01. Personal data collected
Personal data that may be collected (“Data”) are the following:
- personal data provided to receive a specific service (e.g. name and contact details);
- browsing data (e.g. IP address, location – country -, information on pages visited by the user within the website, access time on the website, navigation time on each page, clickstream analysis. While the Company does not collect this information in order to link it to specific users, it is still possible to identify those users either directly via that information or by using other information collected);
02. Purpose and means of the processing
The Data may be processed for the following purposes:
a) executing a specific user request or providing the requested service (“Service”);
b) allowing the Company to perform surveys on customers satisfaction (“Customer Satisfaction”) related to the quality of Company goods and services according to the Company legitimate interest;
c) subject to your express consent, sending commercial communications as well as sending advertising on Company products and services, or performing market researches (“Marketing”);
d) subject to your express consent, analyzing your behaviors, habits and propensity to consume to enhance products and services provided by the Company as well as satisfy your expectations (“Profiling”);
e) subject to your express consent, communicating Data to the companies controlled directly or indirectly by Ferrari N.V. and/or connected to Ferrari S.p.A. (“Ferrari Group Companies”) that will process them to send commercial communications as well as advertising on their products and services, or perform market researches (“Marketing Ferrari Group”);
f) improving the user experience on the Company websites.
The Data may be processed in hardcopy, by automated or electronic means including via mail or e-mail, phone (e.g. automated phone calls, SMS, MMS), fax and any other mean (e.g. web sites, mobile apps).
03. Recipients of the data
The Data may be processed by natural persons and/or legal entities, acting on behalf of the Company and under specific contractual obligations, based in EU Member States or in countries outside the EU.
The Data may be communicated to third parties to comply with legal obligations, to execute Public Authorities orders or to exercise a Company right before judicial authorities.
04. Data transfer outside of the European Economic Area
Within its contractual relations the Company may transfer the Data in countries outside of the European Economic Area (EEA), including store it in databases managed by entities acting on behalf of the Company. Databases management and Data processing are bound to the purposes of the processing and are carried out according to applicable data protection law.
In case the Data is transferred outside of the EEA the Company will use any appropriate contractual measures to guarantee an adequate protection of the Data including – among the others – agreements based on the standard contractual clauses adopted by the EU Commission to rule the transfer of personal data outside of the EEA.
05. Link to third party websites
Third party websites accessible from this website are under the third party responsibility.
The Company declines all responsibility concerning requests and/or provision of personal data to third party websites.
06. Controller and Data Protection Officer
The Controller is Ferrari S.p.A., with registered office in Via Emilia Est, N. 1163, Modena, Italy.
You can contact the Data Protection Officer at the email address email@example.com.
07. Data retention
The Data processed to provide the Service and the Customer Satisfaction will be kept by the Company for the period deemed strictly necessary to fulfil such purposes. However, the Company may continue to store this Data for a longer period, as may be necessary to protect Company's interests related to potential liability related to the provision of the Service.
The Company will keep Data processed for Marketing and Profiling purposes for 10 years, from the provision of your Data for the purposes of Marketing, Profiling, Ferrari Group Marketing, unless you withdraw your consent. Once consent is withdrawn, Data may no longer be processed for the purposes mentioned above but may still be stored for the purpose of handling any disputes and/or litigation.
08. Data subjects' rights
Data subjects can exercise the following rights:
- right to access means the right to obtain from the Company whether your Data is being processed and, where applicable, have access to them;
- right to rectification and right to erasure means the right to obtain the rectification of inaccurate and/or incomplete Data, as well as the erasure of Data when the request is legitimate;
- right to restriction of processing means the right to request suspension of the processing when the request is legitimate;
- right to data portability means the right to obtain Data in a structured format, ordinary used and readable, as well as the right to transfer Data to other controllers;
- right to object means the right to object to the processing of Data when the request is legitimate, including when the Data is processed for marketing or profiling, if applicable;
- right to lodge a complaint with a supervisory authority in case of unlawful processing of Data.
Data subject can exercise the abovementioned rights by writing to Ferrari S.p.A., via Abetone Inferiore 4, Maranello (MO), Italy or at firstname.lastname@example.org.
To contact the Data Protection Officer please write to:
Data Protection Officer
Legal and Corporate Affairs
Via Abetone Inf. 4; I-41053, Maranello, (MO); Italy