PRIVACY NOTICE ON THE PROCESSING OF PERSONAL DATA FOR VOLUNTEERS

The Data Controller is Grandi Eventi Val di Sole scarl, with registered office in via Marconi n. 5, 38027 Malè (TN). The Controller can be contacted at the following details:

 - Phone: 0463 808960 - 3204527018

- E-mail: bike@visitvaldisole.it – volontari@valdisolebikeland.com

 

i) Management of the application, selection and assignment of the volunteer role, including verification of age requirements, the driving licence for marshals and language skills.

Legal basis: Article 6(1)(b) GDPR, performance of pre-contractual measures and of the subsequent volunteering relationship adopted at your request.

ii) Operational organisation of the event, provision of uniforms and meal vouchers, management of access and shifts, service communications, possible management of expense reimbursements. Legal basis: Article 6(1)(b) GDPR for the performance of the volunteering relationship and, where necessary for organisational and event safety needs, Article 6(1)(f) GDPR, the Controller's legitimate interest in managing the sporting event.

iii) Fulfilment of legal obligations connected to the volunteering activity and to the organisation of the event, including any insurance coverage and mandatory communications to public bodies. Legal basis: Article 6(1)(c) GDPR.

iv) Newsletter subscription, if selected by you. Legal basis: Article 6(1)(a) GDPR, your consent. You may withdraw it at any time through the link at the bottom of each message or by writing to the Controller's contact details, without affecting the lawfulness of the processing carried out before withdrawal.

 

In the context of the 2026 UCI Mountain Bike World Championship, images may be collected by press officers, as this is an event of international public relevance. Your image may be published on TV channels, websites and social networks by news outlets for journalistic purposes. Consent is not required for this type of processing. 

For footage taken by the Controller and for making it available to the media, the processing is based on Article 6(1)(f) GDPR. The legitimate interest pursued is the documentation and communication of an event of public interest taking place in a location open to the public.

For subsequent publication, broadcasters, news outlets and agencies act as autonomous data controllers in the exercise of journalistic activity. This activity is based on the public interest in information under Article 85 GDPR and Articles 136 and 137 of Legislative Decree 196/2003, as well as the Code of conduct concerning the processing of personal data in the exercise of journalistic activity (Garante, resolution of 29 November 2018, no. 491). Under Article 97 of Law 633/1941, the publication of images taken at events held in public does not require the consent of the data subject.

 

Photographic and audiovisual footage may also be taken during the event for the Controller's institutional communication and promotion purposes and for future editions of the event, through the website, social media channels, newsletters, press releases and the Controller's promotional material, in both print and digital form.

Legal basis. For overall and contextual images, which portray volunteers as part of the crowd or while carrying out their activity without isolating their features in close-up, the processing is based on Article 6(1)(f) GDPR. The legitimate interest pursued is the promotion of the event.

 

For images that portray you in close-up or in an individually identifiable way, the processing is based on your consent under Article 6(1)(a) GDPR and Article 96 of Law 633/1941. Consent is optional, may be withdrawn at any time and does not affect your application or your role as a volunteer. Withdrawal does not affect the lawfulness of prior use or the removal of material already printed or distributed by third parties.

 

- Minors

For applicants aged between 16 and 18, the promotional use of individually identifiable images requires the consent of the person holding parental responsibility, under Article 6(1)(a) GDPR.

 

Your common personal data may be disclosed, in order to perform the agreed service, by way of example and not exhaustively, to accounting or tax consultants, banking, credit or insurance institutions and to companies affiliated with us, communication agencies, and local promotion bodies. The data disclosed will only be those strictly necessary for the performance of the requested service, and anonymised processing methods will be preferred where possible. The disclosure of such data is mandatory in order to carry out the volunteering activity, and any refusal to disclose it will make it impossible for us to perform the agreed service.

 

We are committed to ensuring that data processing takes place within the territory of the European Union. Where this is not possible due to technical or organisational requirements, we carry out a preliminary verification of the conditions of lawfulness prescribed by the applicable legislation. The images may be processed by the entity organising the competition, the Union Cycliste Internationale (UCI), based in Switzerland. For that country, the transfer is based on the adequacy decision adopted by the European Commission pursuant to Article 45 GDPR, which recognises Switzerland as providing an adequate level of data protection.

 

Your personal data will be retained for 3 years in order to process your possible recruitment in the context of the organisation of future editions of the event, without prejudice to any longer retention periods required by civil law and tax regulations. 

 

At any time, you have the right to request from the Controller access to your data (confirmation of the existence of data concerning you and of its origin), as well as the rectification, update or erasure of such data. You will receive a response within 30 days in writing (unless you specifically request an oral response), including by electronic means. You also have the right to request the restriction of processing or to object to it.

Finally, you may request the portability of your data to another controller.

 

If you believe that your data has been processed unlawfully, you have the right to lodge a complaint with the Supervisory Authority.

 

The provision of your data to the Controller is mandatory in order to properly manage the volunteering relationship. Failure to provide it will make it impossible to continue with the procedure.

 

The Controller does not use automated decision-making processes of any kind regarding your personal data.