Newsletter information notice

In accordance with article 13 of Regulation (EU) 2016/679 concerning data protection (General Data Protection Regulation, hereinafter referred to as “GDPR”), SAME DEUTZ-FAHR Italia S.p.A., wishes to provide the following information concerning the processing of the personal data (“Data”) which you have freely provided.

Data Controller

The controller of your data, which is the entity who identifies the purpose, processing method and ensures that your Data is properly protected, is SAME DEUTZ-FAHR Italia S.p.A., Viale F. Cassani, 15 – 24047 Treviglio (BG) Italy, (hereinafter also referred to as the “Controller”), who can be contacted concerning the processing of your personal data at the following email address: privacy@sdfgroup.com.

Purpose, legal basis and data retention times

For what purpose is your Data processed?	Legal basis of processing	How long is your Data retained?
Newsletter subscription: You may be asked to consent to subscribe to our occasional automated newsletter, to keep you up to date on the initiatives promoted by the Controller (themed events, museum and factory visits), as well as to inform you about new documentation available in the catalogue (newly digitised content, purchase of historical technical publications).	Your Data will be processed following your express consent, which can be communicated by ticking the box at the bottom of the forms present on the Controller’s website (art. 6, para 1, let. a) of the GDPR).	Until revocation of consent

Consequences if I refuse to provide my Data

You provide your Personal Data voluntarily; however, if you do not provide it, it will be impossible for the Controller to pursue the indicated purpose, and, consequently, subscribe you to the newsletter. We wish to remind you that if you provide your consent, you may revoke it at any time by clicking on the link in any one of our marketing messages, or by writing directly to the Data Controller at the email address listed under the paragraph “Data Subject’s Rights”, or by using the appropriate channels indicated in our email communications. We also wish you remind you that revoking your consent will not impact the lawfulness of processing before said revocation.

Personal data disclosure

Authorised Controller staff will process your Personal Data in accordance with article 29 of the GDPR, or third-party individuals who perform essential services for the Controller in order to fulfil the purposes set out above as an appointed Data Processor in accordance with art. 28 of the GDPR (by way of example, companies which support the Controller in managing its web site) will do so. A complete list of the Data Processors who might process your Personal Data is available from the Controller upon request.

Transfer of Data to Third Countries

Generally, the Data Controller does not disclose Data to Third Countries, whether directly or by way of its Data Processors. However, should this occur, said transfer will take place exclusively following a risk assessment and in respect of the measures provided for by Chapter V of the GDPR.

Data Subject’s rights and methods of exercise

As regards your Personal Data, we wish to inform you that current regulations, and in particular articles 15 et seq. of the GDPR, provide for various rights which you may freely and voluntarily exercise in relation to us; they are described below: Right to Access; Right to Rectification; Right to erasure or “right to be forgotten”; Right to restriction of processing; Right to receive notification regarding rectification or erasure of personal data or restriction of processing; Right to data portability; Right to object to processing. In order to exercise said rights, contact the Data Controller by writing to the email address indicated above. If you believe that the processing of your Personal Data is in violation of the provisions of the GDPR, you have the right to file a complaint with the Supervisory Authority for the Protection of Personal Data (art. 77 of the GDPR) or, alternatively, to bring proceedings before the appropriate court (art. 79 of the GDPR).