PRIVACY POLICY
INFORMATION ON THE PROCESSING OF PERSONAL DATA IN ACCORDANCE WITH ARTICLE 13 OF EU REGULATION 2016/679
With this document FERRARI MECCANICA S.P.A., owner of the website https://www.ferrarimeccanica.com (hereinafter only the "Website"), intends to give notice of the methods of management of the Website itself in relation to the processing and protection of personal data ("data") of the subjects who navigate on it or who otherwise contact Ferrari Meccanica by the means provided on the Website (hereinafter "users" or "interested parties").
This document represents a Statement pursuant to Article 13 of the European Regulation of April 27, 2016 No. 679 (hereinafter "GDPR") and is valid only and exclusively for the Site and not for other sites or web pages that can be consulted by the user through links or other interactive links that may be activated through the Site. Users are therefore invited to read the information on data processing rendered by the owners of each site to which they may be redirected in the course of navigation.
Please note that this Policy may be subject to change as a result of the introduction of new regulations or as a result of changes to the Site, so users are invited to periodically visit the "Privacy&Cookies" section of the Site.
This Policy does not exclude that further information on the processing of personal data is also given to Data Subjects in different ways, for example by sending specific information following the activation or request of a specific service.
1. Identity and contact details of the Data Controller.
The Data Controller of the processing of personal data for the purposes described in this Information Notice is Ferrari Meccanica S.P.A., cod. f. and p.iva 01628460154, with registered office in via per Robecco, 5820013 Magenta (MI) Italy (hereinafter also "Data Controller" or "Company").
For all matters relating to the processing of data, for the exercise of the rights arising from the Regulations (on this point see paragraph 9 below), as well as for any doubts or clarifications regarding this Information Notice, the data subject may contact the Data Controller by sending a registered letter with return receipt to the above address, or a communication to the following e-mail address: info@ferrarimeccanica.com
2. Purpose and legal basis for processing
Personal data collected through the Site are processed for the following purposes:
a) to ensure the proper functioning of the web pages and their contents and to obtain statistical information on the use of services;
b) to provide assistance/contact the user or otherwise follow up on requests made by the user in the manner indicated on the Site (e.g., by e-mail or telephone) and to manage activities related to the requests;
c) evaluate applications for open job positions or spontaneous applications transmitted by the data subject. Considering the purpose of the processing (personnel search and selection), the Interested Parties are invited to indicate in the Curriculum Vitae only the data necessary to evaluate their candidacy as well as to schedule a possible interview, refraining from including information not strictly pertinent to the aforementioned purposes. Please note that additional or specific information on the processing of personal data may be submitted to interested parties during the selection process.
We also inform you that:
■ in relation to the purposes referred to in point a) above, the legal basis resides in the legitimate interest of the Data Controller (art. 6.1 lett. f) GDPR) to ensure the proper functioning of the Site and its improvement;
■ in relation to the purposes referred to in point b) above, the legal basis resides, as the case may be: in the need to execute pre-contractual measures taken at the request of the data subject (art. 6.1 lett. (b) GDPR); in the legitimate interest of the Data Controller (art. 6.1 lett. f) GDPR), represented by the need to meet the data subject, even where the request has no contractual purpose;
■ in relation to the purposes referred to in letter c) above, the legal basis for the processing of your personal data is that provided for in art. 6(b) GDPR: "the processing is necessary for the execution of pre-contractual measures adopted at the request of the data subject." Should the processing involve data disclosing the data subject's state of health, for the purpose of hiring workers belonging to protected categories, the processing will be based on Art. 9 paragraph 2 lett. (b) GDPR: "Processing is necessary for the purposes of carrying out the obligations and exercising the specific rights of the data controller or the data subject in the field of labor law and social security and social protection, insofar as it is authorized by Union or Member State law or by a collective agreement under the law of the Member States, subject to appropriate safeguards for the fundamental rights and interests of the data subject." If the data subject, despite the invitation not to provide them, communicates additional special categories of data as defined in Article 9 para. 1 of the GDPR (data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, trade union membership, etc. ), the processing of the same will be conditional on the prior consent of the data subject as defined in Art. 9, par. 2, letter a) of the GDPR, it being understood that if the data is irrelevant to the purpose of recruitment and selection, such information will not be used for the purpose of evaluating the application, in compliance with current legislation.
