The information on the website www.pinarello.com (hereinafter, the " Site ") is provided pursuant to art. 13 EU Reg. 2016/679 ( General Data Protection Regulation or, simply, “ GDPR ” ) and Legislative Decree 196/2003 (“ Privacy Code ” ) as amended by Legislative Decree 101/2018. The Data Controller will take care to keep this information updated.
The Data Controller is Cicli Pinarello Srl, with headquarters in Villorba (TV), Viale della Repubblica n. 12, Tax Code and VAT number 05994100963, (hereinafter, the " Owner " or the " Data Controller ").
The personal data (hereinafter " Data ") provided by the interested party will be processed for the following purposes:
The Data Controller processes the Data only in the presence of one of the conditions provided for by current legislation, and specifically:
· for the conclusion and execution of a contract of which the user is a part or for the execution of pre-contractual measures adopted at the request of the user of the Site pursuant to art. 6, par. 1, lit. b), GDPR .
This basis legitimizes the processing of personal data that takes place in the following activities:
a. registration on the Site and use of services reserved for registered users;
b. conclusion and execution of a contract for the purchase of the products offered on the Site;
c. management of requests for information and/or requests for assistance from the user.
The provision of data for these activities is a contractual obligation. The user is free to communicate his data or not, but in the absence of the requested data it will not be possible to conclude or execute the contract and the user's requests. This means that the user will not be able to purchase the products and will not be able to use the services of the Owner and that the Owner will not be able to manage user requests;
· to comply with a legal obligation pursuant to art. 6, par. 1, lit. c), GDPR .
In the event of conclusion of a contract for the purchase of goods on the Site, the processing of user data will take place to fulfill the legal obligations to which the Data Controller is required in accordance with the tax provisions and other regulations to which the Data Controller is subject. The user is free to decide whether to conclude a contract and whether or not to communicate his data to the Data Controller, but if he concludes it, the Data will be necessary and will be processed to implement the aforementioned legal obligations to which the Data Controller is required.
· to pursue a legitimate interest of the Data Controller pursuant to art. 6, par. 1, lit. f), GDPR .
The Owner has a legitimate interest in sending the user of the Site a reminder e-mail communication in the event that the user, after placing a product in the cart and having already communicated his e-mail address to the Owner, does not had finalized the purchase in order to encourage the conclusion of the deal.
The Data may also be processed to prevent and prosecute any fraudulent activities, counterfeiting or abusive behavior (including by third parties) in conflict with current regulations, the contractual provisions applicable to the Site and related services, the rules of correctness and good faith .
Even in this case, the processing of data responds to a legitimate interest of the owner.
· on the basis of the consent of the interested party pursuant to art. 6, par. 1, lit. a), GDPR .
The Data Controller will carry out the following treatments only if the user has given his express consent:
a. sending the Owner's newsletter by e-mail (communications on news and commercial promotions);
b. conducting opinion polls and market research;
c. analysis of browsing and consumption habits in order to personalize the experience on the Site.
Providing the Data Controller with such Data for these activities is absolutely optional and will in no way affect the possibility of purchasing and/or requesting the services offered on the Site. The user is free to provide or not provide his Data for these purposes, but failing that, it will not be possible for the Data Controller to carry out marketing activities , opinion polls and market research, and analysis of user habits to provide them with personalized offers.
All the Data collected may be communicated to internal figures authorized for processing according to their respective duties, as well as to external subjects to whom it is necessary to communicate the Data. These recipients, should they process Data on behalf of the Data Controller (such as third party technical service providers , postal couriers, hosting providers, IT companies, communication agencies) , will be designated as data processors with a specific contract or other legal act. The data of third parties will be communicated upon request by the Data Controller.
The Site processes user data in a lawful and correct manner, adopting the appropriate security measures aimed at preventing unauthorized access, disclosure, modification or unauthorized destruction of data. The processing is carried out using IT and/or telematic tools, using appropriate organizational, technical and administrative measures in order to protect personal data within our company, and with logic strictly related to the purposes indicated. However, no data transmission and no storage system can be guaranteed to be 100% secure. Users who have reason to believe that interacting with the Site is no longer safe should report the problem immediately.
Data management and storage take place on servers located within the European Union, owned and/or available to the Data Controller and/or third-party companies duly appointed as data processors. The Data may also be transferred for the purposes referred to in art. 2 to subjects based in countries outside the European Union, provided they guarantee an adequate level of protection pursuant to articles 44 et seq. of the GDPR.
The Data will be kept for a limited period of time which varies according to the type of activity and the purpose for which the Data is processed.
Once this period has expired, the Data will be definitively deleted or in any case rendered anonymous in an irreversible way. The cases in which retention for a subsequent period is required for any disputes, requests from the competent authorities or pursuant to applicable legislation are excluded.
In particular, the Data is stored in compliance with the terms and criteria specified below:
a. data collected to conclude and execute contracts for the purchase of goods on the Site, including payment data: up to the conclusion of the administrative-accounting formalities. The billing data will be kept for 10 (ten) years from the billing date;
b. data of the registered user: the data will be kept until the user requests the cancellation of his personal account or after 2 (two) consecutive years without the user having accessed the account;
c. data connected to requests for information and/or requests for assistance: the data useful for processing the user's request will be kept until the request is met;
d. data used for commercial communication activities with users who have voluntarily subscribed to the Owner's newsletter, opinion polls, market research and surveys to measure satisfaction: these data are kept until the termination of the activity or the request of interruption of the activity (withdrawal of consent) and in any case within 2 (two) years from the last interaction of the user, of any kind, with the Site and / or the Owner . The user can, at any time, autonomously stop receiving these communications by simply clicking on the appropriate link at the bottom of each e-mail;
e. data used to personalize the Site and to show the user customized commercial offers: until the user requests the cessation of the activity and in any case and in any case within 2 (two) years from the last interaction of any kind with the Owner;
At any time, the user of the Site can exercise the rights with reference to the specific processing of his Data by the Owner, and in particular:
To exercise the rights recognized by the rules indicated above, the user can send his request by e-mail to the address firstname.lastname@example.org , or by registered mail to the following address: Cicli Pinarello Srl, Viale della Repubblica n. 12, 31020 – Villorba (TV).
privacy statement may undergo changes and additions over time, which may also
be necessary with reference to new regulatory interventions regarding the
protection of personal data; the user of the Site is therefore invited to
periodically check its contents.
The updated version of the privacy information, in any case, will be published on this page, with an indication of the date of its last update.