Privacy
EPLAB
(Information on the processing of personal data pursuant to art. 13 of EU Regulation 679/2016 and art. 13 of Legislative Decree 196/2003)
Racing Force SpA, as Data Controller (hereinafter also: “Data Controller” or “EPLAB”) pursuant to EU Regulation 679/2016 (hereinafter: “GDPR”) and Legislative Decree 196/2003 ( hereinafter: “Privacy Code”) – invites you, before communicating any personal data to the Data Controller, you must carefully read this Privacy Policy because it contains important information on the protection of your personal data.
This Privacy Policy:
is intended for the ompracing.com website (hereinafter: “Site”),
is an integral part of the Site and the services we offer,
it is written pursuant to art. 13 of the GDPR and the Privacy Code and applies to those who interact with the web services of the Site or who contact EPLAB by telephone or post
The processing of your personal data will be based on the principles of correctness, lawfulness, transparency, purpose limitation and conservation, minimization and accuracy, integrity and confidentiality, as well as the principle of accountability pursuant to art. 5 of the GDPR.
Your personal data will therefore be processed in accordance with the legislative provisions of the GDPR and the confidentiality obligations provided therein as well as those of the Privacy Code still in force today.
Processing of personal data means any operation or set of operations performed on personal data or sets of personal data, with or without the aid of automated processes, such as collection, recording, organisation, structuring, storage, adaptation or alteration, recovery, consultation, use, communication by transmission, diffusion or any other form of making available, comparison or interconnection, limitation, cancellation or destruction, as defined in the art. 4.2 of the GDPR.
We inform you that the personal data being processed may consist - also depending on your decisions on how to use the services - of any personal information capable of identifying you or making you identifiable, including textual information, photographic images or videos and any other information provided .
SUMMARY
DATA CONTROLLER: WHO WE ARE AND WHAT WE DO
WHAT DATA WE PROCESS
PURPOSE OF DATA PROCESSING – WHY WE PROCESS YOUR DATA
LEGAL BASIS AND MANDATORY OR OPTIONAL NATURE OF THE PROCESSING
RECIPIENTS OF PERSONAL DATA
TRANSFER OF PERSONAL DATA
STORAGE OF PERSONAL DATA
RIGHTS OF THE INTERESTED PARTY
THE CHANGES
CONTACTS
1. DATA CONTROLLER: WHO WE ARE AND WHAT WE DO
The Data Controller is EPLAB with registered office in San Gregorio di Catania, Italy | VAT ID: IT05830878, which has as its object the design, production and marketing of simracing accessories and motor sport.
2. WHAT DATA WE PROCESS
We inform you that the personal data being processed may consist of:
A. Personal data
provided directly by you in relation to the use of the Site and e-commerce activities, including:
your full name;
your date of birth;
your postal address;
Your email address;
your telephone number;
information relating to your payment methods;
any further data you may provide in the event of requests for contact and/or information or, for example, in the event of participation in surveys, promotions and prize competitions offered on the Site.
We will not process special categories of Personal Data. The expression "special categories of personal data" means data relating to racial or ethnic origin, political opinions, religious or philosophical beliefs, trade union membership, as well as genetic and biometric data intended to uniquely identify a natural person, as well as data regarding his personal life. health, sex life or sexual orientation.
B. Browsing data
The computer systems and software procedures used to operate this Site acquire, during their normal operation, some personal data whose transmission is implicit in the use of Internet communication protocols. This is information that is not collected with the intention of associating it with identified users, but which, by its very nature, could, through processing and association with data held by third parties, allow users to be identified. This category of data includes the IP addresses or domain names of the computers used by users who connect to the Site, the addresses in URI (Uniform Resource Identifier) notation of the requested resources, the time of the request, the method used in the submit the request to the server, the size details of the file received in response, the numerical code indicating the status of the response given by the server (successful, error, etc.) and other parameters relating to the operating system and the user's IT environment . The data are used for the sole purpose of obtaining anonymous statistical information on the use of the Site to check its correct functioning, to identify any anomalies and/or abuses, and are deleted immediately after processing. The data could be used to ascertain responsibility in case of hypothetical computer crimes against the Site or third parties.
C. Third party data provided voluntarily by you
When using certain services, the personal data you have provided to Racing Force may relate to third parties. In this case you act as an independent data controller, assuming all legal obligations and responsibilities. In this sense, you grant on this point the broadest indemnity with respect to any dispute, claim, request for compensation for damage caused by treatment, etc. that should reach the Data Controller from third parties whose personal data have been processed through your use of the services. on the Site in violation of the rules on the protection of relevant personal data. In any case, if you provide or otherwise mention personal data of third parties when using the Site, you hereby guarantee - assuming all related responsibility - that this particular processing hypothesis is based on the prior acquisition - on your part - of the consent of the third party to the processing of information concerning him and to their dissemination and that said processing will take place in compliance with the GDPR.
