Privacy Policy and Personal Data Protection Notice

This notice is provided, in compliance with articles 13 and 14 of EU Regulation 679/2016 (hereinafter the "Regulation"), to the users (hereinafter: "Users" or "User") of the desktop version of the Ducati Case.it website (hereinafter: the "Site"), owned by DucatiCase.it, Data Controller of personal data (hereinafter: the "Controller"), and is intended to describe how the Site is managed with reference to the processing of personal data, as well as to allow Users of the Site to understand the purposes and methods of processing of personal data by the Controller in the event that they provide such data.

The services offered by the Controller are aimed at persons over 18 years of age. Should the Controller become aware of the processing of data of minors under 18 years of age without valid consent from parents or a legal guardian, it reserves the right to unilaterally discontinue the use of the service offered as well as to delete the data acquired.

Principles applicable to the Processing of Personal Data

The Controller, pursuant to and for the purposes of the Regulation, makes it known that the aforementioned legislation provides for the protection of natural persons with regard to the processing of personal data, and that such processing will be based on the principles of fairness, lawfulness, transparency and protection of confidentiality and fundamental rights.

Types of Users

In relation to the use of the Site, Users may access certain services (e.g. property search) anonymously.

Purposes, legal basis of the Processing and Optional nature of the Provision of Data

The personal data provided by Users through the use of the Site will be processed with their consent, for the purposes described below.

This page describes how the site is managed with reference to the processing of the personal data of the users who consult it. Processing is always based on the principles of lawfulness and fairness in compliance with all current regulations.

This privacy policy is also provided as a Notice pursuant to art. 13 of Legislative Decree 196/03 (the Italian legislation on the processing of personal data in compliance with directive 95-46-EC) and in compliance with articles 13 and 14 of EU Regulation 679/2016 to those who interact with the web services of this site, for the purpose of the protection of personal data, accessible electronically from the address www.ducaticase.it corresponding to the home page of the official website of Ducati Case Srl. The Notice is provided only for the site mentioned above and not for other websites that may be consulted by the user via links. They are autonomous Data Controllers and therefore reference is made to the sites in question.

The Notice is also inspired by Recommendation no. 2/2001 which the European data protection authorities, gathered in the Group established by art. 29 of directive no. 95/46/EC, adopted on 17 May 2001 to identify certain minimum requirements for the online collection of personal data and, in particular, the methods, timing and nature of the information that Data Controllers must provide to users when they connect to web pages, regardless of the purposes of the connection.

The processing of the data freely provided by you will be carried out in compliance with the regulations in force. In particular, the processing will be based on the principles of fairness, lawfulness and transparency, relevance, completeness and non-excessiveness. The data will be collected and recorded for the purposes referred to in the following point and kept for a period strictly necessary for the purposes.

Types of data processed, methods of processing, purposes of processing, whether optional or not.

Navigation data

The computer systems and software procedures used to operate this website acquire, during their normal operation, certain personal data whose transmission is implicit in the use of Internet communication protocols.

This information is not collected in order to be associated with identified data subjects, but by its very nature could, through processing and association with data held by third parties, allow users to be identified.

This category of data includes the IP addresses or domain names of the computers used by users who connect to the site, the addresses in URI (Uniform Resource Identifier) notation of the requested resources, the time of the request, the method used in submitting the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response given by the server (successful, error, etc.) and other parameters relating to the operating system and IT environment of the user.

This data is used only for the purpose of obtaining anonymous statistical information on the use of the site and to check its correct functioning, and is deleted immediately after processing. The data could be used to ascertain liability in the event of hypothetical computer crimes against the site.

Data provided voluntarily by the user

The optional, explicit and voluntary sending of e-mail to the addresses indicated on this site entails the subsequent acquisition of the sender's address and of the personal data necessary to respond to the requests and/or provide the services requested, as well as of any other personal data included in the message (and its attachments) or in the relevant forms.

The e-mails received are stored indefinitely on a server protected by appropriate security measures. The data subject may exercise all the rights provided for by art. 7 of Legislative Decree 196/2003 and in compliance with articles 13 and 14 of EU Regulation 679/2016, in particular they may know which of their data are present in the archive and obtain their deletion, by writing to the Data Processor at the e-mail address privacy@ducaticase.it.

The data will therefore be processed by computer and electronic means, in order to respond to requests and/or provide the requested service. The provision of data is always optional and failure to provide it only entails the impossibility of following up on requests.

Your data may be communicated by us (with this term meaning making it known to one or more specific parties) to parties who may access the data by virtue of a provision of law, regulation or Community legislation, within the limits set by such rules, as well as to parties who need to access your data for purposes ancillary to the relationship between you and us, within the limits strictly necessary to carry out the ancillary tasks.

Cookies

No personal data of users is acquired by the site. Cookies are not used for the transmission of personal information, nor are so-called persistent cookies of any kind used, i.e. systems for tracking users.

The use of so-called session cookies (which are not stored persistently on the user's computer and disappear when the browser is closed) is strictly limited to the transmission of session identifiers (consisting of random numbers generated by the server) necessary to allow safe and efficient exploration of the site.

