PRIVACY POLICY
Information provided pursuant to Article 13 of the EU Reg. 2016/679 (hereafter GDPR)
Premise
For CVS FERRARI S.P.A. personal data represent a heritage of great value and an asset to be protected, adopting procedures and behaviors aimed at guaranteeing its protection. Transparency vis-à-vis the interested parties is therefore a primary objective, pursued through effective communication tools aimed at making the basic information on the processing of their data available to interlocutors. In this regard, this information page, produced according to the requirements set by the Reg.UE 2016/679 “General Data Protection Regulation”, shows specific information related to the following areas:
1) processing data related to the operation of this site;
2) processing data related to contractual relationships established with customers and suppliers.
CVS Ferrari SpA; Via Emilia (Loc. Favorita), 29010 Roveleto di Cadeo (PC); VAT No: 01579310333
General information
We inform the interested parties (ex Art.4, c.1 of the GDPR) of the following general profiles, valid for all the areas of treatment:
• all data are processed in a lawful, correct and transparent manner in relation to the data subject, in compliance with the general principles set out in Article 5 of the GDPR;
• specific security measures are observed to prevent data loss, illicit or incorrect use and unauthorized access.
References and rights of the interested parties
• the Data Controller is the undersigned Company, in the person of the legal representative pro-tempore;
• the Company has appointed a Data Protection Officer / Data Protection Officer, to whom it is possible to apply to exercise all the rights provided for by art.15-21 of the GDPR (right of access, rectification, cancellation, limitation, of portability, of opposition), as well as revoke a previously granted consent; in case of failure to reply to their requests, the interested parties can propose a complaint to the Supervisory Authority for the protection of personal data (GDPR – Art.13, paragraph 2, letter d).
Contact data
Address: Via Emilia – Loc Favorita – 29010 Roveleto Di Cadeo (PC) ITALY
Tel: +39 0523.503511 – Fax: +39 0523.500439 – Email: info.mktg@cvsferrari.com
1) DATA PROCESSING CONNECTED WITH THE OPERATION OF THIS SITE
1.1 Navigation data
The computer systems and software procedures used to operate this website acquire, during their normal operation, some personal data whose transmission is implicit in the use of Internet communication protocols. It is information that is not collected for be associated with identified, but by their very nature could, through processing and association with data held by third parties, allow users to be identified. In this category of data include IP addresses or domain names of computers used by users who connect to the site, the addresses in Uniform Resource Identifier (URI) of the requested resources, the time of the request, the method used in submitting the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response given by the server (good order, error, etc.) and other parameters related to the operating system and all user’s computer environment.
| Purpose and legal basis of the processing (GDPR-Art.13, paragraph 1, letter c) |
These data are used for the sole purpose of obtaining anonymous statistical information on the use of the site and to check its correct functioning. The data could also be used to ascertain responsibility in case of hypothetical computer crimes against the site (legitimate interests of the owner). |
| Scope of communication (GDPR-Art.13, paragraph 1, lett.e, f) |
The data may be processed only by internal personnel, duly authorized and instructed to the processing (GDPR-Art.29) or by any subject to maintenance of the web platform (appointed in this case external managers) and will not be disclosed to other parties, disseminated or transferred in non-EU countries. Only in the case of an investigation can they be made available to the competent authorities |
| Data retention period (GDPR-Art.13, paragraph 2, letter a) |
Data are usually kept for short periods of time, with the exception of any extensions connected to investigations. |
| Contribution (GDPR-Art.13, paragraph 2, letter f) |
The data are not given by the interested party but automatically acquired by the site’s technological systems. |
1.2 Cookies
For specific information you can consult the cookies policy: http://www.cvsferrari.it/privacy/
1.3 Newsletter subscription
The newsletter service provides interested parties with useful information related to our market sector, events and initiatives, the products / services offered, as well as any promotional offers.
