Go back

Privacy policy

Last updated: June 2026

This Privacy Policy describes how personal data of users (hereinafter "User" or "You") who use the GIOCA.cloud website and related services is processed, in compliance with the General Data Protection Regulation (GDPR - EU Reg. 2016/679) and the Swiss Federal Act on Data Protection (nFADP).

1. Data Controller

The Data Controller is:

2. Personal Data Collected

We collect the following personal data:

Data provided voluntarily by the User:

  • First name, last name, email address, phone number;
  • Registration and login data (username, encrypted password);
  • Any information entered in the user profile;
  • Content of communications sent through our contact channels.

Data collected automatically:

  • IP address, browser type, operating system, pages visited, access dates and times;
  • Technical and analytical cookies (more details in our Cookie Policy).

Booking-related data:

  • Selected sports center, date, time and duration of the booking;
  • Booking and payment history.

3. Processing Purposes and Legal Basis

Personal data is processed for the following purposes:

Purpose Legal basis
Registration and account management Performance of a contract (Art. 6.1.b GDPR)
Booking and payment management Performance of a contract (Art. 6.1.b GDPR)
Service communications (confirmations, reminders) Performance of a contract (Art. 6.1.b GDPR)
Customer support and complaint handling Legitimate interest (Art. 6.1.f GDPR)
Newsletter and commercial communications (with consent) Consent (Art. 6.1.a GDPR)
Service improvement and statistical analysis Legitimate interest (Art. 6.1.f GDPR)
Compliance with legal obligations (tax, accounting) Legal obligation (Art. 6.1.c GDPR)

4. Data Recipients

Personal data may be communicated to:

  • Authorized personnel and data processors;
  • Partner sports centers for booking management;
  • Payment service providers (PayPal, Stripe, etc.);
  • Technical service providers (hosting, maintenance, analytics);
  • Competent authorities, where required by law.

Data is not disclosed to third parties for marketing purposes without your explicit consent.

5. Transfer of Data Abroad

Data is primarily processed in Switzerland and European Union countries. Should it be necessary to transfer data to third countries, we guarantee the application of adequate safeguards (EU Commission adequacy decisions, standard contractual clauses).

6. Retention Period

We retain personal data for the time necessary to achieve the purposes for which it was collected:

  • Account data: until the account deletion request;
  • Booking data: 10 years for tax/accounting obligations;
  • Marketing data: until consent is revoked;
  • Anonymized browsing data: up to 26 months.

7. Data Subject Rights

Under the GDPR (Arts. 15-22), you have the right to:

  1. Access — obtain confirmation of the existence of your data and know its content and origin;
  2. Rectification — request the correction of inaccurate or incomplete data;
  3. Erasure ("right to be forgotten") — request the deletion of data when no longer necessary;
  4. Restriction — request the suspension of processing in certain circumstances;
  5. Portability — receive data in a structured format and transfer it to another controller;
  6. Objection — object to processing for marketing purposes or based on legitimate interest;
  7. Withdrawal of consent — at any time, without affecting the lawfulness of prior processing.

To exercise your rights, contact us at fabiobiffi2000@gmail.com. We will respond within 30 days. You also have the right to lodge a complaint with the competent supervisory authority (Federal Data Protection and Information Commissioner for Switzerland, or the Italian Data Protection Authority for Italy).

8. Data Security

We adopt adequate technical and organizational security measures to protect personal data from unauthorized access, destruction, loss or alteration. We use SSL/TLS encryption for data transmission and store information in secure environments.

9. Changes to this Policy

We reserve the right to update this policy at any time. Changes will be posted on this page with an indication of the update date. We invite you to consult it periodically.

10. Contact

For any questions or requests regarding the processing of personal data, you can contact us: