The purpose of this document is to inform the natural person (hereinafter “Data Subject”) about the processing of his/her personal data
(hereinafter “Personal Data”) collected by the data controller, Rossoruote s.r.l., with registered oce in Via Broseta,35 24122 Bergamo,
Tax Code/VAT No. 04519540167, e-mail address firstname.lastname@example.org, (hereinafter “Data Controller”), via the website
www.rossoruote.it (hereinafter “Application”).
Changes and updates will be eective as soon as they are published on the Application. In case of non-acceptance of the changes made
The Data Controller processes the following types of Personal Data voluntarily provided by the Data Subject:
Contact Data: rst name, last name, address, e-mail address, phone number, pictures, authentication credentials, any further
information sent by the Data Subject, etc.
Fiscal and payment Data: tax code, VAT number, credit card data, bank account details, etc.
The Data Controller processes the following types of Personal Data collected automatically:
Technical Data: Personal Data produced by devices, applications, tools and protocols such as, for example, information about
the device used, IP addresses, browser type, type of Internet provider (ISP). Such Personal Data may leave traces which,
combined with unique identifiers and other information received by the servers, can be used to create profiles of individuals
Usage Data: such as, for example, pages visited, number of clicks, actions taken, duration of sessions, etc.
If the Data Subject decides not to provide Personal Data for which there is a legal or contractual obligation, or if such data is a
necessary requirement for the conclusion of the contract with the Data Controller, it will be impossible for the Data Controller to
establish or continue any relationship with the Data Subject.
The Data Subject who communicates Personal Data of third parties to the Data Controller is directly and exclusively liable for their
origin, collection, processing, communication or divulgation.
Personal Data on visited pages and links and other actions performed during the use of the Application. This data is stored and
The processing of Personal Data is necessary:
and to be identified in it, also via external platforms
products or services using the email provided by the Data Subject in the context of the sale of a product or service similar to
the one being sold
improve the performance of the Application, to manage and organize the information in a computer system (e.g. server,
analyze behaviors of the Data Subject to improve products and/or services provided by the Data Controller and better meet
the expectations of the Data Subject
products and/or services through automated processing designed to collect personal information to predict or assess the
Data Subject’s preferences or behaviors
interest in the products and/or services oered by the Application using his Personal Data. The Data Subject may opt-out by
visiting the Network Advertising Initiative page
promotional materials, to perform direct sales activities of the Data Controller’s products and/or services or to conduct
market research with automated and traditional methods
On the basis of the legitimate interest of the Data Controllerowner, the application allows interactions with external web platforms
or social networks whose processing of personal data is governed by their respective privacy policies to which please refer. The
interactions and information acquired by this Application are in any case subject to the privacy settings that the Data Subject has
chosen on such platforms or social networks. Such information – in the absence of specic consent to processing for other
purposes – is used exclusively to allow the use of the Application and to provide the information and services requested.
The Data Subject’s Personal Data may also be used by the Data Controller to protect itself in judicial proceedings before the
The processing of Personal Data is performed via paper-based and computer tools with methods of organization and logics strictly
related to the specified purposes and through the adoption of appropriate security measures.
Personal Data are processed exclusively by:
The subjects listed above are required to use appropriate measures and guarantees to protect Personal Data and may only access
data necessary to perform their duties.
Personal Data will not be indiscriminately shared in any way.
Personal Data will not be transferred outside the territory of the European Economic Area (EEA).
Personal Data will be stored for the period of time that is required to fulfill the purposes for which it was collected. In particular:
At the end of the conservation period, all Personal Data will be deleted or stored in a form that does not allow the identication of the Data Subject.
Data Subjects may exercise specic rights regarding the Personal Data processed by the Data Controller. In particular, the Data
Subject has the right to:
In order to use their rights, Data Subjects may send a request to the following e-mail address email@example.com.
Requests will be immediately treated by the Data Controller and processed as soon as possible, in any case within 30 days.