Dear Customer,

Autogrill Italia S.p.A. ("Autogrill"), acting as data controller ("Controller"), informs you that your personal data are processed through electronic and non electronic means, according to logics and procedures connected with the purposes set out below and in compliance with the GDPR, including the confidentiality and security principles.

 

1. Purposes of the processing and consequences in case of denial to provide your personal data

Autogrill collects the personal data you provide during sales activities, including details of purchases made, and through your online interactions with Autogrill. We process your personal data for the purposes described below.

 

With reference to sales and interaction with Autogrill, such activities include online activities, the management of your interaction with our websites and applications (use of the services offered, registration to sites and online initiatives such as newsletters, mailing lists and promotions. ) and the provision of information / materials; our Privacy Policy is published on the site www.myautogrill.it

 

We process your personal data for the following purposes.

 

1. a) Purposes necessary for managing relations with customers

Autogrill processes your personal data for the purpose of managing the sale of Autogrill products and after-sales services, including the fulfillment of the relevant legal obligations and the exercise of rights in court. For the purposes indicated above, providing the data is necessary and any refusal may prevent you from purchasing Autogrill products and receiving after-sales services.

 

1. b) Additional purposes

b.1)With your consent, Autogrill collects information and uses the data for purposes such as sending commercial or advertising, direct sales, market surveys, worldwide sales assistance through e-mails (newsletters), telephone, sms,, social networks, including sending invitations to events. You can at any time object to receiving promotional communications.

 

b.2) With your consent, which is optional, Autogrill can also collect data on your preferences, habits, lifestyles as well as the details of purchases made to use them for creating group and individual profiles ("profiling") and creating personalized offers.

 

b.3) With your consent through the geolocation services Autogrill can occasionally collect data on your location through the geolocation services provided by the app My Autogrill

The consent for marketing, profiling and geolocation purposes indicated above is optional and any refusal will have no consequence. The data may be provided by you at the moment of your registration in our stores through paper and / or electronic forms, acquired during visits to Autogrill Group stores or through interaction with the Autogrill Group's websites, internet applications and mobile applications.

2. Legal bases of processing

Autogrill will base the processing of your personal data on the following legitimacy bases:

•    your consent,
•    Autogrill's legitimate interest in carrying out commercial activities,
•    fulfillment of legal obligations,
•    fulfillment of the obligations of a contractual relationship between you and Autogrill.

 

In compliance with the GDPR, the personal data concerning you from time to time may be used to update and correct the information collected previously

 

3. Communication of your personal data to third parties

Personal data is accessible to our duly authorized personnel (eg CRM, Retail, IT personnel) based on need criteria and communicated to third parties in the following cases: (i) when communication is required by law and applicable regulations with respect to legitimate third parties, such as authorities and public bodies for their respective institutional purposes, e.g. anti-money laundering legislation, judicial authorities; (ii) communication to third parties in the case of extraordinary transactions (eg mergers, acquisitions, sale of companies, etc.).

Your personal data are also shared with our service providers, e.g. for services of a technical and organizational nature that are functional to the purposes indicated above. We provide to these entities only the data necessary to perform the services agreed and they act as Data Processors, based on the instructions received from Autogrill.

Autogrill does not communicate your personal data to third parties for marketing or profiling purposes.

Furthermore other  Autogrill Group companies in their capacity of data processors may access your personal data, based on the instructions received from Autogrill, for marketing purposes and customer relationship management (to ensure the same benefits worldwide).

 

4. Transfers of personal data outside the European Union

Some of the companies of the Autogrill Group that are recipients of your personal data may be established outside the European Union, in countries that do not guarantee an adequate level of protection to personal data under the GDPR. Autogrill takes the necessary precautions for a legitimate data transfer (eg through the implementation of the Standard Contractual Clauses approved by the European Commission).

 

5. Data retention

Your personal data is stored by Autogrill for the time strictly necessary for achieving the purposes for which your personal data are collected and for the fulfillment of the applicable legal and regulatory obligations.

If you have consented to the processing of your personal data, the data relating to the purchases made are stored for marketing and profiling purposes for a period of 12  months, at the end of which the data will be anonymously rendered in a permanent and non-reversible manner.

Your data will be deleted after 24 months in case on no use of the services consisting in the non-use of the documentation and tools to obtain the particular discounts / benefits linked to the iniziative.

Furthermore, the data will be deleted or permanently anonymised to achieve the aforementioned purposes, except in the case where Autogrill is required to keep the data for a further period to comply with legal obligations or regulations.

 

6. Data Controller and Data Protection Officer

The Data Controller is Autogrill Italia S.p.A. with with its registered office in Novara, Via Greppi 2, and secondary office in Rozzano (MI) Centro Direzionale Milanofiori, Strada 5 – Palazzo Z. You can contact our Group DPO located in Italy to the following address: dpo@autogrill.net.

 

7. Your rights

You can contact the Data Controller or Data Protection Officer at the above addresses to get an updated list of our external subprocessors, the subjects to whom the data are communicated and to exercise at any time the rights referred to in art. 15 ss. of the RGPD, e.g. obtain confirmation of the existence or otherwise of your data, verify its content, origin, accuracy, request integration, updating, rectification, cancellation, anonymity, requesting portability, data protection, processing limitation, opposition to processing for legitimate reasons, e.g. opposition to marketing activities. You have the right to withdraw your consent at any time, as well as to file an application with the Supervisory Authority (the Personal Data Protection Authority).