Information notice for newsletter subscription authorization
WHY THIS NOTICE?
As of May 25, 2018, new privacy rules apply throughout the European Union, introduced by Regulation (EU) No. 2016/679 (General Data Protection Regulation, hereinafter “GDPR”), alongside national laws such as Legislative Decree 101/18.
The GDPR provides enhanced protection for users and imposes new obligations and responsibilities on those who process personal data, including when collected through websites.
To learn more about the GDPR, you can consult the detailed section prepared by the Italian Data Protection Authority. It will help you better understand the new rules and your rights.
A fundamental principle of the GDPR is transparency: users must be clearly and fully informed in advance about what personal information will be collected, who will process it, for what purposes and how long, whether it will be used for commercial or profiling purposes, whether it will be shared with third parties, and how to control the processing of their data.
This information notice is provided pursuant to Article 13 of the GDPR and is inspired by the Guidelines of the Article 29 Working Party on Transparency.
This notice applies to users who subscribe to our communications by providing their email address.
Since subscription to the communications involves the collection of personal data under the GDPR, you will find detailed information below on how MACRON S.P.A. will process your personal data.
DATA CONTROLLER AND CONTACT DETAILS
The Data Controller for your personal data under this Privacy Notice is MACRON S.P.A., with registered office at Via Giulio Pastore 57 – 40053 Valsamoggia, loc. Crespellano (BO), Italy – Tax ID 00442260378 – VAT No. 01675921207.
You may contact the Data Controller for any communication or request regarding your data by emailing [email protected], pursuant to Regulation 2016/679 and Legislative Decree 101/18.
TYPES OF DATA PROCESSED
To subscribe to the newsletter, MACRON S.P.A. will request your email address, as well as confirmation that you are over 14 years old, in accordance with Legislative Decree 101/18.
Providing this personal data is required to send you communications aligned with your interests.
MACRON S.P.A. will process this data with the utmost confidentiality, in compliance with current legislation and solely for the purposes specified below.
PURPOSE AND LEGAL BASIS FOR PROCESSING
Your personal data, as described above, will be processed by MACRON S.P.A. exclusively for the purpose of subscribing you to our mailing list and sending you communications including:
a) Additional information about Macron and updates regarding its activities or brand developments;
b) News related to the brand’s business, such as new sports partnerships or new collections launched;
c) Invitations to events and/or press conferences.
The legal basis for this data processing is your express consent, in accordance with Art. 6(1)(a) GDPR.
You may withdraw your consent at any time.
In such case, MACRON S.P.A. will cease sending you future communications.
Consent withdrawal is possible using the same simple methods by which it was given. Each newsletter includes an unsubscribe link (so-called UNSUBSCRIBE).
RECIPIENTS OF PERSONAL DATA
Your personal data collected and processed by MACRON S.P.A. for the management and sending of communications will be handled exclusively by MACRON S.P.A.’s staff and collaborators, as well as by IT service providers responsible for managing and operating the mailing list service, and any individuals involved in occasional maintenance or repairs.
Your data may also be communicated to competent authorities if required or mandated by law.
Under no circumstances will your data be publicly disclosed.
DATA TRANSFER TO THIRD COUNTRIES OR INTERNATIONAL ORGANIZATIONS
Browsing data and data voluntarily provided by users through the various channels made available on the Website may be transferred to servers located outside the EU, where IT service providers or programs used by Macron S.p.A.—as listed above—so require or use cloud computing technologies that do not allow clear identification of the data storage location.
As per current law, please note that the European Commission has so far issued adequacy decisions for only a limited number of countries (Andorra, Argentina, Australia, Faroe Islands, Canada, Guernsey, Isle of Man, Israel, Jersey, New Zealand, Switzerland, Uruguay). Therefore, your personal data may be transferred—by services used (e.g., Google)—to countries not covered by such adequacy decisions. At present, Macron S.p.A. is not independently able to provide additional appropriate safeguards.