The so-called session cookies used on this site avoid the use of other IT techniques that are potentially prejudicial to the confidentiality of users' browsing and do not allow the acquisition of the user's personal identification data.

Place of data processing and scope of communication or dissemination

The data connected to the web services of this site are processed by the Provider, within the limits strictly indispensable to provide the hosting service, and at the premises of our organisation only by technical staff in charge of processing, or by any persons in charge of occasional maintenance operations. No data deriving from the web service is communicated or disseminated. The personal data provided voluntarily by users via email or by filling in specific forms are used only for the purpose of performing the requested service and are communicated to third parties only where this is necessary for that purpose.

In order to provide certain services such as, for example, receiving information on new listings or forwarding documentation, it is necessary for the User to provide them directly by e-mail or by telephone. The necessary data are limited to the provision of:

• Name
• Surname
• Email Address
• Telephone number

Methods of Processing and Storage of Personal Data

The Controller ensures that personal data are processed in full compliance with the Regulation, by means of manual, computer or electronic systems. Processing may also be carried out through automated tools designed to store, manage and transmit the data.

The data collected and processed will be protected by physical and logical methods such as to minimise the risks of unauthorised access, dissemination, loss and destruction of the data, pursuant to articles 25 and 32 of the Regulation.

The processing of the data will last no longer than necessary to satisfy the purposes for which they were collected, such as the storage of search criteria, notification, the publication of listings and contact with professional operators.

Pursuant to art. 7 paragraph 3 of the Regulation, the data subject has the right to obtain the withdrawal of consent to processing at any time.

Should the Controller not receive a request for deletion, the personal data will be kept for a term not exceeding 10 (ten) years, starting from the date of the User's last access to the Site.

Recipients of Personal Data

The personal data collected may be processed by parties or categories of parties who act as Data Processors pursuant to art. 28 of the Regulation or who are authorised to process the data pursuant to art. 29 of the Regulation.

Furthermore, for certain services, the data may be communicated to companies that collaborate with or use the services of the Controller (for example, the individual proposers for information on properties; banks or credit intermediaries for the provision of mortgages and loans and other financial services connected to the purchase and sale of a property), with the sole intention of providing the services requested by the User. In these cases the companies are autonomous controllers, therefore the Controller is not responsible for the processing of data by them. The Controller is furthermore not responsible for the content and compliance with data protection legislation of sites not managed by the Controller.

Outside the above cases, personal data will not be communicated except to parties, bodies and Authorities to whom communication is mandatory by virtue of provisions of law or regulation.

Transfer of Data to a Third Country or an International Organisation

The personal data collected may be transferred outside the national territory, solely and exclusively for the execution of the requested services and in compliance with the specific provisions set out in the Regulation.

Some personal data may be shared with recipients located outside the European Economic Area. The Controller ensures that the processing of personal data by these recipients takes place in compliance with the Regulation.

Rights of the Data Subject

Pursuant to articles 15 to 22 of the Regulation, the User, as data subject, has the right to exercise specific rights relating to their Personal Data. In particular, the Data Subject has the right to obtain:

• confirmation as to whether or not personal data concerning them exists, even if not yet recorded, in a concise, transparent, intelligible and easily accessible form, using clear and plain language;
• the indication of:
  • a. the origin of the personal data;
  • b. the purposes and methods of processing;
  • c. the legitimate interests pursued by the Controller or by third parties;
  • d. the recipients or categories of recipients of the personal data;
  • e. the Controller's possible intention to transfer personal data to a third country or an international organisation;
  • f. the retention period of the personal data;
  • g. the logic applied, as well as the significance and the envisaged consequences of such processing for the data subject, in the case of processing carried out with the aid of electronic instruments within an automated process of collection and/or profiling;
  • h. the identifying details of the Controller, of the Processors, of any designated Representative and of the Data Protection Officer (so-called DPO);
  • i. the parties and categories of parties to whom the personal data may be communicated or who may become aware of it as a designated representative in the territory of the State, as processors or persons in charge;
• the possibility of lodging a complaint with a supervisory Authority;
• the updating, rectification or, where there is an interest, the integration of the data;
• the erasure, transformation into anonymous form or blocking of data processed in violation of the law, including data whose retention is not necessary in relation to the purposes for which the data were collected or subsequently processed;
• the restriction of processing;
• the portability of the personal data concerning them to another Data Controller;
• the withdrawal of the processing;
• the attestation that the operations referred to in letters a) and b) have been brought to the attention, also as regards their content, of those to whom the data have been communicated or disseminated, except in the case where this fulfilment proves impossible or involves a use of means manifestly disproportionate to the protected right;
• the objection, in whole or in part, on legitimate grounds, to the processing of personal data concerning them, even if relevant to the purpose of the collection.

Data Controller and Data Protection Officer

To exercise the rights referred to in the previous point, the data subject may contact the Controller and/or the Data Protection Officer at any time for any communications regarding the processing of their Personal Data, or to know the updated list of any Data Processors appointed by the Company, by sending a communication to the contacts set out below:

The Data Controller

The Data Protection Officer (so-called DPO)

Amendments

This notice may be subject to amendments. Should substantial changes be made to the use of the User's data by Ducati Case srl, the latter will notify the User by publishing them with the utmost prominence on its own pages.