Ferrari e Associati Srl

1. Who processes your data

The data controller is Ferrari e Associati Srl, with registered office at Via del Progresso 9/E, 45030 Occhiobello (RO), Italy, VAT number IT01111870299.

For any matter concerning the processing of your personal data you may write to privacy@ferrari-associati.com.

2. What data we process

Data needed to register and use the configurator. To create and manage your account we may process the following data.

Company data:

• company name;
• VAT number;
• country and town;
• company email address.

Data of the contact person:

• first and last name;
• email address;
• mobile number.

Access data:

• username;
• password, which we do not keep in clear text but only as a secure cryptographic representation.

Optional data. You may also choose to give us:

• province;
• company telephone;
• direct telephone;
• WhatsApp number;
• website.

This data is not required in order to register and may be left blank.

Data generated by use of the configurator. While you use the service we may also process:

• technical and connection data, such as IP address, browser type, operating system and date of last access;
• configurations created or saved;
• quotations and documents requested or generated;
• selected language;
• information about the origin of the access, where actually collected by the system.

We ask you not to enter into the configurator special categories of personal data, such as information about health, religious or political beliefs, or other particularly sensitive data.

3. Why we process your data

We process your personal data for the purposes that follow, each with its own legal basis:

• to create and manage your account and let you use the configurator — performance of a contract or steps taken at your request before entering into a contract;
• to save configurations, prepare quotations and generate the documents requested — performance of a contract or pre-contractual steps;
• to comply with accounting, tax and administrative obligations relating to the documents issued — legal obligation;
• to protect our systems, prevent unauthorised access and detect anomalous use — legitimate interest of the controller in the security of its systems and services;
• to contact you about configurations, requests or quotations you have started — legitimate interest of the controller in following up your request and maintaining the professional relationship.

Providing the data needed to register and use the configurator is necessary in order to supply the service to you. If that data is not provided, it may not be possible to create or manage your account.

The data indicated as optional may instead be omitted.

4. Who we may disclose the data to

We may disclose your personal data to the following categories of recipients:

• authorised distributors, where a distributor is present or envisaged for your geographical area. The distributor sees the configurations and quotations of your company, from the date of assignment onwards;
• IT and hosting service providers, who process the data on our behalf and on our instructions, when appointed as processors;
• consultants and professionals, where necessary to comply with accounting, tax or legal obligations, or to protect our rights.

The configurations, usage data and information held in your account are managed within the systems of Ferrari e Associati Srl and, apart from the cases indicated above, are not accessible to third parties.

We do not sell your personal data and we do not disclose it to third parties for their own commercial purposes.

5. Where we process the data, and international transfers

Personal data is processed and stored on systems and servers located within the European Economic Area.

Where an authorised distributor established outside the European Economic Area is assigned to your geographical area, disclosing personal data to that distributor entails an international transfer.

The transfer concerns the configurations and quotations of your company, from the date of assignment onwards.

The transfer takes place in compliance with applicable law and on the basis of the safeguards provided for international transfers of personal data.

6. How long we keep the data

We keep personal data for the duration of the relationship and for as long as is necessary to let you use the configurator, retrieve saved configurations and consult earlier quotations and documents.

After the relationship ends, some data may be kept for the period required by law or necessary to protect our rights.

In particular, documents and information that must be kept for accounting and tax obligations are retained for the periods laid down by applicable law, which may be ten years for documentation subject to civil-law retention obligations.

At the end of the applicable periods, the data is deleted or anonymised.

You may ask us at any time to delete your data. The request will be met for all data that we are not obliged to keep and that is not necessary for the establishment, exercise or defence of a legal claim.

7. Your rights

Where provided by law, you may exercise the right to:

• access the personal data concerning you and receive a copy of it;
• ask for it to be rectified if inaccurate or incomplete;
• ask for it to be erased;
• ask for the processing to be restricted;
• receive the data in a structured, commonly used and machine-readable format, in the cases covered by the right to portability;
• object to processing based on legitimate interest.

To exercise your rights you may write to privacy@ferrari-associati.com.

We will reply within the time limits laid down by law and, as a rule, within one month of receiving the request.

If you consider that the processing of your personal data infringes applicable law, you may lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali) or apply to the competent supervisory authority.

8. Changes to this notice

We may update this notice when the service, the way data is processed or the applicable law changes.

The updated version will be published on this page and will carry the relevant update date.

Where a change concerns significant aspects of the processing, such as the purposes or the categories of recipients, we will use appropriate means to inform you and, where required by law, we will ask you to acknowledge it again or to give your consent.

9. Language of this notice

This notice is drawn up in Italian and translated into other languages for ease of reading. In the event of any discrepancy between the versions, the Italian text prevails.