Personal Data Processing Notice

Notice under Articles 13 and 14 GDPR – version dated 7 October 2026

1. Controller and contact details

Controller: Giuseppe Tarantino, Palermo, Italy.
Privacy and rights enquiries: info@chetorneo.com.

2. Data processed

  • account and contact data, encrypted credentials and preferences;
  • organisation and authorised-person data, including the organiser's or designated contact person's email address and mobile phone number;
  • sporting, registration, image and user-submitted content data;
  • support or licence requests and related communications;
  • technical logs, IP address, device, security events and necessary usage data;
  • administrative data concerning licences and payments, where applicable.

3. Purposes, legal bases and provision

  • Account and service: performance of a contract or pre-contractual steps;
  • security, abuse prevention and defence of rights: legitimate interests;
  • administrative and tax duties and authority requests: legal obligation;
  • non-essential promotional communications: withdrawable consent;
  • optional device functions: consent or specific permission.

Data marked as required are necessary to provide the requested account and functions; failure to provide them may prevent use. Optional data may be omitted without losing essential functions.

Organiser's mobile contact number

The organiser's or designated contact person's mobile phone number is collected as a contact detail for organisation management, support, and technical or operational communications relating to the Chetorneo platform and licences.

The mobile phone number is a required field in the organisation creation and editing form: if it is not provided, the form cannot be saved. This is a requirement of the platform's form, not a general obligation under the GDPR to provide a phone number.

The mobile phone number is not used for promotional or marketing purposes. Providing the number does not constitute consent to promotional communications; any promotional communications require separate and withdrawable consent.

4. Organisers’ privacy roles

For data an organiser chooses to collect and publish for its competitions, the organiser determines purposes and means and normally acts as an independent controller. Chetorneo processes those data to provide the platform under the instructions and responsibilities set out in the applicable agreement. The organiser must provide its own notice and manage requests, legal bases and minors’ data.

5. Public visibility

Public pages may display names, images, teams, results, standings, statistics, news and comments where entered and made visible by the organiser. Publication is not automatically based on registration: it must be justified by the organiser and limited to what is relevant to the competition.

6. Recipients and providers

Data may be processed by hosting, email, support, security, backup and web-resource delivery providers. Following the user’s choice, pages may connect to map, video or social-network providers (such as Google/YouTube, Meta, TikTok, X or Vimeo), appointed as processors where required. In cautious mode, licence-request data are not sent to PayPal. If payment is later agreed, the payment provider processes payment data under its own notice. Chetorneo does not store full card numbers.

7. Transfers outside the EEA

If a provider processes data outside the European Economic Area, the transfer is made under an adequacy decision or safeguards provided by Articles 44 et seq. GDPR. Information about applicable safeguards may be requested from the Controller.

8. Retention

  • accounts and operational data, including email and mobile contact details: for the relationship and time needed for closure;
  • unsuccessful requests: normally up to 12 months;
  • tickets and security logs: normally up to 24 months, unless investigation requires longer;
  • administrative data: for periods imposed by applicable law;
  • public content: while maintained by the organiser or while its purpose remains.

Periods may be extended only for litigation, legal obligations or authority requests.

9. Rights

Data subjects may request access, rectification, erasure, restriction, portability and objection, and may withdraw consent without affecting earlier processing. They may lodge a complaint with the Italian Data Protection Authority. Requests should be sent to info@chetorneo.com. Where data are managed for an organiser, the request may be forwarded to it.

10. Minors, automated decisions and security

No decisions producing legal effects are based solely on automated processing. Technical and organisational measures proportionate to risk are applied. Minors’ data require particular minimisation and the involvement of a person exercising parental responsibility where required by law.

11. Updates

Material changes will be communicated to affected users by appropriate means.