This notice (hereinafter referred to as ‘Privacy policy’) is provided in compliance with the current legislation regarding the personal data protection and, in particular, with the EU Regulation 2016/679 concerning the protection of individuals with regard to the processing of personal data and the free movement of data (“GDPR”) and with the principles set forth in the Italian Legislative Decree n. 196/2003 (“Personal Data Protection Code” or the “Privacy Code”) and it relates to the processing of personal data of the visitors to this website e who registers to “The Real Race – more than a game” Competition.

This Privacy Policy aims to describe in a simple and transparent manner to the users which personal data are processed, for what purpose, by whom and how the data are processed and to inform the users about the measures undertaken to protect the data subjects’ rights and freedoms. This Privacy Policy, therefore, concerns only this Website and does not apply to other websites that may be visited by the user through hyperlinks accessed on the Website.

The site is designed to allow participation in the competition “The Real Race – more than a game”: the users we want to participate to the Competition will have to register and setting user name and password to log in to their personal page on the site.

Index

1. Data Controller e Data Protection Officer
2. Purposes of the data processing  
3. Nature of data provision and legal basis
4. Categories of data processed
5. How are processed the data?
6. To whom can the collected data be disclosed?
7. Which are the data subject’s rights?
8. Right to withdraw consent and to object

1. Data Controller e Data Protection Officer

1. The Controller of the processing of personal data of the users is Automobili Lamborghini S.p.A. (VAT 03049840378), with registered office in Sant’Agata Bolognese (BO), Via Modena n. 12, Italy.

2. The Data Controller has appointed a Data Protection Officer (DPO), to whom you can ask for more information on the processing of personal data and on the exercise of your rights, writing to the e-mail address: dpo@lamborghini.com.

2. Purposes of the data processing  

1. By accessing and visiting this Website, as well as using the services offered through the Site, information concerning the user, as an identified or identifiable natural person, can be collected and processed. When personal data are acquired, they will be processed in compliance with the current legislation on the personal data protection and only to meet the following purposes:

a) purposes strictly connected and instrumental to access and use the site, its functions and the services requested, to register a personal user account and, in particular, functional to participate to the prize competition organized by Automobili Lamborghini, including awarding and prizes delivery procedures;

b) to fulfill obligations under the law (in particular, DPR 430/2001) provided for the organization and management of the Competition;

c) to manage communications relating to the collection of prizes in the event of winning;

d) for management operations of the services offered through the site;

e) for statistical purposes, in a completely anonymised and aggregate form.

2.In cases where explicit and voluntary consent has been provided, the data of the users of the Website collected for the aforementioned purposes may also be processed for other purposes, provided that an express and explicit consent of the user will be acquired for each further processing of data. In this way, the users’ data collected can only be used if the user freely and clearly consents to each further processing of data, for the following purposes:

i) provide you the newsletter service;

ii) direct marketing activities, in particular sending information and commercial communications, including promotional ones, of advertising material and / or offers of goods and services, by any means (known or not), including, but not limited to, mail, Internet, telephone, E-mail, MMS, SMS.

3. Nature of data provision and legal basis

1. The legal basis for the processing of users’ personal data is the execution of the service requested in the case provided for by art. 2, point 1: in particular, to allow the participation of the user to the Prize Competition organized by Automobili Lamborghini as requested by the user by accessing and registering on the site through the appropriate form (contractual legal basis), as well as to fulfill the related obligations set by administrative and fiscal legislation in case of winning (legal obligations basis).

Therefore, exclusively for the purposes referred to in art. 2, point 1, the provision of personal data is mandatory to satisfy your request to participate to the Competition and allow the use of the related services. The refusal to provide the requested data will make it impossible to use these services, in particular, could make it impossible to participate to the Competition or determine the subsequent exclusion. It will still be possible to consult the site without providing any personal data, but some features will not be available and some services cannot be provided: by way of example, it will not be possible to register to the prize competition organized by Automobili Lamborghini.

2. The legal basis is the user's consent for the processing of personal data for the purposes referred to in art. 2, point 2, i) and ii). The provision of data and the release of consent for processing for these purposes are therefore completely optional: without explicit consent from the user, these services will not be provided, but there are no other consequences. In particular, if the user does not intend to consent to the use of his data to receive the newsletter service or for marketing purposes, there will be no consequences or limits in the use of the site and for his participation in the prize competition (art. 2, paragraph 1).

3. So, the consequences of a refusal to respond or give consent are always explicit and are connected to each service rendered: for example, a refusal to the related processing can prevent consultation of the site with all its features (in the case of cookies), or the receipt of advertising material (in the case of art. 2, point 2). Therefore, the user is informed in the appropriate manner for each specific case, but in any case he can consult the website also by denying consent to the processing of personal data, where required; in this case, some features or characteristics of the site may be disabled.

