AMAHORSE GROUP S.p.A. PRIVACY POLICY
PERSONAL DATA CONTROLLER
AMAHORSE GROUP S.p.A. based in San Giustino (PG), Via Citernese 112, ZIP code 06012.
Contact email for requests to exercise the rights provided for by the GDPR and for any information on the processing of personal data:
TYPES OF DATA COLLECTED
- Personal data
- Identification data
- Financial data
of the interested party or of other subjects whose personal data will be provided for reasons relating to the product purchase request, where such data are necessary for the execution of the contract.
PURPOSE OF THE PROCESSING AND LEGAL BASIS OF THE TREATMENT
The data collected is processed by the Data Controller for the following purposes:
1 - Fulfillment of the contractual obligations assumed following the acceptance of each purchase order.
Legal basis of the treatment:
execution of the contract between the Data Controller and the interested party or of pre-contractual measures requested by the interested party.
2 – fulfillment of the legal obligations in fiscal, tax and accounting matters.
Legal basis of the treatment:
fulfillment of legal obligations to which the Data Controller is subject.
NATURE OF THE PROCESSING
The provision of data is optional, but strictly necessary for the execution of the contractual relation with the interested parties.
Any refusal to data processing may lead, and usually leads, to the impossibility of execution of the contract.
ACCESS TO PERSONAL DATA AND DATA COMMUNICATION
Who has access to personal data?
- Employees of AMAHORSE GROUP S.p.A., as internal data processors, specifically trained by the Data Controller
- The consultants and companies that collaborate with AMAHORSE GROUP S.p.A., specifically responsible for data processing by the Data Controller
To whom will the data be communicated? The data may be communicated to:
- Consultants
- IT specialists
- Suppliers, carriers
- External data processors (updated list of data processors available by contacting the Data Controller by e-mail)
for the fulfillment of contractual obligations.
TRANSFER AND DISSEMINATION OF PERSONAL DATA
Will the data be transferred or disseminated?
The data collected is not transferred to third countries outside EU. Personal data will not be disseminated.
DATA PROCESSING METHODS AND SECURITY MEASURES
The data will be processed with electronic and paper instruments. All security measures suitable for the personal data protection will be implemented and all persons in charge will be specifically trained to comply with the security procedures.
DATA RETENTION PERIOD
Personal data processed for reasons related to the execution of the contract will be kept for a period of three years from the date of signing of the contract.
Invoices and accounting documents will be kept for as long as necessary to fulfill the obligations dictated by tax and accounting legislation.
RIGHTS OF INTERESTED PARTIES
Interested parties can exercise the
rights pursuant to articles 7, 15-22 of the European Reg. 679/2016. In particular,
for consent-based processing, you have the right to revoke it at any time, also by sending a communication by email to
marketing@amahorse.it.
In the same way, it will be possible to obtain from the Data Controller confirmation of the existence of one's personal data and their availability in an intelligible way; you have the right to request access to personal data concerning you, receive the personal data provided to the Data Controller and transmit it to another Data Controller without impediments (so-called portability); obtain the updating, the limitation of the processing, the rectification of the data and the cancellation of that data treated in violation of the current legislation.
You also have the right, for legitimate reasons, to object to the processing of your personal data and to the processing for the purpose of sending advertising material, direct sales and for carrying out market research.
You also have the right to lodge a
complaint with the Privacy Guarantor, as supervisory authority for the protection of personal data, by e-mail to:
garante@gpdp.it, by fax: 06 696773785, or by post, to the Guarantor for protection of personal data, with registered office in Rome (Italy), Piazza di Monte Citorio n. 121, ZIP code 00186.
USE OF THE WEBSITE WWW.EQUESTRO.COM
TYPES OF DATA COLLECTED
- Contacts: Identification and contact data (first name, family name, e-mail, telephone)
- Equestro Gift Card purchase: Identification and contact data (name, e-mail) and financial data
- Create your account / New customer: Identification data and contact data (first name, family name and e-mail)
- Profiling activity for sending promotional communications: Identification data and contact details (first name, family name and e-mail)
- Email marketing activities: Identification and contact data (email)
PURPOSE OF THE PROCESSING AND LEGAL BASIS OF THE TREATMENT
The data collected is processed by the Data Controller for the following purposes:
- Contacts: response to information requests from the interested party. Legal basis of the processing: fulfillment of pre-contractual measures upon request by the interested party.
- Equestro Gift Card Purchase: gift card purchase. Legal basis of the processing: fulfillment of pre-contractual measures upon request by the interested party.
- Create your account - New customer: Register to the site to access a personal area for purchases. Legal basis of the processing: fulfillment of pre-contractual measures upon request by the interested party.
- Profiling activity: sending of customised promotional communications based on the user's interests and purchasing habits. Legal basis of the processing: specific consent of the interested party.
