Privacy Policy

1. Personal Data Controller

Your personal data will be processed by F.C. Internazionale Milano S.p.A, registered office based in 20124 Milan, Viale della Liberazione n. 16/18, P. IVA 04231750151, as data controller (hereinafter, Inter or the Data Controller), in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with reference to the processing of personal data and its implementing legislation (hereinafter, jointly, GDPR), in order to allow the activities described below including on the Inter website, the Inter online store, the official Inter App and on any other Inter IT tool (hereinafter, jointly, the Website) in accordance with the regulations in force and pursuant to the provisions set forth under this policy.

2. Personal data collected by Inter and processing purposes

We collect and process your personal data for the following purposes:

A. Basic use of the Website

(a) signing up on the Website by creating your personal account;

(b) website browsing;

B. Using the available services via the Website

(d) contact form and customer care service;

(e) signing up for specific events;

(f) taking part in activities, loyalty programs, games or competitions related to Inter’s world;

(g) candidature (sending CVs, presentation letters);

C. Purchases

(h) making and managing purchase orders via the Website even without signing up on the Website and management of purchase orders;

(i) ticketing (purchase and issuance of tickets, season tickets and/or passes for the G. Meazza Stadium in Milan) and relevant assistance - footage and photographs inside the San Siro Stadium;

(l) issuance and management of the Inter Fan card and/or Inter Club card;

(m) accreditation of disabled people for dedicated access to the G. Meazza Stadium in Milan;

D. Promotional Activities

(n) Inter sending advertising material and performing promotional and marketing activities and/or directly selling products and/or services similar to those previously sold and/or provided by Inter (so-called “soft spam”) unless you decide not to receive such communications when signing up on the Website or subsequently;

(o) following your explicit consent only, sending of regular updates and commercial, marketing and promotional communications on discounts, novelties, offers, services or events related to Inter;

(p) following your explicit consent only, sending of commercial and promotional communications on products and/or services of third-party companies affiliated with Inter;

(q) following your explicit consent only, profiling activities;

(r) following your explicit consent only, ending of surveys or customer satisfaction questionnaires related to Inter products and services.

A. BASIC USE OF THE WEBSITE

(a) Signing up on the Website

When signing up on the Website, you will be asked to enter certain personal data. In order to sign up on the Website for the purpose of creating your personal account, the following data is mandatory: first name, last name, date of birth, e-mail address and a password of your choice. The personal data you enter will also be stored in order to make all information relating to your profile and activities immediately accessible to you at all times.

The aforesaid personal data shall be processed by Inter, in accordance with the principles of necessity, lawfulness, correctness, proportionality and transparency for the following purpose: to allow you to sign up on the Website and create a personal account. Therefore, personal data processing for this purpose does not require your express consent. The legal basis for the processing described above is Article 6.1(b) of the GDPR.

In order to facilitate and accelerate signing-up operations on the Website, you can sign up using a social network account (e.g. Facebook, Google), by means of the so-called "social log-in" function. More specifically, “social log-in” is a function that allows you to share with Inter, in an automated manner and for the purpose of registering on the Website, certain personal data contained in your social network account. Therefore, subject to your express authorisation, the social network you intend to use will send Inter your personal data that is necessary for signing up on the Website, without you having to enter such personal data manually. For further information on the processing of your personal data if the "social log-in" function is used, please read the privacy policies of the relevant social networks, available at the following links:

Facebook:https://www.facebook.com/policy.php

Google:https://policies.google.com/privacy

Wechat: https://www.wechat.com/it/privacy_policy.html

Apple: https://www.apple.com/legal/privacy/en-ww/

It shall be possible to delete a personal account in any moment, sending a request via email to [email protected].

(b) Website browsing

The computer systems and software procedures used to operate the Website acquire, during their normal operation, certain personal data relating to your browsing activity whose transmission is required by Internet communication protocols. This information, by its very nature, may allow your identification as a user by means of processing and association with other personal data, although it is not collected for the purpose of association with identified users. This type of information may include IP addresses and other parameters potentially identifying your computing environment.

