Privacy Notice regarding consent to receive newsletters
WHY THIS PRIVACY NOTICE?
From 25 May 2018, new privacy rules apply across all Member States of the European Union, as laid down by EU Regulation No 2016/679 (General Data Protection Regulation, which we will henceforth refer to as the GDPR), as well as national laws, such as Legislative Decree 101/18.
The GDPR provides for greater protection for users and imposes new obligations and responsibilities on those who process personal data, including data collected via websites.
To find out more about the GDPR, you can consult the useful and comprehensive section compiled by the Italian Data Protection Authority: it will help you to better understand the new rules and find out about your rights.
A fundamental principle is that of transparency: users must be informed in advance, clearly and comprehensively, as to what personal information will be collected, who will process it, for what purposes and for how long, whether it will be used for commercial purposes or for profiling, whether it will be disclosed to third parties, and they must be able to effectively control the management of their data.
This notice is provided in accordance with Article 13 of the GDPR and is also based on the Article 29 Working Party’s Guidelines on Transparency.
This privacy notice is intended for users who subscribe to our newsletters by providing us with their email address.
As we will need to collect certain personal data from you in accordance with the GDPR in order for you to subscribe to our newsletters, you will find detailed information below on how Macron S.p.A. will process your personal data.
DATA CONTROLLER AND CONTACT INFORMATION
The data controller responsible for processing your personal data as set out in this Privacy Notice is Macron S.p.A. – with its registered office at Via Giulio Pastore, 57 – 40053 Valsamoggia, Crespellano (BO), Tax Code 00442260378, VAT No. 01675921207, You may also contact us regarding any enquiries or requests concerning your personal data via email at [email protected], in accordance with the provisions of Regulation 2016/679 and Legislative Decree 101/18.
TYPES OF DATA PROCESSED
To subscribe to the newsletter, Macron S.p.A. will ask you to provide your email address, as well as confirmation that you are over 14 years of age in accordance with Legislative Decree 101/18.
The provision of this personal and general data is necessary in order for us to send you communications tailored to your interests.
MACRON S.P.A. will treat this data with the utmost confidentiality, in accordance with current legislation and solely for the purposes specified below.
PURPOSE AND LEGAL BASIS FOR THE PROCESSING
Your personal data, as specified above, will be processed by Macron S.p.A. solely for the purpose of adding you to the mailing list and sending you communications so that you may receive:
- further information on Macron and the activities it organises, or updates on the brand;
- news relating to the brand’s business, e.g. new sports partnerships entered into, new collections launched, etc.
- invitations to events and/or press conferences.
The legal basis for the processing of such data is your express consent as the data subject, obtained in accordance with Article 6(1)(a) of the GDPR.
You may, at any time, decide to withdraw your consent.
In that case, Macron S.p.A.. will refrain from sending you any further communications.
You can withdraw your consent in the same simple way that you gave it. Every newsletter you receive will contain an ‘unsubscribe’ link. UNSUBSCRIBE.
RECIPIENTS OF PERSONAL DATA
Your personal data collected and processed by Macron S.p.A. for the management and sending of communications will be processed exclusively by employees and staff of Macron S.p.A., as well as by IT service providers involved in the management and operation of the mailing list service, in addition to any personnel carrying out occasional maintenance and repair work.
Your personal data may also be disclosed to the relevant authorities where required or provided for by law. The data will not be disclosed in any way.
INTENTION TO TRANSFER THE DATA TO A THIRD COUNTRY OR AN INTERNATIONAL ORGANIZATION
Browsing data and data voluntarily submitted by users via the various channels made available on the Website may be transferred to servers located in non-EU countries, should the IT service providers and software used by Macron S.p.A., listed above as recipients, so provide for this or use cloud computing technology that does not allow for certainty as to where your data is stored.
In accordance with the law, please note that, at present, the European Commission has issued an adequacy decision only for a limited number of countries (Andorra, Argentina, Australia, PNR, Canada, the Faroe Islands, Guernsey, the Isle of Man, Israel, Jersey, New Zealand, Switzerland, Uruguay) and that, consequently, your personal data may be transferred by the Services used (e.g. Google) to countries for which no such adequacy decision has been published, nor, at present, by Macron S.p.A. It is able to provide appropriate guarantees on its own.
However, we would like to remind you that Macron S.p.A. It has carefully selected only service providers capable of offering a high level of security and protection of personal data.
