INFORMATION NOTICE TO DATA SUBJECTS ON THE PROCESSING OF PERSONAL DATA - WEBSITE

Date of the drafting of this document: September 2018
 

This Information notice to data subjects (hereinafter the “Information Notice”) is issued pursuant to sect. 13 of the EU Regulation 679/2016 (General Data Protection Regulation – hereinafter the “GDPR”) and aims to inform You, as a user of our website and "data subject", regarding the processing of Your personal data carried out by the data controller, in the course of Your visit to the website. 

The website is available at:

http://www.grandprixcasalgrandepadana.com

and at the other URLs connected to it: www.grandprixcasalgrandepadana.it (hereinafter, the “Website”).

The Information Notice is provided for this Website only and not for other websites that the ser may consult through links.

THE DATA CONTROLLER

The data controller – i.e. the entity who determines the purposes and the means of processing – is Casalgrande Padana S.p.A., with registered office at Casalgrande (RE), c.a.p. 42013, Via Statale 467, 73 (ITALY), P. IVA 01270230350, C.F. 01622500369 (hereafter the “Data Controller”).

If you have any questions or requests, or if you require clarifications regarding the processing of your personal data, you may contact the Data Controller in the
following ways:

-          by sending an e-mail to privacy@casalgrandepadana.it;
-          by writing to: Via Statale 467, 73 42013 - Casalgrande (RE)
-          by telephone: +39 0522 9901.

THE PROCESSING OF PERSONAL DATA 

While You browse the Website, the Data Controller may process your personal data (since personal data is defined, as per sect. 4 of GDPR, as “any
information relating to an identified or identifiable natural person”) in many instances, as described below. 

Please also refer to the Extended Information Notice on Cookies, which supplements and completes this Information Notice.

1.     E-mails sent by you to the addresses of the Data Controller available on the Website

Sending of e-mails to the addresses available on this Website involves the acquisition of the sender's e-mail address, as well as of any other personal data and information included in the communication. 

This personal data is provided voluntarily by You (and the failure to provide with this data may result in the impossibility to obtain what is required).
 

2.Processing of navigation data and information

The IT systems needed for the operation of this Website acquire some personal data over the course of their normal operation. The acquisition and transmission of this personal data is implicit in the use of Internet communication protocols such as IP address).

This information is not collected to be matched with identified persons but given its very nature it may, through processes and matching with third-party data, allow to identify the users.

This category includes, including but not limited to: IP addresses of the devices connecting to the Website, information on the users’ activities on the Website (such as date and hour of the connection, visited sections and pages of the Website), and information regarding the device and the operating system of the user. This information is collected automatically over the course of Your navigation on the Website. 
 

CATEGORIES OF RECIPIENTS OF THE PERSONAL DATA 
To fulfil the purposes stated above and carry out the processing activities described above, Your personal data may also be processed by third parties, other than the Data Controller: such entities can either process Your personal data on behalf of the Data Controller (therefore, acting as "data processors"), or as autonomous data controllers. In particular, Your personal data will be processed by the following subjects or categories of subjects:

– suppliers of services necessary for the correct operating of the Website, of IT services and of communication services;
– providers of the e-mail services used by the Data Controller;
– administrative, judicial or law enforcement authorities, as required by the law, with reference to obligations of communication of personal data or other legal fulfilments;
– the Data Controller's network of agents and distributors and Data Controller’s affiliates, when necessary to provide with a feedback to Your queries.

If you wish to know the identity of all the parties to whom your personal data are disclosed, You can contact the Data Controller at the contact information given above. 

TRANSFER OF YOUR PERSONAL DATA OUTSIDE THE EUROPEAN ECONOMIC AREA 
The Data Controller will transfer your personal data outside the European Economic Area only toward countries that ensure an adequate level of protection for the data subjects' personal data, based on an adequacy decision by European Commission, or as a result of the adoption of appropriate or suitable safeguards, anyway in full compliance with the GDPR. These transfers take place in exceptional cases, for example when it is necessary to transfer a message from the data subjects' communication to an agent in a third country. The Data Controller will provide You, at Your request, with detailed information on how personal data are transferred, on the appropriate or suitable safeguards adopted and on the means by which it is possible to obtain a copy of the transferred data or where they have been made available. In any other case, the personal data are processed by the Data Controller at its offices or by recipients located within the EU.

