Privacy Policy
Pursuant to Articles 13 and 14 of Regulation (EU) 2016/679
Pursuant to Articles 13 and 14 of Regulation (EU) 2016/679 (the “Regulation”), Riding Safari Club, hereafter, provides its customers, including potential ones, as well as third parties in general (e.g. proxies, legal representatives, etc.) who come into contact with the same on behalf of or on behalf of customers, including potential ones (the “Data Subjects”), with the information required by the Regulation regarding the processing of their personal data (“Personal Data”).
1. Data Controller and Data Protection Officer
Riding Safari Club (VAT Number GB397033772), with registered office in Milan, Via Pietro Mascagni 24, in the person of its legal representative pro tempore, is the entity that processes the data of the Data Subjects and, for the purposes of the Law, is considered the Data Controller of the Personal Data. In this capacity, it is responsible for ensuring the application of appropriate organisational and technical measures for the protection of data in compliance with the provisions of the regulations in force.
Riding Safari Club has appointed a Data Protection Officer (DPO), in charge of guaranteeing the respect of the regulations for the protection of Privacy who can be contacted, for matters concerning the processing of Personal Data, at the following address: info@ridingsafariclub.com
2. Methods of Personal Data Collection
The Personal Data subject to processing activities by the Controller may be acquired from the Data Subject, including through the remote communication techniques used by the Controller (e.g. websites, apps for smartphones and tablets, call centres, etc.).
3. Categories of Personal Data Processed
The Personal Data processed by the Data Controller include, by way of example:
- Browsing data (e.g. IP addresses or domain names of the computers used by users who connect to the site, the time of the request, the method used to submit the request to the server, the numerical code indicating the status of the response given by the server and other parameters relating to the operating system and browser used by the user, logs)
- Personal data (e.g. first name, surname, tax code, address, date and place of birth, nationality)
- Contact data (e.g. telephone numbers, landline and/or mobile, email address)
- Profiling and marketing data (e.g. interests and passions)
- Other data belonging to the above categories
4. Purpose and Legal Basis of the Processing
Registration to the website and management of requests
The processing of the data subject’s personal data is carried out in order to carry out the activities preliminary and consequent to the request for registration to the website, if any, as well as for the management of requests for information and contact and/or the sending of informative material, and for the fulfilment of any other obligation deriving therefrom.
The legal basis for such processing is the fulfilment of the services inherent in the request for registration, information and contact and/or the sending of informative material and the fulfilment of legal obligations.
The provision of the data is optional, however, any refusal by the interested party to provide the data shall make it impossible for the Controller to carry out the service requested.
Execution of the contract
Personal Data will be processed for the management of the contractual relationship (by way of example, for the invoicing of fees, for the management of payments or complaints that you may forward to us) and for the provision of the requested services usable through the website.
The legal basis for such processing is the fulfilment of services inherent to the contractual relationship and compliance with legal obligations.
Fulfilment of legal obligations, defending a right and fraud prevention
Personal Data shall be processed for the fulfilment of legal obligations, as well as to ascertain, exercise or defend a right of the Data Controller and/or defend against the claims of others, in or out of court. In particular, the Data Controller may process Personal Data for the fulfilment of accounting and tax obligations and for the fulfilment of judicial authority orders aimed at preventing and repressing crimes.
The legal basis of such processing is the pursuit of the legitimate interest of the Controller, taking into account the balancing of the rights of the latter and of the Data Subject.
Promotional activities on similar Services/Products
The processing of the Data Subject’s personal data is carried out for the purpose of sending communications relating to promotions and offers of the Controller’s Services/Products that are identical and/or similar to those covered by the current contract with the Data Subject, unless the same has objected to such processing initially or on the occasion of subsequent communications.
The Data Subject has the right to object at any time, on grounds relating to his/her personal situation, to the processing of personal data concerning him/her for the purposes in question.
Promotional activities on Services/Products offered by Riding Safari Club
The data subject’s personal data is processed for the purpose of sending, subject to specific consent, notices of promotions and offers of the Owner’s Services/Products by means of traditional methods (e.g. ordinary mail, telephone calls with operator) and/or automated methods (e.g. e-mail, SMS, MMS, fax, pre-recorded telephone calls).
The legal basis for such processing is the consent given by the Data Subject prior to the processing itself, which may be revoked freely at any time, without prejudice to the lawfulness of the processing previously carried out.
Marketing purposes related to partner products/services
The processing of the personal data of the interested party is carried out in order to send, upon specific consent, communications of promotions and offers of Services/Products of Riding Safari Club’s commercial partners through traditional means (e.g. ordinary mail, telephone calls with operator) and/or automated means (e.g. e-mail, SMS, MMS, pre-recorded telephone calls).
The legal basis of such processing is the consent given by the interested party prior to the processing itself, which can be revoked freely at any time, without affecting the lawfulness of the processing previously carried out.
