NOTICE

pursuant to Articles 13 and 14 of Regulation (EU) 2016/679 (“GDPR”)

Piaggio & C. S.p.A. applies particular commitment and care in processing the information referring to you in accordance with applicable privacy regulations.

Please read this Privacy Policy carefully in order to be fully informed about our data protection policy.

A. Who processes your personal data?

Piaggio & C. S.p.A., with its registered office at Viale Rinaldo Piaggio, 25, 56025, Pontedera (PI), Italy (“we” or the “Data Controller”) is the company that collects and processes your personal data as Data Controller.

B. Who is our DPO?

The Data Controller has appointed a Piaggio Group Data Protection Officer (“Group DPO”) pursuant to Article 37 of the GDPR);.

You may, at any time, contact the Group DPO to request information in relation to the processing of your personal data at the following addresses:

Data Protection Officer
Viale Piaggio, 25
56025 PONTEDERA (PI)

E-mail: dpo@piaggio.com

C. What data do we process?

Depending on the cases and within the limits of the purposes referred to under letter D), the Data Controller processes the following categories of personal data:

• personal data (e.g. name, surname, place and date of birth, tax code);
• contact details (e.g. address, telephone number, e-mail).

D. Why are we processing your personal data?

1. To answer your questions and process your information requests

   The data you provide by contacting us via the “Contacts” section on the website https://wide.piaggiogroup.com/ (“Wide”) will be processed to respond to your voluntary questions and requests for information.

2. Defence of the rights of the Data Controller

   We will use your personal data to defend our rights in and out of court in the event of contractual or non-contractual breaches to the detriment of the Data Controller, for example to take possible actions for the recovery of the debt, if this should become necessary due to the non-payment of the sums provided for in the contract within the agreed deadlines.

   The legal basis for this processing purpose is the need to protect a legitimate interest of the Data Controller; the protection of this legitimate interest would not be possible without using your personal data.

E. What data is required?

Failure to provide the data processed for the purposes referred to in letter D) no. 1. will make it impossible to purchase our products and use our services, while the failure to provide the data for the purposes referred to in letter D) no. 7. will make it impossible to receive advertising material about our services and products similar to those already acquired by you.

F. Who are your data communicated to?

Within the limits of the purposes set out in letter D), your personal data may be communicated to the following categories of persons appointed, if necessary, as Data Processors pursuant to Article 28 of the GDPR:

• Subsidiaries;
• service providers for the management of IT systems and the Website;
• providers of legal, accounting and tax consulting services;
• company used by the Data Controller to provide the requested service;
• supervisory and control authorities and bodies, and in general public or private entities with functions of a public nature;

You can request a complete updated list of the parties to whom your personal data may be communicated by going to the registered office of the Data Controller or by contacting the Group DPO at the references indicated in letter B).

Your personal data may come to the knowledge, within the limits of their respective remits, of employees, posted or administered workers and collaborators of the Data Controller who will act as persons authorised to process them in accordance with Article 29 of the GDPR.

Your personal data will not be disclosed.

G. Is your data transferred to a non-EU country?

Your personal data may be transferred to a Subsidiary established in a non-EU country.

The transfer will take place in compliance with the guarantees provided by the applicable legislation, on the basis of a decision on appropriateness pursuant to Article 45 of the GDPR or the adoption and signing of standard contractual clauses approved by the EU Commission in the regulation of the relationship between the Data Controllers and the Subsidiaries involved.

By simply requesting the references in letter B), you can receive more information on the transfer of your personal data.

H. How do we process your data?

We will process your personal data with correctness, lawfulness and in compliance with all the principles set out in Article 5 of GDPR, with and without the use of electronic tools.

The activities of analysis of your tastes and preferences which, with your consent, may be carried out for profiling purposes, will always involve human intervention and will never take place in an exclusively automated manner.

The security and confidentiality of your personal data will be guaranteed by taking appropriate measures to prevent, among other things, disclosure, unauthorised access, alteration and loss of information processed.

I. How long do we keep your data?

Your personal data will be kept exclusively for the time necessary to satisfy your request, to fulfil the legal obligations to which the Owner is subject and in any case for what is strictly necessary to pursue the purposes for which they were collected in accordance with letter D. above, as well as the following summary table.

TYPE OF PERSONAL DATA	PURPOSE OF THE PROCESSING	MAXIMUM PERIOD OF RETENTION
- personal data (e.g. name, surname, place and date of birth, tax code); - contact details (e.g. address, telephone number, e-mail).	To answer your questions and process your information requests	12 months from the collection of the data

We inform you that, in case of revocation of your consent and, in any case, on the expiry of the above mentioned terms, we will delete or anonymise from our archives all the information referring to you.

