GDPR Art. 13 - CRM Data Processing
Page content
INFORMATION ON DATA PROCESSING PURSUANT TO ART. 13 GDPR
for CRM purposes
https://www.clubshop.macron.com
On this page MACRON SPA describes the methods of processing of personal data sent via the form (the “Form”) on the page accessible on the website www.clubshop.macron.com (the “ MACRON Website ”).
If you have any questions, please contact us at privacy@macron.com
WHY THIS NOTICE?
Starting May 25, 2018, new privacy rules will apply in all European Union member states, imposed by EU Regulation No. 2016/679 (General Data Protection Regulation, hereinafter referred to as GDPR), as well as national laws, including Legislative Decree 101/18.
The GDPR provides greater protection for users and imposes new obligations and responsibilities on those who process personal data, including data acquired through websites.
To learn more about the GDPR, you can consult the useful and in-depth section edited by the Italian Data Protection Authority : it will help you better understand the new rules and know your rights.
A fundamental principle is transparency: users must know in advance, clearly and completely, what personal information will be collected, who will process it, for what purposes and for how long, whether it will be used for commercial purposes or for profiling purposes, whether it will be disclosed to third parties, and be able to effectively control the management of their data.
This information is provided in accordance with Article 13 of the GDPR and is also inspired by the Article 29 Working Party Guidelines on Transparency.
This information is intended for users who fill out the registration form to create an account and use the services and new features . CRM [1]that MACRON SPA reserves the right to use for registered users. In responding to your request for information, MACRON SPA will process the personal data you voluntarily submit. Below you will find detailed information on how this data will be handled.
DATA CONTROLLER AND CONTACTS
The Data Controller of your personal data referred to in this Policy is MACRON SPA - with registered office in Via Giulio Pastore, 57 – 40053 Valsamoggia, loc . Crespellano (BO) CF 00442260378 PI 01675921207 , reachable for any communication or request regarding your data also at the e -mail address privacy@macron.com for the provisions of Regulation 2016/679 and Legislative Decree 101/18.
DATA PROTECTION OFFICER – DPO
MACRON SPA has expressly and specifically appointed a Data Protection Officer (DPO) for the personal data processed by the company in the context of its activities, pursuant to Articles 37 et seq. of the GDPR. This appointment has been formally communicated to the Italian Data Protection Authority (Garante) in the person of Laura Lecchi, an attorney who can be contacted at dpo@macron.com.
TYPES OF DATA PROCESSED
In addition to what is specified in the MACRON SPA Privacy Policy for browsing data and e-mail messages, MACRON SPA will request the sending of the following data via the Form:
- First name and last name;
- Company role;
- e-mail address;
- telephone number;
- password;
- IP address;
- log
MACRON SPA will treat this data with the utmost confidentiality, in compliance with current legislation and for the exclusive purposes specified below.
PURPOSE AND LEGAL BASIS OF THE PROCESSING
The data acquired by MACRON SPA and entered into its CRM will be processed only to the extent necessary for the following purposes:
· business appointment organization;
· invitations to events with corporate training sessions;
· cold call
The personal data you provide will be processed in accordance with the legal basis of legitimate interest pursuant to art. 6, paragraph 1, letter f).
RECIPIENTS OF PERSONAL DATA
Your data sent via the Form will be processed exclusively by:
• employees and collaborators of MACRON SPA;
• IT service providers;
• email service providers;
• service providers related to the management and operation of the Site;
• any personnel carrying out occasional maintenance and repair operations;
• cloud service providers;
• hosting and virtual server service providers;
• management software provider;
• connectivity and telephony service providers;
• chat and communication service providers;
• file transfer service providers;
• remote support service providers.
• CRM and marketing service providers.
The data will not be disclosed to other categories of subjects, nor will it be disseminated or made public in any way.
They may be communicated to the competent authorities if required by current legislation or at the request of legitimate parties.
INTENTION TO TRANSFER DATA TO A THIRD COUNTRY OR AN INTERNATIONAL ORGANIZATION
Your data may be transferred to servers located in non-EU countries, if the IT service providers and programs used by MACRON SPA provide for this or use cloud computing technology which by its very nature cannot locate with certainty where your data is located.
Pursuant to the law, please note that the European Commission has currently provided an adequacy decision only for a limited number of countries (Andorra, Argentina, Australia, PNR, Canada, Faroe Islands , Guernsey, Isle of Man, Israel, Jersey, New Zealand, Switzerland, Uruguay) and that therefore your personal data may be transferred by the Services used (e.g., Skype, Gmail) even to countries for which such an adequacy decision has not been published, nor is MACRON SPA currently able to independently provide appropriate guarantees.