Personal data related to your browsing activity on the Website is processed by Inter (in accordance with the principles of necessity, lawfulness, correctness, proportionality and transparency) exclusively for statistical purposes on the Website browsing and its correct functioning.

The processing of personal data for the purposes referred to in this paragraph is carried out on the basis of our legitimate interest in the proper functioning of the Website and therefore does not require your express consent. The legal basis for the processing described above is Article 6.1 (f) of the GDPR.

For further details see paragraph 7 below and Inter's Cookie Policy, where you will find detailed information on how personal data is collected, via cookies, during your Website browsing.

(c) Download and update of Inter’s official App

Should you request it, Inter will process the personal data related to your browsing activity on the Website (in accordance with the principles of necessity, lawfulness, correctness, proportionality and transparency) in order to allow you to download, through the Website, the official Inter App and/or to allow you to update it to the latest version available.

The processing of personal data for the purpose referred to in this paragraph is carried out in order to execute your request to download and/or update the official Inter App transmitted through the Website and therefore does not require your express consent. The legal basis for the processing described above is Article 6.1(b) of the GDPR.

B. USING THE AVAILABLE SERVICES VIA THE WEBSITE

(d) Contact form and customer care service

Through the Website, you can get in touch with Inter and make use of the customer care service provided by Inter. In order to process your request, Inter collects and processes your personal data, specifically: your first name, last name, date of birth, e-mail address, telephone number, nationality, information about your current employment, and any other personal data you share through your request of information. Should you fill out the contact form and/or use the customer care service, Inter shall process – pursuant to the principles of necessity, lawfulness, correctness, proportionality and transparency – your personal data, in particular contact data and any information that might be included in your requests, in order to execute them. We invite you to check which personal data is indicated as mandatory and which, on the other hand, as optional, it being understood that failure to provide personal data marked as mandatory prevents the request from being sent. Failure to provide data marked as optional does not prevent contact with customer care.

The legal basis for the processing of personal data for the purposes referred to under this paragraph is the fulfilment of a contract or of preliminary contractual provisions adopted following your request, pursuant to Art. 6.1(b) of the GDPR. Your express consent is therefore not required.

(e) Signing up for specific events

Should you request it, the personal data, in particular your personal and contact data, shall be processed by Inter (in accordance with the principles of necessity, lawfulness, fairness, proportionality and transparency) in order to allow your signing up and participation to events related to the world of Inter and promoted by Inter from time to time through the Website.

In particular, Inter will process the following categories of personal data: your name, contact details and any other categories of personal data required for participation in the specific event that will be indicated from time to time. The legal basis for the processing of personal data for the purposes referred to in this paragraph is the fulfilment of a contract or of preliminary contractual provisions adopted following your request, pursuant to article 6.1(b) of the GDPR, and/or the fulfilment of a legal obligation to which Inter is subject, pursuant to article 6.1(c) of the GDPR, thus your explicit consent is not required. Only in the limited case in which signing up to the event requires the processing of health data provided directly by you, for example for food security purposes, the legal basis for the processing is your explicit consent pursuant to Article 9.2(a) of the GDPR.

(f) Taking part in activities, loyalty program, games or competitions related to Inter’s world

Should you request it, Inter will process the following categories of personal data (in accordance with the principles of necessity, lawfulness, fairness, proportionality and transparency): your name, your contact information and any other categories of personal data necessary for your participation in the specific activity, loyalty program, game or contest considered that will be reported from time to time, to enable your participation in activities, loyalty programs, games and/or contests related to the world of Inter and promoted by the latter, from time to time, through the Website.

As part of the management of the loyalty programs, and as more specifically provided for in the rules of the single program, data relating to your participation in events promoted by Inter and Inter's partners, your purchases in the shop, your season tickets, your membership of the Inter Fan card and Inter Club card programs and your access to the G. Meazza Stadium and its car parks may be processed. The legal basis for the processing of Data for the purposes referred to in this paragraph is the fulfilment of a contract or of preliminary contractual provisions adopted following your request, pursuant to article 6.1(b) of the GDPR, and/or the fulfilment of a legal obligation to which Inter is subject, pursuant to article 6.1(c) of the GDPR. Your express consent is therefore not required.

