Information notice pursuant to Art. 13 of the Regulation (EU) 2016/679 (“GDPR”) Information to be provided where personal data are collected from the data subject
According to Regulation (EU) 2016/679 (General Data Protection Regulation) we provide you the due information concerning the processing of personal data. This notice is not to be considered valid for other websites which may be reached via hyperlink and Data Controller shall not be held responsible for third parties web pages.
DATA CONTROLLER
Pursuant to art. 4 and 24 of the Reg. (EU) 2016/679, is Suomy Motorsport srl – registered office in via Sant’Andrea, 20/a – 22040 Lurago d’Erba (CO9 – Italy, in person of legal representative pro tempore.
PURPOSES AND LAWFULNESS OF THE PROCESSING
| Purpose of processing | Legal Basis | Data retention | Nature of provision |
|---|---|---|---|
| A) Website browsing | Legitimate interest | Data subject rights Activities strictly related to site operations and to platform browsing service provision |
Session | Necessary for the legitimate interest of data controller with due regard to user’s rights and fundamental freedoms |
| B) Contact request – Information request | Legitimate interest | Subjects request | 1 year | Necessary for the legitimate interest of data controller with due regard to user’s rights and fundamental freedoms |
| C) Newsletter subscription; Mailing list service for promotional communication and related activities. | Consent Art 6.1.a) |
Until opposition | Optional: in case of denial the data controller won’t be able to send you newsletter or promotional communication |
| D) Direct marketing with newsletter for the promotion of products identical to the ones purchased (Softspam) | Legitimate interest | Subjects request | Until opposition | Necessary for the legitimate interest of data controller with due regard to user’s rights and fundamental freedoms |
| E) Store location service | Legitimate interest | Subjects request | 1 year | Necessary for the legitimate interest of data controller with due regard to user’s rights and fundamental freedoms |
| F) Access to reserved area of the website – only for the authorized subjects | Legitimate interest | Subjects request | Until opposition | Optional: in case of denial the data controller will not authorize the data subject at the reserved area of the website |
RECIPIENTS OR CATEGORIES OF RECIPIENTS OF PERSONAL DATA
Personal data provided by you may be communicated to recipients who will act as Processors (art. 28 of the Reg. EU 2016/679) and/or persons acting under the authority of the Controller and the Processor (art.29 of the Reg. UE 2016/679) for the purposes pointed ahead. Precisely, your data may be communicated to recipients part of the following categories:
- subjects providing services for the management of the information system used by Suomy Motorsport srl and telecommunications networks;
- studies or companies in the context of assistance and consultancy relationships;
- Platform operators for the abovementioned services (websites hosting, Youtube, Facebook, Twitter, Instagram);
- Commercial partners, upon consent, clicking on www.do-design.it;
- Competent authorities for compliance with legal obligations and / or provisions of public bodies, upon request;
DATA TRANSFER TO A THIRD COUNTRY AND/OR INTERNATIONAL ORGANISATION
Personal data won’t be transferred to a third Country outside the European Union.
DATA SUBJECT’S RIGHTS
Data Subject’s rights
You can exercise your rights as expressed to articles 15 and ss. of the UE Regulation 2016/679, contacting the Data Controller by sending an e-mail to account@suomy.com. You have the right, at any time, to ask the Data Controller the access to your personal data, the rectification of the data, the erasure of the data, the restriction of the processing. Moreover, if applicable, you have the right to object to the processing of your personal data, at any time, and you have the right to withdraw the consent without prejudice to the lawfulness of the processing based on consent before withdrawal. Without prejudice to any other administrative and judicial appeal, if you believe that the processing of your personal data violates the provisions of Regulation EU 2016/679, pursuant to art. 15 letter f) of the aforementioned Regulation EU 2016/679, you have the right to lodge a complaint with the Data Protection Authority (https://www.garanteprivacy.it/). If applicable, you have the right to ask the Data Controller for the portability of your personal data. The Data Controller provides you with your personal data in a structured, commonly used and machine-readable format.
Informative amendments:
Data Controller reserves the right to modify, update, add or remove parts of the Privacy policy at any time.
For this reason, in the Privacy policy you will find information of the update date.