Feel Racing S.r.l. (hereinafter “Feel Racing”) protects the confidentiality of personal data and guarantees its necessary protection against any event that may put it at risk of violation.
As provided for by European Union Regulation No. 2016/679 (hereinafter “GDPR”) and Article 13 in particular, please find below the information that we are required by law to provide to the user ("Data Subject") relating to the processing of their personal data.
Who we are and what data we process (Article 13, paragraph 1 (a), Article 15 (b) GDPR)
Feel Racing S.r.l., hereby represented by its pro tempore legal representative, with registered offices at Valsamoggia, loc. Crespellano (BO) Via Provinciale n. 35/C C.F. 03914210376, acts as the Data Controller and can be contacted at firstname.lastname@example.org; said Data Controller collects and/or receives information relating to you, the Data Subject, such as:
|Category of data||Examples of types of data|
|Contact details||first name, last name, landline and/or mobile telephone number, email address(es), physical address, nationality, residential province and city, tax ID number|
|Banking information||IBAN and banking/postal account information (except for Credit Card number)|
Feel Racing does not require you to supply so-called "private" data, that is, according to the provisions of the GDPR (Art. 9), personal data that identifies race or ethnicity, political opinions, religion or philosophy, or any union affiliation, nor any genetic or biometric information used to uniquely identify a physical person, data associated with health or one's sex life, or sexual orientation. In the event the services requested from Feel Racing require the processing of this data, you will first receive specific notification with a request for your consent.
The Data Controller has not appointed a Data Protection Officer (Art. 37, GDPR).
Why we need your data (Art. 13, paragraph 1 GDPR)
The data is used by the Data Controller to fulfill the registration request and for the supply contract on the preselected Service and/or Product purchase by the website https://shop.arubaracing.it/, to manage and execute the contact requests forwarded by you, offer assistance, fulfill legal and regulatory obligations demanded of the Data Controller in accordance with the activities performed.
In particular, your data will be processed for:
The legal basis for this processing is the consent you initially granted for the processing itself, which you may freely withdraw at any time (see Section III).
Communication to third parties and categories of recipients (Article 13, paragraph 1 GDPR)
Your personal data is communicated mainly to third parties and/or recipients whose activity is necessary to perform the activities relating to the contract established, and to meet certain legal requirements, such as:
|Categorie di destinatari||Finalità|
|Credit and electronic payment institutions, banks/post offices||Managing deposits, payments, reimbursements associated with the contractual service|
|External professionals/consultants and consulting firms||Fulfillment of legal requirements, exercising rights, protecting contractual rights, credit recovery|
|Financial Administration, Public Agencies, Legal Authorities, Supervisory and Oversight Authorities||Fulfillment of legal requirements, protection of rights; lists and registries held by Public Authorities or similar agencies based on specific regulations relating to the contractual service|
|Formally mandated subjects or those with recognized legal rights||Legal representatives, administrators, guardians, etc|
* The Controller requires its own third party providers and Data Processors to adhere to security measures that are equal to those adopted for you by restricting the Data Processor's scope of action to processing directly related to the requested service.
The Controller will not transfer your personal data to countries where the GDPR is not applicable (countries outside the EU) except where specifically indicated otherwise, in which case you will be first notified, and if necessary asked for your consent..
The legal basis for this processing is fulfillment of the services outlined in the established contract, compliance with legal obligations, and the legitimate interests of Feel Racing S.r.l. to perform the processing necessary for these purposes.
What happens when you do not provide your identification information as needed to perform the requested service? (Article 13, paragraph 2 (e) GDPR)
The collection and processing of your personal data is necessary for fulfilling the services requested. Should you fail to provide the personal data expressly stipulated as necessary on the order form or the registration form, the Data Controller will not be able to carry out the processing associated with managing the requested services and/or the contract and the Services/Products associated with it, nor fulfill the operations dependent on them.
What happens if you do not grant consent for the processing of your personal data for business promotion activities on Services/Products that are different from those purchased?
When you do not give your consent to the processing of your personal data for these purposes, the processing will not be implemented for these specific purposes, but it will not affect the performance of the requested services or those for which you have already given your consent, if requested.
In the event you have given consent and later withdraw it or oppose the processing for business promotional activities, your data will no longer be processed for these activities, although this will not create negative effects or consequences for you or the services requested.
How we process your data (Article 32, GDPR)
The Controller makes use of appropriate security measures to preserve the confidentiality, integrity and availability of your personal data, and requires the same security measures from third party providers and the Processors.
Where we process your data
Your data is stored in hard copy, electronic and remote archives located in countries where the GDPR is applicable (EU countries).
How long is your data stored? (Article 13, paragraph 2 (a) GDPR)
Unless you explicitly express your own desire to remove it, your personal data will be stored until required for the due purposes for which it was collected.
In particular, the data will be stored for the entire duration of your registration in a way proportionate to necessities or legal obligations.
For data provided to the Data Controller for the purposes of business promotion for services other than those you have already purchased, for which you initially gave consent, this will be stored for 24 months, unless such consent is withdrawn.
It is also important to add that, should the user forward to Feel Racing personal data that has not been requested or that is unnecessary for the purposes of performing the services requested, or for the delivery of a service strictly related thereto, Feel Racing cannot be considered controller of this data and will proceed to delete it as soon as possible.
Regardless of your determination to remove the data, your personal information will be, in any case, stored according to the terms outlined in current law and/or national regulations, for the exclusive purpose of guaranteeing specific requirements.
Furthermore, personal data will in any case be stored to comply with obligations (e.g. tax and accounting purposes) which may continue even after termination of the contract (Art. 2220 Civil Code); for these purposes, the Controller shall retain only the data necessary to complete these activities.
For those cases where the rights arising from the contract and/or registration are used in the courts, your personal data, exclusively required for these purposes, shall be processed for the time necessary to complete them.
What are your rights? (Articles 15 – 20 GDPR)
You have the right to obtain the following from the Data Controller:
For further information and to send your request, contact the Data Controller at email@example.com. To guarantee that the above-mentioned rights are exercised by you and not by unauthorized third parties, the Data Controller may require you to provide other information that may be necessary for this purpose.
How and when can you oppose the processing of your personal data? (Art. 21 GDPR)
For reasons relating to your own particular situation, you may at any time oppose the processing of your personal data if it is based on legitimate reasons or if the processing is undertaken for business promotion activities, by sending a request to the Data Controller at firstname.lastname@example.org.
You have the right to have your own personal data deleted if the Data Controller has no legitimate reason prevailing over such request, and in any case, where you have opposed the processing for business promotional activities.
Who can you file a claim with? (Art. 15 GDPR)
Without prejudice to any other ongoing administrative or judicial action, you may file a claim with the applicable supervisory authority of the Italian territory (Italian Personal Data Protection Authority), that is, with the agency that performs its duties and exercises its rights within the member country where the GDPR violation occurred.
Any updates to this information shall be communicated in a timely manner and through suitable means, and will be notified to you if the Data Controller processes your data for purposes other than those outlined in this notice prior to proceeding and after you have given your consent, if necessary.