Privacy Policy

For us at Prodriveshop.com User/data subject data security is important and we want you to always feel protected and adequately informed about the types of processing carried out.

When the user/interested party uses and interacts with our website – prodriveshop.com or landing pages having the same domain – (hereinafter only β€œsite”) or services, contact us, visit our promotional pages and newsletters, as well as other activities further described in the full Privacy Policy, we may collect, use, share, and process personal information (β€œpersonal data”). These Privacy Policy highlights summarise our personal data processing practices and the related rights of users/data subjects.

Identity and contact details of the data controller

Prodriveshop.com by Fabio Servi (hereinafter referred to as β€œProdriveshop”) is a company with its registered and operational office at Corso Laghi, 305 10051 Avigliana (TO), VAT/Tax Code: 06469630013, e-mail: [email protected], telephone: +39 339 7195999. Prodriveshop is the Data Controller of the personal data of the user/data subject pursuant to Article 13 of EU Regulation 679/2016 – General Data Protection Regulation (β€œRegulation” or β€œGDPR”) and the Privacy Code as amended by Legislative Decree 101/2018.

Personal data processed

The site offers numerous services for which it is not necessary to register or provide personal data. However, in order to offer users/interested parties a wide range of services (e.g. user account creation and e-commerce), we need to collect some personal information. The personal data processed by Prodriveshop are collected directly from the interested parties and are provided by them directly and freely.

Information collected automatically through the website:

  1. Navigation data collected automatically by the platform: the IT systems and software procedures used to operate the Site acquire, in the course of their normal operation, certain personal data whose transmission is implicit in the use of Internet communication protocols. This is information that is not collected to be associated with identified data subjects, but which by its very nature could, through processing and association with data held by third parties, allow users to be identified. These data or part of them (IP addresses, device identifiers, etc.) may be processed by the Data Controller – subject to specific, prior, free, and optional consent from the user/data subject – for the purpose of tracking your activity on the site, for market analysis and statistics, also to improve Prodriveshop's products and services and make them more responsive to the user/data subject's needs, as well as for sending more targeted information and offers that may be of greater likability and interest to the user/data subject.
  2. Prodriveshop uses technology commonly known as ”cookies” to make its website easier and more intuitive. Cookies are small text files sent from the website to the user's device (usually the browser), where they are stored and then retransmitted to the website on the next visit by the same user. By showing us how our users navigate the site, cookies provide us with information that allows us to make the browsing experience smoother and more efficient. Prodriveshop uses different types of cookies. For more information on all cookies used and how to consent to their acceptance/rejection, the user can consult the website's cookie policy.

Information provided by the user/data subject:

The optional, explicit and voluntary sending of messages by users to the contact addresses listed on this website and/or the completion of data collection forms and registration forms for Prodriveshop services, entails the subsequent collection of the sender’s first name, surname and email address, which is necessary to respond to enquiries or to fulfil a contract or pre-contractual measures to which the user/data subject is a party.

  1. User registration on the site, creation of a personal account and purchase of products – the data that will be collected are: personal data (first name, surname, and tax domicile), email address, telephone number, as well as tax data necessary for issuing the electronic invoice (billing address, fiscal code and/or VAT number, unique code, PEC address).

Purpose and legal bases

The personal data acquired through the website will be processed by the Data Controller for the following purposes:

  1. to improve the website’s navigation and usability, and to collect aggregated and anonymous statistical information on how users use the site (number of visitors, pages viewed, time spent on the site, search terms, etc.);
  2. purposes strictly connected with and necessary for the management of relations with data subjects, such as, for example, to respond to a contact request and/or a request for information from the user/data subject;
  3. purposes strictly linked to the performance and implementation of the requested services, including the execution of a contract to which the data subject is a party or the execution of pre-contractual measures taken at their request, including to enable registration on the Prodriveshop website and access to restricted areas, the shopping cart, and for the completion of an online purchase;
  4. purposes connected to obligations laid down by laws, as well as by provisions issued by authorities legitimately empowered by law;
  5. for the purpose of establishing, exercising or defending a right in court or out of court (legitimate interest) on the part of this organisation.

Furthermore, solely and exclusively with the specific and free consent of the user/data subject, Prodriveshop may process personal data for the following additional purposes:

  1. promotion and sale of products and services, forwarding of commercial information, marketing and customer satisfaction surveys, sending of advertising material relating to products and services of the data controller and its commercial partners, both through traditional methods (i.e. postal mail and calls with an operator) and through methods provided for by Article 130 paragraphs one and two of the Code (i.e. automated calls and similar methods (such as fax, e-mail, SMS, MMS, etc.);
  2. Purpose of analysing browsing data, tracking of the user/interested party for the purpose of improving marketing and commercial information offerings, direct sales, market research on products and services. This activity is also carried out using technologies such as cookies (for more information, please refer to the β€œCookie Policy”on the site);

The legal bases justifying the processing are:

  • the legitimate interest of the data controller (paras. 4.1 and 4.5);
  • compliance with legal obligations to which the data controller is subject (paragraph 4.4).
  • the performance of a contract to which the user/data subject is a party, or the implementation of pre-contractual measures taken at the user’s/data subject’s request (paragraphs 4.2, 4.3 and 4.6);
  • The data subject's consent (paras 4.7, 4.8);

The data subject may withdraw their consent by writing to the email address [email protected]. Such withdrawal shall in no way affect the lawfulness of the processing carried out on the basis of the consent given prior to the withdrawal.

Should the Data Controller intend to process personal data further for a purpose other than that for which it was collected, it shall, prior to such further processing, provide the user/data subject with information regarding that different purpose and any other relevant information.

Nature of the processing

The provision of personal data is mandatory solely for processing operations necessary for the provision of services (the implementation of pre-contractual or contractual measures, or processing based on compliance with legal obligations to which the Data Controller is subject).Any refusal to provide data for the purposes of service provision will make it impossible to complete the purchase of online services, as well as to register for and access certain restricted areas of the website, thereby preventing the conclusion of contractual agreements or pre-contractual measures requested by the data subject; for all other types of data, provision is voluntary and optional, and any refusal by the data subject will not entail any negative consequences for the provision of the services offered on the Prodriveshop website and related applications.

Categories of personal data recipients

The data provided will not be disclosed, but may be communicated to the following categories of recipients for the purposes of carrying out contractual or promotional activities, regardless of whether or not they are appointed as data processors:

  • to employees and collaborators of the Joint Controllers, in their capacity as authorised persons for data processing (or so-called β€œData Processors”);
  • to professionals and consultants, for the performance of administrative and fiscal contractual obligations;
  • public territorial bodies for legal compliance;
  • to judicial or supervisory authorities, administrations, public bodies and organisations (both domestic and foreign);
  • to Cloud infrastructure providers or domain registration and email service providers;
  • to banks for the processing of payments relating to our invoices;
  • debt collection agencies;
  • a commercial information company, for verifying the solvency of a potential client;
  • to companies tasked with the maintenance of our information system;
  • to law firms we trust for the potential protection of our rights or for the management of disputes relating to the Contract;
  • to judicial bodies, arbitration tribunals, mediation bodies and their mediators, party-appointed consultants, in the event of litigation;
  • to subjects instructed by us for the execution of marketing activities (q) to commercial information companies.

The updated list of such subjects can be requested from the Data Controller, in the manner indicated in the following paragraph β€œData Subject Rights”.

Place and method of processing

The website is hosted on OVHcloud servers (hosting provider), with data centres all located within the European Economic Area, specifically in France. The security management systems adhere to the principles of ISO 27001. OVHcloud complies with numerous security standards, including: PCI DSS, HDS, TSP, CSA, ISO 27017, ISO 27018, and CISPE. The management and storage of personal data take place in the cloud and on servers located within the European Union, owned and/or made available by the Data Controller and/or duly appointed third-party companies acting as data processors. Any transfer of data outside the EU to non-EU countries occurs in accordance with current regulatory provisions, as well as adhering to decisions made by the European Court of Justice and national and foreign authorities regarding the protection of personal data. The processing of personal data may also be carried out in non-EU and non-EEA countries if deemed functional to the efficient fulfilment of the intended purposes, while respecting the guarantees in favour of data subjects.

Should it be necessary, for technical and/or operational reasons, to engage third parties located outside of the European Union, we hereby inform you that such third parties will act as Data Processors in accordance with and for the purposes of Article 28 of the Regulation. The processing will be governed in accordance with the provisions of Title V of the Regulation. All necessary precautions will therefore be taken to ensure

the most appropriate protection of the data subject's personal data, basing such processing on: a) adequacy decisions on third countries recipients issued by the European Commission; b) adequate safeguards provided by the third-party recipient pursuant to Art. 46 of the Regulation; c) the adoption of binding corporate rules. The Data Subject may request further details from the Data Controller or Joint Controller regarding the specific safeguards adopted for data processing.

Profiling

Through the website, the Data Controller carries out activities such as the analysis of users'/data subjects' purchasing habits and consumption choices, primarily through the processing of data provided when creating specific user profiles on the website.

