In accordance with the effort and care that RCS MediaGroup S.p.A. dedicates to the safeguard of personal data, we hereby inform you about the procedures, purposes and scope of communication and disclosure of your personal data and about your rights, in accordance with Article 13 of the GDPR.
To offer you the services provided by its own Websites, RCS MediaGroup S.p.A. (hereafter RCS), in its capacity as Data Controller, shall process some personal data necessary for the performance of the services.
These data can be provided implicitly by the instruments you use to access and use the services or they can be provided explicitly by you.
RCS may process the following categories of personal data of the users:
The data and the cookies received from you shall be processed by RCS exclusively with methods and procedures necessary to provide you with the required services and for the additional purposes for which you have expressed consent.
Only with your express consent may your data be used to carry out statistical analyses, market surveys, promotional activities through social media and to send commercial information about the products and about the promotional initiatives of RCS. (Direct marketing purposes)
Also with your consent, the data may be used for purposes of profiling carried out automatically gathering information about the browsing you carry out when accessing and utilising the services and, by means of statistic correlation algorithm, they tie them to the same information coming from other users to identify the common traits and group together similar ones within interest classes. By assigning your browser to an interest class, your systems will necessarily be able to offer you contents that are closer to your tastes and will present advertisements that better meet your needs and better address the interests of the advertisers, reducing the level of interference with utilisation.
On the date you read this Disclosure, RCS Mediagroup uses the profiling data to aggregate marketing profiles, to manage relations with advertisers and improve their campaigns, to infer patterns of utilisation of our products and services and to assist sales departments in the development of digital strategies (Profiling purposes).
Lastly, with your explicit consent, your data may be provided to other Companies operating in the publishing, financial, automotive insurance, energy, basic commodities, humanitarian and charitable organisations which may contact you as Controllers of autonomous initiatives - the updated list is at your disposal and it may be requested from the Data Processor at the address provided below - for statistical analyses, market surveys and transmission of commercial information about the products and promotional initiatives. (Third party marketing purposes).
Communications for market surveys or commercial information about the products and the promotional initiatives may be carried out by postal mailing, email, telemarketing, SMS, MMS.
We hereby inform you that some activities may be carried out through suppliers, specifically appointed as Data Processors, who may reside outside the European Union.
The legal bases of the purposes described above are the execution of your request as data subject and the consent you have expressed.
Your personal data shall not be disclosed, but they may be communicated when necessary for the performance of the service to third parties (as third party technical service providers, postal couriers, hosting providers, IT companies), appointed, if necessary, as Data Processors by the RCS for the technical or organisational tasks that are instrumental for the performance of the services.
Access to the data is also allowed to categories of RCS appointees involved in the organisation for data processing (administrative, sales, marketing, customer service personnel, system administrators).
The updated list of Data processors may always be requested from the Data Controller.
We shall retain the right to communicate the data to third parties if you have given your specific, optional consent.
Your personal data shall be processed by RCS within the territory of the European Union.
If technical and/or operational issues make it necessary to rely on parties located outside the European Union, or if it becomes necessary to transfer some of the data gathered to technical systems and services managed in clouds and located outside the area of the European Union, the processing activities shall be regulated in accordance with the provisions of Chapter V of the Regulation and authorised on the basis of specific decisions by the European Union. Hence, all precautions necessary to assure the most comprehensive protection of personal data shall be adopted, basing said transfer: a) on decision of adequacy of the recipient third party countries expressed by the European Commission; b) on adequate guarantees expressed by the recipient third party in accordance with Article 46 of the Regulation; c) on the adoption of Corporate binding rules.
In accordance with Article 5.1 e) of the GDPR, RCS shall process your data “for no longer than is necessary for the purposes for which the personal data are processed; personal data may be stored for longer periods insofar as the personal data will be processed solely for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes in accordance with Article 89(1) subject to implementation of the appropriate technical and organisational measures required by this Regulation in order to safeguard the rights and freedoms of the data subject”.
The data provided by you shall be processed throughout the time of execution of the required services and shall be stored for the 12 following months for the completion of the administrative activities, as well as for the time necessary to fulfil legal obligations.
If you have authorised the profiling treatment, the anonymous data observed from time to time shall be erased 12 months after processing starts.
RCS hereby guarantees to you that you may exercise, at any time, the rights specified by Article 12 of the GDPR. In particular, you have the right:
These rights may be exercised by communication to the Data Controller/Data Protection Officer whose addresses are indicated in the dedicated section of this disclosure.
RCS has identified and appointed a Data Protection Officer, in accordance with Article 37 of the GDPR, and has established an office for the management of requests pertaining to the privacy of its users and customers.
To exercise your guaranteed rights, you may contact us at the following addresses:
This Privacy Disclosure is revised as at 15 May 2018 (Previous version)