PRIVACY POLICY - WEBSITE
Information document pursuant to and in accordance with Article 13 of Regulation (EU) 2016/679 (GDPR)
WHY THIS INFORMATION?
Pursuant to Regulation (EU) 2016/679 (hereinafter "GDPR"), this page describes how personal data is processed. This information is provided pursuant to Article 13 GDPR. The information is not to be considered valid for other third-party websites that may be consulted through links on this website, for which no responsibility is accepted.
Personal data that can be processed
- Personal data means any information relating to an identified or identifiable natural person ("data subject"); an identifiable person is one who can be identified, directly or indirectly, by reference in particular to an identifier such as a name, an identification number, location data, an online identifier, or to one or more features of his or her physical, physiological, genetic, mental, economic, cultural or social identity (C26, C27, C30 GDPR).
- Contractor/user data.
- Navigation data: the computer systems and software procedures used to operate this site acquire, during their normal operation, some personal data whose transmission is implicit in the use of Internet communication protocols. This category of data includes the IP addresses or domain names of the computers and terminals used by users, the addresses in URI/URL (Uniform Resource Identifier/Locator) notation of the resources requested, the time of the request, the method used in submitting the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response given by the server (successful, error, etc.) and other parameters relating to the user's operating system and computer environment.
- Data communicated voluntarily: the optional, explicit and voluntary sending of messages to the contact addresses indicated on this site and/or the filling in of data collection forms involves the subsequent acquisition of the sender's address, necessary to respond to requests, as well as any other personal data entered.
Information about the processing of personal data carried out through social media platforms
About the processing of personal data carried out by the managers of the Social Media platforms used by the Owner, please refer to the information rendered by them through their respective privacy policies. The Owner processes personal data provided by users through the pages of the dedicated Social Media platforms, in order to manage interactions with users (comments, public posts, etc.) and in compliance with current regulations.
Specific disclosures
Specific disclosures may be present on the pages of the Site in relation to particular services or processing of the data provided.
COOKIES AND OTHER TRACKING SYSTEMS. WHAT ARE THEY? WHAT ARE THEY USED FOR?
For Cookies and other tracking systems see the cookies policy found in the footer of the site and at the following link.
1.WHO IS THE DATA CONTROLLER? HOW TO CONTACT HIM?
The Data Controller is ELETTRICARS S.R.L., with registered office at Via Stradivari 27/31 - 20833 Giussano (MB), in the person of its pro-tempore Legal Representative, who can be contacted for any information by e-mail: emc@elettricars.com.
2. PURPOSE OF PROCESSING, LEGAL BASIS, PERIOD OF DATA RETENTION, NATURE OF CONFERMENT
| PURPOSE OF PROCESSING | LEGAL BASIS. | DATA RETENTION PERIOD | NATURE OF CONTRIBUTION |
|---|---|---|---|
| A) Navigation on this website. The data required for the use of web services, are also processed for the purpose of:
|
The processing is necessary for the pursuit of the legitimate interests of the data controller or third parties, provided that the interests or fundamental rights and freedoms of the data subject requiring the protection of personal data do not prevail, taking into account the reasonable expectations held by the data subject and the activities strictly necessary for the operation of the site and navigation itself. (Art. 6(1)(f) and C47 of the GDPR) |
Retention of browsing data will be for as long as the duration of the browsing session. | The provision of data is necessary for browsing the website. |
| B) Use of cookies and comparable technologies. See the cookies policy in the footer of the site. |
For non-technical necessary cookies and comparable technologies, processing is based on consent to the processing of personal data (Art. 6 par. 1 letter a and C42, C43 of the GDPR). Consent is given through the site's banner and cookie policy. |
See the cookies policy in the footer of the site. | See the cookies policy in the footer of the site. |
In addition to navigation, personal data will be processed for:
| PURPOSE OF PROCESSING | LEGAL BASIS. | DATA RETENTION PERIOD | NATURE OF CONTRIBUTION |
|---|---|---|---|
| C) CONTACTS, sending contact requests, information. | The processing is necessary for the performance of a contract to which the data subject is a party or the performance of pre-contractual measures taken at the request of the data subject (C44). Art. 6(1)(b) of the GDPR. |
Maximum 12 months. | The provision is necessary. Failure to provide the necessary data will result in the inability to be contacted and receive information. |
| D) CONFIGURATION AND PRE-ORDER of the product selected by the customer and subsequent processing of the pre-order. | The processing is necessary for the pursuit of the legitimate interests of the data controller or third parties, provided that the interests or fundamental rights and freedoms of the data subject requiring the protection of personal data do not prevail, taking into account the reasonable expectations held by the data subject and the activities strictly necessary for the operation of the site and navigation itself. (Art. 6(1)(f) and C47 of the GDPR) |
Maximum 1 year. | The provision is optional.