| Purpose and legal basis of the processing (GDPR-Art.13, paragraph 1, letter c) |
Only the e-mail address is requested, for the sole purpose of sending the newsletter. Registration is subject to acceptance of specific, free and informed consent (GDPR-Art.6, comma1, letter a) |
| Scope of communication (GDPR-Art.13, paragraph 1, lett.e, f) |
The data are processed exclusively by authorized and trained personnel (GDPR-Art.29) or by any persons responsible for the maintenance of the web platform or for sending the newsletters (appointed in this case external managers). The data will not be disclosed or transferred to non-EU countries. |
| Data retention period (GDPR-Art.13, paragraph 2, letter a) |
The data are kept until the possible “dis-registration”, freely available at any time through the link at the bottom of every message sent. |
| Contribution (GDPR-Art.13, paragraph 2, letter f) |
Failure to provide the email address and consent will make it impossible to obtain the newsletter service. |
1.4 Request contacts / information
The page allows the person to request a contact or information. Identification and contact data are requested.
| Purpose and legal basis of the processing (GDPR-Art.13, paragraph 1, letter c) |
The identification and contact data required to respond to the requests of the interested parties are requested. The submission of the request is subject to specific, free and informed consent (GDPR-Art.6, comma1, letter a) |
| Scope of communication (GDPR-Art.13, paragraph 1, lett.e, f) |
The data are processed exclusively by authorized and trained personnel (GDPR-Art.29). The data will not be disclosed or transferred to non-EU countries. |
| Data retention period (GDPR-Art.13, paragraph 2, letter a) |
The data are kept for times compatible with the purpose of the collection |
| Contribution (GDPR-Art.13, paragraph 2, letter f) |
The provision of data related to the mandatory fields is necessary in order to obtain an answer, while the optional fields are aimed at providing the staff with other useful elements to facilitate contact. |
1.5 Data provided voluntarily by the user
The optional, explicit and voluntary sending of e-mail and / or ordinary mail to the addresses indicated on this site entails the subsequent acquisition of the sender’s address, necessary to respond to requests, as well as any other personal data included in the message. If the sender sends his / her curriculum to submit his / her professional application, he / she remains solely responsible for the relevance and accuracy of the data sent. It should be noted that any curriculum without the authorization to process data will be immediately deleted.
2) DATA PROCESSING CONNECTED TO THE RELATIONSHIPS ESTABLISHED WITH CUSTOMERS AND SUPPLIERS
2.1 Object of the treatment
The Company processes personal identifying data of customers / suppliers (for example, name, surname, company name, personal / fiscal data, address, telephone, e-mail, bank and payment details) and its operative contacts (name surname and data contact information) acquired and used in the provision of the services provided.
2.2 Purpose and legal basis of processing Data are processed for:
• conclude contractual / professional relationships;
• fulfill the pre-contractual, contractual and tax obligations deriving from existing relationships, as well as manage the necessary communications connected to them;
• fulfill the obligations established by law, by a regulation, by the community legislation or by an order of the Authority
• exercise a legitimate interest and a right of the Holder (for example: the right of defense in court, the protection of credit positions, the ordinary internal needs of an operational, managerial and accounting nature). Failure to provide the aforementioned data will make it impossible to establish the relationship with the Owner. The aforementioned purposes represent, pursuant to Article 6, comma b, c, f, suitable legal bases for the lawfulness of the processing. If it is intended to carry out treatments for different purposes, a specific consent will be required from the interested parties.
2.3 Methods of processing
The processing of personal data is carried out by means of the operations indicated in Art. 4 n. 2) GDPR and more precisely: collection, registration, organization, storage, consultation, processing, modification, selection, extraction, comparison, use, interconnection, blocking, communication, cancellation and destruction of data. Personal data are subjected to both paper and electronic and / or automated processing. The Data Controller will process personal data for the time necessary to fulfill the purposes for which it was collected and related legal obligations.
2.4 Scope of treatment
The data are processed by internal subjects regularly authorized and instructed pursuant to Article 29 of the GDPR. It is also possible to request the scope of communication of personal data, obtaining precise indications on any external subjects operating as managers or independent data controllers (consultants, technicians, banks, transporters, etc.).
3) POLICY UPDATE
It should be noted that this information may be subject to periodic review, also in relation to the relevant legislation and jurisprudence. In the event of significant changes, appropriate evidence will be given in the home-page of the site for a suitable time. In any case, the interested party is invited to periodically consult the present policy.