(g) Candidature (sending CVs, presentation letters)

Through the Website, you may apply for possible job positions related to the Inter world. In particular, the following categories of personal data will be processed: name and other personal identification data, contact data, job and work-related data, training data, data relating to eligibility for protected categories and any other personal data included in the curriculum vitae and cover letter. The personal data you provide when sending your curriculum vitae and cover letter will be processed by Inter (according to the principles of necessity, lawfulness, correctness, proportionality and transparency) for the following purposes

(i) assessment of your profile, aptitudes and professional skills;

(ii) recruitment and selection of personnel

(iii) planning of selection activities.

When searching for and selecting personnel, Inter shall only need to collect data relating to your membership of protected categories, if any, without any further details; therefore, please do not include any sensitive data (relating, for example, to your state of health, religious beliefs and political opinions) in your curriculum vitae and/or presentation letter, with the warning that if such data is provided, it will be immediately deleted.

Personal data processing for the purposes set out under this paragraph shall be carried out in order to process your spontaneous application and therefore does not require your express consent pursuant to Article 111-bis of Legislative Decree 196/2003, as amended (hereinafter, Privacy Code) and Article 6.1(b) of the GDPR.

C. PURCHASES

(h) Making purchase orders via the Website

Signing up on the Website and creating a personal account is not a prerequisite for placing a purchase order through the Website. Alternatively, you can place your purchase order as a "guest" on the Website, by directly entering the personal data required during the purchase process, as better indicated below. In this case, you will not need to create a personal account.

When you place a purchase order through the Website, you will be asked to enter the following personal data: your first name, last name, date of birth, e-mail address (if you are not already registered on the Website), shipping address, and, optionally, your telephone number, as well as data relating to the payment instrument used (such as issuer, number and expiry date of the credit card used for payment)and any other information necessary to properly process your purchase order. We invite you to check which personal data are indicated as compulsory and which as optional, it being understood that failure to provide the personal data marked as compulsory prevents the purchase order from being carried out; failure to provide the personal data marked as optional does not prevent the purchase order from being executed but may make some services and/or some communication channels unavailable.

The aforementioned personal data are processed by Inter, according to principles of necessity, lawfulness, correctness, proportionality and transparency for the following purposes (i) to allow you to transmit the purchase order of the desired products through the Website and to proceed with the purchase; (ii) to execute the purchase order of the products and to ship them to the address indicated; to send you all communications relating to the same order (including the sending of service information and to provide you with assistance) (iii) comply with and fulfil the obligations provided for by laws, regulations, EU rules, orders and prescriptions of the competent authorities; (iv) handle complaints and disputes, prevent fraud and unlawful activities, exercise rights and protect the legitimate interests of the Controller such as the right of defence in court. In particular, your telephone number, if issued, will only be used to process requests relating to your order and, if necessary, to notify delivery of products and for no other purpose.

The processing of the personal data for the purposes set out under points (i) and (ii) above is carried out in order to execute the purchase order transmitted by you through the Website and to allow you to proceed with the purchase of the products and their delivery to the address indicated by you and does not therefore require your express consent. The legal basis for the processing described above is Article 6.1 (b) of the GDPR.

The processing of personal data for the purposes set out in point (iii) is carried out to comply with legal obligations, and therefore does not require your express consent. The legal basis for the processing described above is Article 6.1 (c) of the GDPR.

The processing of personal data for the purposes set out in point (iv) is carried out on the basis of the legitimate interest of the Data Controller in protecting its legal position in claims and litigation and therefore does not require your express consent. The legal basis for the processing described above is Article 6.1 (f) of the GDPR.

