+39.031.5476941
Privacy Policy - Newsletter
Preamble
Pursuant to Art. 13 of Regulation (EU) 2016/679 (hereinafter also "GDPR"), Ridewill s.r.l., as data controller (hereinafter also simply "controller" or "Ridewill"), informs data subjects about the use of personal data collected for the periodic sending of commercial communications.
The sending of commercial communications is an optional service through which Ridewill keeps clients, potential clients, and other interested users updated regarding initiatives and proposed products/services.
1. Data Controller and Data Protection Officer (DPO)
Pursuant to Art. 4(7) of the GDPR, the data controller is Ridewill, with registered office at Via Socrate, 6 -- 22070 Casnate con Bernate (Co). Tel.: +39.031.5476941, E-mail: info@ridewill.it PEC: ridewill@pec.it
The Data Protection Officer (DPO) of Ridewill can be contacted at the e-mail address dpo@trustds.it PEC: dpotrustds@legalmail.it
2. Purpose of processing, personal data processed, legal basis, retention period, and nature of data provision
Purpose of processing: Periodic sending of e-mails containing commercial communications regarding products/services offered by Ridewill, as well as in-person/remote events and other initiatives organized by Ridewill. Commercial communications are sent via the MailUp newsletter service.
- Personal data processed: E-mail address;
- Legal basis for processing: The processing of personal data is based on the free consent of the data subject (Art. 6(1)(a) GDPR);
- Method of consent collection: Consent for the processing of data for the purposes described above is collected by checking the dedicated consent box for receiving newsletters/commercial communications at the bottom of the contact form;
- Data retention period: Personal data will be retained until consent is revoked, which can be done by clicking the unsubscribe button at the end of each commercial communication, or by informing the controller or DPO via the e-mail contacts provided in section 1 of this notice;
- Nature of data provision: Providing data is optional, and without consent the data will not be processed for the stated purpose.
3. Processing methods and recipients of data
Personal data collected is processed, upon obtaining consent, for sending Ridewill commercial communications in compliance with Art. 5 GDPR principles.
Processing is carried out by persons authorized by the controller for the purposes indicated. Authorized persons are bound by professional secrecy. Data processing may involve collaboration with other entities appointed as data processors, who process data according to the purposes and means determined by the controller pursuant to Art. 28 GDPR.
Processing is also performed using electronic tools, in particular the MailUp service (https://mailup.it/). The Controller does not use any automated decision-making processes, including profiling, under Art. 22 of the Regulation.
Processing is conducted in compliance with fundamental rights and freedoms and conforms to Art. 5 GDPR principles, particularly fairness, lawfulness, and transparency. The controller ensures the relevance and proportionality of the information processed relative to the purposes pursued.
4. Data transfer outside the European Economic Area (EEA)
Personal data processed for the aforementioned purposes is generally not transferred to third countries outside the European Union or the European Economic Area (EEA), nor to international organizations. If data is transferred outside the EEA, the controller undertakes to comply with the provisions of Chapter V of the Regulation to ensure adequate data protection.
5. Rights of data subjects
Data subjects – understood as the individuals to whom the processed data refers – may exercise the rights under Art. 15 et seq. GDPR, in particular: the right to access their personal data, request rectification or restriction, and deletion where applicable, as well as the right to object to processing and the right to data portability. If the legal basis for processing is consent, data subjects also have the right to withdraw their consent at any time without affecting the lawfulness of processing carried out before the withdrawal.
To exercise their rights, data subjects may contact the controller or the data protection officer using the contact details provided in this notice.
If data subjects believe that the processing of personal data by the controller violates the GDPR, they have the right to lodge a complaint with a supervisory authority in the Member State where they habitually reside or work, or where the alleged violation occurred (Art. 77 GDPR). The Italian supervisory authority is the Garante per la protezione dei dati personali, whose contact information is available on its website (www.garanteprivacy.it).
Pursuant to Art. 79 GDPR, data subjects have the right to judicial remedy if they believe their rights have been violated due to processing.
6. Amendments to the data processing information
Ridewill may modify, add, or remove any part of this personal data processing information. To facilitate verification of any changes, the notice indicates the date of the last update.