Personal data processing notice

In accordance with article 13 of Regulation (EU) 2016/679 concerning data protection (General Data Protection Regulation, hereinafter referred to as “GDPR”), SAME DEUTZ-FAHR Italia S.p.A., wishes to provide the following information concerning the processing of the personal data (“Data”) which you have freely provided.

Data Controller

The controller of your Data, which is the entity who identifies the purpose, processing method and ensures that your Data is properly protected, is SAME DEUTZ-FAHR Italia S.p.A., Viale F. Cassani, 15 – 24047 Treviglio (BG) Italy, (hereinafter also referred to as the “Controller”), who can be contacted concerning the processing of your personal data at the following email address:  privacy@sdfgroup.com.

Purpose, legal basis and data retention times

For what purpose is your Data processed?

Legal basis of processing

 How long is your Data retained?

Registration and account creation:

Your Data will be used for registration and to create a personal account, and this will allow you to access your profile, through which you can view your orders and purchases.

The processing of this Data is necessary to perform the precontractual measures adopted at your request, in accordance with art. 6, para. 1, let. b) of the GDPR.

The Data will be stored until you request that the account you created be deleted.

Order management:

Your Data will be used to allow us to process orders and send you the products that you have purchased, and, where necessary, to provide assistance and support.

The processing of your Data is necessary in order to execute the contract to which you are a party, in accordance with art. 6, para. 1, let. b) of the GDPR.

Until the period of limitation has run out (ten years) concerning contract-related suits which may arise in relation to the contract in execution of which the data are processed. 

Purchase process management:

Your Data will be processed to initiate and finalise the purchase process.

The processing of your Data is necessary in order to execute the contract to which you are a party, in accordance with art. 6, para. 1, let. b) of the GDPR.

Until the period of limitation has run out (ten years) concerning contract-related suits which may arise in relation to the contract in execution of which the Data are processed. 

Compliance with legal obligations as part of the purchase process:

issue of accounting and tax documents

The processing of your Data is necessary in order to comply with a legal obligation to which the Controller is subject, in accordance with art. 6, para. 1, let. c) of the GDPR.

Legal time frames (ten years for accounting documents and invoices, in accordance with art. 2220 of the Italian Civil Code).

Fraud prevention, protection, and management of disputes:

The Data may be processed to allow us to prevent instances of fraud committed against us or other customers, to stop a violation or to protect and defend ourselves in all venues, including legal ones.

The processing of Data is necessary to pursue the Controller’s legitimate interest to guarantee a high quality of service and to protect its rights against regulatory violations or in order to prevent regulatory violations, in accordance with art. 6, para. 1, let. f) of the GDPR.

For the time necessary to allow the Controller to act or defend itself against claims lodged against it or in order to prevent damages arising from user or customer behaviour which violate legal obligations, and until the legal period concerning contract-related suits which may arise in relation to the transaction in execution of which the Data are processed.

Marketing communications:

With exclusive reference to the email address you used to complete a purchase, the same address can be used to send promotional and marketing communications about products and services similar to those which you purchased, unless you decide to object henceforth to this initiative by writing to the email address set out under paragraph “Data Subject’s Rights” or by using the appropriate channels indicated in our email communications.

The email contact that you provide as part of the sales process will be processed by the Controller in order to offer you products that are similar to the ones you purchased (art. 6, para. 1, let. f), of the GDPR, and art. 130, para. 4 of Italian Legislative Decree 196/03), unless you object to its processing by writing to the email address under paragraph “Data Subject’s Rights” or by using the appropriate channels indicated in our email communications.

Until you decide to object to the processing of your Data

Newsletter subscription:

You may be asked to consent to subscribe to our occasional automated newsletter, to keep you up to date on the initiatives promoted by the Controller (themed events, museum and factory visits), as well as to inform you about new documentation available in the catalogue (newly digitised content, purchase of historical technical publications).

Your Data will be processed following your express consent, which can be communicated by ticking the box at the bottom of the forms present on the Controller’s website (art. 6, para 1, let. a) of the GDPR). We wish to remind you that if you provide your consent, you may revoke it at any time by clicking on the link in any one of our marketing messages, or by writing directly to the Controller at the email address listed under the paragraph “Data Subject’s Rights”, or by using the appropriate channels indicated in our email communications. We also wish you remind you that revoking your consent will not impact the lawfulness of processing before said revocation.

Until revocation of consent

Consequences if I refuse to provide my Data

You provide your Personal Data on a voluntary basis; however, if it becomes necessary or instrumental to execute the contractual relationship, a refusal to provide said data may make it impossible to carry out operations connected to it (or, in any case, it might lead to delay in said operations), and, consequently, to register for our e-commerce portal.
If you refuse to provide your Personal Data for the functional purposes other than those that are strictly necessary or instrumental to execute the contractual relationship (by way of example, the Personal Data processed only on the basis of your consent), this will prevent further activities from being performed, but it in no way will interfere with the performance of the ongoing contractual or precontractual relationship.

Personal data disclosure

Authorised Controller staff will process your Personal Data in accordance with article 29 of the GDPR, or third-party individuals who perform essential services for the Controller in order to fulfil the purposes set out above as an appointed Data Processor in accordance with art. 28 of the GDPR (by way of example, companies which support the Controller in managing its web site) will do so. A complete list of the Data Processors who might process your Personal Data is available from the Controller upon request. Furthermore, some Data may be disclosed to other categories of individuals who perform their activities as independent controllers (e.g. banks and credit institutions, bodies belonging to the public authorities, auditors, etc.).

Transfer of Data to Third Countries

Generally, the Data Controller does not disclose Data to Third Countries, whether directly or by way of its Data Processors. However, should this occur, said transfer will take place exclusively following a risk assessment and in respect of the measures provided for by Chapter V of the GDPR.

Data Subject’s rights and methods of exercise

As regards your Personal Data, we wish to inform you that current regulations, and in particular articles 15 et seq. of the GDPR, provide for various rights which you may freely and voluntarily exercise in relation to us; they are described below: Right to Access; Right to Rectification; Right to erasure or “right to be forgotten”; Right to restriction of processing; Right to receive notification regarding rectification or erasure of personal data or restriction of processing; Right to data portability; Right to object to processing. In order to exercise said rights, contact the Data Controller by writing to the email address indicated above. If you believe that the processing of your Personal Data is in violation of the provisions of the GDPR, you have the right to file a complaint with the Supervisory Authority for the Protection of Personal Data (art. 77 of the GDPR) or, alternatively, to bring proceedings before the appropriate court (art. 79 of the GDPR).