Information for the processing of personal data
Pursuant to Article 13 of EU Regulation 2016/679 (hereinafter “G.D.P.R.”)
DR Automobiles S.r.l. wishes to inform the interested party about the processing of personal data transmitted to the Company, as defined below, by filling in the following appropriate forms on the website of the Company www.auto-evo.com/en: send us a message, become a dealer, request a test drive, book an appointment in the showroom, request a quotation.
Personal data are processed, in compliance with the principles of protection of personal data established by the G.D.P.R. and national legislation, using paper, computer and telematic tools, with logics strictly related to the purposes indicated here, in order to guarantee the security and confidentiality of the same data, in compliance with the principles established by the G.D.P.R..
- Identity and contact details of the Data Controller
The Data Controller is DR Automobiles S.r.l. (the “Company” or the “Owner“), with registered office in Macchia d’Isernia (IS), Industrial Zone of Macchia d’Isernia, in person of the legal representative.
The interested party can contact the Data Controller by registered mail A/R to be sent to the aforementioned registered office or by e-mail to the e-mail address: privacy@drautomobiles.it.
- Categories of Data Subjects. Categories of personal data processed. Source of personal data
Interested parties are those who fill in the above mentioned forms on the website www.auto-evo.com/en.
The personal data processed are the following: name, surname, email, telephone contacts, postal code.
Personal data are collected through direct contribution of the interested party.
- Purpose and lawfulness of processing. Legal basis. Nature of submission and consequences of refusal
The personal data collected are processed by the Data Controller pursuant to art. 6 of the G.D.P.R..
The purpose of the processing is to provide the Data Subject with the requested service, whose legal basis is the legitimate interest of the Data Controller and/or third parties[1].
The provision of personal data is necessary for processing for the legitimate interest of the Data Controller or third parties.
- Categories of recipients of personal data
Personal data may be disclosed to dealers, to authorized workshops, to parent companies and/or subsidiaries and/or under common control.
The personal data will also be known by the company the Data Controller uses to manage the hosting services of the Company’s website.
All the aforementioned subjects are used as “Data Processors”, pursuant to art. 28 of the G.D.P.R., or as autonomous “Data Controller”.
Personal data are also processed by subjects authorized by the Data Controller.
The personal data processed are not disseminated.
- Transfers outside the EU
Personal data are not transferred Extra EU.
- Retention period of personal data
The personal data processed are stored at the registered office of the Data Controller. They will be processed for the period of time necessary for the purposes for which they were collected or subsequently processed and for a maximum of twenty-four months following the acquisition. At the end, these personal data will be deleted.
- Automated decision-making process
For the pursuit of the purposes of processing described above, no decision is taken based solely on automated processing that produces legal effects that affect the Data Subject or that have a similar significant impact on his person.
- Rights of the data subject
Pursuant to the G.D.P.R. the interested party can exercise the following rights according to the modalities and terms provided therein:
- the right to obtain from the Data Controller confirmation that personal data concerning the data subject are being processed or not and, in this case, to obtain access to personal data and information provided by art. 15 and in particular those relating to the purposes of the processing, the categories of personal data in question, the recipients or categories of recipients to whom the personal data have been or will be communicated, the retention period, etc.;
- the right to obtain, where incorrect, the rectification of the personal data concerning the data subject, as well as the integration of the same where deemed incomplete always in relation to the purposes of the processing (art. 16);
- the right to deletion of data (“right to oblivion”), where one of the circumstances referred to in art. 17 applies;
- the right to restriction of processing, in the cases provided for by art. 18;
- right of data portability pursuant to art. 20;
- right to object to processing pursuant to art. 21.
These rights may be exercised by a request sent by registered letter A/R to the Data Controller at the registered office or by e-mail to the following e-mail address: privacy@drautomobiles.it
The data subject also has the right to lodge a complaint with the Data Protection Authority or other supervisory Authority pursuant to art. 13, par. 2, letter d) of the G.D.P.R..
- Amendments to this Policy
The Data Controller reserves the right to modify and update this information over time.
[1] Interest of the Owner to promote the brand, the related products and to maintain and develop user satisfaction.