Privacy Policy

NOTICE
pursuant to article 13 of Regulation (EU) 2016/679 ("GDPR")

 

Dear User, we invite you to pay attention to the following Notice ("the Notice"), issued pursuant to article 13 of Regulation (EU) 2016/679 on the protection of natural persons with regard to the processing of personal data, and on the free movement of such data ("GDPR"). This document contains a description of all the processing carried out by the Data Controller, as defined below.
Please note that the Notice only concerns the APP MOTO GUZZI; therefore any web page to which you may be redirected from the APP MOTO GUZZI is deemed to be excluded.
In addition, if you purchase products or use Piaggio services through official Piaggio channels rather than through the APP, at the time of such purchase or use you will be issued with a specific Notice pursuant to art. 13 of the GDPR relating to your personal data processed at that moment.

 

1. The Data Controller

 

The Data Controller is Piaggio & C. S.p.A., whose registered office is at Viale Rinaldo Piaggio 25, Pontedera (PI) ("the Data Controller").

 

The Data Controller has also appointed a Data Protection Officer ("DPO"), whom you may contact directly to exercise your rights and to receive any information concerning the processing of your personal data and/or concerning this Notice, by writing to:

Data Protection Officer – DPO
Viale Piaggio 25
56025 PONTEDERA (PI)
email: dpo@piaggio.com
Fax: +39 0587272961
Tel: +39 0587272495

 

2. The personal data we process

 

2.1 Data provided voluntarily by the user

 

The Data Controller processes the following personal data:
personal details: such as first name, surname, date of birth, diving license number, profile photo, address, telephone number, Country, e-mail address and other contact details;
usage data - the data collected automatically by the Application including: the identification of the device where the app is installed that connects to MOTO GUZZI, the time of the request to the servers, the method used to submit the request the server, the file size obtained in response, the numerical code indicating the status of response from the server (successful, error, etc.) the country of origin, a series of technical data related to the use of MOTO GUZZI associated to the App including:

 

  • Vehicle name
  • Model
  • Displacement
  • Production year
  • VIN
  • Total km
  • Last service check
  • Vehicle picture
  • Average speed of the vehicle during the trip
  • Average consumption of the vehicle during the trip
  • Distance traveled during the trip
  • Start date and duration of the trip

 

Usage of your location

 

You can authorize the app to record your location as long as you are actively using the app or it is open in the background. To use the app, you do not have to agree to record your location but certain features of the app depend on the location information about your mobile device and your vehicle being recorded. If you authorize the app to use your location, navigation via the app is possible (turn-by-turn, POI search and position display on the navigation maps). If you allow us to record your location, your journeys will also be recorded in the "activities" section. All data on the route can be viewed and deleted by the user in the app at any time. Deleting the vehicle profile also removes all associated activities. Please note, in this context, that the continued activation of GPS running in the background can significantly reduce the battery life of your mobile device. If you have agreed to the recording of your location information, the app will store your location data locally on your device, without further access by the Data Controller or any third party, indefinitely. If you decide not to release the information on your location for the app or the “activities” function is not switched on, the app will no longer record it.
To take advantage of some features of the App data on your geographical location are required and in some cases your movements are tracked by the GPS system of your device Apple or Android. In particular, through the device on which the App is installed, you can activate or deactivate at any time and at your discretion any the functionality related to the geo-location, the recording of your routes, possibility to share of routes with other users of the App, the service for locating MOTO GUZZI workshops, recording driving parameters, receiving notices on maintenance and the state of the bike. The data related to your geographical position and your travels are processed by PIAGGIO only to activate the functionality of the App when you request such features. The data is recorded both on your device and on PIAGGIO’s servers, so that you can access and use them through the MOTO GUZZI app platform in case of subsequent replacement or loss of your device. You can at any time delete the data recorded through the App itself or deleting your complete account. After 12 months from the last access to the App or after 60 days from the date of deactivation / uninstallation of the App, the related data recorded by the App on PIAGGIO's servers will be deleted. The other personal data related to your interaction with PIAGGIO, also through the App, will be kept by PIAGGIO within the limits permitted by law and in compliance with PIAGGIO’s Data Retention Policy. For further information, please contact PIAGGIO or its Data Protection Officer at any time.