4. Categories of data processed

Different types of personal data may be processed and treated differently, depending on the services rendered. 

4.1 Navigation data

The information systems and software procedures used to the operation of this web site acquire personal data as part of their standard functioning. Such information is not collected in order to relate it to identifiable data subjects; however, it may allow User identification after being processed and matched with data held by third parties.

This data category includes the: IP addresses or names of computer domains used by visitors who access the website; URI (Uniform Resource Identifier) addresses of the requested resources; time of request; method used to submit the request to the server; size of the file obtained in response; numerical code indicating the status of the response from the server and other details relating to the operating system and the information environment of Users. This data is used only to obtain anonymous statistical information about the website and to check its correct functioning and is deleted immediately after processing. This data may also be used to ascertain responsibility in the case of possible computer crimes against the website. Excepting this, data on web contacts is not stored for more than seven days. As for cookies, please refer to paragraph. 4.3.

4.2.1 Data supplied voluntarily by the User (messages and e-mail)

The voluntary and explicit sending of communications by e-mail or by the contact addresses on this website will entail the subsequent acquisition of the sender’s data, including his e-mail address, and the consent to receive replies to such requests.

The personal data provided herein are used solely for the purpose of responding to the submitted requests and are disclosed to third parties only if this is necessary for that purpose. The data will be stored for the times prescribed by law. 

4.2.2 Data provided voluntarily by the User (to create your personal account and register for the Competition)

To participate to the Competition it is necessary to register through the appropriate page and fill in the form with the required data: this information is necessary to verify that the user is in possession of the requirements to participate to the Competition as required by the Regulations (for example, the date of birth is required to verify that the user applying to participate is at least 18 years old) and to manage the subsequent phases and the awarding and delivery of prizes. The data thus acquired will be used exclusively for participation tothe Competition and will be kept for the time required by law, within the limits of what is strictly necessary.

4.2.3 Data provided voluntarily by the User (to receive communications for marketing and / or commercial promotion purposes)

Each data subject can voluntarily provide his consent to the use of his personal data by the Data Controller to receive commercial or promotional communications, however named, with both digital and paper communications.

In any communication, however, the data subject is reminded that he can withdraw consent at any time and without formalities. The data are deleted at the data subject’s request and they are in any case kept for a maximum period of 24 months from their acquisition.

4.3.1 Cookies

What is a cookie? Cookies are information stored by the browser when you visit a Web Site using a PC, smartphone or tablet. Each cookie contains several pieces of data (e.g. the name of the server from which it originates, a numeric identifier, etc.). Cookies can remain in the system for the duration of a session (until the closing of the browser), or for long periods, and may contain a unique identifier.

What are they used for? Cookies are used for different purposes, depending on their type: some are strictly necessary for the correct function of the Web Site (technical cookies), whereas others optimise performance in order to provide the User with a better experience while they are visiting the Web Site. In addition, cookies allow Web Site usage statistics to be obtained, such as cookies analytics; others are for the purpose of displaying advertisements (in some cases advertisements are targeted based on cookie profiling).

Consent: Consent from the Users is stored by the Controller, for the purpose of fulfilling its responsibilities, through a technical cookie that has a duration period of 12 months. The User is informed both by the brief privacy notice (displayed in a banner upon the first visit to the Web Site until permission is granted or denied, as explained in paragraph 4.3.4 “How to disable cookies?”) and by this privacy policy. Furthermore, see paragraph 4.3.3 for links to the privacy policy of third parties, in addition to disabling third party cookies (if directly available through the same).

How can you disable them? You can disable cookies either through your browser settings (paragraph 4.3.4 “How to disable cookies?”), or through the mechanisms made available by a third party (paragraph 4.3.3 “Specific types of cookies used on the site”).

4.3.2 General types of cookies used on this Site

Technical cookies (first party): they are essential for the correct functioning and display of the site and to store the user’s consent to the use of cookies.

Analytics cookies (third-party): they are used for aggregate analysis of site visits, through the use of a third-party service.

4.3.3 Specific types of cookies used on this Site

First party cookies: only technical cookies are used for the correct functioning and display of the site and for the purpose of storing the user's consent to the use of cookies (duration: 12 months).

Third party cookies: the site uses cookies provided by the third party listed below together with the link to the respective privacy policy (also for their disabling):

Analytic Cookies

4.3.4 How to disable cookies? 

Control via browser: the browsers commonly used (e.g. Internet Explorer, Firefox, Chrome, Safari) accept cookies by default, but this setting can be changed by the User at any time. This applies to both PCs and mobile devices like tablets and smartphones, and it is a function generally and widely supported.

