FINN World Masters 2027

Privacy Policy

Last updated: 14 October 2026

This policy explains how Circolo Nautico Punta Imperatore processes personal data collected through the finnworldmaster2027.com website, in accordance with Regulation (EU) 2016/679 (the “GDPR”) and Italian Legislative Decree 196/2003 as amended by Legislative Decree 101/2018.

1. Data Controller

The Data Controller is Circolo Nautico Punta Imperatore Forio d’Ischia S.S.D.S.R.L., VAT number 06044071212, registered at Via Marina 50/55, 80075 Forio d’Ischia (NA), Italy.

For any request regarding the processing of your personal data, you can write to info@finnworldmaster2027.com. The Data Controller has not appointed a Data Protection Officer (DPO), as this is not mandatory given the size and nature of the activities carried out: the Data Controller itself is the direct point of contact for privacy matters.

2. What data we collect and why

We collect personal data mainly through the event entry forms (Sailor and Coach/Team Representative) and, if you choose to contact us, by email.

Purpose	Data processed
Managing your event entry	Full name, nationality, date of birth, email, phone, club, sail number, FIV membership/licence number, category
Checking sporting and safety eligibility	ID document/licence, measurement certificate, class card, insurance policy, advertising licence (where required)
Safety at sea and emergencies	Emergency contact, support RIB/vehicle details (where applicable for Coaches/Team Representatives)
Processing the entry fee payment	Payment data is processed directly by Stripe (see section 4); we only retain the payment outcome and amount
Publishing the entry list	Name, nationality, club, sail number/boat — published only after payment confirmation and manual verification
Event-related communications	Email and phone, to send confirmations, organisational updates and service communications
Safeguarding reports	See the dedicated section 7

3. Legal basis for processing

We process your data based on:

• performance of a contract (GDPR art. 6.1.b): to manage your event entry and the related payment;
• consent (GDPR art. 6.1.a): for any publication of photos/videos featuring you and for inclusion in the public entry list;
• legal obligation (GDPR art. 6.1.c): for tax and accounting requirements related to the entry fee;
• legitimate interest and sector obligations (GDPR art. 6.1.f and art. 9.2.g): for handling Safeguarding reports, in implementation of Italian Legislative Decree 36/2021, Legislative Decree 39/2021 and CONI Resolution No. 255/2023.

4. Who we share data with

Your data may be shared with the following parties, who act as data processors or independently under their own privacy notices:

• Stripe Payments Europe, Ltd. — to process card payments. Stripe receives and processes card payment data directly; our site never sees or stores it. Privacy notice: stripe.com/privacy.
• Aruba S.p.A. — our website hosting provider and the email account used for automated communications.
• Competent authorities — where required by law or by order of public authorities.

We do not sell or share your data with third parties for marketing purposes.

5. Transfers of data outside the European Union

Stripe may transfer some data to infrastructure located outside the European Economic Area. In such cases, the transfer relies on the Standard Contractual Clauses approved by the European Commission or other equivalent safeguards under the GDPR. All other data (hosting, email, entry data) remains on infrastructure located in Italy/EU.

6. How long we keep your data

Personal data and documents collected for event entry are kept for 2 years from the end of the event (June 2027), after which they are deleted, unless a longer retention period is required to handle ongoing disputes or claims.

Accounting and tax documents related to payments (e.g. invoices and receipts) are kept for 10 years, as required by Italian tax law, regardless of the period indicated above.

7. Safeguarding reports

Reports submitted through the Safeguarding form are handled with particular confidentiality, as described on the dedicated Safeguarding page. These reports are never stored in the website’s database: they are forwarded directly to the dedicated mailbox safeguarding@finnworldmaster2027.com and handled according to internal Safeguarding and Whistleblowing procedures, with retention periods consistent with applicable law on the protection of minors and vulnerable persons.

8. Minors

The website and entry forms are intended for an adult audience. Any data concerning minors processed in connection with Safeguarding reports is handled with enhanced protection measures, as described in section 7.

9. Your rights

At any time you can request, by writing to info@finnworldmaster2027.com:

• access to your personal data and a copy of it;
• rectification of inaccurate or incomplete data;
• erasure of your data, within the limits permitted by law;
• restriction of, or objection to, processing;
• portability of data provided on the basis of the contract or consent;
• withdrawal of consent, where processing is based on it, without affecting the lawfulness of processing carried out before withdrawal.

You also have the right to lodge a complaint with the Italian Data Protection Authority (Garante per la Protezione dei Dati Personali, www.garanteprivacy.it) if you believe the processing of your data breaches applicable law.

10. Changes to this policy

This policy may be updated over time, for example to reflect legal or organisational changes. The last update date is shown at the top of this page. We encourage you to review it periodically.

For information about the cookies used by this website, please see our Cookie Policy.