You are here


Website Registration:

Rossi S.p.A., with registered office in Modena, Via Emilia Ovest, no. 915 P. VAT no. 01855520365, in its role as Controller, hereby informs you in accordance with art. 13 of EU Regulation no. 2016/679 (GDPR) - that your data will be processed in the following ways for the purposes set out below:

1. Purpose of the Processing

The Controller processes the personal data, i.e. “identifyingdata - for example: name, surname, tax code, address, telephone, e-mail, etc. – required for registration on the Rossi website.
In addition to these data, when connecting to the website, the IT systems and software procedures responsible for the operation of the website indirectly acquire other personal information, whose transmission is implicit to the use of Internet communication protocols (including, by way of example, cookies, IP addresses, domain names of the computers used by users connecting to the website, the URL addresses of requested resources, and the time of the request to the server). These data are only processed for the purposes of performing anonymous statistical surveys.

2. Purpose of the processing

"Identifying" personal data will be processed in order to allow website registration, required for access to specific sections of the site, as well as to supply and manage the various services offered. The Company will process personal data subject to your specific and clear consent, for the following purposes: i) to perform business and marketing activities (including, by way of example, the sending of promotional and advertising material); ii) to send newsletters with updates on anything new on the website, promotions and news about the Rossi world.

3. Method of processing

The processing of personal data is carried out by means of the operations indicated in art. 4 no. 2) of the GDPR, and specifically: collection, recording, consultation, profiling, storage, retrieval, dissemination, communication, erasure or destruction. The personal data are subject to processing both on paper and electronically and/or through automated processing. The Controller will process the personal data for the time required to fulfill the purposes set out above, and in any case will retain them for no more than 2 years from website registration. At the end of this period, your personal data will be destroyed. The processing will in any case be based on the principles of fairness, lawfulness and transparency and will be implemented with the help of tools and procedures which avoid the risk of loss, unauthorized access, use and unlawful distribution.

4. Access to the data

Personal data may be made accessible for the purposes set out in art. 2: - to employees and workers of the Controller, in their role as parties authorized to process the data; - to third party companies and other subjects - for example: professional practices, consultants, etc. - which perform outsourcing activities on behalf of the Controller, in their role as Processors.

5. Communication of personal data

Without the need for express consent - art. 6 lett. b) and c) of the GDPR - the Controller can communicate personal data, for the purposes referred to in art. 2, to: Supervisory Bodies, Judicial Authorities, as well as those parties to which communication is required by law. These parties will process the data in their role as autonomous Controllers.

6. Data transfer

The personal data are stored in paper archives located at the Company's headquarters in Modena and on servers situated within the European Union. It is understood that the Controller, where considered necessary, will have the right to move the servers and archives, including outside the EU. In this case, the Controller henceforth ensures that the transfer of data outside the EU will occur in compliance with the applicable regulatory provisions, subject to the signing of standard contractual terms approved by the European Commission.

7. Nature of data transfer and consequences of refusal to respond

The registration of website users is not required for the provision of some of the services offered. However, in order to deal with any requests from users regarding these services, the users will be asked to send personal data, which will be processed solely for related purposes and for the time strictly necessary.

8. Withdrawal of consent

The consent provided originally can be withdrawn at any time by communicating this request to the Controller, using the contact details given in art. 10. Any processing carried out before this withdrawal will remain valid and lawful.

9. Rights of the data subject

In relation to the processing of personal data, you have the right: -to be informed regarding: the details and headquarters of the Controller; the purpose and methods of data processing; the details and headquarters of the Processor; -to obtain, from the Controller or Processor, without delay:

1) confirmation of the processing of personal data relating to you and communication of these data and their origin in an intelligible form, as well as the basis on which the data were processed; 2) deletion of personal data relating to you, when: i) they are no longer necessary in relation to the purposes for which they were collected, ii) consent was withdrawn and there is no other legal basis for processing, iii) the data were processed in violation of the law, iv) the data subject opposed the processing and there is no legitimate reason for proceeding with the processing v) the controller is subject to a legal obligation to delete the personal data; 3) the updating, the correction or, when of interest, the integration of data; 4) a statement certifying that the operations provided for under points 2) and 3) have been made known, including their contents, to the persons whom the data was disclosed or divulged, except in the event that such fulfillment is impossible or involves the use of means that are clearly non-proportional with respect to the protected right;

- to oppose, for reasons related to a specific situation, to the processing of personal data relating to you, in accordance with art. 6, section 1, letter e) or f); - to oppose the processing of personal data relating to you for direct marketing purposes, - to lodge a complaint with the competent supervisory authority; - to receive the personal data concerning you in a structured and machine-readable format and to transmit those data to another controller without hindrance from the controller to which the personal data were originally provided. In exercising his or her right to data portability pursuant, the data subject shall have the right to have the personal data transmitted directly from one controller to another, where technically feasible; - not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you.

The Controller provides a copy of the personal data being processed; in the case of additional copies requested by the data subject, the Controller can charge a reasonable fee taking into account the administrative costs actually incurred.

10. Method of exercising rights

You can exercise the above rights at any time by sending the following to the attention of the Controller: - a registered letter with return receipt to Rossi, with registered office at Modena, Via Emilia Ovest, no. 915; - an e-mail to the address

11. Children

Registration on the Controller's website is only permitted to over 16s. If information on subjects below this age is recorded, the Controller will immediately delete this information.

12. Controller and Processor

The Controller is Rossi S.p.A., with registered office in Modena, Via Emilia Ovest, no. 915; The up-to-date list of Processors is held at the registered office of the Controller.