Privacy Policy

With this Privacy Policy, the data controller, as defined below, wishes to provide users and visitors of the website www.ferrarostore.com (“Site”) with all information relating to the purposes for which it collects and processes their personal data. , the categories of personal data being processed, the rights recognized to users and visitors of the Site pursuant to Regulation (EU) no. 679/2016 (“ GDPR ”) and national legislation on data protection (collectively, “ Privacy Policy ”), and how the user and visitor of the Site can exercise these rights. This Privacy Policy also aims to allow users and visitors to the Site to consciously give consent to the processing of their personal data, where this is necessary based on the Privacy Law.

This document can be printed using the print command in the settings of any browser.

Types of Data collected

The personal data of users/visitors that the Data Controller collects through the Site include:

- Personal data (name, surname, company name, date of birth, tax code, VAT number);

- Contact data (email address, telephone number, physical shipping address and billing address); And

- Any responses from users/visitors to the questions provided and feedback requested by the Site via online forms and surveys (hereinafter, " Personal Data ").

 

The Personal Data listed above is collected by the Site at the time:

- registration on the Site, for users who are now registering for the first time on the Site (“ User ”); or

- the purchase of one or more of the products offered for sale through the Site, for users not registered on the Site (" Guest ").

 

Unless otherwise specified within the Site, all Personal Data requested is to be considered mandatory. It is therefore understood that failure to provide Personal Data marked as mandatory prevents registration on the Site or use of the services offered therein; failure to provide any Personal Data marked as optional does not prevent registration on the Site or use of the services offered therein, but could still make their use less immediate and user friendly .

 

This Site also uses Cookies and/or other tracking tools according to the methods and purposes described in the Cookie Policy (see art. 6 below ).

 

The User/Guest assumes responsibility for the Personal Data of third parties that he has published or shared through this Site and guarantees that he has the right to communicate or disseminate them, and to have made this Privacy Policy known to said third parties, freeing the Owner from any liability towards such third parties.

 

  1. Purposes and legal bases of the processing of Personal Data

 

Purpose of the processing

The Personal Data of Users/Guests will be processed by the Owner according to principles of necessity, data minimization, lawfulness, correctness, proportionality and transparency for the following purposes:

 

(a) provide the Site, allow access and registration to the Site, as well as the use of the services offered through the Site, or the purchase of products online and the management of the order and any other service possibly offered in the future through the Site whose performance the User/Guest requests, as well as to improve the Site and the services offered therein;

(b) ensure the User/Guest the assistance service (by filling in the appropriate form provided on the Site or by contacting the Owner directly) during registration on the Site and/or use of the Site and the services offered therein, and also to resolve any reports of malfunctions and/or complaints;

(c) fulfill legal obligations, respond to requests from the competent authorities, protect one's rights and interests, identify any malicious or fraudulent activities;

(d) provide the User/Guest, via the e-mail address indicated when registering on the Site or making a purchase via the Site, with commercial information and newsletters relating to products and services similar to those already purchased/requested by the User /Guest;

(e) send the User advertising material and carry out promotional, marketing and/or direct sales activities of products and/or services sold and/or provided by the Owner;

(f) sending the User commercial and promotional communications relating to products and/or services of selected third parties (i.e. companies of the Group to which the Owner belongs, parent companies, subsidiaries and/or affiliates, companies affiliated with the Owner and partners third parties), with whom the Data Controller has legal relationships (without in this case there being communication of Personal Data to third parties);

(g) carry out profiling activities towards the User of the Site, i.e. evaluate their preferences, consumption habits and tastes, also through the invitation to participate in market research, for the subsequent sending of profiled marketing communications.

 

Legal basis of processing

The aforementioned processing purposes (see "Purposes of processing" section, letters (a) to (g)) are processed by the Data Controller on the following legal bases:

(to) execution of the contract with the User/Guest and legitimate interest of the Owner;

(b) execution of the contract or pre-contractual measures at the request of the User/Guest and legitimate interest of the Owner

(c) fulfillment of a legal obligation to which the Owner is subject and/or legitimate interest of the Owner;

(d) legitimate interest of the Owner, unless the User/Guest objects;

(e) express consent of the User;

(f) express consent of the User; And

(g) express consent of the User.

