PRIVACY NOTICE FOR MEMBERS (***)

By completing this “Request for Admission” you are joining the territorial club “Scuderia Ferrari Club Orlando – United States”, (“Club”), which is a Scuderia Ferrari Club S.c.ar.l. (“Company”) partner, (the “Company”), and you will benefit from the privileges and services that come with membership.

You are invited to read the following privacy notice, which describes the processing of your personal information in compliance with Regulation (EU) 2016/679 (“GDPR”).

1. Purpose and procedure for the processing of personal data 

The personal data you have provided within the Request for Admission (“Data”) will be processed for the following purposes:

• a) to manage your registration to Company and to Club as well as to allow you to take part to events and activities organized by the Company and Club and to provide you with the services that are specially reserved to the members (“Service”); 
• b) to allow the Company and the Club to perform satisfaction surveys (“Customer Satisfaction”) related to the quality of Service;
• c) subject to your explicit consent, sending commercial communications as well as sending
• advertising on the Company services, or performing market researches (“Marketing”);
• d) subject to your explicit consent, analyzing your behaviors, habits and propensity to consume to enhance products and services provided by the Company as well as satisfy your expectations (“Profiling”);
• e) subject to your explicit consent, the Company will communicate Data to the companies controlled directly or indirectly by Ferrari N.V. and/or connected to Ferrari S.p.A. (“Ferrari Group Companies”) that will process them to send commercial communications as well as advertising on their products and services, or perform market researches (“Marketing Ferrari Group Companies”);
• f) at your request, allowing the Company to send newsletters of an informative / editorial nature regarding updates on the Company’s activities and press releases.

Ferrari does not process the personal data of minor members for the purposes referred to in points c), d), e), and f) above before the members reach the age of majority. These purposes will be pursued by Ferrari only after the members reach the age of majority and only with their express consent.

When you provide any personal data relating to another person (such as, for example, the members of your family unit in the event that you associate your membership also to your family members), you guarantee that you have informed such person of the collection and use of his / her Data by the Company and the Club, in accordance with this privacy notice, and to have explained to that person that his / her Data must be processed by the Company and by the Club for the purposes referred to in points a) and b) above. The Data may be processed in hardcopy, by automated or electronic means including via mail or e-mail, phone (e.g. automated phone calls, SMS), fax and any other mean (e.g. web sites, mobile apps).

2. Legal basis for Data processing

The legal basis of the Data processing for the purposes referred to:

• is Article 6 (1) (b) of the GDPR i.e. the execution of a contract of which the data subject is party;
• let. b) is art. 6 (1) (f) of the GDPR i.e. the legitimate interest of the Company;
• let. c), d), e), f) is art. 6 (1) (a) of the GDPR i.e. data subject’s consent.

3. Consequences of failure to provide your Data

Submitting the Data is never mandatory. However, not providing the Data will prevent the Company and the Club from providing the Service. Not providing the Data for the purposes sub b), c), d), e), f) will in any case allow you to benefiting from the Service.

4. Recipients of your Data

The Data may be processed by natural persons and/or legal entities, acting on behalf of the Companies and under specific contractual obligations, based in EU Member States or in countries outside the EU. The Data may be communicated to third parties to comply with legal obligations, to execute Public Authorities orders or to exercise a Companies right before judicial authorities.

For the purposes above, the Company and the Club may furthermore use the following categories of people and/or legal entities, that may also learn about the Data: controlling companies, controlled companies and/or holding companies; dealers or other importers; qualified persons who provide services or functional services to the Company and to the Club such as, for example, banks, insurance firms and companies, suppliers and sub-contractors; consultants who help the Company and the Club in several fields, especially in legal, tax, social security, accounting and organisational issues; any other person to whom the Data should be given in application of an express legal provision.

5. Data transfer outside of the European Economic Area

Within its contractual relations the Company and the Club may transfer the Data in countries outside of the European Economic Area (“EEA”), including store them in databases managed by entities acting on behalf of the Company and the Club. Databases management and Data processing are bound to the purposes of the processing and are carried out according to applicable data protection law. In case the Data are transferred outside of the EEA the Company and the Club will use any appropriate contractual measures to guarantee an adequate protection of the Data including – among the others – agreements based on the standard contractual clauses adopted by the EU Commission to rule the transfer of personal data outside of the EEA.

6. Data controller and data protection officer

The Data Controller for the purposes referred to in points a), b) and d) is the territorial club Scuderia Ferrari Club Orlando – United States with registered office in 2257 Antilles Club Dr, Kissimmee, Florida 34747, UNITED STATES

You can contact the Data Protection Officer of the territorial club Scuderia Ferrari Club Orlando – United States at tifosi@scuderiaferrari-orlando.club

The Data Controller for the purposes referred to in points a), b), c), e) and f) is Scuderia Ferrari Club S.c.ar.l., with registered office in via Abetone Inferiore 4, Maranello (MO) – 41053, Italy.

You can contact the Data Protection Officer of Ferrari Group at the email address privacy@ferrari.com.

7. Data retention

The Data processed to provide the Service and the Customer Satisfaction will be kept by the Company and the Club for the period deemed strictly necessary to fulfil such purposes.

Concerning the Data processed for the provision of the Service, the Company and the Club may continue to store this Data for a longer period, as may be necessary to protect Companies’ interests related to potential liability related to the provision of the Service and, in any case, for two years from the expiration date of membership in the Club for administrative reasons.

The Company and the Club will retain Data processed for Marketing purposes for two years whilst the Company will retain Data processed for Profiling activities for one year. Once consent is withdrawn, also before the expiry of Data retention period above indicated, Data will no longer be used for these purposes, although they might still be kept by the Company and by the Club to manage potential claims and/or lawsuits. Data retention for Marketing and Profiling purposes is compliant with the Italian law and with the decisions of the Data Protection Authority. The Company will retain the personal data used to send newsletters until the user requests to unsubscribe from the newsletter service.

8. Your rights

You can exercise the following rights:

1. Right to access means the right to obtain from the Company and/or the Club whether your Data are being processed and, where applicable, have access to them;
2. Right to rectification and right to erasure means the right to obtain from the Company and/or the Club the rectification of inaccurate and/or incomplete Data, as well as the erasure of Data when the request is legitimate;
3. Right to restriction of processing means the right to request the Company and/or the Club the suspension of the processing when the request is legitimate;
4. Right to data portability means the right to obtain from the Company and/or the Club Data in a structured format, ordinary used and readable, as well as the right to transfer Data to other controllers;
5. Right to object means the right to object to the processing of Data when the request is legitimate, including when the Data are processed for marketing or profiling, if applicable;
6. Right to lodge a complaint with a supervisory authority in case of unlawful processing of Data.

You can exercise the above-mentioned rights by writing:

• For the purposes referred to in points a), b) and d) to the territorial club Scuderia Ferrari Club Orlando – United States at the registered office indicated at point 5 above;
• For the purposes referred to in points a), b), c), e), f) to Scuderia Ferrari Club S.c.ar.l., with registered office in via Abetone Inferiore 4, Maranello (MO), Italy or to the email address privacy@scuderiaferrariclub.com