PERSONAL DATA PROCESSING POLICY
pursuant to art. 13 of EU Regulation 679/2016 (“GDPR”) – version 2021
COLOR LIFE application – dedicated to the staff of the “United Colors of Benetton.”
BENETTON GROUP SRL (hereafter referred to as Controller, Company or “BENETTON”) with headquarters in via Villa Minelli 1, 31050 Ponzano Veneto (TV), Italy tel: +39 0422 519111 / fax: +39 0422 969501
DATA PROTECTION OFFICER (DPO
Data Protection Officer c/o Dir. Legal Affairs
Via Villa Minelli 1 – 31050 Ponzano Veneto (TV)
Benetton Milano firstname.lastname@example.org
DATA PROCESSED AND DATA SOURCE
The following personal data will be processed: name, surname, e-mail address, platform access name, usage statistics.
The source of the data is the party itself.
PURPOSE OF PROCESSING
Processing personal data is exclusively intended for allowing user registration and the management of the platform (Color Life) through which information and
training contents are provided to in-store sales staff.
The provision of data is necessary for access to use the platform.
In the event of failure to provide it, it will not be possible to use the Color Life application.
LEGAL BASIS FOR PROCESSING
The legal basis of the processing is the consent of the interested party, which manifests itself with the registration of the interested party on the platform.
CONSERVATION PERIOD OF PERSONAL DATA
The data being processed are kept for the entire duration of the registration on the Color Life platform and, subsequently, up to a maximum of 12 months.
SUBJECTS AUTHORIZED FOR PROCESSING. EXISTENCE OF AUTOMATED DECISION PROCESSES
Data will be processed by internal resources in the Data Controller’s offices, who will be adequately trained and who will work as authorized personal data processing staff
by means of electronic and/or hard copy means.
No automated decision processes are foreseen in said processing.
DATA RECIPIENTS AND SENDING TO THIRD COUNTRIES
Personal data will be processed exclusively by the Human Resources and Organization Department of the data controller, they may also be disclosed to external subjects who, if they process data on behalf of the data controller, are designated as data processors with a specific contract.
For all the purposes indicated in the information, your data may also be disclosed abroad, inside or outside the European Union, in compliance with the rights and guarantees provided for by current legislation and after verifying the adequacy of the level of protection guaranteed by the third nation.
The personal data processed will not be disseminated.
YOUR RIGHTS AS INTERESTED PARTY IN THE PROCESSING. COMPLAINT TO THE SUPERVISORY AUTHORITY
The rights of the interested party and methods for exercising them.
With regards to the aforementioned processing of personal data, you will be able to employ the following rights to conditions within the limits of art. 12 and 13 GDPR, using the template available at the link https://www.garanteprivacy.it/web/guest/home/docweb/-/docweb-display/docweb/1089924 forwarding it to the email address email@example.com.
if you deem it opportune, you may write to the Data Protection Officer at the email address above.
The enforceable rights are the following:
The interested party also has the right to complain to a specific supervisory authority, known as the guarantor for the protection of personal data (www.garanteprivacy.it)