Therefore, cookies can easily be disabled or turned off by accessing the browser’s options or preferences, and in general third-party cookies can also be blocked. As a general rule, these options will only have an impact on that browser and on that device, unless there are active options to synchronize the preferences on different devices. Specific instructions can be found on the Options page or Help page of the browser itself. Disabling technical cookies, however, may affect the full and/ or proper functioning of different sites, including this one.

Normally, browsers used today:

  • offer the “Do not track” option, which is supported by some websites (but not all). Thus, these websites are no longer able to collect certain navigation data;
  • offer the option of anonymous surfing or incognito mode: in this way, data will not be collected in the browser and browsing history will not be saved, but the navigation data may still be acquired by the operator of the Web Site that was visited;
  • allow the deletion of cookies stored in whole or in part, but after visiting a Web Site again they are usually installed, where such possibility is not blocked.

Below are links to the support pages for the most popular browser (with instructions on how to disable cookies on these browsers):

Firefox (https://support.mozilla.org/it/kb/Attivare%20e%20disattivare%20i%20cookie);

Internet Explorer (http://windows.microsoft.com/it-it/internet-explorer/delete-manage-cookies#ie=ie-11);

Safari (iOS) (https://support.apple.com/it-it/HT201265 );

Chrome (desktop: https://support.google.com/chrome/answer/95647?hl=it; Android and iOS https://support.google.com/chrome/answer/2392971?hl=it). 

Third-party cookies: these may be disabled either using the methods described above, or by referring to each third party (following the links listed in the previous paragraph).

On-line tools: You may note that from http://www.youronlinechoices.com/ you can not only learn more about cookies, but also check the installation of numerous cookies on your browser and/or device and, if supported, also disable them.

5. How are processed the data?

1. Data will be managed lawfully and used only for the aforementioned purposes (art. 2). It will be processed using suitable means to guarantee its security and confidentiality, using the most appropriate means (hard copy or electronic) to store, manage and transmit the data. 

2. This data will be retained for the period stipulated under the relevant law and, in any case, for the time strictly necessary to follow up the activities for which they were collected (for the period foreseen for the Competition, for the assignment of prizes to the winners and for the final activities related to the Competition, as required by current legislation) and / or until the consent given for the purposes referred to in art. 2, par. 2, i) and ii). Personal data processed for the marketing purposes referred to in art. 2, par. 2, i), will be kept no longer than 24 months (except for any changes and / or additions to the reference legislation on the protection of personal data that will be expressly communicated to you).

6. To whom can the collected data be disclosed?

1. The processing operations related to the web services of this Site are only handled by technical staff specifically delegated for processing. In particular, where necessary and only with prior consent, the data may be disclosed to third parties whose collaboration is needed for the performance of the services offered. The data collected via the web, or in any case arising from web services, may be disclosed to the technological and instrumental partners who cooperates with the Data Controller to provide the services required by users, always in compliance with the purposes set forth in article 2. To this purpose, the subjects who will have access to personal data will be specifically authorized for processing by the Data Controller and, if due, appointed as Data Processors, pursuant to Articles 28 and 29 of the GDPR.

2. The data collected for the aforementioned purposes may also be disclosed to associated companies or belonging to the same corporate group of the Data Controller and to subjects authorized under the relevant legislation.

7. Which are the data subject’s rights?

1. The data subject is the natural person, identified or identifiable, to whom the personal data processed relates and, therefore, the user who accesses the Site and who registers to participate in the Competition. 

2. Each data subject has the right of access at any time to personal data which have been collected concerning him or her (right of access) in order to be aware of, and verify, the lawfulness of the processing. The data subject is also entitled to exercise all the rights pursuant to the current national and European legislation on the personal data protection (set forth in the Italian Legislative Decree n. 196/2003 and the EU Regulation No. 2016/679): in particular, he/her may request at any time the rectification and updating of incorrect or inaccurate data, the limitation of the processing and the erasure of the same (right to be forgotten), as well as lodging a complaint to the Data Protection Supervisory Authority . 

3. With reference to personal data processed by automated means, the data subject may also receive data concerning him or her in a structured, commonly used, machine-readable and interoperable format, and to transmit them to another data controller (right to data portability).

4. For any request regarding the processing of personal data and for any communication relating to the exercise of rights on personal data, it is possible to contact the Data Controller or Data Protection Officer using the references indicated in art. 1.

8. Right to withdraw consent and to object

1. Each data subject has also the right to withdraw his or her consent at any time, without prejudice to the lawfulness of the processing based on consent before its withdrawal.

2. The data subject is also always entitled to object to the processing of any data concerning him or her if it was carried out for direct marketing purposes (see art. 2, par. 2) by the Data Controller; in this case, his/her data will no longer be processed for these purposes (right of objection).