Sunday, July 14th

- Stelvio Pass

Privacy Policy


The aim of this privacy policy is to describe how this website is administered and how the personal information of users/visitors to the website is processed. This privacy policy is also for information purposes pursuant to articles 13 and 14 of the Regulation (EU) 2016/679 (hereinafter, the “GDPR”).


This policy applies exclusively to the website of Mapei S.p.A., not to other websites that may be accessed by users through links.


Mapei S.p.A., with registered offices at Via Cafiero 22, 20158 Milan, Italy (the “Company”) is the Data Controller, pursuant to Articles 4, n. 7) and 24 of the GDPR, of the processing of the personal data collected through this website.


Personal data processing means any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means, even if not stored in a database, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction;


The Company therefore informs you, as Data Subject, that according to Articles 13 and 14 of the GDPR will process said data for the purposes indicated below, manually and / or with the support of IT or telematic means.


1.     Purposes of the data processing


The Data are processed in compliance with the GDPR provisions, for the following purposes:


•         SURFING INFORMATION: While the IT systems and software procedures adopted to run this website are performing their routine tasks and functions, they acquire certain personal information which is implicitly transmitted while using Internet communications protocols. The information that falls under this category is: IP addresses, the type of browser used, the operating system, the domain and website addresses used to access or exit the website, information on the pages within the website visited by the user, the time the user accessed the website, how long the user remains on each page, an internal route analysis and other parameters about the user’s operating system and IT environment. This technical/IT information is collected, consolidated and used completely anonymously. These data are processed with the aim of allowing and controlling a correct use of this website, as well as of collecting anonymous statistical information on its use, and will be cancelled immediately after the processing.


•         INFORMATION SUPPLIED VOLUNTARILY BY THE USER. Data that may be voluntarily supplied by the user are processed only to the extent the user grants his/her consent to the processing and for the following purposes:


o    PARTICIPATION IN THE “RESTELVIO” EVENT: For purposes connected with the participation in, and the provision of services related to, the ReStelvio sport  event, the visitor will be asked to register to the website and, therefore, create a personal account. When registering to the website, the visitor will be asked to voluntary supply certain personal information by completing a registration form such as first name, surname, home address, email address, mobile and/or landline phone number. Personal information supplied voluntarily is to create a user account and for other purposes strictly necessary for, and/or connected to, the participation in the ReStelvio sport event  and correct administration of the same, such as  1. to register for the event and for all related and subsequent requirements; 2.  to send sms, emails or updating newsletters on the state of the activities and news on the event (such as delays, route changes, regulation amendments); 3. to insert the biographical data in the databases of the company (used exclusively for the event); 4. to comply with requirements set forth by laws, regulations and EU legislation or with orders of authorities and supervisory bodies; 5. to comply with  contractual or statutory obligations arising from the relationship entered into with you, or to respond to your pre- and post-contractual requests and, in any case, to manage our commercial and/or professional relationship; 6. to keep the accounts and manage collections and payments; 7. for statistical purposes, on an anonymous and aggregate basis (i.e., number of participants, divided by sex, country or region), aimed at searching sponsors, commercial partners and institutional partners of the event.


o    MARKETING. To send emails with our newsletter or other informative materials and for promotional and/or marketing purposes.

o    PROFILING. For profiling purposes correlated to market researches and statistical analysis. This category also includes activities connected or correlated to the profiling of users to identify their tastes, preferences, habits, needs and choices to improve the quality of the services provided by the Mapei Group.

2.     Communication of the Data


Data may be processed by employees and collaborators of Mapei S.p.A. or companies of the Mapei Group as “persons in charge of the processing” (i.e., persons who, under the direct authority of the Controller or Processor, are authorised to process personal data, as provided for in Article 4, number 10 and 29 of the GDPR) and Data Processors.


