Ducati Motor Holding S.p.A. ("Ducati"), in its capacity as data controller, hereby provides you with the following information regarding the processing of your personal data pursuant to Article 13 of EU Regulation 2016/679 on the protection of personal data ("Regulation").
Data Controller
The data controller is Ducati Motor Holding, with registered office at Via Cavalieri Ducati 3, 40132 Bologna (BO), Italy.
To exercise your rights, you may contact the following email address: privacy@ducati.com
Brief Description of the Processing
The data controller will collect and use personal data of the data subjects for the purpose of registering them on the merchandising platform. The data will be used to collect and process orders.
Purpose of Processing and Legal Basis
The controller collects and processes personal data for the following purposes:
- To manage orders and fulfill contractual obligations (Art. 6, letter b GDPR);
- To comply with legal, fiscal, and accounting obligations (Art. 6, letter c GDPR);
- To improve the user experience and ensure website security (legitimate interest, Art. 6, letter f GDPR);
- To send newsletters and promotional communications with prior consent (Art. 6, letter a GDPR).
Categories of Personal Data
The controller collects and processes the following categories of personal data:
- Browsing data: IP address, device technical data, system logs – collected automatically and used for security and anonymous statistical purposes.
- User-provided data: name, surname, email, shipping and billing address, and data necessary for processing orders and managing customer service.
- Marketing communication data: email address and preferences, when the user subscribes to newsletters or consents to receiving promotional offers.
Data Retention Period
Your personal data will be stored by Ducati only for the time strictly necessary to achieve the purposes for which it was collected. Legal obligations require that documents for accounting and administrative purposes be kept for a period of 10 years from the end of the contract, based on the ordinary limitation period for contractual actions.
Data recorded through our Apps will be retained for 12 months from your last login. Your account, including any data you entered, will be deleted upon your specific request.
After the retention periods expire, the personal data will be automatically deleted or anonymized.
Data Sharing and Transfers Outside the European Economic Area
Ducati may share your personal data with the following categories of recipients:
- Properly trained and instructed personnel;
- Dealers or business partners, to provide you with the requested information, products, or services;
- Third parties appointed as data processors (e.g., for technical and organizational services necessary to achieve the purposes mentioned above), including independent collaborators, shipping companies, marketing agencies, payment processors;
- Other companies within the Ducati Group, importers, dealers, and commercial partners, in accordance with applicable data protection laws.
In case of data transfers to Ducati Group companies, sales network entities, or third parties under contract with Ducati located outside the European Economic Area, appropriate safeguards will be implemented (e.g., use of Standard Contractual Clauses approved by the European Commission).
Data Subject Rights and Contact Information of the Controller and DPO
You may contact the Data Controller – Ducati Motor Holding S.p.A., located at Via Cavalieri Ducati 3, 40132 Bologna (BO), Italy – or the Data Protection Officer (DPO), who is domiciled at the same address and can be contacted at: privacy@ducati.com.
You may request an up-to-date list of our data processors (i.e., our service providers), entities with whom data is shared, and exercise your rights under Articles 15 et seq. of the Regulation, including:
- Access to your data to verify its existence and obtain related information,
- Rectification or deletion of your data,
- Data portability,
- Restriction of processing,
- Filing a complaint with the Supervisory Authority (Italian Data Protection Authority).
Additionally, you may object at any time to the processing of your personal data when legally applicable.