3. Nature of the provision of data
The provision of data for the purposes referred to in point a) above is optional and yet necessary for the proper functioning and use of the Site. Any refusal to provide data in relation to the aforementioned purpose could therefore result in the inability to navigate on the Site, to view all its contents and to access the related services. The provision of data for the purposes referred to in letters b) and c) is optional; however, any refusal to provide data in relation to the aforementioned purposes will result in the impossibility of processing your requests (e.g.: obtaining information on products or services, quotes, etc.) or evaluating your application.
4. Type of data processed
In pursuit of the purposes indicated above, the following categories of data will be processed:
■ Navigation data: the computer systems and software procedures used to operate the Site acquire, during their normal operation, certain data whose transmission is implicit in the use of Internet communication protocols. This information is not collected to be associated with identified interested parties, but by its very nature could, through processing and association with data held by third parties, allow users to be identified. This category of data includes the IP addresses or domain names of the computers used by users who connect to the site, the URI (Uniform Resource Identifier) notation addresses of the resources requested, the time of the request, the method used in submitting the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response given by the server (successful, error, etc.) and other parameters relating to the user's operating system and computer environment. These data are used for the sole purpose of obtaining statistical information on the use of the Site and to check its correct functioning. The data could be used to ascertain responsibility in the event of hypothetical computer crimes against the Site or other users, only at the request of the supervisory bodies in charge. The above information may be collected automatically through cookies and other similar technologies. For more information and to personalize your browsing choices, we invite you to consult our cookie policy;
■ Data provided by the user: identification data (first name, last name); contact data (phone number, e-mail address, etc.), any additional data of a personal nature provided by the user will be processed in accordance with the principles of fairness, lawfulness and transparency, as well as in compliance with the principle of "minimization", i.e. acquiring and processing data limited to what is necessary in relation to the purposes pursued. With specific reference to the purpose of personnel search and selection, it is specified that the data collected are identification data (first name, last name, place and date of birth, photograph, if any), contact data (address, telephone number, e-mail) and data relating to the training, educational qualification, professional experience, technical knowledge of the person concerned. Applicants are requested, unless expressly required by a job advertisement addressed to workers belonging to protected categories, not to disclose data related to health, nor data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, trade union membership, data related to sexual life or sexual orientation, and any information in any way attributable to the particular categories referred to in Article 9(1) of the GDPR. In the event that the Curriculum Vitae transmitted nevertheless also contains data falling into these categories, or if such data are provided during any subsequent assessment interviews aimed at verifying the skills and conditions necessary for a possible recruitment, we will proceed to their processing only if the candidate has given his or her consent to the processing of these types of data, it being understood that we will refrain from using data that are not strictly pertinent to the purpose pursued.
5. Methods of Processing
The processing of oi personal data will be carried out using paper and computer tools, in compliance with the provisions on the protection of personal data and, in particular, with the appropriate technical and organizational measures referred to in Article 32.1 GDPR, as well as with the observance of all precautionary measures to ensure the relative integrity, confidentiality and availability.
6. Categories of data recipients
Personal data will not be disclosed, except when required by a law or regulation or EU legislation.
Personal data may be disclosed, strictly in relation to the above purposes, to the following subjects or categories of subjects:
a) third parties and companies that provide services to the Data Controller, such as - by way of example - management of the information system and telecommunications networks (including e-mail), development and management of the Site, etc;
b) firms, companies or professionals in the context of assistance and consulting relationships;
c) competent authorities for fulfillment of legal obligations.
We inform you that the subjects referred to in letter c) will process the data as autonomous Data Controllers. In relation to the categories of subjects referred to in letters a), b), the Data Controller undertakes to rely exclusively on subjects that provide adequate guarantees regarding data protection, providing to appoint them, where required by current legislation, Data Processors ex art. 28 GDPR. The list of Data Processors is available from the Data Controller and the data subject may view it upon request.
Furthermore, the data will be processed, exclusively for the above purposes, by company employees and/or collaborators, specifically authorized and instructed by the Data Controller pursuant to Art. 29 of the GDPR.
7. Transfer of personal data to third countries
Personal data will not be transferred to countries outside the European Union/EEA. Should such a transfer be necessary to achieve the purposes set out in this notice, the Data Controller guarantees that it will take place in full compliance with the conditions set out in Chapter V of the GDPR (Articles 44 et seq.), in order to ensure that the level of protection of natural persons guaranteed by the GDPR is not undermined. Therefore, the transfer will take place to countries that the European Commission has deemed to ensure an adequate level of protection, either in accordance with Article 44 GDPR or in compliance with specific standard contractual clauses approved by the European Commission pursuant to Article 46 GDPR, provided that the recipient of the data provides adequate safeguards and that the data subjects have enforceable rights and effective remedies. Any exceptions to the above will only take place in compliance with Article 49 GDPR.