3. PURPOSE OF DATA PROCESSING – WHY WE PROCESS YOUR DATA
Your personal data will be processed, where applicable, with your consent where necessary, for the following purposes:
3.1. Allow navigation of the Site and the provision of Racing Force services through the Site;
3.2. In the context of e-commerce activities, for example, proceed to:
Conclude, execute and/or terminate the sales contract between you and the Company, following a purchase made on our Site;
Fulfill all obligations relating to the management of payments and sales documents;
Manage your purchase orders, ship and deliver purchased products and manage any returns you may request;
Provide you with the information and assistance required for the use of the Site and with regards to e-commerce activities;
Communicate with you regarding your use of the Site and e-commerce activities; AND
Manage any complaints and requests, send service communications and updates, both through traditional communication methods (e.g. via email) and remote communication tools, such as telephone, SMS, banners and other remote communication tools.
3.3. To find out specific requests, including telephone ones, addressed to Racing Force;
3.4. To fulfill any obligations established by current laws, regulations or community legislation, or to satisfy requests from the authorities;
3.5. Exercise the rights of the Owner, such as, for example, carrying out checks for the prevention and/or repression of fraudulent actions against the Site, managing our IT resources and ensuring IT security;
3.6. Conduct marketing activities by sending newsletters, commercial communications and market surveys using any means of communication (including email, SMS, social networks, post and telephone) to promote our products and services.
Personal data will be processed using automated and non-automated tools.
Specific security measures have been implemented in order to prevent data loss, illicit or incorrect use and unauthorized access.
4. LEGAL BASIS AND MANDATORY OR OPTIONAL NATURE OF THE PROCESSING
The legal basis for the processing of personal data for the purposes referred to in sections 3.1, 3.2 and 3.3. it's art. 6(1)(b) of the GDPR ([…] the processing is necessary for the execution of a contract of which the interested party is a party or for the execution of pre-contractual measures adopted at the request of the same), since the processing is necessary for the provision of services. The provision of personal data for these purposes is optional, but failure to provide it would make it impossible to activate the requested services.
The legal basis for the purpose referred to in point 3.4 is art. 6(1)(c) of the GDPR ( […] the processing is necessary to fulfill a legal obligation to which the data controller is subject). Once the personal data has been provided, in fact, the processing is indeed necessary to fulfill the legal obligations to which Racing Force is subject.
The legal basis for the purpose referred to in point 3.5 is art. 6(1)(f) of the GDPR (.... Processing is necessary for the pursuit of the legitimate interests of the data controller or third parties, except where such interests are overridden by the interests or fundamental rights and freedoms of the interested party ….). In fact, once the personal data has been provided, the processing is necessary for the pursuit of the legitimate interest of EPLAB under the aforementioned conditions.
5. RECIPIENTS OF PERSONAL DATA
Your personal data may be shared for the purposes indicated in section 3 of this Privacy Policy with:
5.1. subjects who typically act as data controllers and precisely: i) people, companies or professional firms that provide assistance and consultancy to EPLAB in accounting, administrative, legal, tax, financial or other matters; ii) subjects delegated to carry out technical or IT maintenance activities; iii) credit institutions, insurance companies; iv) parent companies and entities, controlled and connected to Racing Force, limited to the pursuit of administrative-accounting purposes connected to the performance of organisational, administrative, financial and accounting activities; v) EPLAB distributors and agents; vi) Couriers, Transporters, Freight Forwarders, Couriers, Postal Freight Forwarders, for the possible delivery of the goods; vii) paid service providers; viii) order fulfillment centers; (collectively “ Recipients ”):
5.2. subjects, bodies or authorities who require the communication of your personal data pursuant to legal provisions or orders of the authorities;
5.3. persons authorized by EPLAB to process personal data necessary to carry out activities strictly related to the provision of services, who are committed to confidentiality or have an adequate legal obligation of confidentiality and who guarantee the processing of data in compliance with the GDPR.
6. TRANSFER OF PERSONAL DATA
Personal data is stored on servers located within the European Union. In any case, it is understood that the Data Controller, if necessary, will have the right to move the servers outside the European Economic Area. In this case, the Data Controller ensures from now on that said transfer will take place in compliance with the applicable legislation based on an adequacy decision or on the Standard Contractual Clauses approved by the European Commission. Further information is available by sending a written request to the Data Controller at the contact details indicated in the "Contacts" section of this information.