- E-mail marketing activities: sending of advertising and/or promotional communications relating to the company's products and services. Legal basis of the processing: specific consent of the interested party.
We send our users marketing and promotional communications via email, text messages, and in social media channels or web browsers. To be more effective in our marketing communications, we work with various social media, search engines, and advertising network providers (“Advertising Partners”).
We work with Advertising Partners such as Facebook and Instagram (Meta Platforms) for social media advertising, and with Google for online advertising networks such as Google Ads, Google Marketing Platform and Youtube. Advertising Partners use the data we provide after being collected from cookies and other tracking technologies to understand users’ preferences and interests, and take this into account to create personalized ads.
Our Advertising Partners use cookies and similar technologies to track how users use our websites and services by accessing data stored in users’ devices. To choose the content best suited to the interests of users, we can use the information that the user provides when creating an account, when signing up for the newsletter, when making a contact request, or when making a purchase on the site and we can share it with our Advertising Partners for profiling purposes, or for analysis of the user's consumption choices, consisting of automated processing of the aforementioned data. This processing is aimed at analytically knowing and predicting the user's purchasing preferences also to create specific customer profile groups, so as to personalize the commercial offer for it to be more in line with the user's preferences.
Each of our Advertising Partners, as co-controller of the processing, is responsible for its part of the data processing, including (any) transfers of personal data to countries outside the European Union.
The user may at any time revoke his/her consent to profiling by sending an email to:
E-mail
marketing@amahorse.com
PEC
umbriaequitazione@pec.it
NATURE OF THE PROCESSING
The provision of data for e-mail marketing and profiling activities is optional. Any refusal to provide it will only make it impossible to receive promotional communications by e-mail or to be profiled.
The provision of data for information requests and for registering to the website to access a personal area for purchases is optional. Any refusal to provide it will only produce the effect of failing to meet the request of the interested party or to access a personal area for purchases.
ACCESS TO PERSONAL DATA
Who has access to personal data?
Personal data provided for e-mail marketing and profiling activities:
- Company employees, as internal data processors, specifically trained by the Data Controller
- The company managing the website and IT services, appointed as external data processor
- The company in charge of the technical management of the services provided through the website, appointed as external data processor
Personal data provided to make information requests, to register to the site:
- Company employees, as internal data processors, specifically trained by the Data Controller
- The company managing the website and IT services, appointed as external data processor
- The company in charge of the technical management of e-commerce purchases, appointed as external data processor
- The companies and consultants that collaborate with AMAHORSE GROUP S.p.A specifically appointed as external data processor by the Data Controller
The updated list of data processors can be found by making a request to the Data Controller by e-mail.
TRANSFER AND DISSEMINATION OF PERSONAL DATA
Will the data be transferred or disseminated?
The data collected through the website is not transferred to third countries outside EU. Personal data will not be disseminated.
DATA PROCESSING METHODS AND SECURITY MEASURES
The data will be processed with electronic and paper instruments.
All security measures suitable for the personal data protection will be implemented and all persons in charge will be specifically trained to comply with the security procedures.
DATA RETENTION PERIOD
The data provided for the profiling activity and for the e-mail marketing activity will be kept until the interested party exercises the right to revoke the consent expressed, and in any case no later than three years from collection of the same consent.
The consent withdrawal will not have any further negative consequences for the interested party and will not affect the processing carried out before the withdrawal.
The data collected after the information request from the interested party will be kept until the request is processed, and in any case no later than 24 months from the collection of the data.
The data collected during registration to the website will be kept as long as the interested party decides to request the cancellation of the registration.
Personal data processed for reasons related to the execution of the gift card purchase contract will be kept for a period of three years from the date of signing of the contract.
Invoices and accounting documents will be kept for as long as necessary to fulfill the obligations dictated by tax and accounting legislation.
RIGHTS OF INTERESTED PARTIES
Interested parties can exercise the
rights pursuant to articles 7, 15-22 of the European Reg. 679/2016. In particular,
for consent-based processing, you have the right to revoke it at any time, by sending a communication by email to
marketing@amahorse.comIn the same way, it will be possible to obtain from the Data Controller confirmation of the existence of one's personal data and their availability in an intelligible way; you have the right to request access to personal data concerning you, receive the personal data provided to the Data Controller and transmit it to another Data Controller without impediments (so-called portability); obtain the updating, the limitation of the processing, the rectification of the data and the cancellation of that data treated in violation of the current legislation.
You also have the right, for legitimate reasons, to object to the processing of your personal data and to the processing for the purpose of sending advertising material, direct sales and for carrying out market research.
You also have the right to lodge a complaint with the Privacy Guarantor, as supervisory authority for the protection of personal data, by e-mail to:
garante@gpdp.it, by fax: 06 696773785, or by post, to the Guarantor for protection of personal data, with registered office in Rome (Italy), Piazza di Monte Citorio n. 121, ZIP code 00186.