Information Under Legislative Decree 196/2003 which provides for the protection of persons and other subjects regarding the processing of personal data.

We wish to inform you that the personal data you provide or otherwise acquired in the context of our activity may be processed by GrandTour Collection on paper and / or with the aid of IT tools in compliance with the aforementioned legislation for management purposes, sending documentation technical, statistical, commercial, marketing, promotional or commercial communications.

Pursuant to art. 7 of Legislative Decree 196/2003, at any time you can have access to the same data, request the modification, cancellation or oppose their use. The data controller is Grand Tour Collection in the person of Michela Borrazzi, via dei Coronari 32, 00186 Rome, Italy e-mail: [email protected]

1.  Subject of information:

The information covered by this communication concerns your common personal data provided by yourself and all data, including sensitive data (that is to say, revealing religious beliefs, political opinions, membership in political parties, trade unions, associations or organizations) , political and trade union, as well as the data suitable to reveal the state of health) given by you directly, as well as acquired in the future both by us directly or through third parties or through the use of electronic, telematic systems and with any other means made available by technology and technological evolution in compliance with the law.

2. Purpose of the processing:

The processing of your data takes place for purposes intended to achieve our social goals and, in any case, connected and instrumental to the activities of our company, such as:

purposes connected to the acquisition of information and the updating of our registers, useful for the activation or continuation of relations with our company;

purposes related to the performance of technical, logistic and other activities on our behalf and to the implementation of the services provided by our company;

purposes related to order management and payment processing;

purposes related to communication with the customer (concerning orders, products, services, offers and promotions) and the management of the customer area (wish lists, reviews, satisfaction);

purposes related to the prevention and unmasking of fraud and abuse to the detriment of our website.

3. Management of mail and web domains :

In particular for the services related to the management of mail and web domains, all information is potentially accessible by our staff solely to guarantee the restoration of the data you own. GrandTour Collection is absolutely not responsible for their content, nor can it use this information for purposes other than that indicated.

CALLS:

Calls made to the Grand Tour Collection numbers may be recorded for quality control purposes and for internal staff training.

E-MAIL AND NEWSLETTER:

To communicate with the customer, confirmation of receipt of an e-mail message is required. If you do not wish to receive e-mail or other mail from the GrandTour Collection, you can review the newsletter settings in the customer area.

COOKIES:

GrandTour Collection, using "cookies", receives and stores certain categories of personal data every time a user interacts, through his browser, with the site or with advertisements and other content presented with reference to the Grand Tour Collection on other websites.

Cookies are alphanumeric identifiers that are transferred to the computer's hard drive via the web browser in order to allow GrandTour Collection to recognize your browser and provide services such as personalized suggestions, personalized advertising on other websites and store items in your shopping cart among one visit and the other.

From the browser it is possible to manage the settings relating to the saving of cookies. However, since cookies allow you to take advantage of some basic site features, it is recommended to leave them enabled. For example, by blocking or rejecting cookies, you will not be able to add items to the cart, log out or use any GrandTour Collection product and service that requires registration.

When you have cookies enabled, you must make sure to log out of the account when you finish using a computer shared with other users.

You can view the Cookie Policy.

4. Processing methods:

The personal data you provide will be entered into a database and / or stored in paper archives or on magnetic media and will be processed by us manually or with the aid of electronic and telematic systems and with any other means made available by the technique and from technological evolution in compliance with the law.

The data will be processed lawfully and correctly and, in any case, so as to guarantee the security and confidentiality of the data.

The data you own and stored in the GrandTour Collection in digital format, will instead be stored separately and will be accessible only on your request and for maintenance / recovery purposes. Not being able to distinguish the data that GrandTour Collection can potentially access, they will be treated as sensitive data, and the corresponding IT security measures will be adopted for your protection.

5. Mandatory and optional nature of the provision and consequences of any refusal:

The provision of data by you for the purposes referred to in points 2-a and 2-b mentioned above is mandatory.

Your refusal to provide data or part of it may lead to the impediment in the execution of the relationship.

The provision of data could also represent a burden necessary for you in order to enable us to fulfill legal obligations related to civil, fiscal and accounting regulations.

The provision of data by you for the purposes referred to in point 2-c above is optional.

6. Subjects to whom data can be communicated:

Your personal data may be communicated by us, as far as their respective and specific competence is concerned, to Entities and in general to every public and private subject, associated companies, subsidiaries, controlling companies with respect to which there is an obligation for us to communicate and this also for the purpose of the most correct fulfillment of any respective obligation (even of an instrumental nature) in any case connected or referable to present and future relationships that will go with you to establish, imposed by laws and / or regulations or to achieve the aforementioned purposes. The data in our possession will not under any circumstances be disseminated.

7. Rights of the interested party:

With respect to the data in our possession, it is your right to exercise all the rights recognized by the art. 7 of Legislative Decree 196/2003, which for your convenience we reproduce in full:

7.1. The interested party has the right to obtain confirmation of the existence or not of personal data concerning him, even if not yet recorded, and their communication in intelligible form.

7.2. The interested party has the right to obtain the indication:

the origin of personal data;

of the purposes and methods of processing;

of the logic applied in the case of processing carried out with the aid of electronic instruments;

of the identification data concerning the data controller, data processors and the representative designated pursuant to article 5, paragraph 2;

the subjects or categories of subjects to whom the personal data may be communicated or who can learn about them as appointed representative in the State, managers or appointees.

7.3. The interested party has the right to obtain:

updating, rectification or, when interested, integration of data;

the cancellation, transformation into anonymous form or blocking of data processed in violation of the law, including those for which conservation is not necessary in relation to the purposes for which the data were collected or subsequently processed;

the attestation that the operations referred to in letters a) and b) have been brought to the attention, also with regard to their content, of those to whom the data have been communicated or disseminated, except in the event that such fulfillment occurs it proves impossible or involves a manifestly disproportionate use of resources with respect to the protected right.

8. The interested party has the right to object, in whole or in part:

for legitimate reasons to the processing of personal data concerning him, even if pertinent to the purpose of the collection;

to the processing of personal data concerning him for the purpose of sending advertising materials or direct sales or for carrying out market research or commercial communication.