Disclosure on the processing of personal data
In implementation of New EU Regulation no. 679/2016 please be aware that:
The Data Controller is FERRARI SRL, with registered office in via Achille Grandi 29 Ravenna Italy email firstname.lastname@example.org certified email email@example.com
The aforementioned Regulation provides for a series of obligations for those who perform “processing” (i.e. collection, recording, preparation, storage, communication and other processes listed in Article 4 of the Regulation) of personal data regarding individuals.
Purposes of the processing and legal basis
The processing of your personal data that we hold or that we will request from you or that will be communicated by you or by third parties is carried out in order to:
- On the basis of a contract to which the data subject is a party or to perform pre-contractual measures requested by the user: establishment, management and termination of the business relationship.
- Based on legal obligations: management of purchase and sales invoicing; fulfilment of tax or accounting obligations.
- On the basis of explicit and unambiguous consent: sending newsletters and advertising material.
You are obliged to provide personal data when the processing is based on a legal or contractual obligation or is necessary for the conclusion of a contract; Your refusal to provide the data or to allow its processing or its communication may result in:
- The impossibility of establishing or continuing the contractual relationship, or to carry out certain operations, if the data is necessary for the execution of the relationship or operation;
- The impossibility of carrying out certain operations that require communicating the data to subjects functionally connected to its execution;
When the processing is based on consent, you have the right to withdraw the consent at any time without prejudice to the lawfulness of the processing based on the consent given prior to the revocation.
The processing will be carried out using paper and electronic tools and media in compliance with the provisions of law, regulation and company policy aimed at ensuring the security, confidentiality, availability and integrity, as well as the accuracy, updating and relevance of the data with respect to the purposes stated below. The processing will take place in compliance with the principles of correctness, lawfulness and transparency.
Recipients of the data
Your data may be disclosed:
- To the group companies, to the following public and private bodies, also following inspections or verifications – specify the subjects (Public Administration, Revenue Agency, Customs and Monopolies Agency, Tax Police, Judicial Authorities, Labour Inspectorate, Local Health Authorities, Social Security Bodies, ENASARCO, Chambers of Commerce, commercial firm, labour consultant);
- To parties who can access your data under the provisions of law or secondary or EU legislation;
Personal data is not transferred to any third country or international organization
Data retention time
Your personal data will be retained for a period of 10 years from the issuance of the invoice or from the expiry of the contract; contact details will be retained until the contractual relationship ends; the data used to send newsletters will be retained according to the terms established by the law.
Rights of the Data Subject
In relation to the aforementioned processing and the related data stored in our archives, the rights referred to in Chapter III, art. from 15 to 22 of EU Regulation 2016/679 may be exercised, in particular:
- Right of access (art.15);
- Right of correction (art.16);
- Right of deletion (so-called right to be forgotten, art.17);
- Right to limit the processing (art.18);
- Right to data portability (art.20);
- Right of objection (art.21);
In order to exercise your rights you can contact the undersigned by phone, mail, fax or email using the contacts indicated at the top of this disclosure.
Right to file a complaint to a supervisory authority
Pursuant to art. 13, paragraph 2, subpar. d) you are notified of the right to lodge a complaint with the Data Protection Authority if you detect a violation of your rights as data subject or for matters relating to the processing of your personal data.