for the protection of obligations (e.g. payments)
• for measuring the degree of satisfaction with regard to the quality of the products and services offered

The legal basis for the processing is based on the implementation of the services requested by the interested parties/users and related fulfilments, on Art. 130, para. 4, Legislative Decree 196/2003 and on the legitimate interest of the data controller. Only with the express and separate consent of the data may the data be processed for sending electronic communications (newsletters) with commercial content in reference to the services and promotional initiatives offered by the owner. The legal basis of the processing is based on the explicit and free consent of the data subject.

DATA PROCESSING METHODS AND DECISION-MAKING OR PROFILING PROCESS

The processing will also be carried out with the aid of electronic and/or automated tools, which can be accessed only by authorised persons, in full compliance with the provisions of current legislation. The data controller does not use in any way decision-making processes aimed at profiling personal data.

RECIPIENTS AND CATEGORIES OF RECIPIENTS OF PERSONAL DATA

The data will be processed by employees and other authorised subjects whose processing is used by the Controller for the performance of its activities and by third parties who perform outsourcing activities on behalf of the Controller as external data processors.

PLACE OF DATA PROCESSING

Personal data will generally be processed within the European Union. Certain applications of the services used by the Controller, however, may involve the transfer of personal data to the United States. The aforementioned processing is legitimised under Article 45 of EU Reg. 2016/679, by virtue of an adequacy decision adopted by the European Commission. Should it become necessary, the Data Controller will be entitled to move the location of its computer archives to other non-European countries, ensuring from the outset that the transfer of non-EU data will only be carried out to States that are able to offer a level of protection adequate to the standards envisaged by the regulations in force on the subject, in compliance with Articles 45, 46 and 49 of EU Reg. 2016/679.

NATURE OF PROVISION

The provision of data is optional, however, failure to provide the data necessary to carry out the requested service will make it impossible to implement it.

DURATION OF RETENTION

The data will be processed for the period deemed strictly necessary to fulfil the above-mentioned purposes in compliance with current legislation, unless expressly revoked by the data subject.

RIGHTS OF THE DATA SUBJECT IN RELATION TO DATA PROCESSING

Pursuant to Articles 15, 16, 17, 18, 19, 20, 21, and 77 of the EU Regulation, the Data Subject is informed that:

• he/she has the right to request access to, rectification, erasure or restriction of personal data concerning him/her or to object to their processing, and the transfer to another controller of his/her data in the cases provided for
• any rectification or erasure or restriction of processing carried out at the request of the data subject - unless this proves impossible or involves a disproportionate effort - will be communicated by the undersigned to each of the data processors to whom the personal data have been transmitted
• has the right to lodge a complaint with the Garante per la protezione dei dati personali, following the procedures and indications published on the Authority's official website at www.garanteprivacy.it. The exercise of rights is not subject to any formal constraints and is free of charge.

Information updated 03/12/2019.

This document contains information about the technologies that enable this Website to achieve the purposes described below. These technologies allow the Owner to collect and save information (for example through the use of Cookies) or use resources (for example by running a script) on the User's device when the User interacts with this Website. For the sake of simplicity, these technologies are briefly referred to in this document as "Tracking Tools", unless there is reason to differentiate. For example, although Cookies can be used in both web and mobile browsers, it would be inappropriate to talk about Cookies in the context of mobile applications, since these are Tracking Tools that require the presence of a browser. For this reason, within this document the term Cookies is only used to specifically refer to that particular type of Tracking Tool.

Some of the purposes for which Tracking Tools are used may also require the User's consent. If consent is given, it can be freely revoked at any time by following the instructions contained in this document.

This Website uses Tracking Tools managed directly by the Owner (commonly called "first party" Tracking Tools) and Tracking Tools that enable services provided by third parties (commonly called "third party" Tracking Tools). Unless otherwise specified within this document, such third parties have access to their respective Tracking Tools. Duration and expiry of Cookies and other similar Tracking Tools may vary depending on what is set by the Controller or each third party provider. Some of them expire at the end of the User's browsing session. In addition to what is specified in the description of each of the categories below, Users can obtain more detailed and updated information on the duration, as well as any other relevant information - such as the presence of other Tracking Tools - in the privacy policies of the respective third party providers (through the links provided) or by contacting the Controller.