8. Retention period
Data processed to ensure the proper functioning of the web pages and their contents and to obtain statistical information on the use of services will be stored in accordance with our cookie policy. Personal data collected for the purpose of responding to requests for information, quotes, etc. will be retained for the time necessary to provide the response to the data subject and in any case no longer than 24 months from the processing of the request, unless a contractual relationship is subsequently established, in which case the data will be retained for a period of 10 years from the termination of the relationship, in accordance with current regulations. Personal data pertaining to any applications will be retained for a maximum period of 12 months from its collection. Please be advised that after the aforementioned terms have expired, the data will be subject to irreversible deletion or anonymization. Please note that a longer period of data retention may possibly be determined by requests made by the Public Administration or other Body or Authority, or by the participation of the Holder in judicial proceedings involving the processing of data.
9. Rights recognized to the data subject
The Data Subject may exercise his or her rights recognized by the GDPR at any time, in the manner described in paragraph 1 above. In particular, the Data Subject is entitled to:
Right of access
The Data Subject may ask us whether or not we process any of his or her data and, if so, he or she may obtain access to such data from us in the form of a copy. When the data subject makes a request for access, we also provide the data subject with additional information, such as the purposes of the processing, the categories of personal data in question, and any other information necessary for the data subject to exercise this right.
Right of rectification
A data subject has the right to rectify his or her data if it is inaccurate or incomplete. Upon request, we will correct inaccurate personal data and, taking into account the purposes of processing, complete incomplete data.
Right to erasure
The data subject has the right to have his or her personal data deleted. The erasure of personal data can only occur in certain cases, listed in Article 17 of the GDPR. This includes situations where the data subject's personal data is no longer necessary in relation to the initial purposes for which it was processed, as well as situations where it has been processed unlawfully. In relation to the ways in which we provide some services, we inform that it may take some time before backup copies are deleted. We also inform that the Data Controller will, within the limits of the state of the art, provide for the deletion of the data subject's personal data, except in cases where their retention is required by law.
Right to limitation of processing
The data subject has the right to obtain the restriction of the processing of his or her personal data, which means that we suspend the processing of the data subject's data for a certain period of time. Circumstances that may give rise to this right (Article 18 GDPR) include situations where the accuracy of personal data has been disputed, but time is needed to verify its (in)accuracy. If the data subject has obtained a restriction on the processing of your data, we will inform them before this restriction is lifted.
Right to object
You have the right to object to the processing of your personal data, which means that you can request us to stop processing your personal data for certain purposes. We inform that this right is granted to the data subject only in special circumstances (Article 21 GDPR) and, in particular, in case the legal basis of processing is the legitimate interest of the Data Controller.
Right to data portability
The right to data portability implies that the data subject may ask us to provide him or her with personal data in a structured, commonly used and machine-readable format and to ask us to transmit such data directly to another data controller, where this is technically feasible.
Right to revoke consent
The data subject has the right to withdraw consent to the processing of personal data at any time, if the processing is based on his or her consent. In any case, revocation of consent shall not affect the lawfulness of processing based on consent prior to revocation.
10. Right to lodge a complaint with the supervisory authority
The Data Subject also has the right to lodge a complaint with the supervisory authority if he/she considers that a processing that concerns him/her violates the GDPR and/or current legislation on the processing of personal data. Please note that in Italy said authority is represented by the Garante per la Protezione dei Dai Personali, based in Rome. A Data Subject who is not resident in Italy may lodge a complaint before the Supervisory Authority designated in his or her country of residence.
11. Non-existence of an automated decision-making process
The processing operations referred to in this Notice are not subject to automated decision-making processes.
COOKIE POLICY
Pursuant to Articles 13 GDPR and 122 of Legislative Decree No. 196/2003 ("Privacy Code"), as amended by Legislative Decree 101/2018, as well as in accordance with the provisions of the General Provision of the Guarantor for the Protection of Personal Data No. 229 of May 8, 2014, and the more recent Provision No. 231 of June 10, 2021 ("Guidelines cookies and other tracking tools"), Ferrari Meccanica S.p.A, Data Controller of the data collected through the Site (for more information see our privacy policy), provides through this extended information to users of the site www.ferrarimeccanica.comcom (hereinafter the "Site") some information regarding the cookies used and how to disable them.
WHAT ARE COOKIES?