(i) Ticketing (purchase and issuance of tickets, season tickets and/or passes for the G. Meazza Stadium in Milan) and relevant assistance- footage and photographs inside the San Siro Stadium;

Should you intend to purchase and/or manage, through the Website or other third-party sites related to the Website (e.g. Vivaticket), tickets for "F.C. Internazionale" team matches, season tickets for the whole season, or any other access ticket to the G. Meazza Stadium of Milan, Inter (also during the access to the G. Meazza Stadium of Milan) will process the following categories of personal data (in accordance with the principles of necessity, lawfulness, correctness, proportionality and transparency): your name and other personal identification data, contact data, address, tax identification number or other personal identification number, data of a financial nature, for the following purposes: (i) issuance and management of tickets, access tickets, season tickets and/or passes for the G. Meazza Stadium of Milan, as well as related assistance; (ii) administrative-accounting purposes arising from the purchase of tickets, season tickets and/or passes for the G. Meazza Stadium of Milan.

The legal basis for the processing of other (so-called "common") personal data processed for the purposes set out in (i) and (ii) above is the fulfilment of a contract, or of preliminary contractual provisions adopted following your request, pursuant to Article 6.1(b) of the GDPR, and/or the performance of a legal obligation to which Inter is subject, pursuant to Article 6.1(c) of the GDPR.

It should also be noted that the internal and surrounding areas of the San Siro Stadium in Milan, are subject to video surveillance and video and photographic filming, for this reason, images of the data subject may also be collected and processed. The aforementioned video surveillance system and footage are aimed at (i) managing the security of the sports facility and the prevention and suppression of crimes during sports events in accordance with the provisions of the Decree of the Ministry of the Interior dated June 6, 2005 (for any further information, please refer to the relevant privacy policy displayed at the San Siro Stadium); (ii) applying the CODE OF CONDUCT AND REGULATIONS FOR ACCESS TO FOOTBALL EVENTS BY INTER and the Rating System established by the F.I.G.C. Protocol of 4 August 2017, by virtue of which the images taken by the video surveillance system may also be used for the purpose of detecting conduct by fans in violation of the provisions of the Code. In particular, the detection of conduct contrary to the values of sport and the public sense of decency, as well as discriminatory conduct of any kind or damaging to the image of the "F.C. Internazionale" team, may lead to the imposition of interdictory or prohibitory measures against the person responsible; and (iii)documenting the sports event and attendance inside the San Siro Stadium in Milan.

The processing of the personal data consisting of the images of data subjects attending sports events taking place at the San Siro Stadium in Milan for the purposes referred to in point (i) is carried out to fulfill legal obligations, and therefore does not require your express consent. The legal basis for the processing described above is Article 6.1 letter (c) of the GDPR. The processing of personal data for the purposes indicated in points (ii) and (iii) is carried out on the basis of the legitimate interest of the Data Controller respectively to protect its legal position and the collective and category interest in the peaceful execution of sports events in accordance with the provisions set forth in the Protocol of the F.I.G.C. of August 4, 2017 (as to point (ii)) and to document the execution of, and participation in, sports events taking place at the San Siro Stadium in Milan (as to point (iii)). These processing operations therefore do not require your express consent. The legal basis for the processing operations in points (ii) and (iii) is Article 6.1 letter (f) of the GDPR.

(l) Issuance and management of the Inter Fan card and Inter Club card

Should you request, through the Website or by other means, the issuance of a fan card and/or Inter Club card, Inter will process the following categories of personal data (in accordance with the principles of necessity, lawfulness, correctness, proportionality and transparency)name and other identifying data, size, contact data, tax code or other personal identification numbers, data of a financial nature, for the following purposes: (i) issuance and management of the fan card and/or Inter Club card, as well as related assistance; (ii) fulfilment of obligations related to the issuance of the fan card and/or Inter Club card; (iii) administrative and accounting purposes deriving from the issuance of the fan card and/or Inter Club card.

The legal basis for the processing of personal data for the purposes referred to in points (i), (ii) and (iii) above is the fulfilment of a contract, or of preliminary contractual provisions adopted following your request, pursuant to Art. 6.1(b) of the GDPR, and/or the fulfilment of a legal obligation to which Inter is subject, pursuant to Art. 6.1(c) of the GDPR. Your express consent is therefore not required.

