Information on the processing of personal data
In compliance with the provisions of the General Data Protection Regulation no. 679/2016 (“GDPR”).
Categories of data collected
Ducati processes the personal data (personal details, contact details, and possibly bank details) that you provide when you register on our website https://www.ducati.com (“Site”) and in its special sections, during events, fairs, and demonstrations organized by Ducati or in which Ducati participates, and during your interactions with Ducati, including details of purchases made.
Purpose and legal basis of the processing
Customer Relationship Management
To allow registration and authenticated access to the Site; respond to your requests for information and/or materials; provide the products, services, and assistance you request, as well as related after-sales services (e.g., warranties), including the processing necessary to manage your electronic signature of contractual documentation (via biometric signature on a tablet); properly perform obligations arising from a contract with you or pre-contractual activities at your request (e.g., contacting you following a request for a quote and/or other request for information or complaints), including through data transmission by Ducati to the sales network (so-called Dealers) or to third parties contractually associated with Ducati. Legal basis: fulfillment of pre-contractual or contractual measures requested by the data subject.
Marketing activities
To send promotional newsletters; commercial or advertising communications; offers on products, services, and initiatives of Ducati’s commercial partners; for direct sales; and product surveys aimed at measuring customer and potential customer satisfaction. This occurs via email (newsletter), telephone, SMS, MMS, chat, banners on the Site, instant messaging, social networks, and traditional mail, including sending invitations to events in which Ducati participates or organized by Ducati, the Ducati sales and service network, or Ducati’s commercial partners. Legal basis: consent of the interested party.
Soft-spam activities
We use the email address you provide when purchasing one of our services and/or products to offer you services, services, and products similar to those you purchased. We may also send you non-marketing surveys, which are completely optional, if you would like to help us evaluate and improve the quality of our customer service. We collect data from your survey responses (both service and product surveys), which, alone or when used in conjunction with other information we hold about you, may allow us to identify you. Legal basis: legitimate interest.
Profiling activities
Collection of information relating to your preferences, habits, lifestyle, and information on your interactions with Ducati and purchases made, to create group and individual profiles (“profiling”) and, if you have given consent for marketing activities, also to send personalized communications and promotional offers. Legal basis: consent of the data subject.
Using the Ducati Link App
To use some of the App’s features, data relating to your geographic location and, in some cases, your movements, recorded by the GPS system of your Apple or Android device, are required. Specifically, you can activate and deactivate at any time and at your discretion, via the device on which the App is installed, the features related to the geo-localization service and recording of routes taken, sharing routes with other App users, community services (the ability to invite other users to suggested routes, comment on routes, and share photos), the Ducati workshop location service, recording of riding parameters, and receiving maintenance and motorcycle status alerts. The data relating to your geographic location and movements are processed by Ducati only to activate the App’s features when you request them. The data is recorded both on your device and on Ducati’s servers, so you can access and use it also through the MyDucati platform in the event of subsequent replacement or loss of your device. You can delete the recorded data at any time through the App itself or your MyDucati account. Legal basis: Data subject’s consent to use geolocation features; execution of pre-contractual or contractual measures requested by the data subject to use the App’s services.
Social Login
Using your social network account, such as Facebook and Twitter, you can log in to the App and the Site (so-called “social login”). The personal data used to operate the App or to register on the Site is collected directly from you, unless you expressly request registration and login via a social network upon your first access, or subsequently if you are already registered. If you use these features, Ducati will store, via the relevant social network, only the information from your profile that you expressly authorize the social network to share with Ducati. The association of your social network profile will be reflected on your social network accounts, whose specific privacy policies are referred to for further details. Ducati does not send any information about you to social networks. Legal basis: consent of the data subject.
Social Listening
We conduct social listening/monitoring activities to intercept reports regarding product safety and monitor brand perception, services, or campaigns, through research conducted on publicly available information on social media, websites, blogs, forums, and similar platforms. This information may also include individual quotes or personal data such as, for example, personal and/or contact information (e.g., name, surname, address, etc.). This personal data will be processed primarily in aggregate form for statistical purposes. Further processing, such as proactive actions to resolve product-related issues, will be carried out only in the case of issues relating to product safety or functionality problems. Legal basis: legitimate interest.
Defense in court and fulfillment of legal obligations
Use of the data provided to exercise rights in court and to fulfill obligations under applicable legislation. Legal basis: legitimate interest/legal obligation.
Data sharing and transfers outside the European Economic Area
Ducati communicates and shares your personal data with the following categories of recipients: duly trained and instructed personnel; Dealers or business partners to enable them to provide you with the information, products, or services you request; Third parties appointed as data processors, such as service providers, e.g., for technical and organizational services that are instrumental to the purposes indicated above, such as independent contractors, including associates, shipping companies, marketing companies, and payment management; other Ducati Group companies, importers, dealers, and our business partners, in accordance with applicable data protection laws. In the event of data transfer to Ducati Group companies, the sales network, or third parties contractually associated with Ducati, the necessary safeguards for lawful data transfer are implemented (e.g., through the adoption of the Standard Contractual Clauses approved by the European Commission).
Data retention
Your personal data is retained by Ducati for the time strictly necessary to achieve the purposes for which it was collected. Legal requirements require the retention of documents for accounting and administrative purposes, which, based on the standard limitation period for contractual claims, we will delete after 10 years from the date of termination of the contract. Data recorded by our apps (e.g., Ducati App Link) will be retained for 12 months from your last access, while your account, including the data you entered, will be deleted upon your specific request. Personal data processed for the purposes listed above (letter-BG) will be retained for a maximum of 5 years for non-Customers and 10 years for Customers and former Customers, a period deemed appropriate given the frequency of purchase of our products, which are considered luxury goods. After the retention period expires, your personal data will be automatically deleted or anonymized.
Data subject rights and contact details of the Data Controller and DPO
You may contact the Data Controller – Ducati Motor Holding SpA, with registered office at Via Cavalieri Ducati, 3 – 40132 Bologna (BO). The Data Protection Officer, domiciled at the Data Controller’s registered office and reachable at the following email address:
[email protected] , to obtain an updated list of our data processors (i.e., our service providers), the parties to whom the data is disclosed, and to exercise the following rights pursuant to Articles 15 et seq. of the Regulation: access to your data to verify its existence or otherwise and other related information, rectification, erasure, data portability, restriction of processing, and lodge a complaint with the Supervisory Authority (the Italian Data Protection Authority). Additionally, you may, at any time, object to the processing of your personal data where the legal requirements apply.