PERIOD OF DATA STORAGE
Your personal data collected and processed by MACRON S.P.A. Data relating to the management and sending of communications will be retained for the entire duration of the subscription.
When you decide to unsubscribe from our communications, your email address will automatically be added to a blacklist of contacts that are no longer to be used. This is an automatic procedure provided by the mailing list service provider. Macron S.p.A., to ensure your protection and safeguard your personal data, will periodically delete the database containing the data on the blacklist.
YOUR RIGHTS AS AN INTERESTED PARTY
We would like to inform you that, as a data subject, you are entitled to all the rights set out in the GDPR:
- Right of Access (Article 15),
- Right to Rectification (Article 16),
- Right to erasure (commonly known as the “right to be forgotten”) (Article 17),
- Right to restriction of processing (Article 18),
- The right to have the Data Controller notify the recipients of the rectification or erasure (Article 19),
- Right to data portability (Article 20),
- Right of Opposition (art. 21).
You also have the right to withdraw your consent to the processing of your data at any time; the withdrawal takes effect from the moment Macron S.p.A. becomes aware of it.
We remind you that the revocation, as provided for by the GDPR, does not affect the legality of the processing based on the previously given consent.
Finally, you have the right to lodge a complaint with a supervisory authority, as set out below. The Italian supervisory authority is the Garante per la Protezione dei Dati Personali (Italian Data Protection Authority), whose contact details can be found at http://www.garanteprivacy.it/web/guest/home/footer/
In all the cases described, the fact that you have exercised your rights is brought to the attention of those to whom your data has been disclosed, except where exemptions under the GDPR apply; please refer to the full text at the link http://www.garanteprivacy.it/regolamentoue/diritti-degli-interessati
In certain circumstances (deletion, restriction, objection), exercising your rights may mean that we are no longer able to send you communications.
All the rights described above may be exercised by submitting a request, either informally or by email to [email protected], including through an authorised representative. Your requests will be dealt with promptly.
RIGHT TO WITHDRAW THE CONSENT
The data subject is always entitled to withdraw their previously given consent in the same manner in which it was given, as well as by email, by sending the withdrawal to the following address: [email protected]
The email shall be deemed to have been received and shall therefore, upon receipt, enable the suspension of all processing and the notification to all data controllers and processors to comply accordingly.
We remind you that the possible withdrawal of consent does not affect the legality of the processing based on consent before the withdrawal.
RIGHT TO FILE A COMPLAINT WITH A CONTROL AUTHORITY
Any data subject whose rights and freedoms have been infringed as a result of a breach is entitled to lodge a complaint with the Data Protection Authority online by completing the relevant form, available on the website www.garanteprivacy.it.
THE OBLIGATION AND NECESSITY TO PROVIDE YOUR PERSONAL DATA
The provision of your personal data is optional: you are free to choose whether or not to provide your personal data to Macron S.p.A. of your own accord and voluntarily.
However, the processing of the personal data requested in the form is a necessary requirement for your registration. Failure to provide this data will mean that we will be unable to add you to the mailing list to send you communications.
PROFILING AND AUTOMATED DECISIONAL PROCESSES
The personal data you have provided of your own accord and voluntarily in order to subscribe to the mailing list to receive the Communications will not be used for profiling purposes or to trigger automated decision-making processes.
SAFETY MEASURES
The Data Controller implements appropriate technical and organisational security measures, in accordance with the provisions of the GDPR, in order to minimise the risks to your personal data, such as destruction or loss, including accidental loss, unauthorised access or processing that is unauthorised or not in accordance with the purposes of collection, as defined in this Privacy Notice.
METHOD OF PROCESSING
The processing of data will be carried out in accordance with Article 32 of the GDPR and will be carried out using computer and telematics tools, as well as manual and paper methods.
Following periodic checks, the Data Controller will verify that the data collected is strictly relevant and does not go beyond what is necessary for the purposes of the processing and in accordance with the obligations involved, as well as ensuring compliance with current legislation.
RESPONSIBLE FOR THE PROTECTION OF PERSONAL DATA The Data Controller has appointed Laura Lecchi, a lawyer, as Data Protection Officer (DPO); she can be contacted regarding her duties at the following email address: [email protected]
CHANGES TO THE PRIVACY POLICY
This Privacy Policy may be amended, for example to bring it into line with future regulatory requirements.
Should this Privacy Notice change whilst we are in contact with you, we will ensure that you are duly informed.
