Privacy Policy

(Art. 13 of EU Regulation 2016/679)
INF21 - v.05 of 22/03/23


Dear User,
We would like to provide some information about the methods and purposes related to the processing of your personal data.

Who we are

The data controller is:

Hellas Verona Football Club S.p.A. (hereinafter HVFC), C.F./P.IVA 02284490238, with registered and operational headquarters in VERONA (VR) Via Olanda 11.


The Data Controller will be joined by the following company for some processing identified in section 3 below:

Women Hellas Verona S.s.d. a r.l. (hereinafter WHV), C.F./P.IVA 04577020235, with registered and operational headquarters in VERONA (VR), Via Olanda 11.


The companies will act as co-processors of the processing having to be understood in this way as “two or more companies jointly determining the purposes and means of the processing” as stipulated in Article 26 of the Regulations.

Nature and provision of data

The provision of your personal data to HVFC, for the purpose referred to in point a) below is optional in nature, but it is essential to access the hellasverona.it website.


In other words, you can access the home page of this site and navigate through it without revealing any personal information to us. In order to provide you with certain services, HVFC may need to collect certain personal data, which will be requested if and when necessary. In these cases you will be given explicit authorization to process the data provided.


Browsing data will be collected automatically.


The provision of your personal data to HVFC and WHV, by subscription to the newsletter, for the purposes set out in points b) and c) below is optional in nature, but it is essential for the sending of informative material, our news or promotions and/or for the personalization of advertising communication. Therefore, should you refuse to provide the necessary data, these services cannot be provided.

Purpose of processing

We inform you that your personal data will be used for the following purposes of processing:


Hellas Verona Football Club S.p.A.


a) Browsing hellasverona.it
Data retention period: 30 days.


Hellas Verona Football Club S.p.A. and Women Hellas Verona S.s.d. a r.l.:


b) Use of contact data for commercial and informational purposes (Massive Mail Marketing Campaigns, Direct Mail Marketing, etc.), including through profiling processes, aimed at personalizing the commercial offer to make it more closely match customer interests.
Retention Period: 2 Years from giving consent (12 months for profiling), unless further confirmation.


c) Communication to identified third parties (Commercial Sponsors, FIGC, Lega Calcio and related sponsors) for commercial initiatives and market research.

Legal Basis

The legal bases, which legitimize the treatments described in this policy, are:

  • For the purposes of point a): pre-contractual or contractual execution to which the data subject is a party (art. 6 c.1 lett.b Reg.UE 2016/679).
  • For the purposes under b) and c): explicit consent (Art. 6 c.1 lett.a Reg.EU 2016/679).


The Data Controllers HVFC and WHV will process your personal data only to the extent that it is indispensable, in relation to the objective of the purposes mentioned in the preceding paragraph, in accordance with the provisions of the current legislation on the protection of personal data.

Method of treatment

Your personal data, as a “data subject,” specifically:

  • Browsing data (IP addresses or the domain names of computers and terminals used by users, URI/URL notation addresses, the time of the request, and other parameters related to the user's operating system and computing environment).
    Data category: Identifiers - Personal data: common
  • Name, contact information (E-mail address).


Data category: Identifiers - Personal data: common


They will be processed with a high level of security and in any case always in accordance with the most modern standards. All protection measures indicated by the Personal Data Protection Law and applicable legislation, as well as those determined by the Data Controller, are implemented.


Data will be processed by the authorized categories below:

  • Processors for: Site hosting service management, computer media management.
  • Persons authorized to process for: Resp.Sales (SD), Op.Gest.Marketing (SA), Resp.IT (SD), Op.IT Support (SA).

Communication and transfer of data

The data, collected by the Data Controller, may be communicated, in addition to the subjects mentioned above, to additional categories of subjects for whom the communication is strictly necessary, functional and compatible with the legal basis governing the processing of your data.


As part of the processing carried out by the entities described above, your data will not be transferred to third countries.

Automated decision making and profiling

The processing of your data may be subject, following your explicit consent, to profiling in order to provide you with communications more in line with your interests. In no case will automated decision-making processes be used.

Rights of the data subject

In your capacity as a Data Subject, you enjoy the rights set forth in Sections 2, 3 and 4 of Chapter III of Regulation (EU) 2016/679 (e.g., to request from the Data Controller: access to and rectification or erasure of your personal data; to restrict the processing of your personal data; to object to its processing). The Data Subject has in particular the right to:

  • to obtain confirmation from the Data Controller whether or not personal data concerning him or her is being processed and, if so, to obtain access from the personal data and information provided for in Article 15 of EU Regulation No. 679 of 2016;
  • To obtain from the Data Controller the rectification of inaccurate personal data concerning him/her;
  • obtain the deletion of personal data concerning him/her, where such data is no longer necessary in relation to the purposes for which it was collected or otherwise processed, or where further conditions set out in Article 17 EU Regulation No. 679/2016 are met and provided that the conditions set out in Article 17(3) EU Regulation No. 679/2016 are not met;
  • obtain limitation of processing from the Controller when:
    • the data subject disputes the accuracy of personal data, for the period necessary for the Data Controller to verify the accuracy of such personal data;
    • the processing is found to be unlawful but the data subject himself or herself objects to the deletion and instead requests the application of measures of limitation or requests that the processing of the same be carried out for the establishment or defense of a right of his or her in a court of law;
  • receive in a structured, commonly used and machine-readable format the personal data concerning him/her; in the event of the exercise of this right, it will be the right of the data subject to request that the Data Controller transmit the said data directly to another data controller;
  • to object to the processing of personal data concerning him/her in case the conditions of Art. 21 EU Regulation No. 679/2016, paragraph 2 are met;
  • propose a complaint to a supervisory authority.


Regarding the exercise of these rights, the Data Subject may contact:

Data controller

HELLAS VERONA FOOTBALL CLUB S.P.A.
VERONA (VR), Via Olanda 11
C.F.: 02284490238 / P.I.: 02284490238
E-Mail: privacy@hellasverona.it
DPO: dpo@hellasverona.it

Data controllers (for the purposes of (b) and (c))

WOMEN HELLAS VERONA S.S.D. A R.L.
VERONA (VR), Via Olanda 11
C.F.: 04577020235 / P.I.: 04577020235
E-Mail: privacy@hellasverona.it
DPO: dpo@hellasverona.it

Data retention

The personal data you provide us with will be kept for the purpose of performing the agreed service and will be retained for as long as necessary to perform the service. Retention may take place by:

  • storage within the hardware systems of the Data Controller or its controllers;
  • archiving in accordance with the Digital Administration Code; in this case, the Owner will resort exclusively to accredited entities pursuant to Article 29 CAD where the same is not carried out directly on its own application systems.