Privacy notice on the processing of your personal data

(art. 13-14 GDPR)

If you are short on time, here is the essential information:

Who we are

TUTTO BENE S.r.l., Piazza Borromeo, 20123 Milan, Italy, VAT no. IT13655010968. We are the Data Controller of your personal data.

What we collect

Data for expression of interest or event registration (name, contact details, vehicle data), payment data, event photos and videos (both wide-angle and close-up), information on any food intolerances or allergies, website navigation data, etc.

Why

To manage your expression of interest or participation in the event, to document the event, to promote the following edition, for marketing purposes and to comply with legal obligations.

With whom we share

With the technical providers of the website and registration platform, with the technical operator of the hillclimb, with sponsors (only if you consent), and with public authorities when required by law.

For how long

It depends on the specific purpose: 10 years for registration data and image archive; 6 years for expression-of-interest data; 2 years for the newsletter (unless consent is withdrawn).

Your rights

You may access, rectify or erase your data, object to processing, withdraw consent and lodge a complaint with the Italian Data Protection Authority (Garante).

Automated decision-making

No, we do not use automated decision-making processes, including profiling (art. 22(1) and (4) GDPR).

How to contact us

support@tuttobenehillclimb.it

1. Who is the Data Controller

The Data Controller of your personal data is TUTTO BENE S.r.l., with registered office at Piazza Borromeo, 20123 Milan (MI), Italy, Tax Code and VAT no. IT13655010968, registered with the Milan Business Register under no. MI-2736325 (hereinafter also referred to as "we" or the "Controller"). For any request relating to your personal data, to exercise your rights under the GDPR or to obtain clarifications on this notice, please write to support@tuttobenehillclimb.it.

2. Who this notice is addressed to, what data we process and how we collect it

Note: If minor accompanying persons are present at the event, consent to the processing of their data shall be given by the parent or legal guardian at the time of registration, including with reference to images and videos.

3. Newsletter

Subject to your optional consent (art. 6(1)(a) GDPR and art. 130(1) of Italian Legislative Decree no. 196/2003 — Italian Personal Data Protection Code), we will send you communications about the new editions of our events and/or products related to such events. You may withdraw your consent at any time via the "unsubscribe" link included in the communications you receive or by writing to support@tuttobenehillclimb.it.

4. Use and transfer to third parties of images and audio-visual recordings of the event

During the event we take photographs and video recordings for the following purposes: (i) documenting the event (news coverage, historical archive, visual reporting of the event, including through the official website, the Controller's social channels and internal editorial materials); (ii) promoting future editions of the event and the organiser's activities; (iii) promotional, commercial and sponsorship use (publication on printed materials for commercial purposes, at sponsors' points of sale, on sponsors' websites and social channels, in merchandising or co-marketing campaigns).

Although the event takes place on a private track, it is an event open to the public; consequently, all participants can reasonably expect to be filmed, in wide-angle shots, as part of the crowd or in contextual images. In this case, your explicit consent is not required, and — provided that the recordings are generic and do not focus on individuals — the legal basis for the processing is the legitimate interest of the Controller (art. 6(1)(f) GDPR) in documenting and promoting the event.

Conversely, for photographs and video recordings that portray you as a recognisable subject in close-up, as well as for the transfer of such material to our partners and sponsors for publication on promotional and commercial materials and merchandising and co-marketing activities, your explicit consent is always required. We ask you to provide such consent by signing a dedicated release and consent form at the time of registration to the event or purchase of the ticket. In this case, the legal basis for the processing is your explicit consent, given pursuant to art. 6(1)(a) GDPR and art. 96 of Italian Law no. 633 of 22 April 1941 on copyright.

Consent is optional and any refusal will not affect your participation in the event. You may withdraw your consent at any time, without any formality and free of charge, pursuant to art. 7(3) GDPR, by writing to support@tuttobenehillclimb.it. Withdrawal does not affect the lawfulness of processing carried out on the basis of consent before its withdrawal and, for obvious technical reasons, does not allow us to recover copies already lawfully disseminated.

Finally, we inform you that accredited journalists, photographers and influencers will be present at the event, operating in full autonomy as independent controllers for journalistic and reporting purposes, pursuant to art. 85 GDPR. Their activity is not subject to the consent you have given to us and is governed by the professional code of conduct of their profession.

5. With whom we share your data

Your data may be communicated to technical providers, contractual partners and public authorities.

The providers acting as data processors pursuant to art. 28 GDPR are bound by specific agreements requiring compliance with the Controller's instructions, the adoption of appropriate security measures (art. 32 GDPR) and specific confidentiality obligations. For further information regarding our data processors you may ocntact us at support@tuttobenehillclimb.it.

We do not communicate or disseminate your data to third party recipients, except with your specific consent or where required by law.

6. Non-EEA transfers

Our hosting servers are located in the European Union (Hetzner, Germany and Finland). Some transfers occur towards the United States and Canada, on the basis of the EU-US Data Privacy Framework adequacy decision and adequacy decision 2002/2/EC for Canada. In other cases we apply standard contractual clauses (SCCs) or other safeguards pursuant to art. 46 GDPR. You may request a copy of the safeguards in place by writing to: support@tuttobenehillclimb.it.

7. Your rights

You may exercise your rights at any time by writing to: support@tuttobenehillclimb.it.

We will respond as soon as possible and in any event within one month of receipt of the request, extendable by a further two months in case of complex requests, with notice to you (art. 12(3) GDPR).

You may also lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali) (Piazza Venezia 11, 00187 Rome, www.garanteprivacy.it), pursuant to art. 77 GDPR and articles 140-bis et seq. of the Italian Personal Data Protection Code, or seek judicial remedy pursuant to art. 79 GDPR.

8. Cookies and similar technologies

The website uses cookies and similar technologies, both technical and, subject to your consent, analytical and marketing cookies. For details of the cookies used, the purposes, the retention periods and the management of your preferences, please refer to the Cookie Policy accessible from the cookie banner and from the footer of the website.

Cookie consent is managed through Cookiebot, in compliance with the Italian Data Protection Authority's Guidelines on cookies of 10 June 2021 (decision no. 231).

9. Amendments

We reserve the right to modify or update the content of this privacy notice, in part or in full, including as a result of changes in applicable law. You will be informed of such changes through publication on the Website. We invite you to regularly check this section to ensure you are aware of the most recent and updated version.

Last update: May 2026.