 

With reference to the purpose referred to in point (d) above , the User/Guest may object at any time to the receipt of such communications by clicking on the link at the bottom of the relevant email or by contacting the Owner at the email address indicated to the art. 1 above .

 

The contact methods aimed at direct marketing activities, on behalf of third parties and profiling as in points (e), (f) and (g) above , may be of an automated type (via e-mail, SMS, push notifications , other mass messaging tools, etc.) and traditional ones (phone calls with an operator and postal items). In any case, the User may revoke his/her consent, even partially, for example by consenting only to traditional contact methods.

If the User consents to the profiling indicated in point (g) above , it will presuppose an automated activity in order to place the User in a category of subjects with homogeneous characteristics (in terms of purchasing preferences, product of interest and purchasing areas) based on your previous purchasing experiences, the market analyzes in which you may have participated, your demographic class and your activities on the Site.

 

Third Party Websites and Applications

The User is reminded that the Site may incorporate or otherwise interact with applications and websites of third parties, to make some of the ancillary services offered through the Site available to Users/Guests. Third Party Websites and Applications are governed by their respective terms and terms of use and privacy policies. The use by Users/Guests of Third Party Websites and Applications will therefore be governed by and subject to the terms and conditions of use and privacy policies of such third parties, to which reference should be made.

  

  1. Treatment methods; Recipients of Personal Data; Place and period of storage of Personal Data

 

Treatment methods

The Data Controller adopts appropriate security measures pursuant to art. 32 GDPR, aimed at preventing unauthorized access, disclosure, modification or destruction of the Personal Data of Users/Guests.

The processing is carried out on paper and/or using IT and/or telematic tools, with organizational methods and with logic strictly related to the purposes indicated in the art. 3 above .

 

Recipients of Personal Data

The processing of the Personal Data of Users/Guests will be entrusted, in individual operations, to the Data Controller's employees and/or collaborators (administrative, commercial, marketing, legal, system administrators), duly authorized and appointed.

Any third parties delegated by the Owner to process the Personal Data of Users/Guests (e.g. suppliers of third-party technical services, postal couriers, hosting providers, IT companies, communication agencies), will be appointed Data Controllers pursuant to art. 28 GDPR. The updated list of Data Processors can always be requested from the Data Controller by contacting him at the e-mail address indicated in art. 1 above .

The Personal Data of Users/Guests will not be disclosed or transferred outside the European Union.

 

Place and period of storage of Personal Data

The Personal Data of Users/Guests will be stored on the Owner's servers, all located in the EU.

 

Having said this, Users/Guests are reminded that the Site may incorporate or otherwise interact with Third Party Websites and Applications, in order to make the ancillary services offered through the Site available. Third Party Websites and Applications are governed by their respective terms. and terms of use and privacy policies. The use by Users/Guests of Third Party Sites and Applications will therefore be governed by and subject to the terms and conditions of use and privacy policies of such third parties, to which reference should be made.

 

The Personal Data of Users/Guests are processed by the Owner and stored for the time necessary for the purposes indicated in art. 3 above . In particular:

- for the purposes referred to in points (a), (d), (e), (f) and (g) of the art. 3 above , the Users ' Personal Data will be stored by the Owner (but not used for purposes (d), (e), (f) and (g) in case of opposition, or in case of absence or subsequent revocation of consent ) until the User cancels his account. However, it is understood that the Owner may retain the Users' Personal Data to defend their rights in relation to disputes existing at the time of the request or upon indication of the public authorities. The User can delete their account or by sending an express request to delete Personal Data to the Owner (see art. 1 above );