J. What are your rights?

By simply communicating the references indicated in letter B), you can exercise your rights under Articles 15 to 22 of GDPR.

In particular, you may ask the Data Controller to access the data concerning you, to modify and/or delete them, as well as to limit the processing in the cases referred to in Article 18 of the GDPR.

In the manner specified in Article 21 of the GDPR, you may, at any time, object to the processing of your personal data and receive the information referring to you and/or have it transmitted to another Data Controller.

We remind you, moreover, that any consent given will always be revocable as easily as it was granted.

The Data Controller will, without undue delay and, in any case, at the latest within one month from the exercise of the right, provide you with all the information requested and/or communicate the actions taken in order to satisfy your request.

Exclusively in the event of manifestly unfounded or excessive requests, as well as due to their repetitiveness, the Data Controller may charge you a reasonable expense contribution or deny the satisfaction of your request.

Finally, we inform you that if you exercise any of the above rights, you may be asked to provide certain information necessary to confirm your identity.

K. Who can you contact in order to lodge a complaint?

If, for example, you believe that our processing breaches the provisions of the GDPR, you may complain to the Data Protection Authority (https://www.garanteprivacy.it/home/modulistica-e-servizi-online/reclamo) or to the Office for Data Protection of the Member State where you habitually reside, work or the place where the alleged breach has occurred.

L. Updating

Also taking into account possible updates of the regulations regarding the processing of personal data, this Privacy Policy may be modified and/or updated by the Data Controller at any time.

The changes made, if relevant, will be notified to you by e-mail and will in any case be binding from the moment of their communication or from the publication of the revised Privacy Policy on the Website and on the websites of the Subsidiaries.

In order to always remain informed about how your personal information will be processed, all you need to do is access the Privacy section of the Website and the websites of companies belonging to the Piaggio Group.

Cookies Policy

We hereby inform you that Piaggio uses cookies to make the web browsing experience better for all Users who visit the Website.

A cookie is a small file that the Website transfers to the User’s browser, where they are stored to be retransmitted to the Website at the next visit by the same User.

The cookies are used for different purposes such as: running computer authentication, session tracking, storing information about specific configurations of users accessing the server.

Cookies allow the Website to remember User's data for the length of the duration of the visit or for subsequent visits, allowing the User to browse between pages efficiently, storing the User's preferences, and allowing the User to interact with social networks such as Facebook, Google+, Instagram; they also offer Google Map services.

Cookies may also be used to store the login data of the User and therefore automatically recognise the User (making it unnecessary to login every time the User accesses the Website).

Data is processed with the aid of electronic or in any case automated, computerised or telematic devices, using approaches strictly connected to the purposes indicated above and, in any case, to ensure the security and confidentiality of the data.

Technical cookies (which do NOT require your consent)

According to current legislation in Italy, express consent is not always required for the use of cookies. In particular, no such consent is required for technical cookies, i.e. those used for the sole purpose of carrying out the transmission of a communication over an electronic communications network, or as strictly necessary to provide a service explicitly requested by the user. These are, in other words, cookies essential for the functioning of the website or necessary to perform tasks requested by the user.

The Italian Authority for the Protection of Personal Data considers the following cookies as technical cookies, which do not require consent for their use:

• analytics cookies when used directly by the website manager to collect information, in aggregate form, on the number of users and how they visit the website,
• browsing or session cookies (to login, to make a purchase, etc.),
• functionality cookies, which allow the user to browse according to a set of selected criteria (for example, language, the products selected for purchase) in order to improve the service rendered to the same.
  

Profiling cookies (which require your CONSENT) Our site also uses profiling cookies that we can only install with your prior consent.

Profiling cookies are designed to create profiles about the Users and are used to send advertising messages in line with the preferences expressed by the User during browsing. These cookies are used to present the best content to the users according to their interests. These types of cookies can be used to display targeted advertisements or to limit the number of times an advertisement is shown. Given the considerable invasion of users’ private lives that these devices can involve, Italian and European legislation requires the User to be properly informed on the use of these cookies and to grant valid consent. Profiling cookies require the prior free informed consent of the User, which the Site obtains in the forms specified in the Regulations, using the banner that appears on the first visit, as well as through the full notice allowing the user to grant or refuse the relative consent.

First-party and third-party cookies

If the cookies received from the User’s terminal are installed directly by the manager of the website that the User is visiting, then they are first-party cookies. While browsing on the Website, the User may however receive cookies from different websites or web servers (“third-party cookies”) that may include some elements (e.g. images, maps, sounds, specific links to pages on other domains) on the website that the User is visiting. These cookies are set by a website other than the one currently being visited.