Profiling
The processing of the Personal Data, including location data, socio-demographic data acquired during the provision of electronic communication services and from public sources, of the Interested Party is carried out, subject to specific consent, for profiling purposes such as the analysis of transmitted data and purchased Services/Products in order to propose advertising messages and/or commercial proposals in line with the choices expressed by the users themselves.
In any case, Personal Data will not be subject to decisions based solely on automated processing, including profiling, that produce legal effects or that affect the data subject in a similar significant way.
The legal basis of such processing is the consent given by the Data Subject prior to the processing itself, which may be freely revoked at any time, without prejudice to the lawfulness of the processing previously carried out.
5. Recipients of Personal Data
The Personal Data collected may be communicated to subjects who will act as autonomous Data Controllers or Data Processors, as the case may be, for the purposes set out above, in fulfilment of legal obligations, regulations and/or deriving from EU legislation or because they have a legitimate interest.
In particular, Personal Data may be made available to:
- Subjects in charge of the execution of activities connected and instrumental to the processing (filing service companies, IT service companies, social media management service companies, marketing companies, insurance companies, banking institutions)
- Commercial partners of Riding Safari Club
- Public administrations, authorities and other entities in fulfilment of legal obligations
Personal Data will not be disseminated (made available to unspecified parties).
6. Data Transfer to Third Countries
The Personal Data of the Data Subject are stored in archives located in countries of the European Union. If necessary for the pursuit of the stated purposes, the Data Subject’s Data may be transferred abroad, to countries/organisations outside the European Union that guarantee a level of protection of personal data deemed adequate by the European Commission by its own decision, or on the basis of other appropriate safeguards, such as the Standard Contractual Clauses adopted by the European Commission or the consent of the Data Subject. The Data Subject has the right to obtain a copy of any Data transferred abroad, as well as the list of countries/organisations to which the data has been transferred, by writing to info@ridingsafariclub.com.
7. Personal Data Retention Period
The Data shall be kept in a form that enables the identification of the Data Subject for a period of time not exceeding that necessary to achieve the purposes for which it was collected, taking into account the laws applicable to the activities and sectors in which the Data Controller operates. Once the terms thus established have elapsed, the Data will be deleted or transformed into anonymous form, unless their further storage is necessary to fulfil obligations (e.g. tax and accounting) that remain even after the termination of the contract (art. 2220 c.c.) or to comply with orders issued by Public Authorities and/or Supervisory Bodies.
In the event of litigation, the storage period indicated above may be extended up to 10 years from the settlement of the same.
8. Method of Processing
Processing will be carried out by authorised personnel who need to have knowledge of the data in the performance of their activities, with the aid of electronic instruments, in accordance with principles of lawfulness and correctness, so as to protect the confidentiality and rights of the data subject at all times, in compliance with the provisions of current legislation.
Marketing-related profiling (analysis of consumer habits and choices) is carried out by means of an automated process for the purpose of studying and analysing behavioural profiles and aspects characterising the customer base in order to optimise promotional activities for products and services.
9. Rights of the Data Subject
The Data Subject has the right to request from the Data Controller:
- Confirmation as to whether or not his or her Personal Data is being processed and, if so, to obtain access to it (right of access)
- The rectification of inaccurate Personal Data or the integration of incomplete Personal Data (right of rectification)
- The deletion of Personal Data if one of the reasons provided for in the Privacy Regulation applies (right to be forgotten)
- The limitation of the processing of Personal Data when one of the cases provided for by the Privacy Regulation occurs (right of restriction)
- To receive in a structured, commonly used and machine-readable format the Personal Data to be provided to the Controller and to transmit such data to another Controller (right to portability)
- To object at any time in whole or in part to the processing carried out in pursuit of a legitimate interest of the Controller and for marketing and profiling purposes (right to object)
- To revoke any consent to the processing of Personal Data, at any time, without prejudice to the lawfulness of the processing based on the consent given before revocation
Consent given for the performance of marketing activities by automated contact methods (e.g. sms, mms, fax, phone, e-mail, web applications) also extends to traditional contact methods (paper mail or telephone call with operator). Similarly, the objection to the conduct of marketing activities with automated contact methods also extends to traditional contact methods. This is without prejudice to your right to provide consent or to exercise your right to object to only one of the two ways of performing marketing activities.
In order to exercise his/her rights, the Data Subject may send a message to the e-mail address info@ridingsafariclub.com or a written communication to the Data Controller at the registered office of Riding Safari Club.
The Interested Party also has the right to lodge a complaint with the competent supervisory authority on Italian territory (Autorità Garante per la protezione dei dati personali) or with the authority that carries out its duties and exercises its powers in the Member State where the violation occurred, as provided for by Art. 77 of the Regulation, as well as to take legal action in accordance with Articles 78 and 79 of the Regulation.
10. Cookies
With regard to the use of Cookies, see the specific Cookie Policy.