7. STORAGE OF PERSONAL DATA
The personal data processed for the purposes referred to in section 3 will be kept for the time strictly necessary to achieve those same purposes and, as these are treatments carried out for the provision of services, up to the period of time envisaged and permitted by Italian law. to protect the interests and rights of defense of Racing Force, taking into account the limitation periods established by applicable law.
The personal data processed to allow navigation on the Site (section 3.1) will be kept only for the period necessary for the duration of the visit to the Site and, in any case, for a maximum of 24 months.
The personal data collected for contractual purposes (section 3.2) will be kept for the entire duration of the contract concluded with the Company, as well as for the following 10 (ten) years (period in which the limitation periods for any contractual liability accrued by the Company begin to run). ), unless further retention is required for potential litigation, requests by competent authorities or in accordance with applicable law.
The personal data collected to respond to specific requests, including telephone ones, addressed to EPLAB (section 3.3) will be retained for a maximum of 10 years from the interaction with the interested party.
Personal data processed for legal purposes (section 3.4) will be kept for the period prescribed for each type of data by the applicable legislation.
Personal data collected for purposes of legitimate interest (section 3.5) will be stored for a maximum period of 10 years, unless further storage is necessary to ascertain responsibility in case of hypothetical computer crimes against the Site or to comply to any requests from authorities.
Personal data processed for marketing purposes (section 3.6) will be retained until the consent to processing is revoked and in any case for no longer than 24 (twenty-four) months.
8. RIGHTS OF THE INTERESTED PARTY
In your capacity as interested party, pursuant to art. 15 and subsequent amendments of the GDPR and art. 7 of the Privacy Code, you have the right to:
obtain confirmation of the existence or otherwise of personal data concerning you, even if not yet registered, and their communication in an intelligible form;
obtain indication of: a) the origin of the personal data; b) the purposes and methods of processing; c) of the logic applied in case of processing carried out with the aid of electronic instruments; d) the identification details of the owner, managers and designated representative pursuant to article 5, paragraph 2 of the Privacy Code and art. 3, paragraph 1 of the GDPR; e) of the subjects and categories of subjects to whom the personal data may be communicated, or of subjects who may become aware of them in their capacity as designated representatives in the territory of the State, managers or persons in charge of processing;
iii. obtain: a) updating, rectification and, when deemed interesting, integration of data; b) delete, transform into anonymous form or block data processed in violation of the law, including data whose retention is not necessary in relation to the purposes for which they were collected and processed; c) certification that the operations referred to in letters a) and b) have been brought to the attention, including their content, of the subjects to whom the data have been communicated or transmitted, except in the case where this is not possible or when this requires a disproportionate effort compared to the protected right;
object, in whole or in part: a) to the processing of personal data concerning you, even if pertinent to the purpose of the collection; b) to the processing of personal data concerning you for the purpose of sending advertising or direct sales material or for carrying out market research or commercial communication, through the use of automated call systems without the intervention of an operator by e-mail and/or traditional means marketing methods by telephone and/or paper mail. Please note that the interested party's right of opposition, set out in the previous point b), for direct marketing purposes using automated methods, extends to traditional ones and that the possibility for the interested party to exercise the right of opposition also remains partially. Consequently, the interested party can choose to receive only communications via traditional methods or only automated communications or neither.
Where applicable, you also have the rights referred to in the articles. 16 – 22 GDPR (Right of rectification, right to be forgotten, right to limit processing, right to data portability, right to object, right to object to automated processing), including profiling).
Requests must be sent in writing to the Data Controller at the contact details indicated in the "Contacts" section of this information.
In any case, you always have the right to lodge a complaint with the competent supervisory body (Guarantor for the protection of personal data), pursuant to art. 77 of the GDPR, if you believe that the processing of your data is contrary to current legislation.
9. CHANGES
EPLAB reserves the right to modify or simply update the content of this Privacy Policy, partially or completely, even in the event of changes to the relevant legislation. In this case EPLAB will inform you of such changes as soon as they are introduced, and they will be binding as soon as they are published on the Site. EPLAB invites you to regularly visit this section to become aware of the most recent and updated version of the Privacy Policy in order to always remain updated on the data collected and the use of the same by the Owner.
10. CONTACTS
To exercise the above rights or for any other request, write to the Data Controller: EPLAB di Edoardo Piazza
Viale Europa 122 #16, San Gregorio di Catania, 9027,Catania,Italy
VAT N05830878