Privacy notice
Translation for information only. The Italian version is legally binding.
Last updated: 14 October 2026
This notice explains how H2O & Co. Sport and Fun A.S.D. processes the personal data of people who visit this website or contact us, under Articles 13 and 14 of Regulation (EU) 2016/679 (GDPR) and the Italian Privacy Code (Legislative Decree 196/2003, as amended by Legislative Decree 101/2018).
1. Data controller
H2O & Co. Sport and Fun A.S.D., Viale Druso 43, 39100 Bolzano, Italy – tax code and VAT no. 02607020217 – e-mail info@h2o-diving.org – tel. 339 6762401.
2. Browsing data
When you visit the site, the server hosting it automatically records some technical data: IP address, date and time of the request, page requested, response code, browser and operating system (server logs).
This data is used only to run the site, keep it secure and detect abuse. It is not used to profile visitors or combined with other data. Legal basis: the controller's legitimate interest in the security and proper functioning of the site (Art. 6(1)(f) GDPR). Logs are kept only as long as strictly necessary and are deleted automatically according to the hosting provider's settings.
3. Cookies and tracking
The site uses no cookies, neither technical nor profiling, and no analytics or tracking tools. Fonts, images and videos are hosted directly on our server. Details are on the Cookies page.
4. Third-party content
Google Maps: on the Contact page the map loads only if you click "Load map". From then on your browser connects to Google's servers, which receive your IP address and may set their own cookies. This processing is carried out by Google Ireland Limited under its own privacy policy: policies.google.com/privacy. Alternatively, you can use the "Open in Google Maps" link.
Facebook and Instagram: the icons are plain links. No data is sent to Meta unless you click and open their site.
5. Data you give us
If you e-mail or phone us (for example about courses or membership), we process the data you provide (name, contact details, content of your request) only to reply and, if you ask, to start your membership. Legal basis: pre-contractual steps at your request (Art. 6(1)(b) GDPR) and our legitimate interest in replying (point f). We keep correspondence as long as needed to handle your request and in any case no longer than 24 months, unless it becomes part of the membership relationship.
6. Members' and students' data
Data collected with the membership form is used for the club's statutory activities: running courses and amateur sport, FIPSAS federation membership, insurance, administrative and tax obligations. Legal basis: the membership relationship (Art. 6(1)(b) GDPR) and legal obligations (point c). Health data required for sports fitness (medical certificate) is processed only to check fitness for the activity (Art. 9(2)(b) and (h) GDPR).
For these purposes data may be shared with: club volunteers authorised to process it; FIPSAS and other federation bodies; insurance companies; the Municipality of Bolzano for pool entry passes; consultants and authorities where required by law. Data is not made public.
The full privacy information for members is available with the membership form.
7. Hosting and data transfers
The site is hosted by a hosting provider acting as data processor. Its servers may be located outside the European Union (United States); in that case the transfer is based on the safeguards in Articles 44 et seq. GDPR (the EU-US Data Privacy Framework adequacy decision, where applicable, or standard contractual clauses).
8. Providing your data
Browsing data is necessary to display the site. Any data you send us is optional, but without it we cannot answer your request or complete your membership.
9. Your rights
At any time you can request access to your data, rectification, erasure, restriction of processing and portability, and object to processing based on legitimate interest (Arts. 15–22 GDPR). Where processing is based on consent, you can withdraw it at any time. To exercise your rights, write to info@h2o-diving.org.
If you believe the processing breaches the GDPR, you can lodge a complaint with the Italian data protection authority (Garante per la protezione dei dati personali, www.garanteprivacy.it).
10. Changes
This notice may be updated. The date of the latest version is shown at the top.