Data may also be processed by trusted companies providing, on behalf of Mapei or of the Mapei Group companies, technical and organizational services. These companies are direct collaborators of Mapei S.p.A. or of the Mapei Group companies and are appointed as Data Processors. Their list is constantly updated and is available, upon request, by sending a communication to the above mentioned address or an email to


3.     Nature of the provision of Data and consequences of the refusal




To access register and participate in the ReStelvio sport event, the supply of personal information is necessary. The refusal to supply said information will render Mapei S.p.A. unable to provide the service required.




To proceed with the processing for marketing purposes Mapei S.p.A. obtains a specific, separate, expressed, documented, preventive and optional consent.


By giving the consent to the processing for marketing purposes, the Data Subject specifically acknowledges the promotional, commercial and marketing purposes (included the consequent administrative and managing activities) and expressively allow the processing (the means used for the process could be: call with operator or other non-electronic means, not telematics or not supported by automatic, electronic or telematics mechanisms and / or procedures and where the means used for the process are e-mail, fax, sms, mms, automatic systems without operator and similar, including electronic platforms and other electronic means) according to art. 6, paragraph 1, letter (a) of the GDPR.


A refusal to provide the consent to the processing for marketing purposes will not determine any consequence regarding the execution of a contract, business relationship, or other relationship with the user.


The Data Subject is free to give the consent to further communications to third parties that would proceed processing for marketing purposes. In case of a refusal to provide the consent to further communications to Third Parties that would proceed processing for marketing purposes, the consequence will be that there will be no communication and the data will be processed solely and exclusively by the Company, where the Data Subject has given consent to the treatment for marketing purposes.



It is possible that for marketing purposes and to improve the Services, the Company
carries out data processing through “profiling”. For such processing, and for the purpose of complete information, reference is made to the definition in art. 4, paragraph 1, n. (4) of the GDPR, that define “profiling” as “any form of automated processing of personal data consisting of the use of personal data to evaluate certain personal aspects relating to a natural person”.


To proceed with the profiling activity Mapei S.p.A. obtains the previous and specific consent of the Data Subject.


In case of a refusal to provide the consent for profiling activities, the consequence will be the impossibility for the Company to proceed with the aforementioned processing. The Data Subject is free to give the consent to the marketing purposes and not to the profiling activities and/or to further communications to third parties that would proceed to profiling activities. In case of a refusal to provide the consent to the profiling activities and/or to further communications to third parties that would proceed to profiling activities, the consequence will be that there will be no profiling activities by the Company and communication to third parties and the data will be processed solely and exclusively by the Company, where the Data Subject has given consent to the treatment for marketing purposes. The data that are subjects to profiling activities will not be object to any disclosure.





In any case, even if the Data Subject has given consent to authorize the Company to pursue all the purposes aforementioned, he/she will remain free at any time to revoke it.

As provided for in Article 21 of the GDPR, the Data Subject has the right to object at any time to processing of personal data concerning him or her for the above purposes. In such a case, the personal data shall no longer be processed for said purposes.


4.     Transfer of the Personal Data to non-EEA Third Countries


The collected and processed data may be transferred for the above-mentioned purposes outside the European Economic Area (i.e., member States of the European Union, together with Norway, Iceland and Liechtenstein) to;

  • Third party providers of IT services and/or data storage, also cloud-based.
  • Mapei Group companies.

The data are transferred only in compliance with data protection laws and where the means of transfer provides adequate safeguards in relation to the data, for example:

  • by way of data transfer agreement, incorporating the current standard contractual clauses adopted by the European Commission for the transfer of personal data by data controllers in the EEA to data controllers and processors in jurisdictions without adequate data protection laws; or
  • by signing up to the EU-U.S. Privacy Shield Framework for the transfer of personal data from entities in the EU to entities in the United States of America or any equivalent agreement in respect of other jurisdictions; or
  • transferring the data to a country where there has been a finding of adequacy by the European Commission in respect of that country's levels of data protection via its legislation; or
  • where it is necessary for the conclusion or performance of a contract between ourselves and a third party and the transfer is in the interests of the data subject for the purposes of that contract; or
  • where the data subject has consented to the data transfer.


