Privacy policy
PRIVACY NOTICE
pursuant to Articles 13 and 14 of Regulation (EU) 2016/679 (“GDPR”)
Piaggio & C. S.p.A. applies particular commitment and care in processing the information referring to you in accordance with applicable privacy regulations.
Please read this Privacy Policy carefully in order to be fully informed about our data protection policy.
Piaggio & C. S.p.A. , with its registered office at Viale Rinaldo Piaggio, 25, 56025, Pontedera (PI), Italy (“we” or the “Data Controller”) is the company that collects and processes your personal data as Data Controller.
The Data Controller has appointed a Piaggio Group Data Protection Officer (“Group DPO”) pursuant to Article 37 of the GDPR).
You may, at any time, contact the Group DPO to request information in relation to the processing of your personal data at the following addresses:
Data Protection Officer
Viale Piaggio, 25
56025 PONTEDERA (PI)
E-mail: dpo@piaggio.com
|
Purpose of the processing |
Type of personal data |
Legal ground |
Retention Period |
|
Allow Piaggio to film the "Aprilia All Stars" Event, held in Misano on June 08, 2024, through video and photos, and to share these images for historical memory and social activities, through the websites "aprilia" and "piaggiogroup", on the official social channels, the community "#bearacer club" and related social channels. |
|
Legitimate interest pursued by the Data Controller and Legal duties of the Data Controller (i.e. notices to public authorities) |
10 years maximum |
|
Allow Piaggio to use your personal data for communication activities through the websites "aprilia" and "piaggiogroup", on the official social channels, the community "#bearacer club" and related social channels. |
|
Consent of the data subject as per art. 6 (1)(a) del GDPR |
10 years maximum |
|
Commercial communication on events similar to Aprilia All Stars (Soft Spam) The Data Controller may send you, through the e-mail address provided by you, communications on events that may be of interest to you and similar to Aprilia All Stars. We believe, in fact, that it might be of interest to you to receive communications relating to events for which you have shown interest in the past, as it is of interest to the business needs of the Data Controller to advertise products similar to those purchased by you. Contacts for this purpose. You will in any case be guaranteed the possibility of deciding at any time not to receive such communications. |
|
Legitimate interest pursued by the Data Controller |
10 years maximum |
|
Marketing activities Subject to your specific consent, the personal data supplied by you by filling in online forms may be processed directly by Piaggio & C. S.p.A. or other companies of the Piaggio Group (the “Subsidiaries”), appointed as Data Processors, in order to promote our services and products by sending advertising material, including customised advertising material, and to invite you to our initiatives and events, carry out market research and surveys on customer satisfaction and improve our services. |
|
Consent of the data subject as per art. 6 (1)(a) del GDPR |
10 years maximum |
|
Profiling activities Subject to your specific consent, the Data Controller may process, directly or through the Subsidiaries, appointed as Data Processors, your personal data collected online, at trade fairs and events and at our distributors and dealers to analyse your data and to know your preferences and habits for a personalised offer of products and services in line with your tastes and needs. |
|
Consent of the data subject as per art. 6 (1)(a) del GDPR |
10 years maximum |
|
Provision of services The data provided when filling in the forms on the Website will be processed to allow the provision of services, offered in each instance, such as:
|
|
The need to comply with your requests and to allow the provision execute the services you asked for. |
For the time strictly necessary to pursue the purposes for which they were collected |
|
Defence of the rights of the Data Controller We will use your personal data to defend our rights in and out of court in the event of contractual or non-contractual breaches to the detriment of the Data Controller. |
|
Legitimate interest pursued by the Data Controller |
15 years maximum |
Within the limits of the purposes set out in letter D), your personal data may be communicated to the following categories of persons appointed, if necessary, as Data Processors pursuant to Article 28 of the GDPR:
- Subsidiaries;
- Piaggio group dealers and/or distributors;
- service providers for the management of IT systems and the Website;
- providers of legal, accounting and tax consulting services;
- company used by the Data Controller to provide the requested service;
- banks and other financial institutions for the management of payments;
- supervisory and control authorities and bodies, and in general public or private entities with functions of a public nature;
The above-mentioned subjects act, in some cases, in total autonomy as data controllers, in other cases, as data processors appointed by Piaggio pursuant to Article 28 of the GDPR.
Your personal data may come to the knowledge, within the limits of their respective remits, of employees, posted or administered workers and collaborators of the Data Controller who will act as persons authorised to process them in accordance with Article 29 of the GDPR.
Your personal data will not be disclosed.
Your personal data are stored in servers located in the European Union, specifically in Italy and are not transferred outside the European Union or the European Economic Area, in third countries that do not guarantee an adequate level of protection to the personal data in compliance with the GDPR.
- How do we process your data?
We will process your personal data with fairness, lawfulness, transparency and proportionality, in compliance with all the principles set out in Article 5 of GDPR, with and without the use of electronic tools.
Photographs and video footage will be processed in accordance with the principles of fairness, lawfulness, transparency and protection of confidentiality, through paper, magnetic and IT tools, for promotional purposes, without prejudice to the honour, reputation or even the decorum of the persons portrayed that will not be identified.
The use of images and video footage does not entitle to any compensation.
We adopt - and we expect our service providers to adopt - adequate technical and organizational security measures to prevent loss or destruction, even accidental, of data, unlawful or incorrect use and unauthorized access to data, in compliance with applicable regulations. Moreover, the computer systems are configured in such a way that personal and identification data are used only when necessary to achieve the specific processing purposes pursued from time to time.
Piaggio & C. S.p.A. manages the Customer Relationship Management (or “CRM”) system through servers located in Italy. All your data collected by Piaggio & C. S.p.a. in the manner and for the purposes set out in letter D. above and by the subsidiaries, including through their dealers and distributors, is transferred to the CRM system.
Your personal data contained in the CRM system may be processed by Piaggio & C. S.p.A. in aggregate form for statistical purposes and, with your consent, for marketing and/or profiling purposes.
In order to carry out advertising/marketing campaigns for the Piaggio Group, we will process your personal data contained in the CRM system as Data Controller and will, if necessary, appoint Data Processors to whom your data will be communicated for the local management of marketing campaigns.
Piaggio & C. S.p.A. guarantees to you that it has implemented all the necessary security measures to guarantee the integrity of your data contained in the CRM system.
By simply communicating the references indicated in letter B), you can exercise your rights under Articles 15 to 22 of GDPR.
In particular, you may ask the Data Controller to access the data concerning you, to modify and/or delete them, as well as to limit the processing in the cases referred to in Article 18 of the GDPR.
In the manner specified in Article 21 of the GDPR, you may, at any time, object to the processing of your personal data and receive the information referring to you and/or have it transmitted to another Data Controller.
We remind you, moreover, that any consent given will always be revocable as easily as it was granted.
The Data Controller will, without undue delay and, in any case, at the latest within one month from the exercise of the right, provide you with all the information requested and/or communicate the actions taken in order to satisfy your request.
Exclusively in the event of manifestly unfounded or excessive requests, as well as due to their repetitiveness, the Data Controller may charge you a reasonable expense contribution or deny the satisfaction of your request.
Finally, we inform you that if you exercise any of the above rights, you may be asked to provide certain information necessary to confirm your identity.
If, for example, you believe that our processing breaches the provisions of the GDPR, you may complain to the Data Protection Authority (https://www.garanteprivacy.it/home/modulistica-e-servizi-online/reclamo) or to the Office for Data Protection of the Member State where you habitually reside, work or the place where the alleged breach has occurred - https://edpb.europa.eu/about-edpb/board/members_en.