This notice is provided pursuant to Art. 13 of Regulation 2016/679 (GDPR) and Art. 13 of Legislative Decree no. 196/2003 (Italian Personal Data Protection Code) to users who access the websites www.ricambiamericani.com, www.usaspareparts.com and www.americanparts.com, and concerns all personal data processed in the manner described below. The websites:
www.ricambiamericani.com
www.americanparts.com
www.usaspareparts.com
www.magnaperformance.com
are owned and operated by ERISE SRL, which guarantees compliance with personal data protection legislation (Legislative Decree 196/03).
Data Controller
The Controller of the personal data collected is Erise s.r.l. a socio unico (single-member company), with registered office in Cervarese Santa Croce (PD), via Roma no. 241. Within the company itself, the personal data collected are processed by employees acting as "authorised persons", who comply with the specific instructions and directions issued to them.
Place of data processing
Processing operations connected with the web services of the ERISE SRL websites take place at the Controller's business premises in Cervarese Santa Croce (PD) and are handled solely by technical staff of the department responsible for the processing, or by persons occasionally tasked with maintenance operations. No data deriving from the web service is communicated or disseminated (Art. 90 GDPR). Personal data provided by users who submit requests for informational material are used solely for the purpose of performing the service or task requested, and are communicated to third parties only where this is necessary for that purpose (Art. 3 GDPR).
Subject matter of the processing
Processing of personal data means any operation or set of operations, carried out with or without the aid of electronic tools, concerning the collection, recording, organisation, storage, consultation, elaboration, modification, selection, extraction, comparison, use, interconnection, blocking, communication, dissemination, erasure and destruction of data, even if not recorded in a database.
The personal data processed are collected either because they are provided directly by the data subject or because they are provided automatically.
Data provided directly by the data subject are all personal data supplied to the Data Controller by any means, directly by the data subject. Such data may be rectified by data subjects at any time, and data subjects may likewise prevent their processing.
In particular, the following personal data are collected and processed: first name, surname, company name, tax code, address, telephone, email, date of birth, other information necessary to fulfil your order (for example information about the products you have ordered, bank account details, IBAN and SWIFT), and information relating to and the history of any contacts with customer support. Personal data provided by users/visitors will be communicated to third parties only where such communication is necessary in order to comply with the requests of those same users/visitors.
The data collected automatically are browsing data. Although such data are not collected in order to be associated with the user's identity, they could indirectly — through processing and association with data collected by the Controller — allow the user to be identified. In particular, the data collected include: the IP addresses or domain names of the computers used by users connecting to the site, the URI (Uniform Resource Identifier) addresses of the resources requested, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numerical code indicating the status of the server's response (successful, error, etc.) and other parameters relating to the user's operating system and IT environment.
Following the sending of newsletters, the platform used makes it possible to detect the opening of a message and the clicks made within the newsletter itself, together with details relating to the IP address and the browser/device used. The collection of this data is essential for the operation of the implicit renewal systems of the processing (see the "Methods of processing" section) and forms an integral part of the operation of the sending platform.
Purposes of the processing
Personal data provided by users who submit requests for informational material are used solely for the purpose of performing the service or task requested, or where communication is required by legal obligations. The provision of the data subject to processing is mandatory in order to allow the user to access the service. For this reason consent is mandatory, and any refusal of the processing, or the failure to provide the data or the inaccurate or partial provision thereof, may result in the impossibility of correctly delivering the service.
The provision of data for newsletter purposes of a promotional, informational or research nature is optional, and refusal to give the relevant consent to processing will result in the impossibility of being kept up to date on commercial initiatives and/or promotional campaigns, of receiving offers or other promotional material and/or of being sent personalised offers.
Erise srl does not provide any user information to third parties without their consent, except where required by law. Personal data will be processed for the following purposes:
1. purposes functional to the fulfilment of obligations under law, regulation or EU legislation;
2. performance of the contract or, prior to the performance of the contract, compliance with your specific requests in relation to the marketing and import/export of spare parts.
3. management of customers and of any purchase orders and related administrative activities, with the relevant processing, in accordance with the legislation in force on the matter, invoicing and shipping.