Failure to provide the necessary data will result in the inability to place a pre-order. |
| E) MANAGEMENT OF YOUR REQUESTS and requests of other data subjects, pursuant to Articles 15 et seq. of the GDPR (rights of the data subject). | Processing is necessary to fulfill a legal obligation to which the data controller is subject (C45). Art. 6(1)(c) of the GDPR. |
5 years from the closing of the application, barring litigation. | The provision of personal data is obligatory, as it is indispensable to be able to execute the obligations of the Law.3. TO WHOM WILL THE PERSONAL DATA BE COMMUNICATED? RECIPIENTS OF THE DATA |
3. TO WHOM WILL PERSONAL DATA BE DISCLOSED? RECIPIENTS OF THE DATA
Personal data will be communicated to entities that will process the data as autonomous Data Controllers, or Data Processors (Art. 28 GDPR) and processed by individuals (Art. 29 GDPR) acting under the authority of the Data Controller and Data Processors on the basis of specific instructions given regarding the purposes and methods of processing. The data will be communicated to recipients belonging to the following categories:
- Subjects based in Italy, who provide services for the website and communication networks, including email, host and website management;
- Subjects based in Italy, with whom the Owner has signed agreements and prior consent, where applicable;
- Competent authorities for fulfillment of legal obligations and/or provisions of public bodies, upon request.
The list of Article 28 Data Processors is available by writing to emc@elettricars.com or the other contact details above.
4. WILL THE DATA BE TRANSFERRED TO NONSEE COUNTRIES?
Personal data will not be transferred to countries outside the EEA. In particular, it should be noted that the data will be stored in Italy for hosting, management, development and maintenance services of the site. All third parties to whom the data may be communicated are based in Italy.
5. IS THERE AN AUTOMATED PROCESS?
Personal data will be subject to traditional manual, electronic and automated processing. It should be noted that fully automated decision-making processes are not carried out.
6. WHAT ARE YOUR RIGHTS? HOW CAN HE EXERCISE THEM?
Data subjects may assert their rights as expressed in Art. 15 et seq. GDPR by contacting the Data Controller at the e-mail address: emc@elettricars.com, or by writing to the contacts above.
The data controller guarantees data subjects the possibility to request, at any time, access to their personal data (art.15), rectification (art.16), deletion of the same (art.17), and restriction of processing (art.18). The data controller shall communicate (art. 19), to each of the recipients to whom the personal data have been transmitted, any rectification or erasure or restriction of processing carried out. The data controller shall notify those recipients at their request.
The owner guarantees the right to portability (art.20) and, in the event of requests under art.20, will provide data subjects with the data in a structured, commonly used, machine-readable format.
It is recognized that data subjects have the right to object (art.21), at any time, to the processing of data based on legitimate interest, by writing to the contacts above with the subject "opposition".
It is recognized that data subjects have the right to revoke the consent given, without affecting the lawfulness of the processing based on the consent given before revocation.
In the event that data subjects believe that the processing of personal data carried out by the Data Controller is in violation of the provisions of Regulation (EU) 2016/679, they are free to lodge a complaint with theNational Supervisory Authority, particularly in the member state where they usually reside or work, or in the place where the alleged violation of the Regulation occurred, or to take appropriate legal action.
7. CHANGES TO THE DISCLOSURE
The owner may change, modify, add or remove any part of this Privacy Policy. In order to facilitate verification of any changes, the notice will contain an indication of the date the notice was updated.
Update date: March 20, 2024