PRIVACY INFORMATION NOTICE - Art. 13 Leg. Decree 196/2003

With this Privacy Information document drawn up in accordance with the provisions of Art. 13 of Legislative Decree no. 196 of 30 June 2003 Personal Data Protection Code (hereafter, the “Code”), GGR SRL UNIPERSONALE, with registered office in Forlì - Cesena  via dell’Indipendenza 15, POST CODE 47030, tax code, VAT number and Forlì - Cesena Business Register number 03591680404, ("GGR SRL UNIPERSONALE") and Triboo Digitale S.r.l., with registered office in Milan (Italy), viale Sarca 20126, edificio 16, Post Code 336, tax code, VAT number and Milan Business Register number 02912880966  (“TD”), who act as joint Data Controllers (hereafter, jointly, the “Joint Data Controllers”), and, via the same, intend to supply all useful information pursuant to the processing of the personal data that is performed following the Site registration process www.gianvitorossi.com (hereafter the “Site”) and those who purchase products sold on the same.

If you wish to complete the registration process and/or use the Site services offered to those accessing the reserved areas (e.g make a purchase and instrumental activities to the same, including operations relating to administrative and tax obligations etc., please complete the fields below and accept this Information Notice. Conferral of data pursuant to the registration form and/or the purchase of products is not compulsory. However, we must inform you that the aforementioned conferral is required to process your order and complete the contract formalities. Your refusal may make it impossible for us to complete the product purchase process and/or provide the requested services. All collected personal data shall be processed mainly using electronic systems and, only very occasionally, paper based systems.

To conduct activities functional to the sale of products via this Site, TD processes, in its capacity as joint Data Controller and in accordance with the applicable privacy code, user data such as name and surname, residence and information on credit cards used by users (such as first and last name of the card holder, card number, expiration date, security code.

Collection of your data is not compulsory, but such data is however required to complete the Site registration process and complete your purchase transactions. If you decide not to grant your consent to the collection of your data, we will not be able to provide the services you requested.

TD processes the data of those visiting and shopping at the Site for the sole purpose of managing such activity, and to complete and process the commercial transactions for those purchasing products via the Site, such as: order management, sale of products, registration of Site users. Therefore, the Data Controller for the processing of personal data in relation to all the other activities, including those which are not functional to the sale of products via the Site (such as, by way of example and not limited to, the delivery of products, claims management, RMA management, mailing of advertising materials, commercial communication, promotions,) is exclusively GGR RSL UNIPERSONALE.

Each Joint Data Controller decides the scope and processing methods to be implemented and the tools to be used as far as security measures are concerned.

GGR RSL UNIPERSONALE may also use your personal data to send emails advertising its products and services, similar to those purchases, unless you refuse this option by exercising your right of opposition as per the procedures below (art. 130 paragraph 4 Legislative Decree 196/2003.

Transfer of your personal data outside the European Union is not contemplated. Should the same become necessary, the Data Controller shall be accountable for requesting your specific consent.

Moreover, where express consent is granted, your personal data may also be processed by GGR RSL UNIPERSONALE  for marketing purposes such as the electronic mailing of promotional material to the email address you provided, on products and services different to those already purchased, news, promotions, market research and/or statistics and customer satisfaction surveys.

This does not include the data relating to your Credit card, which is excluded for any purposes other than checking the existence of such payment means, the payment received and the management of payments further to claim management and contentious procedures. To this purpose, the data will also be processed by the Bank that provides the online payment service, further to the entity that issued the credit card you use to confirm your order.

Please contact the Customer Care service for a complete list of those designated to processing your Personal Data or send an e-mail to the following addresses customercare.us@gianvitorossi.com for GGR RSL UNIPERSONALE and privacy@triboo.it for Triboo Digitale.

The categories of those designated to processing the data for the aforementioned purposes, include staff assigned to website management, administration, customer care services, marketing activities (where consent is granted), IT systems and third parties who process data on our behalf (such as, for instance, IT service maintenance, couriers and carriers, legal advisers, enterprises assigned to the realisation and/or management of promotional campaigns, etc.); they can also be disclosed to the public entities authorised to receive the same.

As foreseen by art. 7 of the Code, which for completeness of data is attached to this Notice, you are entitled to obtain the updating, rectification or integration, erasure and anonymisation of the data. You can also oppose the processing of your personal data for marketing purposes or for sending commercial communications, by contacting GGR RSL UNIPERSONALE at the above indicated mailing addresses or by sending an email to privacy@triboo.it. The same procedures can be used to request the complete updated list of the Chief Data Processors.

 
Art. 7 L.D. no. 196/2003 (Rights to access personal data and other rights).

1. The Data Subject  has the right to request confirmation as to whether or not personal data concerning you exists, regardless of their being already recorded, and communication of such data in an intelligible form.

2. The Data Subject has the right to obtain indications on:

a) the source of the personal data;

b) the purposes and methods of the processing;

c) the logic applied to the processing, if the latter is carried out with the aid of electronic means;

d)  the identification data concerning the Data Controller, data processors and the representative designated as per Section 5(2);

e) the subjects or categories of subjects to whom the personal data may be communicated or who may become aware of such data in their capacity as Representatives for the Country, Chief Processors or Designated Officers.

3. The Data Subject has the right to obtain:

a) updating, rectification or, where interested therein, integration of the data;

b) erasure, anonymisation or blocking of data that have been processed unlawfully, including data whose retention is unnecessary for the purposes for which they have been collected or subsequently processed;

c) certification to the effect that the operations as per letters a) and b) have been notified, as also related to their contents, to the entities to whom or which the data were communicated or disseminated, unless this requirement proves impossible or involves a manifestly disproportionate effort compared with the right that is to be protected.

4. The Data Subject is entitled to oppose, totally or partially:

a) on legitimate grounds, the processing of personal data concerning him/her, even though they are relevant to the purpose of the collection;

b) the processing of personal data concerning him/her, where it is carried out for the purpose of sending advertising materials or direct selling or else for the performance of market or commercial communication surveys.