4. the arrangement of measures aimed at protection against credit risk, including activities intended to identify the Customer's financial reliability/solvency, prior to or during the contractual relationship. Erise srl may verify that the bank/postal details provided are correct;
5. purposes relating to the carrying out of activities aimed at producing market studies and research, direct selling activities, including by telephone, the sending of commercial information, as well as the sending of advertising/informational material, carried out by "traditional" means (for example, postal mail and/or calls with an operator) or by means of automated contact systems (for example SMS and/or MMS, telephone calls, email, fax) pursuant to Art. 130 paras. 1 and 2 of the Privacy Code and of Regulation (EU) 2016/679. The data subject may object to the processing at any time by sending a request to the mailbox info@ricambiamericani.com.
6. purposes relating to the carrying out, by third parties and commercial partners to whom Erise may communicate/transfer the data acquired, of activities aimed at producing market studies and research, direct selling activities, including by telephone, or product placement, the sending of commercial information including interactive information, as well as the sending of advertising/informational material, carried out by "traditional" means (for example, postal mail and/or calls with an operator) or by means of "automated" contact systems (for example SMS and/or MMS, telephone calls, email, fax) pursuant to Art. 130 paras. 1 and 2 of the Privacy Code and of EU Regulation 2016/679;
7. purposes relating to the carrying out of activities aimed at producing market studies and research, direct selling activities, including by telephone, the sending of commercial information, as well as the sending of advertising/informational material, carried out by "traditional" means (for example, postal mail and/or calls with an operator) or by means of "automated" contact systems (for example SMS and/or MMS, telephone calls, email, fax) pursuant to Art. 130 paras. 1 and 2 of the Privacy Code and of EU Regulation 2016/679. The data subject may object to the processing at any time by sending a request to the mailbox info@ricambiamericani.com.
8. purposes relating to the carrying out, by third parties and commercial partners to whom ERISE SRL may communicate/transfer the data acquired, of activities aimed at producing market studies and research, direct selling activities, including by telephone, or product placement, the sending of commercial information, including interactive information, as well as the sending of advertising/informational material, carried out by "traditional" means (for example, postal mail and/or calls with an operator) or by means of "automated" contact systems (for example SMS and/or MMS, telephone calls, email, fax) pursuant to Art. 130 paras. 1 and 2 of the Privacy Code and of EU Regulation 2016/679.
9. management of disputes (contractual breaches, formal notices, settlements, debt recovery, arbitration, legal proceedings).
Cookies
Cookies are small text strings that the sites visited by the user send to their device, where they are stored and then retransmitted to those same sites on the user's next visit. Cookies are used for various purposes: performing IT authentication, monitoring sessions, storing information about specific configurations concerning users who access the server, etc.
Cookies are not used for the transmission of personal information, nor are so-called persistent cookies of any kind used, i.e. systems for tracking users.
>a) Technical cookies.
These are cookies necessary to enable secure and efficient browsing of the site and to authenticate access to restricted areas.
These cookies are not used for any further purposes and are installed directly by ERISE srl.
They can be divided into browsing or session cookies, which ensure normal browsing and use of the website; analytics cookies, treated as technical cookies where used directly by the site operator to collect information, in aggregate form, on the number of users and how they visit the site; and functionality cookies, which allow the user to browse according to a set of selected criteria (for example, language, the products selected for purchase) in order to improve the service provided to them.
The use of so-called session cookies (which are not permanently stored on the user's computer and disappear when the browser is closed) is strictly limited to the transmission of session identifiers (consisting of random numbers generated by the server) necessary to enable secure and efficient browsing of the site.
The so-called session cookies used on this site avoid the use of other IT techniques that are potentially prejudicial to the confidentiality of users' browsing and do not allow the acquisition of personal data identifying the user.
This Site uses: analytics cookies, technical cookies, session cookies.
b) Profiling cookies.
Profiling cookies are intended to create profiles of the user and are generally used to send advertising messages in line with the preferences expressed by the user while browsing the internet. Given the particular intrusiveness that such devices may have on users' private sphere, the law requires that users be adequately informed about their use and thereby give their valid consent.
This site does not use its own profiling cookies.
c) So-called "third-party" cookies.
While browsing, the user may also receive on their device cookies sent from different sites or web servers (so-called "third parties"), on which certain elements (such as, for example, images, maps, sounds, specific links to pages on other domains) present on the site being visited may reside.