Cookies are text files that store information on your hard drive, your tablet, your smartphone, or the browser you use. Cookies act as a memory for a website, allowing the website to recognize your device on each of your subsequent visits to that same website. Cookies make it easier for you to keep your preferences on the website and, by detecting how you use the website itself, allow us to further improve its functionality and overall usability.
In the course of browsing, you may also receive third-party cookies on your terminal, which are not under our control, set directly by operators of those websites and used for the purposes and in the manner defined by them.
The Site uses the following types of cookies:
TECHNICAL COOKIES
These are cookies that are essential in order to enable navigation and use all the features of the Site. These cookies do not collect any user-identifying information. If disabled, the enjoyment of the Site's content may be impaired and be impossible or severely limited. Technical cookies also include session cookies, with the function of storing user choices within the Site. These cookies are deleted once you leave the site. They are strictly limited to the transmission of session identifiers (consisting of random numbers generated by the server) necessary to enable safe and efficient exploration of the site.
No consent is required from the data subject for the use of these cookies.
The following technical cookies operate on the site:
■ Strictly necessary cookies:
| NOME COOKIE | OWNER OR THIRD PARTY | FUNCTION | STORAGE TIME |
|---|---|---|---|
| PHPSESSID | ferrarimeccanica.com | This cookie is native to PHP applications. The cookie is used to store and identify a users' unique session ID for the purpose of managing user session on the website. The cookie is a session cookies and is deleted when all the browser windows are closed. | session |
PROFILING COOKIES
Profiling cookies include all tracking tools that are not strictly essential for the operation of a website and are, for example, used to track the user's navigation on the web and create profiles on his tastes, habits, choices, etc. With these cookies, advertising messages can be transmitted to the user's terminal in line with the preferences already expressed by the same user in online navigation.
The use of profiling cookies requires the consent of the interested party. The consent is acquired through the banner on the Site. You can change your preferences at any time.
In detail, the Site uses the following profiling cookies:
■ Analytical cookies. These tracking tools are used to understand how visitors interact with the Site, These cookies help provide information on the metrics of number of visitors, bounce rate, traffic source, etc.:
| _ga | OWNER OR THIRD PARTY | FUNCTION | STORAGE TIME |
|---|---|---|---|
| _ga | ferrarimeccanica.com | The _ga cookie, installed by Google Analytics, calculates visitor, session and campaign data and also keeps track of site usage for the site's analytics report. The cookie stores information anonymously and assigns a randomly generated number to recognize unique visitors. | 2 years |
| _gid | ferrarimeccanica.com | Installed by Google Analytics, _gid cookie stores information on how visitors use a website, while also creating an analytics report of the website's performance. Some of the data that are collected include the number of visitors, their source, and the pages they visit anonymously. | 1 day |
| _gat_gtag_UA_23263639_4 | ferrarimeccanica.com | Set by Google to distinguish users. | 1 minute |
| CONSENT | .youtube.com | YouTube sets this cookie via embedded youtube-videos and registers anonymous statistical data. | 2 years |
ADVERTISING COOKIES.
These tracking tools are used to provide viewers with customized advertisements based on previously visited pages and to analyze the effectiveness of the advertising campaign:
| _ga | OWNER OR THIRD PARTY | FUNCTION | STORAGE TIME |
|---|---|---|---|
| YSC | youtube.com | YSC cookie is set by Youtube and is used to track the views of embedded videos on Youtube pages. | session |
| VISITOR_INFO1_LIVE | youtube.com | A cookie set by YouTube to measure bandwidth that determines whether the user gets the new or old player interface. | 5 months 27 days |
| yt-remote-device-id | youtube.com | YouTube sets this cookie to store the video preferences of the user using embedded YouTube video. | never |
| yt.innertube::requests | youtube.com | This cookie, set by YouTube, registers a unique ID to store data on what videos from YouTube the user has seen. | never |
| yt.innertube::nextId | youtube.com | This cookie, set by YouTube, registers a unique ID to store data on what videos from YouTube the user has seen. | never |
| yt-remote-connected-devices | youtube.com | YouTube sets this cookie to store the video preferences of the user using embedded YouTube video. | never |
MANAGE YOUR OPTIONS ON COOKIES
You can refuse, disable cookies from your browser and delete all cookies that are currently saved on your computer by taking action in your web browser settings. Please keep in mind that changing the cookie settings on your browsers may prevent your ability to fully enjoy the functionality of the Site. Each browser has different procedures for managing settings. Select the browser you are using below for information on how to change your cookie settings.
Deactivation of cookies is also possible through the banner and, for third-party cookies, also through the modalities made available directly by the third-party company owner for said processing.