The information obtained in this way allows the Controller to create – with the prior consent of the user/data subject – profiles (individual and/or aggregated), in order to process market analysis and statistics, as well as to improve its products and services and make them more responsive to customer needs, and to carry out targeted promotional campaigns that are more pleasing and of interest to users/data subjects who have given specific consent.

With reference to the newsletters and landing pages sent, the system records browsing data relating to opening, reading, views, visits, clicks, areas of interest, as well as any further actions concerning each communication sent, by preparing historical profiles of interests and preferences aimed at a better understanding of the needs of the user/data subject in order to propose targeted commercial offers and to prepare individual and/or aggregate statistical purchase analysis reports.

The user/interested party has the option to modify or withdraw their consent by sending an email to [email protected].

Data retention

The processing of personal data is carried out mainly using electronic procedures and media for the time strictly necessary to achieve the purposes for which the data were collected and, in any case, in compliance with the principles of lawfulness, fairness, data minimisation and relevance provided for by the current privacy legislation and in particular:

  • the data provided by sending emails to the website's email address will be kept for as long as necessary to provide a response;
  • The data provided at the time of registration on the site may be processed for the entire duration of the contractual relationship and, for tax purposes and for the management of any disputes, may be kept for up to 10 years in accordance with current legislation and Articles 2220 and 2946 of the Civil Code.;
  • Tax and accounting documents are kept for 10 years from the last date of entry, in accordance with the law (including tax obligations).
  • As a general rule, we will retain the data collected for marketing purposes until the consent is revoked and/or the data subject requests deletion of their data. The user/data subject has the option to withdraw their consent for marketing purposes by sending an email to [email protected].
  • The data acquired for analysis and profiling purposes will be kept for a maximum of 12 months. The user/interested party has the option to withdraw their consent for profiling purposes by sending an email to [email protected]

The Data Controller will, after the retention periods have expired according to the indicated criteria, take measures aimed at deleting or anonymising data that must not be retained for specific obligations.

Cookies e tecnologie simili

The computer systems and software procedures that operate this website acquire, in the course of their normal operation, certain personal data whose transmission is implicit in the use of Internet communication protocols.

This is information that is not collected to be associated with identified data subjects, but which by its very nature could, through processing and associations with data held by third parties, allow users to be identified.

This Data is used solely for the purpose of obtaining anonymous statistical information on the use of the Site and to check its proper functioning. It is deleted immediately after processing. The data may be used to ascertain responsibility in the event of hypothetical cybercrimes against the Site. Apart from this possibility, at present, web contact data does not persist for more than seven days.

For more details, we invite you to read the Cookie Policy on the website.

Link to other websites and social media

The website may use so-called social plug-ins and links to external platforms. Social plug-ins are special tools that allow social network functionality to be integrated directly into the website (e.g. Facebook's β€œlike” function).

All social plug-ins present on the site are marked with the respective logo belonging to the social network platform (e.g. Facebook, Instagram, Twitter, LinkedIn).

For information regarding the purposes, type, and methods of collection, processing, use, and storage of personal data by the social networking platform, as well as how to exercise your rights, please consult the privacy policy adopted by the individual website or social network.

User/Data subject rights concerning data processing

At all times, the user/data subject may exercise the rights provided by the applicable data protection legislation, including the right to:

  • Receive confirmation of the existence of your Personal Data and access its content (right of access);
  • update, amend and/ or correct your Personal Data (right of rectification);
  • requesting the cancellation or restriction of the processing of Data processed in violation of the law, including data that is no longer necessary to be kept in relation to the purposes for which the Data was collected or otherwise processed (right to erasure and right to restriction);
  • Object to processing based on legitimate interest (right to object);
  • withdraw consent, without prejudice to the lawfulness of the processing based on consent given before its withdrawal; lodge a complaint with the supervisory authority in case of infringement of the rules on personal data protection;
  • receive a copy of their Data in electronic format and request that such Data be transmitted to another data controller (right to data portability).

To exercise these rights, you may at any time make a specific request to the Data Controller, by writing to Fabio Servi at Corso Laghi 305 Avigliana 10051 (TO), – Italy. The specific application for the exercise of data subject rights must be sent to the Data Controller or the Data Protection Officer via e-mail to: [email protected].

Privacy Policy Changes

The continuous evolution of our services may lead to changes in the characteristics of the processing of Personal Data described herein. This privacy policy may undergo modifications and additions over time, as necessary due to new regulatory interventions regarding the protection of Personal Data, or due to the evolution/modification of our services. We therefore invite you to periodically check the contents of our policy: where possible, we will endeavour to inform you promptly of any changes made and their consequences.