Privacy Policy
Last updated: June 2020 · Version 1.0
This privacy policy provides you with all the information necessary to understand how your personal data will be processed when you access a website or a mobile application ("app") managed by Campari Group. It also explains how your personal data is used, shared and how you can contact us in case of any need with regards to your personal data.
The type of personal data processed, and the purposes of the processing may vary depending on your choices, consent(s) and the services offered (and used by you) by the website or app which you interact with. For example, the way your personal data is collected will vary if you are interested in participating in an event proposed by one of our brands or if you request to receive a newsletter.
Data Controller
The company belonging to Campari Group that is responsible for the processing of personal data depends on the country you are connected from and how you interact with our websites and apps. In this privacy policy the relevant Campari Group company is referred to as "Data Controller". Please see the section "Local Companies" below to check which is the relevant Data Controller.
Data Protection Officer
The Data Protection Officer can be reached at: gpdp.office@campari.com
Categories of Personal Data
- Contact details including name, email, telephone number, shipping and billing address.
- Login and account information, including screen name, password and unique user ID.
- Other personal details including gender, hometown, date of birth.
- Payment or credit card information and purchase history.
- Images, photos and videos.
- Personal preferences and other information related to you and your personal life.
- Technical navigation data (e.g. IP address), in accordance with your cookie preferences.
Data Source
The data is provided by you.
Purpose of the Processing, Legal Basis & Data Retention
Reply to your information request
Provide you with the information you have requested through a contact form, e.g. when you make general questions like "where can I find a given product?".
Legal basis: Legitimate interest. Retention: For the time necessary to process your request or, at maximum, for one year.
Newsletters
Send, by e-mail, communications of an informative nature ("Newsletter") to those who explicitly request it, by entering their e-mail address, name and surname in the appropriate data collection form.
Legal basis: Execution of a (free) contract to which you are a party. Retention: Until you ask to unsubscribe from the newsletter service.
Competitions / Events
Allow, with regard to the required data indicated as mandatory(*), the registration to the competition, as well as the management of the organizational activities related to the competition.
Legal basis: Execution of a (free) contract to which you are a party. Retention: One year after the award of the prize. In some countries, we need to retain such information for a longer period due to law requirements.
Direct marketing
Contact you for commercial and/or promotional purposes, e.g. by sending you — by automated means of contact (such as SMS, MMS and e-mail) — promotional and commercial communications relating to the services/products offered by the Controller.
Legal basis: Consent (optional and revocable at any time). Retention: Until you withdraw your consent.
Profiling
Perform analysis of your preferences, habits, behaviours, interests inferred, for example, from online clicks on post/contents of Data Controller's websites and social pages, in order to send you personalized commercial communications and/or carry out targeted promotional actions.
Legal basis: Consent (optional and revocable at any time). A specific consent is acquired only for those countries where the applicable law requires a specific consent to make marketing campaigns based on profiling activities. Retention: Until you withdraw your consent.
Aggregated research
Understand customer behaviour and preferences for aggregated research and analysis. For more information, see "Understand Customer Behaviour and Preferences" below.
Legal basis: Legitimate interest. Retention: Until you request to object to such processing, i.e. to be excluded from our analysis. Information acquired on social networks to make statistical reports is updated on a regular basis.
Communication media (subscription)
Allow the subscription of the disclaimer for the publication of your photographic images or videos.
Legal basis: Execution of a (free) contract to which you are a party. Retention: Duration of the contract and, after termination, for a period required by the applicable law.
Communication media (usage)
Use, in the manner specified in the disclaimer, the video and/or photographic image shooting.
Legal basis: Execution of a (free) contract to which you are a party. Retention: As they are subject to dissemination, it is not possible to define a data retention period.
Optimize our websites/apps
In order to run our websites/apps we install cookies to optimize the performance and personalize the content.
Legal basis: For the installation of necessary cookies, we rely on our legitimate interest; for the optional ones on your consent. Retention: Depends on the cookie installed (see cookie policy of the website/app).
Process your order
In the websites/apps in which you can purchase our products, we collect your data to correctly process the order.
Legal basis: Execution of a (free) contract to which you are a party. Retention: For the time necessary to comply with applicable financial laws.
Evaluate customer satisfaction
We collect your data to evaluate our level of services (e.g. competitions, events, product sales) after an interaction with you.
Legal basis: Legitimate interest. Retention: At maximum for one year.
Account
Let you create an account on our websites/apps.
Legal basis: Execution of a (free) contract to which you are a party. Retention: Until you delete your account.
Legal obligation
Fulfilment of obligations to comply with the applicable law (e.g. financial obligations).
Legal basis: Comply with legal obligations. Retention: The period of time required by the applicable law.
We may also use your personal data in other ways and will provide specific notice at the time of collection and obtain your consent where necessary. Once the above retention periods have expired, the data will be destroyed, deleted or anonymized.
Nature of the Provision of Data
The data you provide is acquired by us on a voluntary basis. If you refuse to provide us with information necessary to provide a service requested by you, we will not be in the position to provide such service. Some technical information could be automatically collected when you connect with our websites and apps.
Recipients of Personal Data
The data may be processed by external parties operating as data controllers such as, by way of example, Authorities and supervisory and control bodies and, in general, parties, including private parties, entitled to request the data, Public Authorities that expressly request the Controller for administrative or institutional purposes, in accordance with the provisions of current national and European legislation, as well as persons, companies, associations or professional firms that provide assistance and advice. Furthermore, when you participate in a competition or event, your data may be published on social media channels (e.g. Facebook, Instagram, YouTube), in accordance with the relevant terms & conditions. As a result, such social media companies are operating as autonomous data controllers.
The data may also be processed, on behalf of the Controller, by external subjects designated as Processors of the processing, to whom appropriate operational instructions are given. These subjects are essentially included in the following categories:
- companies offering maintenance services for websites and information systems;
- companies offering support in carrying out market studies;
- companies that provide management and maintenance services for the Controller's database;
- companies offering e-mail services;
- companies offering management services for the marketing automation platform;
- companies that provide organizational support and reception services for events.
Where third party cookies are installed (with your consent), your data may be processed by third parties to whom the data is communicated.
Data Transfer
Depending on the Data Controller, your personal data could be processed in different countries. Nevertheless, if the Data Controller has legal offices in Europe, the data will be processed within the European Union.
Data Subjects' Rights
You may exercise specific rights on personal data collected by contacting the Data Controller at the following email address: gpdp.office@campari.com.
Right to Claim to the Supervisory Authority
If you think that your personal data has been unlawfully processed, depending on the applicable law, you have the right to lodge a complaint to the competent data protection authority.
Automated Decision-Making
Personal data collected will not be subject to any automated decision-making techniques that are able to negatively affect you in any way.
Understand Customer Behaviour and Preferences
We use some publicly available personal information to take strategic marketing and communication decisions based on aggregated analysis of customer interests, preferences and behaviour. In fact, we adopt so-called "social listening tools" that collect and analyse publicly available information shared by users on social networks. For example, through such tools, we will be able to understand how a given word or hashtag (e.g. #cocktails) is used on social networks and how people react to a post made by us on our social media channels.
Local Companies
The Data Controller varies by country. The full list of local Campari Group companies and addresses is available in the master Campari Group Privacy Policy at magnumhubtv.com/privacy_policy.pdf.