(m) Accreditation of disabled people for dedicated access to the G. Meazza Stadium in Milan

Through the Website, Inter processes the personal data of fans with disabilities who purchase tickets for “F.C. Internazionale” team matches, season tickets, fan cards or Inter Club cards. This paragraph is a supplement to paragraphs (i) and (l) above, with particular reference to the communication of the sensitive data of the data subject (i.e. those contained in the disability certificate). Such disclosure is a necessary requirement in order to have access to advantageous conditions when purchasing the services indicated above and to benefit from dedicated services during sports events at the G. Meazza Stadium in Milan. Personal data is provided directly by the data subject or the data subject’s guardian, for the sole purpose of guaranteeing disabled fans access to the aforementioned advantageous conditions and dedicated services.

The legal basis for the processing of health-related personal data collected for the purposes referred to in this paragraph is your explicit consent pursuant to Article 9.2(a) of the GDPR. The legal basis for the processing of other (so-called “common”) personal data is the fulfilment of a contract or of preliminary contractual provisions adopted following your request, pursuant to art. 6.1(b) of the GDPR, and/or the fulfilment of a legal obligation to which Inter is subject, pursuant to art. 6.1(c) of the GDPR.

D. PROMOTIONAL ACTIVITIES

If you purchase Inter products and services, we may inform you by e-mail about other products and/or services sold and/or provided by Inter that are similar to those of your previous order. To carry out these processing activities, Inter processes the following categories of personal data: name, email address, and data related to the products and/or services you have purchased through the Site.

The processing of personal data for the purposes indicated in this paragraph (so-called “soft spam”) does not require your prior consent, as it is of legitimate interest for Inter. The legal bases for such processing are therefore Article 6.1(f) of the GDPR and Article 130(4) of the Privacy Code.

You may, however, object, as of now, to the sending of any communication for the purposes indicated in this paragraph, by sending an e-mail to [email protected] or, when sending any communication, by using the “Unsubscribe” functionality that will be made available to you easily and free of charge.

(o) Regularly sending updates and commercial/promotional communications on discounts, novelties, offers, services or Inter-related events

Only with your express consent, Inter will process the following categories of personal data (according to principles of necessity, lawfulness, correctness, proportionality and transparency): name and contact details, personal data for sending advertising material and carrying out promotional activities, marketing and/or direct sales of Inter's products and/or services and/or loyalty programs. The collection of personal data may also occur by means of a dialogue with a virtual agent (chatbot) if you ask to be contacted to receive more information in relation to Inter’s products and/or services. The processing of personal data for the purposes set forth in this paragraph may take place through automated contact tools (through e-mails, sms text messages and/or WhatsApp messages), traditional contact tools (telephone calls with operator and postal mailings) and/or other types of contact tools (through promotional contents shown to you online).

Some of these communications may also relate to products that you have placed in your basket without finalising your purchase. The processing of personal data for this purpose necessarily requires your prior consent. The legal basis for such processing is therefore Article 6.1 (a) of the GDPR.

In any case, you may revoke your consent at any time, even partially, e.g. by consenting only to traditional contact tools, by accessing your personal area on the Website, by writing an e-mail to [email protected] and/or, when sending any communication, by using the “Unsubscribe” functionality that will be made available to you easily and free of charge. In addition, 5 years after you have given consent, Inter will offer you the choice of whether to renew or not such consent.

(p) Sending commercial and promotional communications on products and/or services of third-party companies affiliated with Inter

The processing of personal data for the purposes set forth under this paragraph may take place through automated contact tools (through e-mails, sms text messages and/or WhatsApp messages), traditional contact tools (telephone calls with operator and postal mailings) and/or other types of contact tools (through promotional contents shown to you online).

The processing of personal data for this purpose necessarily requires your prior consent. The legal basis for such processing is therefore Article 6.1(a) of the GDPR.

In any case, you may revoke your consent at any time, even partially, e.g. by consenting only to traditional contact tools, by accessing your personal area on the Website and/or by writing an e-mail to [email protected] and/or, when sending any communication, by using the “Unsubscribe” functionality that will be made available to you easily and free of charge. In addition, 5 years after you have given consent, Inter will offer you the choice of whether to renew or not such consent.

