Information on the processing of personal data
Pursuant to Article 13 of EU Regulation 2016/679 (hereinafter “GDPR”)
DR Automobiles S.r.l. wishes to inform the Data Subject regarding the processing of personal data transmitted to the Company, as defined below, by filling out the following specific form on the Company’s website www.ich-x.it: request a test drive.
Personal data are processed in compliance with the principles of personal data protection established by the GDPR and national legislation, using paper, computer, and electronic tools, with logic strictly related to the purposes indicated herein, so as to guarantee the security and confidentiality of the data themselves, in compliance with the principles established by the GDPR.
- Identità e dati di contatto del Titolare
The Data Controller is DR Automobiles S.r.l. (the “Company” or the “Controller”), with registered office in Macchia di Isernia (IS), Zona Industriale di Macchia d’Isernia s.n.c., tax code and VAT number 00879050946, in the person of its legal representative.
The Data Subject may contact the Controller via registered mail with return receipt to be sent to the aforementioned registered office or by email at the following email address: privacy@drautomobiles.it .
- Categorie di Interessati. Categories of personal data processed. Source from which the personal data originate
Data Subjects are those who fill out the aforementioned form on the website www.ich-x.it .
The personal data processed are: first name, last name, email, telephone contacts, postal code.
Personal data are collected through direct provision by the Data Subject.
- Finalità e liceità del trattamento. Legal basis. Nature of the provision
The personal data collected are processed by the Controller pursuant to Art. 6 of the GDPR.
The purpose of the processing is to provide the Data Subject with the requested service, the legal basis for which is the legitimate interest of the Data Controller and/or third parties*.
The provision of personal data is necessary for processing based on the legitimate interest of the Data Controller or third parties.
- Categorie di soggetti destinatari dei dati personali
Personal data may be disclosed to dealers, parent companies and/or subsidiaries and/or companies under common control.
Personal data will also be known by the company used by the Controller for the management of hosting and maintenance services of the aforementioned Company website.
All the aforementioned subjects are used as “Data Processors”, pursuant to Art. 28 of the GDPR, or as independent “Controllers”.
Personal data are also processed by subjects authorized for processing by the Controller.
The personal data processed are not subject to dissemination.
- Trasferimenti extra UE
Personal data are not transferred outside the EU.
- Periodo di conservazione dei dati personali
The personal data processed are stored at the Controller’s registered office. They will be processed for the period of time necessary for the purposes for which they were collected or subsequently processed, as well as for a maximum of twelve months following acquisition. At the end of this period, such personal data will be deleted.
- Processo decisionale automatizzato
For the pursuit of the processing purposes described above, no decision is made based solely on automated processing that produces legal effects concerning the Data Subject or significantly affects them in a similar way.
- Diritti dell’interessato
Pursuant to the GDPR, the Data Subject may, according to the methods and terms provided therein, exercise the following rights:
- a) right to obtain from the Data Controller confirmation as to whether or not personal data concerning them are being processed and, if so, to obtain access to the personal data and the information provided for by Art. 15 and in particular those relating to the purposes of the processing, the categories of personal data in question, the recipients or categories of recipients to whom the personal data have been or will be disclosed, the storage period, etc.;
- b) right to obtain, where inaccurate, the rectification of personal data concerning them, as well as the integration of the same where deemed incomplete, always in relation to the purposes of the processing (Art. 16);
- c) right to erasure of data (“right to be forgotten”), where one of the cases referred to in Art. 17 applies;
- d) right to restriction of processing, in the cases provided for by Art. 18;
- e) right to data portability pursuant to Art. 20;
- f) right to object to processing pursuant to Art. 21.
These rights may be exercised by request sent by registered mail with return receipt to the Controller at the registered office or by email to the email address: privacy@drautomobiles.it
The data subject also has the right to lodge a complaint with the Data Protection Authority or another supervisory authority pursuant to Art. 13, par. 2, letter d) of the GDPR.
- Modifiche alla presente informativa
The Controller reserves the right to modify and update this information over time.
* Interest of the Controller in promoting the brand, its products, and maintaining and developing user satisfaction.
