WEBSITE POLICY
Carraro Drive Tech Italia S.p.A., as the Data Controller (“Controller”) provides you with this information pursuant to Article 13 of Regulation (EU) relating to the protection of personal data (the “Regulation”) when you register on the e-commerce website www.shop.carraro.com (the “Website”).
1. Data Controller
The Data Controller is Carraro Drive Tech Italia S.p.A., headquartered in Campodarsego (Padua), Via Olmo 37, VAT no. 05253180284 (the “Controller”), certified email: carrarodt.italia@legalmail.it, tel. 0499219111.
2. Purpose and legal basis for the data processing
Your personal information will be processed in accordance with Regulation EU 2016/ 679 for the following purposes:
a) formalization and/or stipulation of the sale contract; execution and operational management of the contract, and for purposes closely connected to derived from or instrumental to the same fiscal and administrative/accounting purposes.
b) (if applicable) the sending of newsletters or email promotions if you have requested to register for the newsletter by entering your email address in the relevant section of the Website.
c) (if applicable) the sending of direct marketing communications, if you have provided your email address and have also given consent for such purposes;
3. Legal basis
- For the purposes referred to in para. a) the legal basis is the CONTRACT and the LEGAL OBLIGATION: the data processing is based on Article 6 para. 1 b) and c) of Reg. EU 2016/679
- For the purposes referred to in points d) and e) the legal basis is the CONSENT of the data subject: the data processing is based on Article 6 para. 1 a) of Reg. EU 2016/679
4. Recipients of personal data
The data will be processed manually and in automated form, using tools and methods designed to guarantee maximum security and confidentiality, by persons specifically authorised for that purpose.
Your data may be communicated, in strict relation to and compatibly with the purposes set out above, to recipients who will process the data as data processors (Art. 28 of Reg. EU 2016/679) and/or as individuals acting under the authority of the Data Controller (Art. 29 of Reg. EU 2016/679, for the purposes listed in point 2. Specifically, your data will be disclosed to: Group companies; the sales/distribution network; parties providing information system and communications network services; firms or companies providing advice and consulting services; the authorities responsible for the fulfilment of legal obligations and/or for the execution of instructions of public bodies, on request.
Parties belonging to the above categories will act as Data Processor or will operate in full autonomy, as Independent Data Controllers.
You may request the contact details of the data processors at the following email address carrarodt.italia@legalmail.it.
5. Transfer of personal data to a third country or to an international organisation
Your personal data may be transferred to non-EU countries in order to fulfil purposes connected to such data transfer. Specifically, your data will be transferred pursuant to Article 44 - General principle of data transfer; Article 45 - Transfers on the basis of an adequacy decision; Article 46 - Transfers subject to adequate guarantees (also with contractual provisions and the other provisions referred to in Article 46, para. 3); Article 49 - Derogations in specific situations. You can obtain information about the safeguards for data transfers by sending an email to: Carraro Drive Tech Italia S.p.A.: carrarodt.italia@legalmail.it ;
6. Storage period of the personal data or criteria
The conservation of the personal data depends on the purpose of the data processing:
- for the purposes indicated in paragraph a): your personal data will be processed for the duration of the contractual relationship and for the fulfilment of the legal and administrative obligations of the Data Controller, for a maximum of 10 years from the termination of the relationship;
- for the purposes indicated in paragraph b): where permitted by you, until such time as you cancel the newsletter using the link at the bottom of each newsletter or marketing communication;
- for the purposes indicated in paragraph c): where permitted by you, for the time necessary to complete the marketing purposes in accordance with the 24-month data conservation period prescribed by the Data Protection Authority, without prejudice to your right to revoke consent by using the link at the bottom of each direct marketing email.
In any case, the statutes of limitations established for the rights and obligations subject to the processing carried out will be complied with.
7. Rights of the data subject
Since you are the data subject, you have the right to obtain the following from the Data Controller:
|
Right of access:
|
confirmation as to whether the personal data that concerns you is being processed, and in that case, the right to obtain, inter alia, access to your personal data and the information relating to the purpose of the processing, the categories of personal data in question, the recipients or the categories of recipients to whom the personal data is or will be disclosed. |
|
Right to rectification:
|
(i) rectification of any inaccurate personal data that relates to you without undue delay; and (ii) the right to have incomplete personal data completed. |
|
Right to erasure (‘right to be forgotten’): |
erasure of the personal data concerning you without undue delay (the Data Controller is obliged to erase the personal data in the cases provided under Article 17 of the Regulation without undue delay). |
|
Right to restriction of processing: |
restriction of the processing in the cases set out under article 18 of the Regulation. |
|
Right to data portability: |
receipt in a structured, commonly used and machine-readable format, of the personal data that concerns you that is in our possession; right to transmit those data to another controller without hindrance from the controller to which the personal data has been provided, in the cases described under Article 20 of the Regulation. |
|
Right to object to processing carried out in accordance with point (e) or (f) of Article 6(1): |
the right to object, for grounds relating to his or her particular situation, at any time to processing of personal data concerning you which is based on point (e) or (f) of Article 6(1), including profiling based on those provisions. |
You have the right to make a complaint to the Data Protection Authority if you believe that the processing that concerns you breaches Regulation (EU) 2016/679.
You may revoke your consent given, at any time, by using the link at the bottom of each newsletter or marketing communication.
The objection or withdrawal of consent to processing shall not affect the lawfulness of the processing based on the previously given consent.
The complete text of your rights, as listed above, provided under Regulation (EU) 2016/679 is available on the website of the Data Protection Authority, www.garanteprivacy.it.
8. Nature of provision of data and consequences of refusal to provide data
You are free to decide whether or not to provide the personal data requested. Some data may be marked as mandatory; such data is required in order to conclude the sale contract. If the mandatory data is not provided, the requested service may not be fulfilled.
You are free to decide whether or not to consent to the receipt of newsletters and/or direct marketing communications. If you do not provide consent this will not affect the formation of the sale contract but it will prevent you from receiving newsletters or direct marketing by email.
All requests for information and/or clarification should be sent to:
Carraro Drive Tech Italia SpA
Via Olmo 37, 35011 Campodarsego (PD)
Certified email: carrarodt.italia@legalmail.ittel. 0499219111