This Website uses Cookies commonly referred to as "technical" or other similar Tracking Tools to perform activities strictly necessary to ensure the operation or provision of the Service.

SIMPLE INTERACTIONS AND FUNCTIONALITIES

This Website uses Tracking Tools to enable simple interactions and activate features that allow Users to access certain resources of the Service and simplify communication with the Owner.

CONTACTING THE USER

Mailing List or Newsletter (This Web Site)

By registering to the mailing list or newsletter, the User's e-mail address is automatically included in a list of contacts to whom e-mail messages may be sent containing information, also of a commercial and promotional nature, relating to this Web Site. The User's e-mail address may also be added to this list as a result of registering on this Web Site or after making a purchase. Personal Data processed: Postcode, city, last name, Cookie, Usage Data, e-mail, country, first name and telephone number.

Interaction with live chat platforms

This type of service allows the User to interact with live chat platforms, operated by third parties, directly from the pages of this Website. This allows the User to contact

the support service of this Website or this Website to contact the User while he/she is browsing its pages. If a service for interacting with live chat platforms is installed, it is possible that, even if Users do not use the service, it will collect Usage Data relating to the pages where it is installed. In addition, live chat conversations may be recorded.

Facebook Messenger Customer Chat (Facebook, Inc.)

Facebook Messenger Customer Chat is an interaction service with the Facebook Messenger live chat platform, provided by Facebook, Inc. Personal data processed: Cookies, Data disclosed while using the service, Usage Data and About me. Place of processing: United States - Privacy Policy. Privacy Shield adherent.

Enhancement of your experience

This Website uses Tracking Tools to provide a personalised user experience, enabling better management of personal settings and interaction with external networks and platforms.

Interaction with social networks and external platforms

This type of service allows you to interact with social networks, or other external platforms, directly from the pages of this Website. The interactions and information acquired by this Website are in each case subject to the User's privacy settings for each social network. This type of service may still collect traffic data for pages where the service is installed, even when Users do not use it. It is recommended to disconnect from the respective services to ensure that the data processed on this Website is not linked back to the User's profile.

Like Button and Facebook Social Widgets (Facebook, Inc.)

The Like Button and Facebook Social Widgets are services for interaction with the social network Facebook, provided by Facebook, Inc. Personal data processed: Cookies and Usage Data. Place of processing: USA - Privacy Policy.

Tweet Button and Twitter Social Widgets (Twitter, Inc.) The Tweet Button and Twitter Social Widgets are services for interaction with the Twitter social network, provided by Twitter, Inc. Personal Data Processed: Cookies and Usage Data. Place of processing: USA - Privacy Policy.

+1 button and Google+ social widgets (Google Inc.) The +1 button and Google+ social widgets are services for interaction with the Google+ social network, provided by Google Inc. Personal data processed: Cookies and Usage Data. Place of processing: USA - Privacy Policy.

Display of content from external platforms

This type of service makes it possible to display content hosted on external platforms directly from the pages of this Website and interact with them. If a service of this type is installed, it is possible that, even if Users do not use the service, it may collect traffic data relating to the pages where it is installed.

YouTube Video Widget (Google Inc.)

YouTube is a video content display service operated by Google Inc. that allows this Website to integrate such content into its pages. Personal data processed: Cookies and Usage Data. Place of processing: USA - Privacy Policy.

Measurement

This Website uses Tracking Tools to measure traffic and analyse Users' behaviour with the aim of improving the Service.

Statistical services managed directly by this Website

The services in this section allow the Data Controller to process and manage statistics through the use of first-party Tracking Tools.

Statistics collected directly (this Website)

This Website uses an internal statistics system, which does not involve third parties. Personal Data processed: Cookies and Usage Data.

Statistics

The services contained in this section allow the Data Controller to monitor and analyse traffic data and serve to keep track of the User's behaviour.

Google Analytics (Google Inc.)

