Information on Privacy

The personal data provided by the data subject ("Data") shall be processed for the following purposes: 
 
a) to allow YOOX NET-A-PORTER S.p.A., company with sole shareholder subject to direction and coordination of Compagnie Financière Richemont S.A., to manage the services offered by the website, to fulfill orders placed, and complete the activities related thereto, including the operations pertaining to administrative and fiscal requirements, to respond to requests via the contact form, as well as manage any product returns;
b) to allow Ferrari S.p.A.'s registration process to occur on the website;
c) upon consent of the data subject, to send commercial and/or promotional communications on products and services of Ferrari S.p.A., as well as perform market research ("Marketing");
d) upon consent of the interested party, analyze shopping behaviors, habits, and preferences, in order to improve the products and services provided by Ferrari S.p.A. as well as meet the specific demands of customers ("Profiling"). 
e) upon consent of the interested party, to allow Ferrari S.p.A. to disclose the Data to the subsidiaries that are directly and indirectly controlled by Ferrari N.V. and/or affiliated with Ferrari S.p.A.  ("Companies of the Ferrari Group"), which may process customer data to send commercial and/or promotional communications for products and services of the aforementioned companies, as well as to conduct market research ("Ferrari Group Marketing").

Data may be processed for each of the above purposes using paper, automated, or electronic methods and, in particular, by ordinary mail or email, telephone (e.g. automated calls, SMS, MMS), fax, or any other IT channel (e.g. websites, mobile app).

It is optional to provide Data.  However, if you do not provide Data that has been marked as mandatory, it will be impossible to provide the services noted in point a). 

 
Should you not provide the remaining, optional Data, the services indicated in point a) will nevertheless be able to be provided.

The Data may be processed by parties working on behalf of the Controllers specified below, and by virtue of specific contractual requirements, in countries within or outside of the EU.

Data may be disclosed to third parties to fulfill legal obligations, to comply with orders from public authorities, or to exercise a right of the Controllers in court.

Within the context of the contractual relations of the Controllers, Data may be transferred outside the European Economic Area (EEA), including through integration in databases managed by third party companies working on behalf of the Controllers.   Management of databases and data processing are linked to the purposes for which the data was collected and is carried out with the utmost respect for the applicable law and personal data protection.  
 
Each time that Data must be transferred outside the EEA, the Controllers shall adopt every contractual measure that is useful and necessary to ensure an adequate level of protection of the Data, including, among other things, the agreements based on the standard contractual clauses regarding transfer of data outside the EEA, approved  by the European Commission.   

The Controller for the purposes indicated in point a) is YOOX NET-A-PORTER, with registered office at via Morimondo, 17 – Milano 20143.

The data subject may contact the Data Protection Officer of YOOX NET-A-PORTER at DPO@ynap.com.

The Controller for the purposes indicated in points b), c), d) is Ferrari S.p.A., with registered office at Via Emilia Est 1163-41122 Modena. 

 
The data subject may contact the Data Protection Officer of Ferrari S.p.A. at privacy2@ferrari.com. 

The Data processed for the purposes indicated in point a) shall be kept for the period that is deemed strictly necessary to achieve such purposes. 
 
However, such Data may be kept for a longer period of time, in order to be able to manage any disputes related to the purposes indicated in point a).

The Data processed for Marketing and Profiling purposes shall be kept from the time that the data subject has provided their consent until such time that consent is revoked.  In the event that consent is revoked, the Data may no longer be processed for the aforementioned Marketing and Profiling purposes, but may still be kept for the purposes of managing any objections and/or disputes. 
 The time that the Data is retained for the Marketing and Profiling purposes prescribed is in conformity with the local rules, as well as with the measures of the Italian Personal Data Protection Authority.

The data subject is acknowledged as having the following rights:

1. right of access, i.e. the right to obtain from the Controllers confirmation of whether or not Data is being processed and, if it is, to obtain access thereto;
2. right to have data corrected or deleted, i.e. the right to obtain a correction of inaccurate Data and/or to have incomplete Data supplemented, or to have Data deleted for legitimate reasons;
3. right to limit processing, i.e. the right to request that processing be suspended whenever there are legitimate reasons for doing so;
4. right to data portability, i.e. the right to receive the Data in a structured, commonly used, and readable format, as well as the right to transfer Data to another controller;
5. right to object, i.e. the right to oppose the processing of Data whenever there are legitimate reasons, including the processing of Data for marketing and profiling purposes, where provided;
6. right to address the competent data protection authority in the event that Data is unlawfully processed.

In order to exercise these rights, the data subject may make a written request: for the purposes indicated in point a) to YOOX NET-A-PORTER, with registered office at via Morimondo, 17 – Milano 20143, to the attention of Customer Care, selecting "Privacy"" as the reason; for the purposes indicated in points b), c), d), and e) to Ferrari S.p.A., via Abetone Inferiore 4, 41053 Maranello (MO), Italy, or by email to privacy2@ferrari.com.