Information for the processing of
personal data
Pursuant to Article 13 of EU Regulation 2016/679 (hereinafter “G.D.P.R.”)
DR Automobiles S.r.l. wishes to inform the interested party about the processing of personal data transmitted to the Company, as defined below, by filling in the following appropriate forms on the website of the Company auto-evo.eu: send us a message, become a dealer, request a test drive, book an appointment in the showroom, request a quotation.
Personal data are processed, in compliance with the principles of protection of personal data established by the G.D.P.R. and national legislation, using paper, computer and telematic tools, with logics strictly related to the purposes indicated here, in order to guarantee the security and confidentiality of the same data, in compliance with the principles established by the G.D.P.R..
1. Identity and contact details of the Data Controller
The Data Controller is DR Automobiles S.r.l. (the “Company” or the “Owner“), with registered office in Macchia d’Isernia (IS), Zona Industriale di Macchia d’Isernia, in person of the legal representative.
The interested party can contact the Data Controller by registered mail A/R to be sent to the aforementioned registered office or by e-mail to the e-mail address: privacy@drautomobiles.it
2. Data protection officer
The Data Protection Officer is the Eng. Carmine De Donato, available through the following contact channels:
telephone: 0865 4793
email: dpo@drautomobiles.it
address: DR Automobiles S.r.l., Zona Industriale di Macchia d’Isernia s.n.c., 86070 Macchia d’Isernia (IS).
3. Categories of Data Subjects. Categories of personal data processed. Source of personal data
Interested parties are those who fill in the above-mentioned forms on the website www.auto-evo.com.
The personal data processed are the following: name, surname, email, telephone contacts, postal code, license plate data.
Personal data are collected through direct contribution of the interested party.
4. Purpose and lawfulness of processing. Legal basis. Nature of submission
The personal data collected are processed by the Data Controller pursuant to art. 6 of the G.D.P.R..
The purpose of the processing is to provide the Data Subject with the requested service, whose legal basis is the legitimate interest of the Data Controller and/or third parties[1] .
The provision of personal data is necessary for processing for the legitimate interest of the Data Controller or third parties.
5. Categories of recipients of personal data
Personal data may be disclosed to dealers, to authorized workshops, to parent companies and/or subsidiaries and/or under common control.
The personal data will also be known by the company the Data Controller uses to manage the hosting services of the Company’s website.
All the aforementioned subjects are used as “Data Processors”, pursuant to art. 28 of the G.D.P.R., or as autonomous “Data Controller”.
Personal data are also processed by subjects authorized by the Data Controller.
The personal data processed are not disseminated.
6. Transfers outside the EU
The management and storage of personal data will be carried out on servers located within the European Union of the Controller and/ or third party companies in charge of and duly appointed as Data Processors. The data will not be transferred outside the European Union. It is understood that the Data Controller, if necessary, will be able to move the location of the servers to other countries in the European Union and/ or non-EU countries. In this case, the Data Controller ensures that the transfer of the extra-EU data will be carried out in accordance with the applicable legal provisions by stipulating, if necessary, agreements that guarantee an adequate level of protection and/or adopting the standard contractual clauses provided by the European Commission and in any case after sending new information to the Data Subject.
7. Retention period of personal data
The personal data processed are stored at the registered office of the Data Controller. They will be processed for the period of time necessary for the purposes for which they were collected or subsequently processed and for a maximum of twenty-four months following the acquisition. At the end, these personal data will be deleted.
8. Automated decision-making process
For the pursuit of the purposes of processing described above, no decision is taken based solely on automated processing that produces legal effects that affect the Data Subject or that have a similar significant impact on his person.
9. Rights of the data subject
Pursuant to the G.D.P.R. the interested party can exercise the following rights according to the modalities and terms provided there in:
a) the right to obtain from the Data Controller confirmation that personal data concerning the data subject are being processed or not and, in this case, to obtain access to personal data and information provided by art. 15 and in particular those relating to the purposes of the processing, the categories of personal data in question, the recipients or categories of recipients to whom the personal data have been or will be communicated, the retention period, etc.;
b) the right to obtain, where incorrect, the rectification of the personal data concerning the data subject, as well as the integration of the same where deemed incomplete always in relation to the purposes of the processing (art. 16);
c) the right to deletion of data (“right to oblivion”), where one of the circumstances referred to in art. 17 applies;
d) the right to restriction of processing, in the cases provided for by art. 18;
e) right of data portability pursuant to art. 20;
f) right to object to processing pursuant to art. 21.
These rights may be exercised by a request sent by registered letter A/R to the Data Controller at the registered office or by e-mail to the following e-mail address: privacy@drautomobiles.it
The data subject also has the right to lodge a complaint with the Data Protection Authority or other supervisory Authority pursuant to art. 13, par. 2, letter d) of the G.D.P.R..
10. Amendments to this Policy
The Data Controller reserves the right to modify and update this information over time.
[1] Interest of the Owner to promote the brand, the related products and to maintain and develop user satisfaction.