Information on Privacy

The personal data provided by the data subject ("Data") shall be processed for the following purposes: 
a) to allow YOOX NET-A-PORTER S.p.A., company with sole shareholder subject to direction and coordination of Compagnie Financière Richemont S.A., to manage the services offered by the website, to fulfil orders placed, and to complete the activities related thereto, including the operations pertaining to administrative and fiscal requirements, to respond to requests via the contact form, as well as to manage any product returns;
b) to allow Ferrari S.p.A.'s registration process to occur on the website;
c) upon consent of the data subject, to send commercial and/or promotional communications on products and services of Ferrari S.p.A., as well as to perform market research ("Marketing");
d) upon consent of the interested party, analyse shopping behaviours, habits, and preferences, in order to improve the products and services provided by Ferrari S.p.A. as well as meet the specific demands of customers ("Profiling"). 
e) upon consent of the data subject, to allow Ferrari S.p.A. to disclose the Data to the subsidiaries that are directly and indirectly controlled by Ferrari N.V. and/or affiliated with Ferrari S.p.A. ("Companies of the Ferrari Group"), that may process customer data to send commercial and/or promotional communications for products and services of the aforementioned companies, as well as to conduct market research ("Ferrari Group Marketing").

f) upon express consent from the data subject, use certain categories of Data such as name, date of birth, gender (male or female), language used to navigate the site and the version of the website store.ferrari.com (“Site”) used (country), information about the device and browser used by the data subject, time and date on which consent to receive web push notifications was given, My Account date of creation, and the date of last visit to the Site in order to send personalised notifications about products and other commercial news regarding the Scuderia Ferrari Online Store to the data subject’s device (“Web Push Notifications”).   Data may be processed for each of the above purposes using paper, automated, or electronic methods and, in particular, by ordinary mail or email, telephone (e.g. automated calls, SMS, MMS), fax, or any other IT channel (e.g. websites, mobile app).
In order to send you these notifications, we use a technology similar to cookies (in particular, “HTML5 Local Storage”) which keeps information in the Local Storage of your browser/device.
Data may be processed for each of the above purposes using paper, automated, or electronic methods and, in particular, by ordinary mail or email, telephone (e.g. automated calls, SMS, MMS), fax, or any other IT channel (e.g. websites, mobile app). 
The personalisation of the notifications will be based on: the way you navigate and use the Site and, particularly, the products you view, buy or add to your cart; data that you use to complete the registration form for the Site; data inserted during your purchase (specifically: your name so we can personalise any communication we send to you as well as your date of birth so we can send you offers and discounts in celebration of your birthday).

It is optional to provide Data. However, if you do not provide Data that has been marked as mandatory, it will be impossible to provide the services noted in point a). 
Should you not provide the remaining, optional Data, the services indicated in point a) will nevertheless be able to be provided.

The Data may be processed by parties working on behalf of the Controllers specified below, and by virtue of specific contractual requirements, in countries within or outside of the EU.

Data may be disclosed to third parties to fulfill legal obligations, to comply with orders from public authorities, or to exercise a right of the Controllers in court.

Within the context of the contractual relations of the Controllers, Data may be transferred outside the European Economic Area (EEA), including through integration in databases managed by third party companies working on behalf of the Controllers.   Management of databases and data processing are linked to the purposes for which the data was collected and is carried out with the utmost respect for the applicable law and personal data protection.  
 
Each time that Data must be transferred outside the EEA, the Controllers shall adopt every contractual measure that is useful and necessary to ensure an adequate level of protection of the Data, including, among other things, the agreements based on the standard contractual clauses regarding transfer of data outside the EEA, approved  by the European Commission.   

The Controller for the purposes indicated in point a) is YOOX NET-A-PORTER, with registered office at via Morimondo, 17 – Milano 20143.

The data subject may contact the Data Protection Officer of YOOX NET-A-PORTER at DPO@ynap.com.

The Controller for the purposes indicated in points b), c), d) is Ferrari S.p.A., with registered office at Via Emilia Est 1163-41122 Modena. 

 
The data subject may contact the Data Protection Officer of Ferrari S.p.A. at privacy2@ferrari.com. 

The Data processed for the purposes indicated in point a) shall be kept for the period that is deemed strictly necessary to achieve such purposes.
However, such Data may be kept for a longer period of time, in order to be able to manage any legal disputes related to the purposes indicated in point a).
The Data processed for Marketing and Profiling purposes shall be kept for 10 years from the time it was provided for Marketing and/or Profiling and/or Ferrari Group Marketing purposes, unless consent is revoked. If consent is revoked, your personal data may not be processed for the aforementioned purposes, but may still be kept to manage any objections and/or disputes.
The data used to manage Web Push Notifications will be retained up to the point in which consent is revoked by the data subject or up to 365 days from the last visit made to the Site by the data subject.

The data subject is acknowledged as having the following rights:
1. right of access, i.e. the right to obtain from the Controllers confirmation of whether or not Data is being processed and, if it is, to obtain access thereto;
2. right to have data corrected or deleted, i.e. the right to obtain a correction of inaccurate Data and/or to have incomplete Data supplemented, or to have Data deleted for legitimate reasons;
3. right to limit processing, i.e. the right to request that processing be suspended whenever there are legitimate reasons for doing so;
4. right to data portability, i.e. the right to receive the Data in a structured, commonly used, and readable format, as well as the right to transfer Data to another controller;
5. right to object, i.e. the right to oppose the processing of Data whenever there are legitimate reasons, including the processing of Data for marketing and profiling purposes, where provided;
6. right to address the competent data protection authority in the event that Data is unlawfully processed.

In order to exercise these rights, the data subject may make a written request: for the purposes indicated in point a) to YOOX NET-A-PORTER, with registered office at via Morimondo, 17 – Milan 20143, to the attention of Customer Care, selecting "Privacy"" as the reason; for the purposes indicated in points b), c), d), e) and f) to Ferrari S.p.A., via Abetone Inferiore 4, 41053 Maranello (MO), Italy, or by email to privacy2@ferrari.com.