3. The purposes for which your personal data is processed and the legal basis of processing

 

The personal data you provide processed by the Data Controller for the following purposes.

 

3.1 Provision of services

 

The Data Controller wishes to process your personal data in order to give you access to the services offered by the App. Nature of the data processing: necessary for the execution of the services.
Consequences of refusal to provide the personal data: failure to provide the personal data will make it impossible for the Data Controller to meet your requests as described in the first paragraph above. Legal basis of the processing: Article 6 (1) (b) of the GDPR. It is therefore not necessary to obtain your prior consent to allow processing.
Personal data retention period: Your personal data obtained for these purposes will be processed for the time strictly necessary to comply with your request and will be subsequently retained for the time required by the applicable regulations after such compliance, and in any case for a maximum period of ten years.

 

3.2 Marketing activities on products and services similar to those already requested by the User

 

The Data Controller wishes to process your personal data in order to send you commercial communications relating to products and services similar to those requested by you and offered by the Data Controller and through the Data Processors duly appointed pursuant to art. 28 of the GDPR.
Purposes of the processing: Sending advertising material, promotion and sale of products, market surveys and research and/or commercial communications.
Nature of the data processing: optional.
Consequences of refusal to provide the personal data: failure to provide the personal data will make it impossible for the Data Controller to send you promotional and marketing communications.
Legal basis of the processing: Legitimate interest of the Data Controller to advertise products or services for which you have expressed an interest or a preference in the past.
Personal data retention period: Your personal data obtained for this purpose will be processed until you decide to object to the processing and/or to obtain termination of the processing at any time, and in any case for a maximum period often years.

 

3.3 Marketing activities

 

The Data Controller wishes to process your personal data in order to send you commercial communications relating to all products and services offered by the Data Controller and through the Data Processors duly appointed pursuant to art. 28 of the GDPR. Purposes of the processing: Sending advertising material, promotion and sale of products, market surveys and research and/or commercial communications.
Nature of the data processing: optional.
Consequences of refusal to allow data processing: Failure to give consent will make it impossible for the Data Controller to send you promotional and marketing communications.
Legal basis of the processing: Consent
Personal data retention period: Your personal data obtained for this purpose will be processed until you decide to object to the processing and/or to obtain termination of the processing at any time, and in any case for a maximum period of ten years.

 

4. The methods used to process your personal data

 

Your personal data will be processed in compliance with the provisions of the GDPR using paper, computer and telematic means, using methods strictly related to the specified purposes and in all cases guaranteeing security and confidentiality in accordance with the provisions of article 32 of the GDPR.

 

5. Persons to whom your personal data may be communicated or who may become aware of it

 

To fulfil the purposes described in point 3 above, your personal data will be known by the Data Controller's personnel, collaborators and by its contractors, all acting in the capacity of persons authorised to process personal data.
In addition, your personal data will be communicated and processed by third parties belonging to the following categories:

 

  1. 1. Persons used by the Data Controller to manage the App
  2. 2. Companies that manage the Data Controller's computer system
  3. 3. Companies and consultants providing legal and/or financial advice
  4. 4. Authorities and supervisory and control bodies, and in general public or private entities with functions relating to public law
  5. 5. Persons used by the Data Controller for various reasons to provide the requested service
  6. 6. Other Piaggio Group companies, for the purposes of marketing, direct sales, market surveys and for statistical processing such as monitoring the degree of customer satisfaction in relation to the services and products offered by Piaggio and/or other Piaggio Group companies, as well as for communication to third parties (e.g. suppliers) if this is necessary to enable you to benefit from our services.

