Privacy Policy for ferrariferrari.com

1. Introduction

At Ferrari & Ferrari (“we,” “us,” “our”), accessible via ferrariferrari.com (the “Website”), we are fully committed to the privacy, confidentiality, and lawful treatment of your personal data. Your trust is central to our operations, and we take rigorous measures to ensure your information is collected, processed, and used in accordance with applicable data protection laws, including the General Data Protection Regulation (EU) 2016/679 (“GDPR”) and the California Consumer Privacy Act (as amended by the California Privacy Rights Act) (“CCPA”). This Privacy Policy explains how we collect, use, store, and protect your personal information when you interact with our website and services.

2. Scope and Data Controller

This Privacy Policy applies to all users of ferrariferrari.com, including visitors, prospective and current customers, and any individual interacting with our digital platforms and services. Ferrari & Ferrari is the data controller of your personal data, meaning we determine the purposes and means of processing such data. For any inquiries about how your data is handled, please contact us at [email protected].

3. Categories of Data Processed

We may collect and process various types of personal data depending on your interaction with the Website:

a. Usage Data
Includes information related to your interactions with ferrariferrari.com, such as pages visited, time spent on the site, IP address, browser type, date/time stamps, and referral URLs.

b. Account Data
Includes personal information you provide when creating an account with us, such as your full name, email address, phone number, mailing address, and login credentials.

c. Profile Data
Includes marketplace engagement, product preferences, browsing history on our platform, and purchase behavior to help tailor site content and marketing messages.

d. Communication Data
Includes information relating to customer service interactions, including emails, messages, queries, complaints, and participation in surveys or feedback sessions.

e. Technical Data
Includes data collected from your devices such as device type, operating system, browser version, screen resolution, language preferences, device identifiers, and network information.

f. Transaction Data
Includes purchase records, billing and delivery addresses, payment confirmations or denials (processed via compliant payment processors), payment method information, and order history.

g. Preference Data
Includes information regarding your preferences for receiving marketing communications and your areas of interest in our products or services.

4. Legal Bases for Processing

In accordance with GDPR and other applicable regulations, we process your personal data only where a valid legal basis exists. These bases include:

– Contractual Necessity: To fulfill our contract with you when you purchase goods or services.
– Legitimate Interests: To improve our services, ensure network and information security, and conduct lawful business operations.
– Consent: Where you have provided explicit consent, for example, for marketing communications or cookies not strictly necessary.
– Legal Obligation: To comply with legal requirements such as tax, regulatory, or law enforcement obligations.

5. Your Rights

Subject to applicable data protection legislation, you have the following rights in relation to your personal data:

– Right of Access: Obtain confirmation as to whether we process your personal data and, if so, access a copy of that data.
– Right of Rectification: Request correction or completion of inaccurate or incomplete data.
– Right of Erasure: Request the deletion of your personal data where specific grounds apply.
– Right to Restrict Processing: Request limitations on the processing of your data in certain circumstances.
– Right to Data Portability: Receive your data in a machine-readable format and transmit it to another controller where technically feasible.
– Right to Object: Object to processing based on legitimate interests or for direct marketing purposes.
– Right to Withdraw Consent: Withdraw previously given consent, without affecting the lawfulness of processing based on consent before withdrawal.

To exercise any of the above rights, please contact us at [email protected].

6. Security Measures

We employ robust security measures to protect the confidentiality, integrity, and availability of your personal data. These include:

– User access controls and role-based permissions;
– Secure encryption protocols for data in transit and at rest;
– Periodic internal audits and vulnerability assessments;
– Regular backups and disaster recovery planning;
– Employee awareness training in data protection practices.

While we take all reasonable steps to protect your data, no transmission over the internet or electronic storage can be guaranteed as completely secure.

7. International Transfers

Where applicable, personal data may be transferred to data processors or partners located outside the European Economic Area (“EEA”) or other jurisdictions with differing data protection laws. In such cases, we will ensure that appropriate safeguards are in place, such as Standard Contractual Clauses approved by the European Commission, or equivalent mechanisms providing adequate data protection.

8. Data Retention

We retain your personal data only for as long as is necessary for the purposes for which it was collected or to comply with legal, accounting, or regulatory requirements. The duration varies by data category:

– Usage and Technical Data: Retained for up to 12 months for analytics and security logs.
– Account and Profile Data: Retained until account deletion or for 5 years following last activity, whichever is sooner.
– Communication Data: Retained for up to 3 years for quality assurance and legal compliance.
– Transaction Data: Retained for 7 years to meet financial and tax obligations.
– Preference Data: Retained for 2 years from the date of your last update or consent.

9. Cookie Policy

Our Website uses cookies and tracking technologies to enhance functionality, personalize content, measure performance, and analyze traffic. Cookies include:

– Essential Cookies: Necessary for the core operation of ferrariferrari.com (e.g. session cookies, login authentication).
– Functional Cookies: Enable personalization and remembering your preferences or region.
– Analytical Cookies: Used to measure usage patterns and enhance user experience; includes tools such as Google Analytics.
– Performance Cookies: Assess the effectiveness of marketing campaigns and optimize website performance.

10. Cookie Management & Compliance

Upon first visit to ferrariferrari.com, you will be presented with a cookie consent banner in compliance with GDPR and CCPA requirements. You may accept or reject specific categories of cookies using the controls provided. Cookie settings may be modified at any time via your browser settings or our cookie preferences page.

We honor Global Privacy Control (GPC) signals where technically feasible and process ‘Do Not Sell or Share My Personal Information’ requests in accordance with the CCPA.

11. Protection of Minors

Ferrari & Ferrari does not knowingly collect or solicit personal data from children under the age of 13. If you are a parent or legal guardian and believe we may have collected data from a minor, please contact us immediately at [email protected] so we may take appropriate action, including the deletion of such data.

12. Policy Updates

We reserve the right to update this Privacy Policy from time to time to reflect changes in law, our operations, or services. In the event of substantial changes, we will notify users through a prominent notice on ferrariferrari.com or through direct communication where feasible. Continued use of our services constitutes acceptance of any updates.

13. Contact

For questions regarding this Privacy Policy, to exercise your data protection rights, or to raise any concerns about data privacy, please contact us at:

Email: [email protected]

We are committed to complying with all international privacy regulations applicable to our users and services. Should you believe that your data has not been handled in line with applicable laws, you also have the right to file a complaint with your local data protection authority.

Thank you for trusting Ferrari & Ferrari with your information. We are dedicated to the privacy and protection of our users at every step.