DR Automobiles S.r.l. wishes to inform the interested party regarding the processing of personal data transmitted to the Company, as defined below, by completing the form on the “become our partner” page of the website www.drautomobilesgroupe.com (hereinafter, the “Site”). Personal data is processed, in compliance with the personal data protection principles established by the GDPR and national legislation, using paper, computer, and electronic means, with procedures strictly related to the purposes indicated herein, in order to guarantee the security and confidentiality of the data, in compliance with the principles established by the GDPR.

1. Identity and contact details of the Data Controller

The Data Controller is DR Automobiles S.r.l. (the “Company” or the “Controller”), with registered office in Macchia d’Isernia (IS), Zona Industriale di Macchia d’Isernia s.n.c., tax code and VAT number 00879050946, represented by its legal representative.

The interested party may contact the Data Controller by registered mail with return receipt to the aforementioned registered office or by email to the following address: privacy@drautomobiles.it.

2. Data Protection Officer

The Data Protection Officer is Carmine De Donato, who can be reached through the following contact channels:

Telephone: 0865 4793,

email address: dpo@drautomobiles.it,

postal address: DR Automobiles S.r.l., Zona Industriale di Macchia d’Isernia s.n.c., 86070 Macchia d’Isernia (IS).

3. Categories of Data Subjects. Categories of personal data processed. Source of personal data.

Interested parties are those who fill out the aforementioned form on the Website. The personal data processed are: contact person’s name, qualification, email address, and telephone number. Personal data is collected through direct provision by the interested party.

4. Purpose and lawfulness of the processing. Legal basis. Nature of the provision

The personal data collected are processed by the Data Controller pursuant to art. 6 of the GDPR.

The purpose of the processing is to allow the interested party to submit their application to become an authorized dealer and/or repairer.

The legal basis consists in the execution of pre-contractual measures adopted by the Data Controller at the request of the Data Subject, pursuant to Article 6, paragraph 1, letter b) of the GDPR.

Please note that providing data is mandatory for the fulfillment of contractual or pre-contractual obligations. Any refusal to provide mandatory data will make it objectively impossible to pursue the processing purposes set out in this Policy.

5. Categories of recipients of personal data

Personal data may be disclosed to parent and/or subsidiary companies and/or companies belonging to the same corporate group, as well as to consultants who collaborate with the network development office. All of the aforementioned entities are used as “Data Processors” pursuant to Article 28 of the GDPR, or as independent “Data Controllers.”

Personal data is also processed by persons authorized to process it by the Data Controller.

The personal data processed will not be disclosed.

6. Transfers outside the EU

Personal data will be managed and stored on servers located within the European Union owned by the Data Controller and/or third-party companies duly appointed as Data Processors. The data will not be transferred outside the European Union. In any case, it is understood that the Data Controller, if necessary, will have the right to relocate the servers to other European Union and/or non-EU countries. In this case, the Data Controller hereby ensures that the transfer of data outside the EU will be in compliance with applicable legal provisions, stipulating, where necessary, agreements that guarantee an adequate level of protection and/or adopting the standard contractual clauses provided by the European Commission, and in any case subject to sending a new privacy notice to the Data Subject.

7. Period of retention of personal data

The personal data processed is stored at the Data Controller’s registered office. It will be processed for the period of time necessary for the purposes for which it was collected or subsequently processed, and for a maximum of twelve months following collection. Upon completion of the processing, such personal data will be deleted.

8. Automated decision-making

In pursuing the processing purposes described above, no decision based solely on automated processing is taken that produces legal effects concerning the Data Subject or that significantly affects him or her in a similar manner.

9. Rights of the interested party

Pursuant to the GDPR, the interested party may, according to the methods and terms set forth therein, exercise the following rights:

1. 1. the right to obtain confirmation from the Data Controller as to whether or not personal data concerning the data subject is being processed, and, where that is the case, to obtain access to the personal data and the information provided for in Article 15, in particular the information relating to the purposes of the processing, the categories of personal data concerned, the recipients or categories of recipients to whom the personal data have been or will be disclosed, the retention period, etc.;
   2. the right to obtain, where inaccurate, the rectification of personal data concerning the data subject, as well as the integration of the same if deemed incomplete, always in relation to the purposes of the processing (art. 16);
   3. right to erasure of data (“right to be forgotten”), where one of the circumstances set out in Article 17 applies;
   4. right to limit processing, in the cases provided for by art. 18;
   5. right to data portability pursuant to art. 20;
   6. right to object to processing pursuant to art. 21.

These rights may be exercised by sending a request via registered letter with return receipt to the Data Controller at the registered office or by email to the email address privacy@drautomobiles.it.

The interested party also has the right to lodge a complaint with the Italian Data Protection Authority (Garante per la Protezione dei Dati Personali) or another supervisory authority pursuant to Article 13, paragraph 2, letter d) of the GDPR.

10. Changes to this policy

The Controller reserves the right to modify and update this privacy notice over time.