5.     Duration of the processing of data


All personal data are collected and registered in a lawful and fair manner and for the purposes described above. Data are processed also with the help of IT systems and databases on terms which are consistent with said purposes in order to ensure their security and confidentiality.

The personal data will be stored in compliance with the principle of proportionality in such a way as to allow the identification of the Data Subject and until the purposes of the processing have been pursued.


6.     Data Controller and Data Processors


The Data Controller is:

Mapei S.p.A. with sole shareholder

Via C. Cafiero 22

20158, Milan



As mentioned above, data may also be processed by trusted companies that provide, on behalf of Mapei S.p.A. or of the Mapei Group companies, technical and organizational services. These companies are direct collaborators of Mapei S.p.A. or of the Mapei Group companies and are appointed as Data Processors. Their list is constantly updated and is available, upon request, by sending a communication to the above mentioned address or an email to


7.     Rights of the Data Subject


Pursuant to Articles 13, paragraph 2, letters (b) and (d), 14, paragraph 2, letters c) and e), 15, 18, 19 and 21 of the GDPR, the Data Subject:

a) has the right to request to the Company access to the persona data, their rectification or erasure, the limitation of the processing, or to object to their processing;

b) has the right to the portability of the data pursuant to Article 20 of the GDPR;

c) has the right to file a claim with the Authority for the protection of personal data, in accordance with the procedures and indications available on the official website of the Authority

Any rectification, erasure or limitation of the processing made on request of the Data Subject – unless impossible or requiring an unreasonable effort – will be notified by the Company to those to whom the personal data have been communicated. The Company may communicate their names to the Data Subject, if so requested by the Data Subject.

The exercise of rights is not subject to any form of constraint and is free. To exercise the rights, the Data Subject may contact the Data Controller by sending a notice to the above mentioned address or an e-mail to


8.     Social media plug-Ins


This website contains plug-ins for certain social media platforms (such as Facebook). Social media plug-ins are special tools which allow the functions of social media platforms to be directly incorporated into the website (such as the “Like” function of Facebook) and are indicated by the respective logo of each social media platform. When you visit a page on this website and interact with the plug-in (such as by clicking on the “Like” button), or if you decide to leave a comment, the corresponding information is transmitted by the browser directly to the social media platform (in this case Facebook) which memorises it. For further information on the purposes, the type and the methods used to collect, process and store personal information by the social media platform, and for information on how to exercise your rights, please refer to the privacy policy of the social media platform.


9.     Links to third party websites


From this website, it is possible to connect directly to other third party websites through dedicated links.

The holder of this website declines all responsibility for the way personal information is administered and managed by third party websites and the management of authentication credentials supplied by third parties.


10.   Cookies

Cookies are information packages sent by a web server (e.g. the website) to the user’s internet browser which are automatically stored on the user’s computer and then sent automatically back to the server every time the website is accessed. The default setting for almost all web browsers is to automatically accept cookies. This website does not use cookies to transmit information of a personal nature. The use of session cookies (which are not stored permanently on the user’s computer and are cancelled each time the web browser is closed) is strictly limited to the transmission of session identities required in order to permit the website to be used safely and efficiently. Session cookies used on this website avoid the need to use other IT techniques, which could be potentially detrimental to the user’s privacy while surfing, and do not permit acquisition of the user’s personal information. Permanent cookies are also used by this website, that is, cookies which remain stored on the hard disk of the computer until they expire or are cancelled by the user/visitor. By using permanent cookies, visitors to the website (or other users using the same computer) are automatically recognised each time they visit the website. Visitors are able to set their browser so that it accepts/refuses all cookies or a message appears every time a cookie is proposed so they may decide whether to accept it or not. At any time the user can modify the default setting and disable all cookies (that is, block them completely) by selecting the highest protection level. For all other information regarding the characteristics, types, methods and ways of removing, cancelling or disabling cookies present on the website, please refer to the specific Cookie Policy.