INFORMATION PROVIDED PURSUANT TO ART. 13 OF REGULATION (EU) 679/2016 AND OF LEGISLATIVE DECREE. 196/2003 S.M.I. FOR THE PROCESSING OF PERSONAL DATA OF NATURAL PERSONS

This information represents the concrete management methods of the website in relation to the processing of personal data of users who connect to it. Data processing is always carried out following the principles of lawfulness, transparency and correctness and suitable security measures are adopted to guarantee its protection. Further and specific information on the processing of personal data can be obtained by sending a request to the Data Controller using the contact form.

DATA CONTROLLER

The data controller of the personal data of users who browse the site https://giftcard.motocrossdorno.com is A.M.G. Srl with registered office in Strada Provinciale 19 SNC, 27020 Dorno (PV), C.F. and VAT number 09902330969. Telephone: +39 349 624 5247, email: info@motocrossdorno.com and PEC: amg.crossodromo@pec.it, is the owner of the website www.giftcard.motocrossdorno.com.

LEGAL BASIS

Contractual basis:
The processing of data for “Contractual Purposes” is mandatory as it is necessary for the provision of the services requested by you.

Legal basis:
The provision of data for the “Legal Purpose” is also mandatory as required by applicable regulations such as tax compliance or to defend the rights of the Owner or third parties in court.

Consensual Basis:
The processing of data for specific purposes such as, by way of example, requesting quotes, use of contact forms or for marketing purposes is optional and is permitted only with your consent (which can be revoked at any time) without which it will be possible for A.M.G. Srl follow up on the services or requests made by the user.

Legitimate interest of the Data Controller:
The Data Controller may process the data collected for its legitimate interest and within the limits established by the Regulation. The user may object at any time to processing for purposes of legitimate interest of the Data Controller and without prejudice to the limits imposed by law.

TYPE OF DATA PROCESSED

A.M.G. To provide the services on the website, Srl collects and processes only “personal identification data” such as, by way of example, name and surname, date and place of birth, city, telephone number, e-mail.

Additional data collected
The computer system on which the operation of this website is based acquires some personal data during its operation. These data are not collected to be associated with identified users, but by their nature, through processing/association with data held by third parties, they could allow the user to be identified. This category of data includes, for example, the IP address, domain name, access time, parameters relating to the operating system used by the user, etc. These data are collected for the sole purpose of obtaining statistical information on the use of the website and its correct functioning or to ascertain any computer crimes against the website. A.M.G. Srl does not collect or process particular categories of personal data, i.e. sensitive data, health data (including genetic or biometric data) and criminal data.

METHOD AND PURPOSE OF THE TREATMENTS

The processing of personal data is necessary to manage relationships with users of the website, including the provision of services and the sale of gift cards. The data collected is processed electronically, electronically and on paper and is
protected by suitable security measures to guarantee confidentiality, integrity and restoration. In particular, organizational and procedural measures are adopted (e.g. distribution of roles among staff, both internal and external data processors) as well as technical measures (e.g. backup, antivirus, firewall).

The purposes for which we collect and process personal data are multiple, in any case we process the data provided exclusively for the purposes strictly pertinent to each individual service requested or used, in particular:

Contact Form/Information: we use the data you provide us using this service exclusively to give precise feedback on what you requested and, for this purpose, we expressly collect your consent.

Ecommerce checkout: we use the data you provide us using this service exclusively to provide you with a receipt and a gift card for the product purchased. For this purpose we expressly collect your consent.

Sending Curriculum Vitae: when you send your CV using the service on our website
we will use your data, subject to your consent, to carry out the necessary selection activities. At the moment
When you send your CV for your application, we will provide you with specific information.

In some cases, to use the Customer Care service we may need to ask you for your personal data when this is necessary to respond to requests for clarification, information on services offered or for assistance
after sales, etc.

RECIPIENTS OF THE DATA

We communicate your personal data to third parties exclusively when this is necessary and functional to achieve the processing purpose pursued according to the service requested, in any case we proceed with the communication only after having informed you and having obtained your consent to do so, where applicable. In general, the data collected through the individual services and for the purposes pursued in this information may be communicated to the following categories of subjects:

Any Public Authority to which the right to access them is attributed by legal provisions;
data processing and IT services companies (e.g. web hosting, data entry, management and maintenance of IT infrastructures and services, web agency, etc.);
companies and professional firms that provide consultancy services to comply with legal provisions or to protect the legitimate interests of the Data Controller;
Some navigation data is collected by third parties such as social networks when the user decides to use the relevant interaction button and, in some cases, even without using the interaction service. The processing of said data is left to the privacy policies of each individual third party.