However, we remind you that MACRON SPA has carefully selected only service providers capable of offering a high level of security and protection of personal data.
DATA RETENTION PERIOD
Please note that personal data will be retained for 24 months from collection and, in any case, until the exercise of the right to erasure of the aforementioned data, pursuant to Art. 17 of the GDPR. This right may be exercised by sending an email to privacy@macron.com
YOUR RIGHTS AS AN INTERESTED PARTY
We inform you that, as the interested party, you have all the rights granted to you by the GDPR:
Right of Access ( art. 15 );
Right of Rectification ( art. 16 );
Right to Erasure (so-called “Right to be forgotten”) ( art. 17 );
Right to restriction of processing ( art. 18 );
Right to have the Data Controller notify the recipients of the rectification or cancellation ( art. 19 );
Right to data portability ( art. 20 );
Right to Object ( art. 21 ).
You also have the right to revoke any consent previously given to the processing of your data at any time. The revocation will take effect from the moment MACRON SPA becomes aware of it.
The interested party always has the right to revoke his or her previously granted consent, in the same way in which he or she expressed it, or in any case by email, by sending the revocation to the following address privacy@macron.com .
The email will have the effect of receipt and therefore will allow the receipt of the same to proceed with the interruption of any processing and to communicate to any manager or sub-manager to adapt accordingly.
In some cases (cancellation, limitation, opposition), the exercise of your rights may make it impossible, in whole or in part, to follow up on your requests made through the Form, nor to provide any services and/or benefits to you.
All the rights described may be exercised by making a request without formalities or by email to privacy@macron.com to MACRON SPA, also through an agent, to whom appropriate feedback will be provided without delay.
RIGHT TO LODGE A COMPLAINT WITH A SUPERVISORY AUTHORITY
In the event of a violation that affects their rights and freedoms, any interested party has the right to file a complaint with the Guarantor online by completing the appropriate form available on the website www.garanteprivacy.it .
OBLIGATION AND NECESSITY TO PROVIDE YOUR DATA
The user is free to provide the personal data requested by the Form. However, failure to provide the requested data in the appropriate fields of the Form will make it impossible to respond to your request to register a personal account.
PROFILING AND AUTOMATED DECISION-MAKING PROCESSES
The data you spontaneously and voluntarily provide by completing the Form will not be used for the profiling purposes identified in this policy.
SECURITY MEASURES
MACRON SPA, as Data Controller, adopts appropriate technical and organizational security measures, in compliance with the provisions of the GDPR, in order to minimize the risks to your personal data, such as destruction or loss, even accidental, unauthorized access, or processing that is not permitted or does not comply with the purposes of collection, as defined in this Policy.
TREATMENT METHODS
The data processing will be carried out in accordance with the provisions of Article 32 of the GDPR and will be carried out using computerized and electronic means, as well as manual and paper-based methods.
The data will be stored in electronic and paper archives in order to allow, where necessary, the identification and selection of aggregated data, for a period not exceeding the duration and processing needs defined in the information provided upon collection of the data subject's data.
Following periodic checks, the Data Controller will verify the strict relevance and non-excess of the collected data with respect to the obligations and purposes of the processing.
RULES OF CONDUCT - COMMUNICATION AND DISSEMINATION OF DATA
In order to comply with the provisions of the current legislation, in the event that you improperly use the Form in order to commit crimes and/or carry out any criminally punishable conduct, MACRON SPA reserves the right to inform the Public Authority , in full respect from the law .
CHANGES TO THE INFORMATION NOTICE
This Policy may be modified at any time by posting an updated version on the Site page, effective from the effective date of its publication. If this Policy changes during the time we are in contact with you, we will duly inform you.
Version updated to January 2026
[1]A CRM ( Customer Relationship Management (RM) is a technology and strategy that centralizes and manages all customer interactions and data in a single platform, automating sales, marketing, and service processes to build stronger relationships, improve business efficiency, and increase customer satisfaction and loyalty. It works by gathering information from various channels, creating a comprehensive view of the customer, and supporting data-driven strategic decisions to optimize every stage of the customer journey. Customer Relationship Management (CRM ) is a crucial tool in the broad range of MarTech ( Marketing and Technology ) technologies "https://www.osservatori.net/blog/omnichannel-customer-experience/martech-definizione-vantaggi-classificazione/". This term refers to a set of software solutions that can be used by marketing managers to help them achieve defined business objectives and drive innovation within the organization.