Nevertheless, Macron S.p.A. only selects service providers capable of offering a high level of personal data security and protection.
DATA RETENTION PERIOD
Your personal data collected and processed by Macron S.p.A. for the purpose of managing and sending communications will be retained for the entire duration of your subscription.
When you decide to unsubscribe, your email will be automatically added to a blacklist of contacts to no longer be used. This is a standard process of the mailing list provider. For your protection, Macron S.p.A. will periodically delete blacklisted data from its systems.
YOUR RIGHTS AS A DATA SUBJECT
As a data subject, you are entitled to exercise the rights provided by the GDPR:
- Right of Access (Art. 15)
- Right to Rectification (Art. 16)
- Right to Erasure (the “Right to be Forgotten”) (Art. 17)
- Right to Restriction of Processing (Art. 18)
- Right to Notification of Rectification or Erasure (Art. 19)
- Right to Data Portability (Art. 20)
- Right to Object (Art. 21)
You also have the right to withdraw your consent at any time. The withdrawal will take effect from the moment Macron S.p.A. becomes aware of it.
Please note that consent withdrawal does not affect the lawfulness of data processing carried out based on consent before its withdrawal.
You also have the right to lodge a complaint with a supervisory authority. In Italy, this is the Data Protection Authority (“Garante per la Protezione dei Dati Personali”), whose contact information is available at: http://www.garanteprivacy.it/web/guest/home/footer/
Your request will be communicated to all recipients of your data, unless exempted under the GDPR. More information is available at: http://www.garanteprivacy.it/regolamentoue/diritti-degli-interessati
In some cases (e.g., erasure, restriction, objection), exercising your rights may prevent Macron S.p.A. from continuing to send you communications.
You may exercise your rights informally or by emailing [email protected] directly or via an authorized representative. Macron S.p.A. will respond promptly.
RIGHT TO WITHDRAW CONSENT
You may revoke your previously given consent at any time, in the same way it was granted or by sending an email to: [email protected]
Such withdrawal will take effect upon receipt and Macron S.p.A. will immediately stop all related processing, also notifying any data processors or sub-processors.
Please note that withdrawing consent does not affect the lawfulness of processing based on consent prior to withdrawal.
RIGHT TO LODGE A COMPLAINT WITH A SUPERVISORY AUTHORITY
If your rights or freedoms have been infringed, you may lodge a complaint with the Italian Data Protection Authority (“Garante”), using the web form available at: www.garanteprivacy.it
OBLIGATION TO PROVIDE DATA
Providing your personal data is optional: you are free to submit your data to Macron S.p.A. or not.
However, providing the data required in the form is necessary to complete your subscription. Failure to provide such data will make it impossible to add you to the mailing list and send you communications.
PROFILING AND AUTOMATED DECISION-MAKING
Personal data voluntarily submitted for newsletter subscription will not be used for profiling or to activate automated decision-making processes.
SECURITY MEASURES
The Data Controller adopts appropriate technical and organizational security measures, in accordance with the provisions of the GDPR, to minimize the risks to your personal data, such as destruction or loss (including accidental), unauthorized access, or processing that is not permitted or inconsistent with the purposes for which the data was collected, as described in this Privacy Notice.
DATA PROCESSING METHODS
Data processing is carried out in accordance with Article 32 of the GDPR, using IT and digital tools as well as manual and paper-based systems.
The Data Controller conducts periodic audits to ensure the strict relevance and non-excessiveness of the data collected with respect to the stated obligations and purposes, and to verify continued compliance with applicable legislation.
DATA PROTECTION OFFICER (DPO)
The Data Controller has appointed Avv. Laura Lecchi as Data Protection Officer (DPO). She can be contacted at: [email protected]
CHANGES TO THIS NOTICE
This Privacy Notice may be amended, for example, to comply with future regulatory updates.
If any changes occur during the time we are in contact with you, we will duly inform you.