Home Privacy & Cookie Policy
Privacy & Cookie Policy
Last updated: November 2026
Welcome to the official website of Eagle Cup Volley (https://eaglecupvolley.it). This policy describes how we manage the website regarding the processing of users' personal data, in compliance with Art. 13 of the EU Regulation 2016/679 (GDPR) and the Italian Personal Data Protection Code (Legislative Decree 196/2003).
1. Data Controller
The Data Controller is:
12 SPORT BLU SSD A RL (12 Sport Blu Società Sportiva Dilettantistica a Responsabilità Limitata)
VAT: IT14815270963
REA: 2808889
Registered office: Via dei Grimani 18, 20144 Milano (MI), Italy
Contact Email: segreteria@eaglecupvolley.it
2. Types of Data Collected and Purposes
A. Access to "Live & Results" Area (Voluntarily Provided Data)
To access exclusive tournament content (live streaming, real-time results, schedules), registration via a specific form is required.
- Data processed: Email address.
- Service Purpose (Mandatory): To allow technical access to the platform, ensure system security, and send essential tournament communications (e.g., schedule changes). Legal basis: Performance of a contract/service requested by the user.
- Marketing Purpose (Optional): To send newsletters, photos, videos, and promotions. Legal basis: Explicit consent.
B. Team registration for the tournament
Clubs register for the tournament through the form on the Registrations page, filled in by a contact person.
- Data processed: name, role, email and phone number of the contact person; club data (company name, registered office, country and city, tax ID, VAT number); name of the AED manager and of the scorer; number of teams, athletes and team officials, T-shirt sizes; team logo; any food intolerances, with the name of the persons concerned.
- Purpose: to handle the registration request and organise participation in the tournament (teams and schedules, meals, materials, communications to contact persons). Legal basis: pre-contractual measures and performance of the participation contract requested by the club.
- Food intolerances: this is health-related data. It is used only to prepare meals and is seen only by those who organise the tournament and the catering. The person filling in the form provides it on behalf of the persons concerned, after informing them.
- How you heard about the tournament: the answer chosen in the form and, collected by the site, the site you came from to the first page you visited (for example a search engine or an AI assistant) and any campaign label in the address (
utm_source). The site keeps them only in the open browser tab (sessionStorage, which is emptied when the tab is closed) and sends them only together with the registration. They help us understand which channels bring registrations. Legal basis: legitimate interest of the data controller (art. 6(1)(f) GDPR). - Where it is stored: in an archive of the website reserved for the tournament office and in the system that sends the form emails. No public page shows it.
- Newsletter (optional): the contact person receives it only if they ask for it with the specific box. Legal basis: consent.
C. Information requests and newsletter
The form on the Contacts page and the "Ask for information" form on the page dedicated to the ads (/join/) collect name, phone number, email, club and message, used only to reply to the request. Legal basis: response to a request from the data subject.
The newsletter form collects the email address. The subscription is valid only after confirmation through the link received by email and can be cancelled at any time. Legal basis: consent.
D. Navigation and Security Data
Computer systems automatically acquire certain data (e.g., IP address, browser type, ISP, time of visit) for statistical and security purposes, to prevent abuse or attacks on the site.
Newsletter form protection. To block automated sign-ups, when you start filling in the newsletter form the site loads Cloudflare Turnstile, a Cloudflare check that verifies a person is sending it. Cloudflare receives your IP address and some technical information about your browser, and may store technical security data on your device, used only for this check and not for advertising or profiling. Details in Cloudflare's Turnstile privacy addendum. Legal basis: the controller's legitimate interest in the security of the site and in not sending emails to people who did not ask for them (Art. 6(1)(f) GDPR).
E. Cookies, Meta pixel and visit statistics
This site uses technical cookies, which do not require consent, and the Meta pixel only if you accept it from the banner shown on your first visit. Separately, and only when you fill in the newsletter form, there is the Cloudflare anti-bot check described in section D, which serves the security of the form.
- Technical cookies: the proprietary cookie
eagle_cup_access_globalremembers for 30 days that you have accessed the Live area, to avoid repeated requests; the proprietary cookieecv_consentremembers for 6 months the choice you made in the banner, so that it is not shown on every page.