Social network integration services are services that allow interaction with social networks or other third-party platforms. The interactions and information acquired are subject to the privacy settings of the social network or platform in question. Where a social network interaction service is installed, it is possible that, even if the service is not used, it collects traffic data relating to the pages on which it is installed.
Methods of processing
Personal data are processed using paper-based, IT, telematic and automated tools, including profiling (Art. 22 GDPR). Profiling may take place using individual or identifying data (e.g. personal details), or aggregate data derived from individual personal data. All of this is done in compliance with the confidentiality safeguards and security measures provided for by the legislation in force, using logic strictly related to the purposes of the processing. Personal data are processed for the time strictly necessary to achieve the purposes for which they were collected, including the security of our processing procedure in accordance with regulatory and legal obligations (e.g. auditing, accounting and statutory retention periods), the management of disputes and the establishment, exercise or defence of legal claims in those countries where we carry out business activities.
Specific security measures are observed to prevent data loss, unlawful or incorrect use and unauthorised access.
The Data Controller retains and processes personal data for the time necessary to fulfil the purposes indicated. The retention period may vary significantly depending on: the purpose, the type of data processed, and legal obligations.
When it is no longer necessary to retain personal data, they may be erased or securely destroyed in accordance with our policy.
Rights of data subjects
Pursuant to Articles 15 to 22 of the Regulation, the data subject has the right to obtain from the Data Controller information as to:
- the origin of the personal data;
- the purposes and methods of the processing;
- the logic applied where the processing is carried out with the aid of electronic/IT tools;
- the identifying details of the controller, of the processors and of the designated representative;
- the entities and categories of entities to whom the data may be communicated or who may become aware of them as designated representative within the territory of the State, as processors or as authorised persons.
In addition, the data subject has the right to obtain:
- the updating, rectification or integration of their data;
- the erasure, transformation into anonymous form or blocking of data processed in breach of the law;
- access to their data, that is, confirmation as to whether or not personal data concerning them is being processed;
- restriction of processing and data portability, that is, the right to receive the personal data concerning them in a structured format;
- the right to lodge a complaint with the Supervisory Authority.
Finally, the data subject has the right to object, in whole or in part, on legitimate grounds, to the processing of personal data concerning them, even where relevant to the purpose of the collection. In particular, the data subject has the right to object to the processing of personal data concerning them for the purposes of sending commercial advertising material or direct selling, or for carrying out market research or commercial communication. Requests under the preceding points must be sent by certified email (PEC) to the address erise@pec.it.
In addition to Erise srl employees, certain processing of the user's personal data may also be carried out by third parties, including the companies to which Erise srl entrusts or may entrust certain activities functional to the consultation of the site. Such entities will act as independent controllers or as data processors. In the latter case, the Controller will issue the Processors with appropriate operating instructions, with particular reference to the adoption of minimum security measures, in order to guarantee the confidentiality, integrity and security of the data. The user's data may also be communicated to judicial or administrative authorities or to other public bodies entitled to request them, in the cases provided for by law. In pursuit of the purposes indicated above, Erise srl may communicate and have the data subject's personal data processed, in Italy and abroad, including in countries outside the European Union, by third parties with which it has relationships: Erise srl will provide them only with the information necessary to carry out the services requested, taking all measures to protect your personal data (Art. 44 GDPR). Personal data may also be known to employees, self-employed workers, project workers, occasional workers, consultants, temporary staff and collaborators of Erise srl, who have been specifically appointed/designated as Processors or authorised persons; accounting and invoicing staff, staff involved in the marketing of goods/services, agents and representatives. The above data may be transferred and communicated to the categories of entities indicated below: companies operating in the transport sector, our suppliers, our sponsors, Poste Italiane and other mail delivery companies, banks and credit institutions, debt collection companies, law firms, insurance companies, professional firms and/or companies and/or associations of businesses and entrepreneurs that provide us with certain accounting and/or tax services, social security institutions, etc.
Data deletion
If you wish to request the deletion of your personal data collected through our Facebook application, contact us at the email address info@ricambiamericani.com, specifying your Facebook ID or the associated email address.
This document constitutes the "Privacy Policy" of this site and will be subject to updates.