 

You have the right to revoke the consent you may have provided at any time. This will make it impossible for the Data Controller to continue to use your personal data for the purpose in respect of which you have refused consent.
In some cases, the persons belonging to the foregoing categories operate in complete autonomy as separate Data Controllers; in others, they operate as Data Processors specifically appointed by the Data Controller in compliance with article 28 of the GDPR.
A complete and updated list of the persons to whom your personal data may be communicated can be requested from the registered office of the Data Controller or by contacting its DPO.
Your personal data will not be transferred to third parties outside the European Union and will not be disseminated.

 

6. Data of minors

 

The Data Controller does not process the personal data of persons under the age of 16 for the purposes referred to in sections 3.1 and 3.2 above.
If the User says that he/she is less than 16 years old, the field relating to the giving of consent will be pre-completed with a negative response.

 

8. Your rights as a data subject

 

In relation to the processing described in this Privacy Notice, as a data subject you can, under the conditions specified by the GDPR, exercise the rights enshrined in articles 15 to 21 of the GDPR and, in particular, the following rights:

 

right of access: the right to obtain from the Controller confirmation as to whether or not personal data concerning him or her are being processed, and, where that is the case, access to the personal data and information regarding the source, the purposes, the categories of personal data concerned, the recipients to whom the personal data have been or will be disclosed/transferred, etc.;

 

right to rectification: the right to obtain from the Controller, without undue delay, the rectification of inaccurate personal data, as well as to have incomplete personal data completed, including by means of providing a supplementary statement;

right to erasure (“right to be forgotten”): the right to obtain from the Controller the erasure of personal data without undue delay where one of the following grounds applies:

 

  • the personal data are no longer necessary in relation to the purposes for which they were collected or otherwise processed;
  • the data subject withdraws consent on which the processing is based and there is no other legal ground for the processing;
  • the data subject objects to the processing and there are no overriding legitimate grounds for the processing
  • the personal data have been unlawfully processed;
  • the personal data have to be erased for compliance with a legal obligation;

 

right to object to processing: the right to object at any time to processing of personal data which is based on a legitimate interest of the Controller and/or to the processing for marketing purposes, including profiling. Where the data subject objects to processing for direct marketing purposes, the personal data shall no longer be processed for such purposes. In some cases, we may demonstrate that we have compelling legitimate grounds to process your information which override your rights and freedoms;

 

right to restriction of processing: the right to obtain from the Controller restriction of processing where the accuracy of the personal data is contested by the data subject (for a period enabling the Controller to verify the accuracy of the personal data), if the processing is unlawful and/or the data subject objected the processing;

 

right to data portability: the right to receive the personal data in a structured, commonly used and machine-readable format and have the right to transmit those data to another controller, only where the processing is based on consent or contract and only for the data processed by automated means;

 

right to lodge a complaint with a supervisory authority: without prejudice to any other administrative or judicial remedy, every data subject shall have the right to lodge a complaint with a supervisory authority, in particular in the Member State of his or her habitual residence, place of work or place of the alleged infringement if the data subject considers that the processing of personal data relating to him or her infringes the applicable privacy laws. For Italy, the competent authority is the Garante per la Protezione dei Dati Personali

 

No fee usually required

You will not have to pay a fee to access your personal information or to exercise any of your other rights. We may charge a reasonable fee if your request for access is clearly unfounded or excessive. Alternatively, we may refuse to comply with the request in such circumstances.

 

What we may need from you

We may need to request specific information from you to help us confirm your identity and ensure your right to access the information or to exercise any of your other rights. This is another appropriate security measure to ensure that personal information is not disclosed to any person who has no right to receive it.

 

CHANGES TO THIS PRIVACY POLICY

At any time Piaggio may change this Policy or modify or withdraw access to the Policy with or without notice. In case the material or adverse changes are made to this Policy, Piaggio will post a notice advising of such change at the beginning of this Policy for 30 days. We recommend that you re-visit this Policy from time to time to learn of any such changes to this Policy.