(q) Profiling

Only with your express consent, some of your personal data will be processed by Inter (in accordance with the principles of necessity, lawfulness, fairness, proportionality and transparency) in order to carry out profiled marketing activities based on the preferences expressed by you while browsing the Website and/or when purchasing products and/or services therein and/or as part of the issuance and management of the Inter Club card and/or in the course of the enjoyment of events organised by Inter. The profiling activity in question will involve an automated activity in order to place you in a category of subjects with homogeneous characteristics. Therefore, for the purposes set forth in this paragraph, the following categories of personal data may be processed: data related to your previous purchasing experiences, market analysis and research (including surveys) in which you may have participated, your demographic class (in relation, for example, to gender, age and place of residence), accesso to the premises where the events are held, access to the G. Meazza Stadium and the surrounding area, and your activities on the Website and on Inter's other sites. The latter are recorded through cookies on these sites (on which see paragraph 7 below and Inter's Cookie Policy where you will find detailed information, including on how to disable cookies).

The processing of personal data for this purpose necessarily requires your prior consent. The legal basis for such processing is therefore Article 6.1(a) of the GDPR.

In any case, you may revoke your consent at any time by accessing your personal area on the Website and/or by writing an e-mail to [email protected]. In addition, 5 years after you have given consent, Inter will offer you the choice of whether to renew or not such consent.

(r) Sending customer satisfaction surveys or questionnaires on Inter's products and services

Only with your express consent Inter will process the following categories of personal data (according to principles of necessity, lawfulness, correctness, proportionality and transparency): name and contact details, for sending surveys or questionnaires to survey customer satisfaction in relation to Inter's products, services and loyalty programs.

The processing of personal data for the purpose referred to in this paragraph may take place through automated contact tools (through e-mails or sms text messages), traditional contact tools (operator phone calls and postal mailings) and/or other types of contact tools (through content shown to you online).

The processing of personal data for this purpose necessarily requires your prior consent. The legal basis for such processing is therefore Article 6.1(a) of the GDPR.

In any case, you may revoke your consent at any time, even partially, e.g. by consenting only to traditional contact tools, by accessing your personal area on the Website and/or by writing an e-mail to [email protected]. In addition, 5 years after you have given consent, Inter will offer you the choice of whether to renew or not such consent.

3. Mandatory and optional provision of personal data

The provision of the personal data for the purposes set forth under letters (a), (b), (c), (d), (e), (f), (g), (h), (i), (l) and (m) of section 2 is necessary respectively for the purposes of registering to the Website, for allowing your correct browsing of the Website, for the purposes of downloading and updating the official Inter App, for the correct functioning of the customer care service and to execute the requests made through contact form, to allow your signing up to events and loyalty programs, to allow your application, to allow you to place purchase orders on the Website, for the purposes of ticketing management, for the purposes of issuing and managing the fan card and/or Inter Club card and, finally, for the purposes of the accreditation of disabled persons for access to the G. Meazza Stadium. Meazza Stadium in Milan. Failure to provide such personal data will make it impossible for Inter to pursue the respective purpose for which it is required to be collected. The provision of data for the purposes set out in letters (n), (o), (p), (q), and (r) of section 2 is, on the other hand, optional, and your refusal to provide such data will make it impossible for Inter to carry out the activities described therein.

4. Scope of data communication and disclosure

The personal data you provide will be processed in compliance with the GDPR and, in any case, in such a way as to guarantee the security and confidentiality of the same, to prevent unauthorised disclosure or use, alteration or destruction. The personal data will be processed on paper and/or via telematic means, also with the help of electronic and information means. Inter will process your personal data in its own technological infrastructure and/or using the technological infrastructure of third-party suppliers appointed as data processors.

The personal data may be communicated, exclusively for the purposes indicated in this information notice, to the categories of subjects listed below having their registered offices in the countries of the European Union and acting, as the case may be, as data processors on behalf of Inter or as separate data controllers, in this case providing the data subject, under his/her own responsibility, with appropriate information (a) persons, companies, associations or professional firms that provide services and activities of assistance and consultancy to Inter, with particular but not exclusive reference to accounting, administrative, legal, tax and financial matters and (b) companies that provide, on behalf of Inter, certain services related to the Website and to the management and execution of purchase orders through the Website, with particular but not exclusive reference to the analysis of personal data, the management of payment services, the management, shipment and delivery of products purchased on the Website, marketing activities, the management of services provided through the Website and their customisation in your favor.