DATA TRANSFER TO OTHER COUNTRIES

The personal data collected through the website are stored and stored within the national territory or in other European Union countries. The data is not transferred to non-EU countries or to international organisations. If the user wants information on the place of storage of the data, he can obtain it by making an express request to the Data Controller.

DATA RETENTION PERIOD

We retain, by adopting appropriate security measures, the data provided for the period necessary to achieve the purposes for which they were collected, in particular:

the data collected and processed to fulfill legal purposes are kept for the period provided for by the individual legal provision;
the data collected to execute a contract are kept for a period of 10 years from its conclusion;
The data collected when using the contact form are kept for 24 months from the request;
The data collected to carry out a quote at the user’s request are kept for 24 months.
The data collected when sending CVs are kept for 24 months.

PROFILING AND AUTOMATED DECISION MAKING

A.M.G. Srl does not process the data collected for profiling purposes or activities of users of the website and does not adopt decision-making systems based solely on automated data processing.

NATURE OF DATA PROVISION

Mandatory Contribution:
The provision of the requested data is always mandatory when it is necessary to execute a contract to fulfill a legal obligation or to follow up on your request or relating to the purchase of gift cards. In such cases, failure to provide data will not allow the Owner to execute the requests received and the sale. To this end, the mandatory data entry fields in the forms on the website are marked with an asterisk.

Optional provision:
Failure to provide the optional data present in the collection forms does not jeopardize obtaining the requested service. The fields where it is optional to enter data are recognizable as they are not marked with the asterisk that distinguishes the mandatory fields.

Voluntary submission:
When you spontaneously send an email to one of the email addresses indicated on our sites, we acquire the sender address and any other personal data you have entered in the message and in the attachments. The email boxes corresponding to the addresses indicated on our sites and any other A.M.G. email boxes Srl are not personal in nature even when they contain the name and/or surname of a natural person. They belong to the Owner and have the primary purpose of allowing the effective carrying out of work activities within the company. By sending an email to the email addresses indicated on the website you declare that you have read and accepted the processing conditions contained in this information.

RIGHTS OF THE INTERESTED PARTY

At any time you can exercise the rights that Regulation (EU) no. 679/2016 recognizes you. In particular, you will be able to exercise, by contacting the Data Controller or the Data Processor (it is possible to have a list of the external Managers appointed by making a specific request to the Data Controller):

Right of Access (art. 15). You will be able to obtain confirmation from the data controller as to whether or not personal data concerning you is being processed and, in this case, obtain a copy of the data being processed; Right of Rectification (art. 16). You will be able to obtain rectification (i.e. modification, integration or updating) of inaccurate personal data concerning you, in case of inaccuracy, incompleteness or obsolescence; Right of Erasure (art. 17) (so-called Right to be Forgotten). You can obtain the deletion of personal data concerning you. The data controller will delete them without unjustified delay provided that one of the reasons listed in the said art. 17; Right to Limitation of Processing (art. 18). As an interested party, you have the right to obtain the limitation of processing when one of the hypotheses listed in the art. 18; Right of Opposition (art. 21). You have the right to object at any time to the processing of personal data concerning you for reasons related to your particular situation and if the conditions set out in the art. 21; Right to Data Portability (art. 20). You have the right to receive the personal data concerning you provided to a Data Controller in a structured, commonly used and machine-readable format and you have the right to transmit such data to another Data Controller without impediments by the Data Controller of the processing to which they were provided if the conditions listed in the art. 20; Right to Revoke Consent. You have the right to withdraw consent in relation to all processing based on it. To exercise this right, without this circumstance affecting the lawfulness of the processing up to that point based on the consent given, you can at any time write to info@motocrossdorno.com; Right to lodge a complaint with the Guarantor. Where necessary, you can lodge a complaint with the competent Supervisory Authority for the protection of the rights guaranteed to you by Legislative Decree 196/2003 and by European Regulation 679/2016 (www.garanteprivacy.it).