Salvatore Ferragamo S.p.A. (hereinafter referred to as “Salvatore Ferragamo”), as Data Controller, hereby informs you, pursuant to articles 12-14 of General Data Protection Regulation (UE) 2016/679 (hereinafter “GDPR”), national law and any order of the Supervisory Authority, if applicable, that the Personal Data that you have provided to Salvatore Ferragamo in order to book a visit to the Museum Salvatore Ferragamo (the “Museum”), consisting of your identification and contact details and (where applicable) age and profession, will be Processed in compliance with the applicable law on the protection of Personal Data and in accordance with the purposes and modalities described hereunder.
Definitions. “Personal Data” means any information directly or indirectly attributable to a natural person (the “Data Subject”), while the concept of “Processing” includes any operation or set of operations carried out on Personal Data, with or without the use of automated means, including, collection, use, transfer, erasure, etc.
Purpose of Processing, Legal Basis and Nature of Data.
Your Personal Data may be Processed in order to provide you with the requested service, for example when you intend to obtain a free ticket to the Museum in accordance with the requirements of the applicable regulations and Salvatore Ferragamo needs to verify your age or profession, or where you decide to attend a virtual tour of the Museum ("Service"). The legal basis for this processing is set forth in art. 6.1, letter b) of GDPR (performance of a contract to which the data subject is a party). For this purpose, the provision of your Personal Data is not mandatory, but Salvatore Ferragamo will not be able to provide the Service you requested without your Personal Data.
Your Personal Data may be Processed for aggregate statistical analysis ("Aggregate Statistics"), for example, to evaluate the purchase of more audio guides in a specific language if Salvatore Ferragamo finds a certain number of visitors of a certain nationality or, again, to evaluate making more chairs available within the Museum if Salvatore Ferragamo finds a higher number of elderly visitors etc. The legal basis for this processing is the legitimate interest of Salvatore Ferragamo to improve the services requested and provided to you, as set forth in art. 6.1., letter f) of the GDPR (the processing is necessary for the legitimate interest of the data controller). You may always object to this processing activity based on your particular situation, by writing to email@example.com.
Processing Means. Your Personal Data will be Processed with automated and manual systems in accordance with the principles of correctness, lawfulness and transparency provided by the applicable law on the protection of personal data. Your privacy and rights will be protected through appropriate technical and organizational measures that ensure a level of security appropriate to the risk.
Data Retention. Your Personal Data will be stored for ten years for Service purposes, in order for Salvatore Ferragamo to be able to defend itself against possible legal claims in accordance with the statute of limitation set forth in the Italian Civil Code. Your Personal Data will be retained until you withdraw your consent for Marketing purpose.
Disclosure, Dissemination and Transfer of Data. Your Personal Data will not be disseminated and will not be transferred outside the European Economic Area.
Your data may be shared with specific categories of recipients, such as (i) other companies of the Salvatore Ferragamo Group; (ii) Third party companies that Process data on behalf of the Museum, and who have been appointed as data Processors pursuant to article 28 of the GDPR and accordingly subject to specific confidentiality and security standards; (iii) persons who are authorized to access the data pursuant to applicable laws or community regulations, within the limits set forth by such laws and regulations.
Your Rights. Where the relevant conditions apply, as regards the Processing of your Personal Data, you may exercise the rights set forth by the GDPR (articles 15-21). In particular, you have the right to: (i) receive confirmation of the existence of your Personal Data and access to their content (right of access); (ii) update, modify and/or rectify your Personal Data (right to rectification); (iii) request the erasure or restrict the Processing of any data Processed in breach of the law including any data that it is not necessary to retain for the purposes of which such data were collected or otherwise Processed (right to erasure and right to restriction ); (iv) receive a copy of your data processed to provide the Service in electronic format and request that such data be transmitted to another data controller (right to data portability); (v) object to the processing for Aggregate Statistics based on your particular situation (vi) complain to the Supervisory Authority in case of breach of the regulations on the protection of personal data.
Data controller and DPO. The Data Controller is Salvatore Ferragamo S.p.A. with registered offices at via Tornabuoni 2, 50123 Florence represented by its pro tempore Legal Representative. You may write to the Data Protection Officer (DPO) on firstname.lastname@example.org.