PROCESSING BY AUTOMATED INDIVIDUAL DECISION-MAKING
The Data Controller does not carry out any processing by automated individual decision-making (sect. 22 of GDPR)

DATA SUBJECTS' RIGHTS
You have several individual rights, that You can exercise in any moment towards the Data Controller, by contacting it at the contact information above. The Data Controller will reply to Your requests without undue delay. You may refer to the same contact information, should You need more detailed information on the evaluation carried out by the Data Controller on the balancing between legitimate interests pursued and the interests, rights and freedom of the data subjects.

ACCESS
You have the right to request from the Data Controller the access to the personal data concerning You, as provided by sect. 15 GDPR, particularly requesting information on: 

– the purpose of the processing;
– the categories of the processed personal data;
– the recipients or categories of recipients to whom the personal data have been or will be disclosed, in particular recipients in third countries or international organizations;
– where possible, the envisaged period for which the personal data will be stored, or, if not possible, the criteria used to determine that period;
– the existence of the right to request from the Data Controller rectification or erasure of personal data or restriction of processing of personal data concerning the data subject or to object to such processing;
– the right to lodge a complaint with a supervisory authority;
– where the personal data are not collected from You, any available information as to their source;
– the existence of automated decision-making, including profiling, referred to in sect. 22(1) and 22(4) of GDPR and, at least in those cases, meaningful information about the logic involved, as well as the significance and the envisaged consequences of such processing for You

RECTIFICATION 
You have the right to request the rectification of the inaccurate personal data, or to have incomplete personal data completed, as provided by sect. 16 of GDPR. 

ERASURE (I.E. "RIGHT TO BE FORGOTTEN")
You have the right to require to the Data Controller the cancellation of Your personal data, as provided by sect. 17 of GDPR. The exercise of this right may not be granted (or may be granted only partially) should the data processing be necessary for compliance with a legal obligation to which the Data Controller is subject, or for the establishment, exercise or defense of legal claims, or for other events set forth by sect. 17(3) of GDPR.

RESTRICTION OF PROCESSING 
You have the right to require to the Data Controller the restriction of processing where (a) the accuracy of the personal data is contested by You, (b) the processing is unlawful, and You oppose the erasure of Your personal data; (c) the Data Controller no longer needs such personal data for the purposes of the processing, but they are required by You for the establishment, exercise or defense of legal claims; and (d) You have objected to processing. 

PORTABILITY
You can obtain from the Data Controller the portability of Your personal data processed on a consent or contractual basis and by automated means: in this case, You may receive the personal data concerning You, in a structured, commonly used and machine-readable format. Moreover, the You have the right to transmit those data to another data controller. 

OBJECT
You have the right to object to the processing of Your personal data as provided by sect. 21 of GDPR, unless the Data Controller demonstrates, in response to such a request, the existence of a compelling legitimate grounds for the processing which override Your interests, rights and freedoms or for the establishment, exercise or defense of legal claims. In the event of failure to answer, or negative or inaccurate or unsatisfactory answer to Your request, You have the right to lodge a complaint to a supervisory authority. If You are a British citizen, habitually reside in UK or are professionally based in UK, or believe the alleged violation by the Data Controller has been carried out in UK, You may at any time contact the Information Commissioner’s Office – https://ico.org.uk/ – to obtain ad adequate protection of Your rights. If You are citizen of another EU member State, habitually reside or are professionally based in another EU member State, believe the presumed violation by the Data Controller has been carried out in another EU member State, please consult the web page http://ec.europa.eu/justice/article-29/structure/data-protection-authorities/index_en.htm to have detailed information on competent supervisory authority.

MODIFICATIONS AND UPDATES TO THIS INFORMATION
If this Information Notice is modified or updated, the Data Controller will take all reasonable measures to inform you of such modifications (for example with appropriate communications - through banners or similar tools - on the Website's homepage). Nonetheless, we invite You to check regularly the "Privacy" section of the Website, where this Information Notice is displayed, and to consult the most recent version of it.