On this page, MACRON S.P.A. describes the methods of processing your personal data submitted through the form (the “Form”) available at the following link:
https://clubshop.macron.com/default/customer/account/create on this website (the “MACRON Site”).
If you have any questions, you can contact us at: [email protected]
WHY THIS NOTICE?
Starting from May 25, 2018, new privacy rules apply in all European Union countries, as required by EU Regulation No. 2016/679 (General Data Protection Regulation, hereinafter referred to as GDPR), as well as national laws, including Legislative Decree 101/18.
The GDPR provides greater protection for users and imposes new obligations and responsibilities on those who process personal data, including data collected via websites. To learn more about the GDPR, you can consult the useful and in-depth section curated by the Italian Data Protection Authority: it will help you better understand the new rules and learn about your rights.
A fundamental principle is transparency: users must know in advance, clearly and completely what personal information will be collected, who will process it, for what purposes and for how long, whether it will be used for commercial or profiling purposes, whether it will be disclosed to third parties, and must be able to effectively control the management of their data.
This notice is provided in accordance with Article 13 of the GDPR and is also inspired by the Article 29 Working Party Guidelines on Transparency.
This notice is addressed to users who fill out the registration form to create a personal account and take advantage of the services and features that MACRON S.P.A. offers to registered users. In responding to your request for information, MACRON S.P.A. will process your personal data that you voluntarily submit. Below you will find detailed information on how this data will be managed.
DATA CONTROLLER AND CONTACT INFORMATION
The data controller of your personal data as described in this Notice is Macron S.p.A. - with registered office at Via Giulio Pastore, 57 – 40053 Valsamoggia, loc. Crespellano (BO), Tax Code 00442260378, VAT No. 01675921207, and can be contacted for any communication or request regarding your data also via email at [email protected] pursuant to Regulation 2016/679 and Legislative Decree 101/18.
DATA PROTECTION OFFICER – D.P.O.
Macron S.p.A., within its organization and specifically regarding personal data processing, has appointed a Data Protection Officer who can be reached at: [email protected] for any request or inquiry regarding your data.
TYPES OF DATA PROCESSED
In addition to what is specified in the MACRON S.P.A. Privacy Policy regarding browsing data and email messages, through the Form MACRON S.P.A. will request the following data:
- personal or tax information;
- contact details.
- recifient's size information, if applicable, for purchases made through e-commerce
MACRON S.P.A. will process this data, only if necessary and only with your express consent, with the utmost confidentiality, in accordance with current legislation and solely for the purposes specified below.
PURPOSE AND LEGAL BASIS OF THE PROCESSING
The data acquired by MACRON S.P.A. through the Form will be processed only to the extent necessary to create your personal account, which will allow you to access your reserved area.
The legal basis for the processing of such data is your express consent as the data subject, obtained in compliance with the GDPR.
With reference to the purpose of providing goods or services, the legal basis of the processing is:
- the online purchase contract for sportswear products constitutes the legal basis for processing (pursuant to Article 6, paragraph 1, letter b of the Privacy Regulation 2016/679);
- egarding the purpose of fiscal and administrative-accounting management of the transaction, the legal basis for processing is to fulfill a legal obligation to which the data controller is subject (pursuant to Article 6, paragraph 1, letter c of the Privacy Regulation 2016/679);
- regarding the purposes of registration to the reserved area, browsing, social media, data processing for marketing reasons and commercial offers related to purchased products, the legal basis is your optional express consent (pursuant to Article 6, paragraph 1, letter a of the Privacy Regulation 2016/679), via mail, email, telephone (landline and/or mobile, with or without automated call or communication systems, with or without the intervention of an operator), and/or WhatsApp and SMS to offer the User the purchase of products and/or services offered by the Data Controller and/or by third-party companies, to present offers, promotions, and business opportunities, all expressed through your explicit and manifest selection by ticking the relevant checkboxes at the bottom of the data collection form on the website; failure to provide consent will in no way affect your ability to register on the Site;
- regarding the sharing of data with independent data controllers such as Associations and Clubs, the legal basis is legitimate interest (pursuant to Article 6, paragraph 1, letter f of the Privacy Regulation 2016/679), based on agreements between Macron and the Associations and Clubs that are part of this sportswear distribution model used by registered athletes. The data of users accessing this reserved area are shared with the Associations and Clubs in order to determine whether those who are required to obtain has purchased the uniform, in accordance with the reasonable expectations of the data subjects, who in any case have already provided their data to the Associations and Clubs for purposes related to their participation in sporting activities and upcoming competitions.
RECIPIENTS OF PERSONAL DATA
The data you submit via the Form will be processed exclusively by:
- MACRON S.P.A. staff and collaborators;
- IT service providers;
- email service providers;
- providers of services related to the management and operation of the Site;
- any personnel involved in occasional maintenance and repair operations;
- cloud service providers;
- hosting and virtual server providers;
- management software provider;
- connectivity and telecommunications service providers;
- chat and communication service providers;
- file transfer service providers;
- remote support service providers;
- distribution partners;
- Sports Clubs affiliated with the registered User, related to the purchased products.
The data will not be disclosed to categories of subjects other than those listed in this notice, nor will they be disseminated or made public in any way.
