Version dated 20 September 2026
Privacy notice
How ASD Sardinia United handles information collected through its website, contact forms and registration forms.
Contact us about privacy1. Controller and contact details
The controller is ASD Sardinia United, tax code 92288140921, at Via Giuseppe Dessì 1, 09067 Elmas (CA), Italy. For personal data requests, email info@asdsardiniaunited.com. This notice covers the association’s website; external services may provide their own notices.
2. Information collected
Sponsorship requests include a name or organisation, email, optional telephone number, preferred package and message. Registrations include the athlete’s name, birth date and tax code, parent’s name and contact details, address and information about participation. Applications for financial support may include ISEE income band, dependent children, family circumstances, social services involvement, motivations, descriptions of vulnerabilities and attachments. Only provide information relevant and necessary to your request. Website infrastructure also processes technical information, such as IP addresses and request details.
3. Purposes and legal bases
Handling contact, sponsorship and registration requests relates to steps requested before entering into a contract and, where established, the relationship with the association (GDPR Article 6(1)(b)). Legal obligations rely on Article 6(1)(c). Security, abuse prevention and website operation may rely on the controller’s legitimate interests (Article 6(1)(f)), subject to balancing against individuals’ rights. The bases for statistics and special category data require specific assessment. Reading this notice does not amount to consent to all processing.
4. Children and health information
A parent or person with parental responsibility should handle a child’s registration. Vulnerability fields and attachments may contain health information requiring additional protection. For this processing, the association must identify and document the applicable Article 9 GDPR condition and any explicit consent process. The generic authorisation currently in the form must not be represented as verification of this requirement. Contact the association about which documents to submit; do not include health details in general messages.
5. Required and optional information
Required fields allow the association to handle your request and contact you; the form cannot be completed without them. Financial and family information requested for support is used for the relevant assessment. It is not needed simply to browse the website. Telephone number and message are optional in the sponsor form.
6. How requests are handled
Sponsor requests are emailed to the association. Registrations and attachments are also emailed; form information is additionally stored in a PostgreSQL database for administrative management. The database records whether attachments were provided, while the files are sent by email. The system calculates an indicative ranking score from ISEE income band, dependent children, single-parent status and social services involvement. The code does not automatically admit or reject applicants; you may request clarification and correction of the information used in scoring.
7. Access and service providers
Information is intended for the association and people authorised to manage requests. The website uses Vercel hosting and Web Analytics, a PostgreSQL database with Neon integration, and an SMTP email service. The email provider, actual configurations, contractual roles and processing agreements still require confirmation. Forms do not publish registrations or send information to organisations listed as sponsors. Any disclosure to public bodies or other recipients requires an appropriate purpose and legal basis.
8. Retention and deletion
The proposed criterion is to retain information only for its collection purposes: managing and closing contact requests; assessing and managing participation for registrations; and any further documentation obligations or need to establish or defend a right. Financial and vulnerability documents require separate assessment limited to what is necessary. The association must translate these criteria into operational periods for the database, mailboxes, attachments and backups. Automatic deletion is not currently documented: deleting a database entry does not delete emails already received.
10. Donations and external links
Donations may continue on Yapla or, if enabled, in an embedded frame loaded after a user action. The website does not directly collect card details. Payment providers, Yapla, social networks and Google Maps process information under their own notices when used. A form acknowledgement checkbox does not provide blanket permission for processing by these services.
11. Possible international transfers
Cloud services may involve processing outside the European Economic Area. Processing locations and applicable transfer mechanisms must be checked against actual contracts and configurations for Vercel, the database, email and donation services. This notice does not certify that all information remains in the European Union or that a particular safeguard has already been adopted. Contact the controller for details and copies of applicable safeguards.
12. Your rights
Where the law provides, you may request access, correction, deletion, restriction, portability and objection to processing. Where consent is the basis, you may withdraw it without affecting earlier lawful processing. Email info@asdsardiniaunited.com with your request; your identity or parental role may need verification. A response is generally due within one month, with a justified extension where permitted. You may complain to the Italian Data Protection Authority.