INFORMATION ON THE PROCESSING OF PERSONAL DATA RELATED TO FILLING IN THE ACCOUNT REGISTRATION FORM ON THE WILIER.IT WEBSITE
This information supplements the website navigation policy by detailing how the Data Controller will process the data entered in this contact form. Therefore, would you kindly please read the navigation policy.
IDENTITY AND CONTACT INFORMATION OF THE DATA CONTROLLER
Wilier Triestina S.p.a., hereinafter also “Wilier Triestina” or “Controller” with registered office in via Fratel M. Venzo 11/1 – 36028 – Rossano Veneto (VI), and available at the e-mail address info@wilier.it, at the certified e-mail address (PEC) wiliertriestina@legalmail.it or the phone number +39 0424 540442.
PURPOSE AND LEGAL BASIS
- User registration management: personal data are processed to enable creation of an account and subsequent access to the reserved area.
- Marketing: using contact data to send commercial communications containing information on products and services, conducting approval and opinion polls and sending invitations to events the Controller will take part in.
- Defence purposes: the Data Controller may need to process personal data to manage any disputes and out-of-court or legal litigation.
Purpose: A
Legal basis (common data): To execute the contract.
Legal basis (common data): To execute the contract.
Purpose: B
Legal basis (common data): Consent.
Legal basis (common data): Consent.
Purpose: C
Legal basis (common data): Legitimate interest of the Data Controller to establish, exercise and defend a right.
Legal basis (common data): Legitimate interest of the Data Controller to establish, exercise and defend a right.
RETENTION PERIOD
Purpose: A
Retention period: 24 months from the last interaction with the user (e.g. login)
Retention period: 24 months from the last interaction with the user (e.g. login)
Purpose: B
Retention period: Until the Marketing activity by the Controller ceases or the request to withdraw consent is made, if earlier.
Retention period: Until the Marketing activity by the Controller ceases or the request to withdraw consent is made, if earlier.
Purpose: C
Retention period: 10 years from the final resolution of the dispute.
Retention period: 10 years from the final resolution of the dispute.
TYPE OF DATA PROVISION AND CONSEQUENCES IN A REFUSAL TO PROVIDE DATA Purpose: A
Type: Needed
Consequences: Inability to register an account and receive the additional services provided for registered users.
Type: Needed
Consequences: Inability to register an account and receive the additional services provided for registered users.
Purpose: B
Type: Optional
Consequences: Unable to receive promotional communications on products or services
Type: Optional
Consequences: Unable to receive promotional communications on products or services
Purpose: C
Type: Needed
Consequences: Unable to manage the dispute.
Type: Needed
Consequences: Unable to manage the dispute.
SCOPE OF COMMUNICATION
Data are processed by authorised internal staff for specific tasks and are communicated externally based on the following rules:
Purpose: A
Categories of external recipients: Companies offering hosting/management services for technology platforms, companies providing authentication tools.
Categories of external recipients: Companies offering hosting/management services for technology platforms, companies providing authentication tools.
Purpose: B
Categories of external recipients: External consultants, companies offering hosting/management services for technology platforms.
Categories of external recipients: External consultants, companies offering hosting/management services for technology platforms.
Purpose: C
Categories of external recipients: Legal firms; Judicial Authorities.
Categories of external recipients: Legal firms; Judicial Authorities.
TRANSFER OF DATA TO A THIRD COUNTRY OR INTERNATIONAL ORGANISATION
The Controller transfers personal data to the countries and under the conditions summarised below:
Purpose: A, C
Country: None
Condition of transfer lawfulness: None
Country: None
Condition of transfer lawfulness: None
Purpose: B
Country: USA, Australia, Singapore, Japan, Colombia, UK, Canada, India.
Condition of transfer lawfulness: Data Privacy Framework, Standard Contractual Clauses
Country: USA, Australia, Singapore, Japan, Colombia, UK, Canada, India.
Condition of transfer lawfulness: Data Privacy Framework, Standard Contractual Clauses
RIGHTS OF DATA SUBJECTS
Data subjects have the following rights:
Access: they can obtain confirmation as to whether or not personal data concerning them is being processed, and where this is the case, to obtain a copy thereof.
Rectification: they can request updates to their personal data, rectify inaccuracies and supplement incomplete data.
Erasure: they can request the erasure of personal data if certain conditions are met (contact the Data Controller for more details).
Restriction: they can request data to be flagged so that in future it may only be processed if certain conditions are met (contact the Data Controller for more details).
Objection: they can object to the processing of personal data on grounds connected to their particular situation, when the processing is based on legitimate interest or is necessary to perform a task carried out in the public interest or in the exercise of official authority of the Data Controller; they can also object to the processing of personal data for direct marketing purposes.
Portability: they can receive the personal data provided to the Data Controller in a structured format and transfer said data to another Controller if the processing is based on consent or on a contract and is carried out by automated means.
Withdrawal of consent: they can withdraw consent previously given for specific purposes, without affecting the lawfulness of processing carried out up to that point.
The rights effectively exercisable for the processing activities performed are:
Purposes A, B, C: Access; Rectification; Erasure; Limitation
Purpose C: Objection
Purposes A, B: Portability
Purpose B: Consent withdrawal
Purposes A, B, C: Access; Rectification; Erasure; Limitation
Purpose C: Objection
Purposes A, B: Portability
Purpose B: Consent withdrawal
Data Subjects can exercise the above rights by using the form available at https://www.garanteprivacy.it/web/guest/home/docweb/-/docweb-display/docweb/1089924 and sending it to: privacy@wilier.it. The data subject may request from the same address to obtain further details in relation to the above information (e.g. balancing test of legitimate interest or list of data processors).
A complaint can be lodged with the Italian Supervisory Authority (Garante per la Protezione dei Dati Personali www.garanteprivacy.it).