Google Analytics is a web analysis service provided by Google Inc. ("Google"). Google uses the Personal Data collected in order to track and examine the use of this Website, compile reports and share them with other services developed by Google. Google may use Personal Data to contextualise and personalise ads on its advertising network. Personal Data processed: Cookies and Usage Data. Place of processing: USA - Privacy Policy - Opt Out. Privacy Shield adherent.

Conversion tracking by Google Ads (Google Inc.)

Google Ads conversion tracking is a statistical service provided by Google LLC or Google Ireland Limited, depending on where this Website is used, which links data from the Google Ads ad network with the actions performed within this Website. Personal data processed: Cookies and Usage Data. Place of processing: USA - Privacy Policy - Privacy Shield adherent.

Facebook Ads conversion tracking (Facebook pixel) (Facebook, Inc.)

The Facebook Ads conversion tracking (Facebook pixel) is a statistics service provided by Facebook, Inc. that links data from the Facebook ad network with actions taken within this Website. The Facebook pixel monitors conversions that can be attributed to Facebook Ads, Instagram and the Audience Network. Personal data processed: Cookies and Usage Data. Place of processing: USA - Privacy Policy - Privacy Shield adherent.

Display Advertisers Extension for Google Analytics (Google Inc.)

Google Analytics on this Website may use Google's interest-based advertising, third-party audience data and information from the DoubleClick Cookie to extend statistics with demographic data, interest and data on interactions with advertisements. Personal Data Processed: Cookies and Usage Data. Place of Processing: USA - Privacy Policy - Opt Out.

Targeting and Advertising

This Website uses Tracking Tools to deliver commercial content tailored to User behaviour and to manage, deliver and track advertisements.

Remarketing and behavioral targeting

This type of service allows this Website and its partners to communicate, optimise and serve advertisements based on the User's past use of this Website. This activity is carried out through the tracking of Usage Data and the use of Cookies, information that is transferred to the partners to which the remarketing and behavioral targeting activity is linked. In addition to the opt-out possibilities offered by the services below, the User may opt out of receiving cookies related to a third-party service by visiting the Network Advertising Initiative opt-out page.

Google Ads Remarketing (Google Inc.)

Remarketing Google Ads is a remarketing and behavioral targeting service provided by Google LLC or Google Ireland Limited, depending on where this Website is used, which links the activity of this Website with the Google Ads advertising network and the DoubleClick cookie. Users can opt out of the use of Google cookies for ad customisation by visiting the Google Ads Settings. Personal Data collected: Cookies and Usage Data. Place of Processing: USA - Privacy Policy - Opt Out. Privacy Shield adherent.

Facebook Remarketing (Facebook, Inc.)

Facebook Remarketing is a Remarketing and Behavioral Targeting service provided by Facebook, Inc. that links the activity of this Website with the Facebook advertising network. Personal Data collected: Cookies and Usage Data. Place of Processing: USA - Privacy Policy - Opt Out.

Remarketing with Google Analytics (Google Inc.)

Remarketing with Google Analytics is a remarketing and behavioral targeting service provided by Google LLC or Google Ireland Limited, depending on where this Website is used, which links the tracking activity performed by Google Analytics and its Cookies with the Google Ads advertising network and the Doubleclick Cookie. Personal data collected: Cookies and Usage Data. Place of processing: USA - Privacy Policy - Opt Out. Privacy Shield adherent.

Facebook Custom Audience (Facebook, Inc.)

Facebook Custom Audience is a remarketing and behavioral targeting service provided by Facebook, Inc. that links the activity of this Website with the Facebook

advertising network. Personal data collected: Cookies and email. Place of processing: United States - Privacy Policy - Opt Out. Privacy Shield adherent.

There are various ways to manage Tracker related preferences and to provide and withdraw consent, where relevant:

Users can manage preferences related to Trackers from directly within their own device settings, for example, by preventing the use or storage of Trackers.

Additionally, whenever the use of Trackers is based on consent, Users can provide or withdraw such consent by setting their preferences within the cookie notice or by updating such preferences accordingly via the relevant consent-preferences privacy widget, if available.

It is also possible, via relevant browser or device features, to delete previously stored Trackers, including those used to remember the User’s initial consent preferences.

