Privacy and cookies

This notice, provided under Article 13 of Regulation (EU) 2016/679 (“GDPR”), covers visits to www.aikidoiaido.it and enquiries sent to the dojo's contact details. It explains which data is processed, why, and how to exercise your rights.

1. Data controller

KenYuShinKan-Dojo Associazione Sportiva Dilettantistica (a non-profit sports association recognized by CONI, no. 46624) - VAT no. 90116590325.
Via Valmaura 57/a, 34148 Trieste (TS), Italy.
Email: kenyushinkan@gmail.com · Phone: +39 339 256 8810.

2. Data processed, purposes and legal bases

This is an informational website with no accounts, purchases or contact forms. It does not integrate visitor analytics, advertising or tracking for marketing purposes. Fonts and images are served with the website's pages.

• Browsing and security. To deliver pages and protect the site against abuse and attacks, Cloudflare's infrastructure processes technical data such as IP address, request date and time, requested URL, browser and device information, request outcome and security signals. This data may be recorded in technical logs. The legal basis is the association's legitimate interest in keeping the website available and secure (Article 6(1)(f) GDPR).
• Email or telephone enquiries. We process the contact details and information you choose to share to reply and handle related correspondence. For general enquiries, the legal basis is our legitimate interest in responding to people who contact the dojo (Article 6(1)(f) GDPR); where an enquiry concerns steps prior to entering into a contract, the basis is Article 6(1)(b) GDPR.

Technical data is necessary to connect to and deliver the website. Providing data by email or telephone is optional; without the necessary information, we may be unable to answer. Please send only information relevant to your enquiry, avoiding unnecessary medical documents or other sensitive data.

Any processing for membership and participation in the association's activities falls outside this website notice.

3. Cookies and Cloudflare protections

The website's code does not set cookies or use browser storage to track visitors. However, Cloudflare may set technical security cookies when required by active protections. These are not advertising cookies.

• __cf_bm: may be used by bot protection services; it expires after 30 minutes of continuous inactivity.
• cf_clearance: may store the outcome of a security check so it does not need to be repeated for every request. Its lifetime depends on the protection and configuration in use; Cloudflare documents a default of 30 minutes for its Challenge Passage service.

These cookies are not necessarily present on every visit. The cookies Cloudflare may use are described in its cookie documentation; the lifetime of Challenge Passage is described in its service documentation.

Prior consent is not required for strictly necessary technical cookies, as explained in the Italian data protection authority's cookie FAQ. You can delete or block cookies through your browser settings; blocking security cookies may trigger additional checks or prevent access to the website.

4. Data recipients

The website uses Cloudflare, Inc., 101 Townsend Street, San Francisco, CA 94107, United States, for hosting, content delivery and security. For personal data processed on the association's behalf, Cloudflare acts as a processor under its Data Processing Addendum (DPA), including through the sub-processors covered by that agreement. Further information about Cloudflare's processing is available in its privacy policy.

Communications are handled by authorised people within the association. The contact address uses Google's Gmail: when you email us, message data is also processed by the email service under the applicable terms and Google's privacy policy. Data may also be disclosed to authorities where required by law. The association does not sell personal data or make it public for commercial purposes.

5. Transfers outside the European Economic Area

Cloudflare operates an international network: data may be processed outside the European Economic Area (EEA), including in the United States. Processing exclusively within Europe is therefore not guaranteed. Cloudflare's DPA provides for the applicable transfer mechanisms, including adequacy decisions where applicable and, for transfers that require them, the European Commission's Standard Contractual Clauses and additional safeguards.

Using Gmail may also involve transfers outside the EEA. Google describes the applicable grounds and safeguards on its data transfer frameworks page. You can consult these documents or contact us for information about the safeguards relating to your data and to obtain a copy.

6. Retention period

• Technical data and logs. Retention depends on the Cloudflare service used and the applicable settings. The criteria are the time needed to deliver the service, detect and investigate problems or abuse, handle security incidents and meet any legal obligations. There is no single period covering all data processed by the infrastructure; further details are provided in Cloudflare's privacy policy.
• Communications. Data is retained to handle your enquiry and related correspondence. Further retention is limited to what is necessary for legal obligations or to establish, exercise or defend a legal claim, taking into account the nature of the enquiry and applicable time limits.
• Technical cookies. The lifetimes and criteria described in section 3 apply; you can also delete cookies through your browser before they expire.

7. Your rights

Subject to the conditions and limits set by the GDPR, you can request access, rectification, erasure and restriction of processing. You can object to processing based on legitimate interests on grounds relating to your particular situation. Data portability applies where its requirements are met, in particular for automated processing based on consent or a contract.

To exercise your rights, write to kenyushinkan@gmail.com. We will normally respond within one month of receipt; any extension allowed by the GDPR will be communicated with the reasons for it.

You can also lodge a complaint with the Italian Garante per la protezione dei dati personali or the competent supervisory authority in the country where you habitually live, work or believe an infringement occurred.

The website does not carry out marketing profiling or make decisions based solely on automated processing that have legal or similarly significant effects on people. Cloudflare's automated security checks may restrict suspicious requests or require a check before granting access.

8. Links to third-party sites

Links to Facebook, Instagram, Google Maps and other external websites are ordinary links, not embedded content. Following a link takes you to the chosen service, which processes data under its own privacy notice. Email and telephone links open the application configured on your device.

9. Changes

This notice may be updated. The date of the last revision is shown at the top of the page.