Meta pixel (only with your consent). If you accept from the banner, the site loads the pixel of Meta Platforms Ireland Limited, the company behind Facebook and Instagram. The pixel tells Meta which pages of the site you open, that you opened the Registrations page, that the registration form was sent successfully and, on the page dedicated to the ads, clicks on the "Register now" and "See the packages" buttons and the successful sending of the information request, together with your IP address, technical data about your browser and the page you came from. It does not send the data written in the forms. It serves two purposes: showing the tournament ads on Facebook and Instagram to people who visited the site, and measuring how many registrations come from the ads. If you have a Facebook or Instagram account, Meta may link this data to your account.
- Pixel cookies:
_fbp(proprietary, 90 days) recognises the browser between visits;_fbc(proprietary, 90 days) is created only if you reach the site from an ad and records which one. If you use Facebook or Instagram in the same browser, Meta also reads its own cookies, such asfr(90 days) on the facebook.com domain. - Legal basis: consent (Art. 6(1)(a) GDPR and Art. 122 of the Italian Personal Data Protection Code). If you decline, or make no choice, the pixel is not loaded and the site works just the same.
- Withdrawal: you can change your choice at any time from the "Cookie preferences" link at the bottom of every page. If you decline after accepting, the site notifies Meta of the withdrawal, deletes the
_fbpand_fbccookies and no longer loads the pixel. - Roles: for the collection of data on the site and its transmission to Meta, 12 SPORT BLU SSD A RL and Meta Platforms Ireland Limited are joint controllers, under Meta's controller addendum. For any further processing Meta is an independent controller: this is described in its privacy policy, which also explains how to exercise your rights towards Meta.
- Transfers outside the European Union: Meta may transfer the data to Meta Platforms, Inc. in the United States, which participates in the EU-U.S. Data Privacy Framework, recognised as adequate by the European Commission in its decision of 10 July 2023.
Visit statistics. To understand how many people visit the site and which pages they read, we use a statistics system that does not use cookies and does not store anything on your device.
For each page opened we collect: the page visited, the day and time, the site you come from (only its name, for example google.com), the type of device (phone, tablet or computer) and how long the page stays open in the foreground.
Your IP address is not stored. It is used only for an instant, together with browser data, to calculate an anonymous code that makes it possible to count the visitors of the day. The code comes from a random key that changes every day and is deleted at midnight: after that it can no longer be linked to you, and those who return on another day are not recognised.
The data is used only by 12 SPORT BLU SSD A RL, in aggregate form, to understand how the site is used and to improve it. It is not used for advertising or profiling and is not sold or transferred.
The processing is carried out by 12 SPORT BLU SSD A RL, which is the data controller and is responsible for the processing. The servers are located in the European Union (Frankfurt, Germany). Requests pass through the Cloudflare network, used to protect the server.
The legal basis is the controller's legitimate interest in knowing how its site is used (Art. 6(1)(f) GDPR), with a system built not to identify visitors.
You can object at any time: if your browser sends the Global Privacy Control signal the statistics do not count you; otherwise you can write to segreteria@eaglecupvolley.it.
3. Data Sharing (Recipients)
Personal data will not be disseminated publicly but may be communicated to:
- Technical Service Providers: Hosting providers, email marketing platforms (Data Processors).
- Consorzio Vero Volley (Partner): Only if the user has checked the specific optional consent box "Partner Marketing", the email will be shared with Consorzio Vero Volley for their promotional purposes.
- Meta Platforms Ireland Limited: only if you accept cookies from the banner, for the pixel described in section 2.E.
4. Data Retention
- Live Access Data: Retained for the duration of the tournament and for the following 6 months for administrative purposes, unless requested otherwise.
- Tournament registration data: Retained for the duration of the edition and for the following 12 months, except for data that the law requires to be kept longer (accounting documents).
- Requests from the contact form: Retained for 12 months.
- Marketing Data: Retained until consent is revoked (unsubscribe) or for a maximum of 24 months from the last interaction.
- Visit statistics: Detailed data is deleted after 90 days. After that only daily totals remain, which do not refer to any person.
- Cookie choice: kept for 6 months in the
ecv_consentcookie, after which the banner asks again. - Meta pixel: the
_fbpand_fbccookies stay in the browser for 90 days; the data received by Meta is retained according to its privacy policy.
5. Rights of the Data Subject
Users may exercise their rights under the GDPR (Arts. 15-22) at any time, including:
- Access, rectification, or erasure of data ("Right to be forgotten").
- Restriction of processing or objection to processing.
- Data portability.
- Withdrawal of consent (via link in emails, from the "Cookie preferences" link for the Meta pixel, or by contacting the Controller).
To exercise these rights, please contact: segreteria@eaglecupvolley.it.
© 2026 Eagle Cup Volley - 12 SPORT BLU SSD A RL.