Other Trackers in the browser’s local memory may be cleared by deleting the browsing history.

With regard to any third-party Trackers, Users can manage their preferences via the related opt-out link (where provided), by using the means indicated in the third party's privacy policy, or by contacting the third party.

Locating Tracker Settings

Users can, for example, find information about how to manage Cookies in the most commonly used browsers at the following addresses:

• Google Chrome
• Mozilla Firefox
• Apple Safari
• Microsoft Internet Explorer
• Microsoft Edge
• Brave
• Opera

Users may also manage certain categories of Trackers used on mobile apps by opting out through relevant device settings such as the device advertising settings for mobile devices, or tracking settings in general (Users may open the device settings and look for the relevant setting).

How to opt out of interest-based advertising

Notwithstanding the above, Users may follow the instructions provided by YourOnlineChoices (EU and UK), the Network Advertising Initiative (US) and the Digital Advertising Alliance (US), DAAC (Canada), DDAI (Japan) or other similar services. Such initiatives allow Users to select their tracking preferences for most of the advertising tools. The Owner thus recommends that Users make use of these resources in addition to the information provided in this document. The Digital Advertising Alliance offers an application called AppChoices that helps Users to control interest-based advertising on mobile apps

NORDIC SKI WM VAL FIEMME 2003 s.r.l. | via Regolani, 6 – 38033 Cavalese (Trento - Italy)

Owner’s e-mail address: info@fiemmeworldcup.com

Since the installation of Cookies and other tracking systems operated by third parties through the services used within this Website cannot be technically controlled by the Owner, any specific reference to Cookies and tracking systems installed by third parties is to be considered indicative. To obtain complete information, the User is invited to consult the privacy policy of any third party services listed in this document. Given the objective complexity of identifying technologies based on Cookies, the User is invited to contact the Data Controller should he or she wish to receive any further information on the use of Cookies through this Website.

Definitions and legal references

Personal Data (or Data)

Personal data is any information that, directly or indirectly, even in connection with any other information, including a personal identification number, makes a natural person identified or identifiable.

Usage Data

They are the information automatically collected through this Website (also from third-party applications integrated into this Website), such as: the IP addresses or the domain names of computers used by the User that connects with this Website, the URI addresses (Uniform Resource Identifier), the request time, the method used to forward the request to the server, the file dimension returned as response, the numeric code indicating the status of the response from the server (success, error, etc) the country of origin, the characteristics of the browser and operating system used by the visitor, the various temporal connotations of the visit (e.g. the length of time spent on each page) and the details of the itinerary followed within the

Application, with particular reference to the sequence of pages consulted, the parameters relating to the operating system and the User's IT environment.

User

The individual who uses this Website which, unless otherwise specified, coincides with the Data Subject.

Data Subject

The natural person to whom the Personal Data refers.

Data Controller (or Processor)

The natural person, legal entity, public administration and any other entity that processes Personal Data on behalf of the Controller, as set out in this privacy policy.

Owner of Data Processing (or Owner)

The natural or legal person, the public authority, the service or other body that, individually or together with others, determines the purpose and the means of data processing and the tools used, included the security measures concerning the functioning and the use of this Website. The Owner of Data Processing, unless otherwise specified, is the owner of this Website.

This Website

The hardware or software tool by which the Personal Data of the User is collected and processed.

Service

The Service offered by this Website as described in the relevant conditions (if available) and on this site/application.

European Union (or EU)

Unless otherwise specified, all references made within this document to the European Union include all current member states to the European Union and the European Economic Area.

Cookies

Cookies are Trackers consisting of small sets of data stored in the User's browser.

Tracker

Tracker indicates any technology - e.g Cookies, unique identifiers, web beacons, embedded scripts, e-tags and fingerprinting - that enables the tracking of Users, for example by accessing or storing information on the User’s device.

About me

It gives access to the “About me” section of the profile.

Legal information

This privacy policy is based on multiple legislative orders, articles No. 13 and 14 of the Regulations (EU) 2016/679 included. This privacy policy relates solely to this Application, if not stated otherwise within this document.