- for the purposes referred to in point (a) of the art. 3 above , Guests ' Personal Data will be retained until the execution of the existing contract or pre-contractual measure is completed. For the purposes referred to in point (d) of the art. 3 above, the Personal Data of the Guests will be retained, except in the case of opposition, as long as the legitimate interest of the Owner continues. However, Guests' Personal Data will not be processed - and therefore stored - for the purposes referred to in points (e), (f) and (g) of the art. 3 above ;

- for the purposes referred to in point (b) of the art. 3 above, the personal data of the Users/Guests will be kept for the time strictly necessary to resolve the request for assistance, reporting and/or dispute and provide the Users/Guests with feedback. Even in this case, however, it is understood that the Data Controller may retain the Personal Data, within the limits of the law, to defend its rights in relation to ongoing disputes or upon indication of the public authorities; And

- for the purposes referred to in point (c) of the art. 3 above , the Personal Data of Users/Guests will be retained by the Owner as long as the need for processing persists to fulfill said legal obligations.

 

At the end of the retention period, the Personal Data will be deleted. Therefore, upon expiry of this deadline the right of access, cancellation, rectification and the right to portability of Personal Data can no longer be exercised.

 

  1. Rights of the User/Guest

Users/Guests can exercise certain rights with reference to the Personal Data processed by the Owner.

In particular, the User/Guest has the right to:

- obtain information in relation to the purposes for which your Personal Data are processed, the period of processing and the subjects to whom the Personal Data are communicated (so-called right of access);

- obtain the rectification or integration of inaccurate Personal Data concerning him (so-called right of rectification);

- obtain the deletion of Personal Data concerning him in the following cases (a) the Personal Data is no longer necessary for the purposes for which it was collected; (b) has revoked his consent to the processing of Personal Data if they are processed on the basis of his consent; (c) has objected to the processing of Personal Data concerning him/her in the event that they are processed for a legitimate interest of the Owner; or (d) the processing of your Personal Data does not comply with the law (so-called right of cancellation). However, we inform the User/Guest that the retention of his Personal Data by the Owner is lawful if it is necessary to allow him to fulfill a legal obligation or to ascertain, exercise or defend a right in court;

- obtain that the Personal Data concerning him are only stored without any other use being made of them in the event that (a) he should contest the accuracy of his Personal Data, for the period necessary to allow us to verify the accuracy of such Personal data; (b) the processing is unlawful but you still oppose the deletion of your Personal Data by the Owner; (c) the Personal Data is necessary for the establishment, exercise or defense of a right in court; (d) has objected to the processing and is awaiting verification regarding the possible prevalence of the legitimate reasons of the Data Controller with respect to those of the interested party (so-called right of limitation);

- receive the Personal Data concerning him in a commonly used format, readable by an automatic and interoperable device (so-called right of portability).

- obtain the termination of processing in cases where your Data is processed for the purposes of commercial communications/newsletters relating to products or services identical to those already purchased/supplied by the Data Controller (so-called right of opposition); And

- revoke your consent to the processing of Personal Data at any time, without prejudice to the lawfulness of the processing based on consent before the revocation.

 

How to exercise your rights

To exercise the rights listed above, Users/Guests can direct a request to the contact details of the Owner indicated in article 1 above . Requests are filed free of charge and processed by the Data Controller as quickly as possible. Finally, we remind you that the User/Guest has the right to contact the Guarantor for the protection of personal data, with headquarters in Piazza di Monte Citorio, 121 - 00186 Rome (RM), to assert his rights in relation to the processing of his Personal Data from the Owner.

  1. Cookie Policy

This Website uses Cookies and other tracking tools.

  1. Changes to this Privacy Policy

Without prejudice to the fact that the Owner in any case does not proceed with processing operations other than those expressly authorized and/or requested by the Users/Guests, this Privacy Policy may be subject to modifications to comply with new legal provisions, changed privacy policies processing of Personal Data by the Owner and/or following changes to the characteristics of the Site and/or the services offered therein. Each updated version of this Privacy Policy will be made available on the Site in the dedicated section: the Owner therefore invites Users/Guests to periodically consult the Privacy Policy published on the Site to always be informed of the latest published version.