They may be communicated to competent Authorities if required by applicable law or at the request of authorized entities.
INTENTION TO TRANSFER DATA TO A THIRD COUNTRY OR INTERNATIONAL ORGANIZATION
Your data may be transferred to servers located in non-EU countries, in the event that the IT service providers and software used by MACRON S.P.A. require it, or use cloud computing technologies that, by their very nature, do not allow precise identification of the physical location of your data.
According to the law, please note that currently the European Commission has issued an adequacy decision only for a limited number of countries (Andorra, Argentina, Australia, PNR, Canada, Faroe Islands, Guernsey, Isle of Man, Israel, Jersey, New Zealand, Switzerland, Uruguay). Therefore, your personal data may be transferred via the services used (e.g., Skype, Gmail) to countries for which such an adequacy decision has not been issued, and at present, MACRON S.P.A. is not independently able to provide appropriate safeguards.
However, we remind you that MACRON S.P.A. has carefully selected only service providers capable of offering a high level of security and protection of personal data.
DATA RETENTION PERIOD
The personal data you provide by filling out the Form will be retained for as long as necessary to allow you to use the services offered by MACRON S.P.A.
Please note that your personal data will be stored until you exercise your right to erasure of the aforementioned data, pursuant to Article 17 of the GDPR.
This right can be exercised by sending an email to: [email protected]
YOUR RIGHTS AS A DATA SUBJECT
We inform you that, as a Data Subject, you are entitled to all the rights provided by the GDPR:
We inform you that, as a Data Subject, you are entitled to all the rights granted to you under the GDPR:
Right of Access (Art. 15);
Right to Rectification (Art. 16);
Right to Erasure (so-called “Right to be Forgotten”) (Art. 17);
Right to Restriction of Processing (Art. 18);
Right to Have the Controller Notify Recipients of Any Rectification or Erasure (Art. 19);
Right to Data Portability (Art. 20);
Right to Object (Art. 21).
You also have the right to withdraw your consent to the processing of your data at any time.
The withdrawal becomes effective as soon as MACRON S.P.A. becomes aware of it.
Please note that withdrawal, as provided for by the GDPR, does not affect the lawfulness of processing based on consent given before its withdrawal.
In some cases (erasure, restriction, objection), exercising your rights may make it impossible, in whole or in part, to follow up on your requests submitted via the Form, or to provide any services and/or benefits to you.
All the above rights may be exercised by sending a simple request, without formalities, via email to [email protected], addressed to MACRON S.P.A. (also through an authorized representative), to which a prompt and appropriate response will be provided.
RIGHT TO WITHDRAW CONSENT
The data subject may always revoke their previously given consent, using the same method with which it was provided, or in any case by email, by sending the revocation to the following address: [email protected], or by using the buttons or links made available.
The email will have legal effect upon receipt, thereby allowing the termination of all processing and notifying each processor or sub-processor to act accordingly.
Please note that the withdrawal of consent does not affect the lawfulness of the processing carried out based on the consent prior to its withdrawal.
RIGHT TO LODGE A COMPLAINT WITH A SUPERVISORY AUTHORITY
Each data subject has the right, in the event of a violation that harms their rights and freedoms, to lodge a complaint with the Supervisory Authority (Garante), using the dedicated form available on the website www.garanteprivacy.it.
OBLIGATION AND NECESSITY TO PROVIDE PERSONAL DATA
The user is free to provide the personal data requested in the Form. However, failure to provide the required data in the appropriate fields of the Form will result in the impossibility of responding to your request to register a personal account.
PROFILING AND AUTOMATED DECISION-MAKING PROCESSES
The data you voluntarily provide by filling out the Form will not be used for profiling purposes or to activate any automated decision-making processes.
SECURITY MEASURES
MACRON S.P.A., as Data Controller, adopts appropriate technical and organizational security measures, in accordance with the provisions of the GDPR, to minimize the risks to your personal data, such as destruction or accidental loss, unauthorized access, or processing not allowed or not compliant with the purposes of collection as defined in this Policy.
METHODS OF PROCESSING
The processing of personal data will be carried out in accordance with Article 32 of the GDPR using electronic, telematic, manual, and paper-based means.
Data will be stored in electronic and paper archives in such a way as to allow, where necessary, the identification and selection of aggregated data, for no longer than is necessary for the purposes described in the information notice provided at the time of collection. Periodic checks will be carried out by the Controller to ensure that the data collected is strictly relevant and not excessive in relation to the processing obligations and purposes.
RULES OF CONDUCT – DISCLOSURE AND SHARING OF DATA
In compliance with current legislation, if you use the Form improperly to commit unlawful acts and/or engage in any behavior punishable under criminal law, MACRON S.P.A. reserves the right to inform the Public Authorities, in full compliance with the law.
CHANGES TO THIS PRIVACY POLICY
This Privacy Policy may be modified when new features are added to the Site’s Services or because of comments and suggestions from our users.
The updated version of this Policy may be modified at any time by publishing a revised version on the relevant page of the Site, effective from the date of publication.
Should this Privacy Policy change during the period in which we are in contact with you, we will inform you.