Personal data may also be communicated, exclusively for the purposes indicated in this privacy policy, to the categories of subjects listed below, also based in countries outside the European Union (in this case in compliance with the provisions of the last paragraph of section 4 and acting as data processors on behalf of the Data Controller or as autonomous data controllers) (a) companies belonging to the same corporate group as Inter, with particular but not exclusive reference to activities of personal data analysis in aggregate and anonymised form, identity management of user profiles on the Website, profiling and profiled marketing in relation to users who have given their consent to these activities; (b) subjects to whom the right to access the personal data is recognised by provisions of law and secondary regulations; (c) third party companies and clients with whom Inter collaborates as a business partner (e.g. for the promotion of goods and services).

You may request a list of the names of the persons to whom your personal data is or may be disclosed by writing to the address indicated in paragraph 8 below. Within Inter's organisation, your personal data may be processed by the persons in charge of the departments responsible for carrying out individual processing activities.

Your personal data will be stored on the servers available to Inter or to the persons in charge located in the European Union. Should it become necessary for technical and/or operational reasons to use subjects located outside the European Union, or should it become necessary to transfer some of the collected personal data to technical systems and services managed in the cloud and located outside the European Union area, the processing will be regulated in compliance with the provisions of Chapter V of the GDPR and/or authorised on the basis of specific decisions of the European Union. In particular, Inter shall adopt for the transfer of personal data to countries outside the European Union the system of standard contractual clauses approved by the European Commission, as well as any additional measures to ensure compliance with the level of personal data protection required by the European Union.

5. Underage users

Inter encourages parents to monitor their children's use of the Internet for safe and filtered use of its content, including through the use of parental control tools. Besides ensuring an online environment suitable for minors, these tools can prevent the disclosure of personal data by children or young people who do not have their parents' consent. With regard to the collection and processing of personal data, the Data Controller does not process personal data of subjects under 14 years of age. Signing up on the Website is, therefore, only permitted to users who are at least 14 years old. Inter, moreover, encourages the signing up on the Website of parents of registered users who are minors: in this way, parents have the opportunity to keep abreast of the initiatives that Inter makes available to their children, and to check their compliance with their own expectations and educational models and paths. Inter urges all users who are under the age of 14 not to communicate their personal data, under any circumstance, and reserves the right to exclude from the Website any user who has concealed their under-age or who has communicated their personal data despite being aged less than 14.

6. Data retention period and data deletion

Personal data collected for the processing purpose indicated in letter (a) of section 2 above shall be retained until your account is deleted, or until you expressly request the deletion of the personal data, except in case of exceptional need for the Data Controller to keep the personal data in order to defend its rights, including in relation to disputes existing at the time of the request or upon indication by public authorities.

Personal data collected for the processing purposes respectively indicated in letters (a), (b), (c), (d), (e), (f), (g), (h), (i), (l) and (m) of section 2 above shall be retained for the time necessary for the pursuit of such purposes and thereafter until the expiry of the period prescribed by law for the keeping of accounting records and for the prescription of rights in contractual matters, except in case of exceptional necessity of the Data Controller to keep the data controller further in order to defend its rights, also in relation to disputes existing at the time of the request or upon indication of public authorities.

Personal data collected for the processing purpose indicated in letter (n) of section 2 above shall be retained until you object or expressly request the deletion of such personal data, and in any case no longer than 5 years from the last purchase made, except in the case of exceptional need for the Data Controller to retain the personal data to defend its rights, including in relation with disputes existing at the time of the request or upon indication of public authorities.

The personal data collected for the processing purposes respectively indicated in letters (o), (p), (q) and (r) of section 2 above shall be kept until the withdrawal of the relevant consent (or the non-renewal after 5 years from the time it was given) or until the express request for deletion of such personal data, and in any case no longer than 5 years after their collection, except in case of exceptional necessity of the Controller to keep the personal data to defend its rights, also in relation to disputes existing at the time of the request or upon indication of public authorities.

