Privacy Policy

(pursuant to Art. 13 of EU Regulation 2016/679 – GDPR)

1. Data Controller

The Data Controller is:

Professional Show S.p.A. - FSC Flight Simulator Center

Registered office: Via Praimbole 15/Bis – 35010 Limena (PD) – Italy

Email: privacy@professionalshow.com

Certified Email (PEC): professionalshow@legalmail.it

(hereinafter the “Controller”)

2. Types of Data Processed

The Controller processes the following categories of personal data:

• Identification data (first name, last name)
• Contact data (address, email, telephone)
• Tax and billing data
• Payment data (managed through certified providers)
• Browsing data (IP address, access logs, technical data)
• Data relating to purchasing preferences (in case of marketing and remarketing)

Special categories of data pursuant to Art. 9 of the GDPR are not processed.

3. Purposes of Processing and Legal Basis

Personal data are processed for the following purposes:

A) Execution of the sales contract

• order management
• product shipping
• customer support
• payment management

Legal basis: Art. 6.1.b GDPR (performance of a contract)

B) Legal, tax, and administrative obligations

Legal basis: Art. 6.1.c GDPR (legal obligation)

C) Sending newsletters and promotional communications

• sending informative and promotional emails
• offers on the Controller's products and services

Legal basis: Art. 6.1.a GDPR (consent of the data subject)

Consent is free, specific, and revocable at any time.

D) Advanced marketing and remarketing activities

• personalized advertising
• Google Ads campaigns
• Meta Ads campaigns
• analysis of purchasing preferences

Legal basis: Art. 6.1.a GDPR (consent)

E) Statistical analysis and website improvement

• use of web analytics tools (e.g., Google Analytics)

Legal basis: consent for profiling cookies; legitimate interest for anonymized statistics (Art. 6.1.f GDPR)

4. Nature of Data Provision

The provision of data for contractual and legal purposes is mandatory.

Failure to provide such data will make it impossible to conclude or execute the contract.

The provision of data for marketing and profiling purposes is optional.

5. Processing Methods

Processing is carried out using paper and IT tools, with adequate technical and organizational measures to guarantee the security, integrity, and confidentiality of the data (e.g., firewalls, backups, SSL certificates, authentication systems).

6. Cookies and Tracking Technologies

The website www.fsc.it uses cookies and other tracking technologies to ensure the proper functioning of the platform, analyze traffic, and offer personalized content.

6.1 Types of Cookies used

• Technical and Strictly Necessary Cookies: Essential for navigation and for providing requested services (e.g., cart management, authentication). Prior consent from the user is not required for these cookies.
• Analytical Cookies (Google Analytics): Used to collect information in aggregate and anonymous form on the number of users and how they visit the site, in order to optimize performance.
• Profiling and Remarketing Cookies (Google Ads, Meta Ads): Used to track the user's navigation and create profiles based on tastes and habits. They allow for the transmission of targeted advertising messages in line with the preferences shown by the user.

6.2 Third-party services and links to relevant policies

The integration of external services involves the processing of data by third parties. Below are the links to the respective policies for managing consent and exercising rights:

6.3 Consent Management

The use of non-technical cookies is subject to the explicit consent of the user via the specific banner compliant with the Guidelines of the Data Protection Authority. The user can revoke or modify their preferences at any time.

For more information and a complete list of individual cookies used, a dedicated Cookie Policy is available.

7. Communication of Data

Data may be communicated to:

• Banking institutions and payment providers
• Shipping and logistics companies
• Tax, legal, and administrative consultants
• IT and hosting providers
• Email marketing platforms
• Advertising platforms (e.g., Google, Meta)

These entities operate as Data Processors pursuant to Art. 28 GDPR or as independent Controllers.

Data are not subject to dissemination.

8. Data Transfer Outside the EU

Since the Controller sells globally and uses international technological platforms, some data may be transferred to countries outside the EU.

Such transfers take place in compliance with Art. 44 et seq. of the GDPR, through:

• adequacy decisions of the European Commission
• Standard Contractual Clauses (SCC)
• additional appropriate contractual guarantees

9. Retention Period

Data are stored for:

• 10 years for tax and administrative purposes
• 24 months for marketing purposes
• 12 months for profiling purposes
• until withdrawal of consent for newsletters

10. Rights of the Data Subject

The data subject may exercise the rights provided for in Artt. 15–22 GDPR:

• access to data
• rectification
• erasure (right to be forgotten)
• restriction of processing
• objection
• data portability
• withdrawal of consent

It is also possible to lodge a complaint with the Data Protection Authority (Garante per la protezione dei dati personali).

11. Minors

The website is not intended for minors under 16 years of age.

The Controller does not knowingly collect personal data of minors.

12. Procedures for Exercising Rights

Requests can be sent to:

privacy@professionalshow.com

The Controller will respond within 1 month of the request, subject to extensions in cases provided for by Art. 12 GDPR.

13. Updates

This Privacy Policy may be subject to changes.

The updated version is always available on the website.