Privacy notice

The data controller is Luigi Aiello, who built and runs this website on behalf of RSA TEAM, an amateur team with no legal personality.

For any request about your data, write to us from the Contact page or send a direct message on Instagram.

• Contact form. Your name, email, company or team if you give one, and the text of your message. We use them only to reply to you: the legal basis is your own request (Art. 6(1)(b) GDPR). The message reaches us by email and is not stored in any database on the site. We keep it for as long as it takes to deal with the request, and in any case no longer than 12 months after the last exchange.
• Browsing data. Like every website, the server that hosts us records, for technical and security reasons, data such as IP address, page requested and browser type. We also collect aggregate, anonymous visit statistics, without cookies and without recognising you from one visit to the next (legitimate interest, Art. 6(1)(f) GDPR).
• Players and staff. The names, photos, shirt numbers and statistics of registered players are published with their consent. In the squad and want something removed or corrected? Tell the manager, or write to us: we'll do it right away.
• Restricted area. The admin page can only be reached by the person who runs the site, through their GitHub account. It doesn't concern you, unless you are them.

We do no profiling, we do not sell or pass data on to anyone, and we will not sign you up to any newsletter.

This site uses no profiling or third-party cookies, and its visit statistics work without cookies. That is why we don't ask for your consent: there is nothing to consent to.

The only things saved in your browser are technical:

• a note in the browser's local storage recording that you closed the cookie notice, so we don't show it again on every visit. It contains no personal data and never leaves your device;
• a session cookie, only for whoever signs in to the restricted area (that is, nobody but the person who runs the site).

To run the site we rely on providers that process data on our behalf:

• Vercel Inc. — website hosting and aggregate visit statistics;
• Resend — delivery of the messages sent through the contact form;
• the provider of the mailbox where we receive those messages.

Some of these providers are based in the United States: the transfer takes place with the safeguards required by the GDPR (the EU-US Data Privacy Framework or standard contractual clauses).

The photos on the home page come from our Instagram profile, but we serve them to you ourselves: as long as you are looking at photos, Instagram doesn't know you were here. Videos are different: if you open one, it is played directly from Instagram's (Meta's) servers, which at that moment receive your IP address, as with any content you download; no cookie is saved. Once you are on Instagram, or on any other site we link to, their own notice applies.

At any time you can ask us what data we hold about you, have it corrected or deleted, have its use restricted or receive a copy of it, and you can object to its processing (Arts. 15-22 GDPR). Just write to us from the Contact page: we reply within a month, usually much sooner.

If you think we have mishandled your data you can lodge a complaint with the Italian data protection authority, the Garante per la protezione dei dati personali. But write to us first: these things usually get sorted out.