7. Website browsing and cookies

A 'cookie' is a small string of data containing an anonymous unique identifier that is sent to your browser by a web server and is subsequently stored on the hard drive of your computer. The cookie is then re-read and recognised by the website that sent it each time you make a subsequent connection. Thanks to cookies, it can be made easier for the Website to recognise the registered user, for example by avoiding the need for authentication (by means of 'log-in' and 'password') each time the Website is accessed. Cookies can also allow users to personalise their use of the Website by saving their preferred settings. Cookies also record certain information about your Website browsing, which may be used to improve the performance of the Website and to offer personalised services or advertising. For more information about cookies, including how to provide consent and how to deactivate them, we recommend that you view our cookie policy by clicking here.

8. Data controller contacts

Your personal data processing controller is F.C. Internazionale Milano S.p.A., with registered office based in 20124 Milan, Viale della Liberazione no. 16/18, VAT no. 0423175015. You can contact the Controller at any time by mail or e-mail at [email protected].

The Controller has appointed, pursuant to art. 37 ff. of the GDPR, its own Data Protection Officer (also known as the "DPO"), domiciled for the purpose at F.C. Internazionale Milano S.p.A. and who may be contacted for matters relating to the processing of your data at [email protected]. By writing to [email protected] you may also exercise the rights indicated under paragraph 9 below.

9. Your rights

We hereby remind you that you have the following rights:

the right to obtain information in relation to the purposes for which your personal data is processed, the period of processing and the persons to whom the personal data is disclosed (the so-called data subject's right of access pursuant to Section 15 of the GDPR);

the right to obtain rectification or integration of inaccurate personal data relating to you (the so-called right of rectification under article 16 of the GDPR);

the right to obtain the deletion of the personal data concerning you in the following cases (a) the personal data is no longer necessary for the purposes for which it was collected; (b) you have withdrawn your consent to the processing of the personal data where it is processed on the basis of your consent; (c) you have objected to the processing of the personal data concerning you where it is processed for a legitimate interest of the Data Controller; or (d) the processing of your personal data does not comply with the law. However, please note that the retention of personal data by the Data Controller is lawful if it is necessary to enable you to comply with a legal obligation or to establish, exercise or defend a right in court (so-called right of erasure under Article 17 of the GDPR);

the right to obtain that the personal data concerning you is only kept without any other use of the personal data in the following cases: (a) you contest the accuracy of the personal data, for the period necessary to allow us to verify the accuracy of such personal data; (b) the processing is unlawful but you still object to the deletion of the Data by the Data Controller (c) the personal data is necessary for the establishment, exercise or defence of legal claims; (d) you object to the processing and are awaiting verification as to whether the legitimate grounds of the Data Controller for processing prevail over those of the data subject (so-called right to restrict processing, pursuant to Article 18 of the GDPR);

the right to obtain the cessation of processing in cases where your personal data is processed for marketing purposes, including in relation to products or services identical to those already purchased by the Data Controller and/or where your personal data is processed on the basis of a legitimate interest of the Data Controller in the context of the balancing of interests pursuant to Article 6.1 (f) of the GDPR (so-called right to object to processing, pursuant to Article 21 of the GDPR);

the right to receive in a commonly used, machine-readable and interoperable format, a copy of the personal data provided to Inter, and to transmit such personal data to another data controller, without Inter hindering it, should the data processing be based on your consent and has been performed via automated means (so-called right to data portability, pursuant to Article 20 of the GDPR).

Should you reckon that your personal data is being processed unlawfully, you may file a complaint with the relevant data protection authority. Please note that in Italy you have the right to turn to the national authority (Garante per la protezione dei dati personali) (Piazza Venezia, 11 - 00187, Rome RM) to assert your rights in relation to the processing of your personal data.

Furthermore, by writing to the address [email protected], indicated under paragraph 8 above, you may exercise the rights set forth under this paragraph.

Italian version Chinese version

SEASON

CLUB

TICKETS

Privacy Policy