In accordance with Article 13 of the EU Data Protection Regulation 2016/679 (“GDPR”)

Dear user, CHATEAU REAL D’OR welcomes you to its website (the “Website”) and invites you to carefully read the following Information (“Information”), issued in accordance with Article 13 of the Regulation ( EU) 2016/679 on the protection of individuals, with special attention to the processing and free movement of personal data (“GDPR”).

This document describes all treatments performed by the Manager, as defined below, through our website.

It is also stated that this Information is exclusively for our website, excluding any other website to which you may be redirected by our website.

In addition, if you were to purchase products or benefit from services provided by REAL DOR EVENTS other than through our website, at the time of their purchase, you will be issued the Specific Information, referred to in art. 13 of the RGPD, on your personal data processed on this occasion.

Who is in charge of the treatment ?

The controller is CHATEAU REAL D’OR La Tuilière – Route des Mayons 83590 GONFARON (the “Responsible”).

The Manager has also appointed a data protection officer (“DPO”), whom you can contact directly to exercise your rights as well as to access any information about the processing of your personal data and / or on this Information, in contacting the

Data Protection Officer (DPO)

CHATEAU REAL D’OR

La Tuilière – Route des Mayons

83590 GONFARON

Tel: 04 94 60 00 56

What personal data is processed?

2.1 Navigation data

During their normal operation, the computer systems and software procedures dedicated to the operation of the website acquire certain personal data, the transmission of which to the person in charge is implicit in the Internet communication protocols.

This is information that is not collected to be associated with identified topics, but which by their very nature could, through elaborations and associations with data held by third parties, identify users .

This category of data includes the addresses or domain names of the computers used by the users who connect to the site, the Uniform Resource Identifier (URI) addresses of the required resources, the time of the request, the method of submitting the request to the server, the size of the response file, the numeric code indicating the status of the server response (completion, error, etc.) and other parameters related to the operating system and the computing environment of the user.

This data is only used to obtain anonymous statistical information on the use of the site and to control its operation; they are immediately erased after their treatment. These data can also be used to identify liability in the event of suspected computer fraud to the detriment of the website.

2.2 Data provided voluntarily by the user

The Manager processes the personal data below, provided by you after entering the input forms of the website:

– personal data for example: first name, last name, address, telephone number, e-mail address, profession and other contact details, images, owned vehicle, renewal project, etc.

– data on the contract concluded,

– bank details (your RIB for example).

What is the purpose and lawfulness of the processing of your personal data?

The Manager processes the personal data you provide after entering the input masks provided on the website for the purposes indicated below.

3.1 Provision of services and sale of products

The manager intends to process your personal data to allow you to access our website, for purposes strictly related to the provision of online services, proposed in turn by the site, including to meet your requests to send information material on the products and services offered by the manager, for the management of test drive requests, to allow access to promotions and offers on the website , to welcome your request to participate in our community, as well as to provide you with the assistance you could ask our customer service.

Nature of data provision: Optional.

Consequences of a refusal to provide data: Refusal to provide data would make it impossible for the person responsible to respond to the requests mentioned in the previous paragraph.

Lawfulness of treatment: Article 6 (1) (b) of the RGPD. Your preventive treatment agreement is therefore not necessary.

Retention period of personal data: For these purposes, your personal data will be processed for the period strictly necessary to satisfy your request; they will then be kept for the period prescribed by the relevant regulations, after the conclusion of the said application.

3.2 Marketing activity on products and services similar to those already requested by the user

The manager intends to process your personal data in order to send you commercial communications of products and services similar to those you have requested and offered by the responsible person also through the responsible persons designated for this purpose in accordance with to art. 28 of the GDPR.

Purpose of the processing: Sending advertising and promotional material as well as the sale of products as well as market research and / or commercial communications.

Nature of data provision: Optional.

Consequences of a refusal to supply data: The absence of data transmission will make it impossible for the manager to send you promotional and marketing communicationsLicéité du traitement: Intérêt légitime.

Retention period of personal data: For this purpose, your personal data will be processed until your decision to oppose their treatment and / or to obtain the cessation of said treatment at any time.

3.3 Marketing Activity

The manager intends to process your personal data in order to send you commercial communications regarding all products and services offered by the responsible person also through the responsible subjects designated for this purpose in accordance with art. 28 of the GDPR.

Purpose of the processing: Sending advertising and promotional material as well as the sale of products as well as market research and / or commercial communications.

Nature of data provision: Optional.

Consequences of a refusal to supply data: The absence of data transmission will make it impossible for the manager to send you promotional and marketing communications

Lawfulness of the treatment: Consent

Retention period of personal data: For this purpose, your personal data will be processed until your decision to oppose their treatment and / or to obtain the cessation of said treatment at any time.

How to process your personal data

The processing of your personal data will be done in accordance with the provisions of the GDPR, using paper, computerized and telematic media with logic closely related to the purposes indicated, and, in any case, via appropriate modalities to guarantee the security and confidentiality provided for in Article 32 of the GDPR.

Recipients of your personal data and subjects that may come to know

For the purposes described in paragraph 3, your personal data will be known to the employees, related personnel and employees of the Manager, who act as authorized subjects for the processing of personal data.

Your personal data may also be transmitted and processed by third parties falling into the following categories:

a) subjects managing the website of the Manager;

b) companies managing the IT system of the Manager;

c) companies and legal and / or tax consultants;

(d) supervisory authorities and bodies, and in general public or private subjects with public functions;

e) suppliers of the Manager;

f) to other companies of the CHATEAU REAL D’OR Group, for marketing, direct sales, market research, statistics assessing the degree of customer satisfaction with the services, products and brands distributed by CHATEAU REAL D’OR and / or other companies of the CHATEAU REAL D’OR Group, as well as the transmission to external subjects (suppliers for example), if this is necessary to allow you to benefit from our services

You may at any time exercise the right of revocation of your agreement. The Manager will no longer be able to continue to use your personal data for purposes for which you have refused your agreement.

In some cases, subjects belonging to the above-mentioned categories operate as separate Treatment Managers, in other cases as processing subcontractors specially designated by the Manager in accordance with Article 28 of the GDPR.

The complete and updated list of subjects who may receive your personal data is available from the Head Office of the Manager or by contacting the DPO.

Your personal data will not be passed on to third parties outside the EU and will not be disseminated.

Minors data

The Responsible Person does not process the personal data of individuals under the age of 16 for the purposes referred to in 3.1, and 3.2.

If the user declares that they are under the age of 16, the fields relating to the collection of the agreement will already be entered negatively.

Geolocation data

The site may collect and process geolocation data for the provision of the services required by the user, but only after prior consent of the person concerned, it may always revoked. In this case, your agreement will be required through a pop-up.

Rights of the person concerned

Concerning the treatments described in this Information, as “concerned person”, you can exercise, according to the conditions foreseen by the RGPD, the rights envisaged by articles ranging from 15 to 21 of the RGPD and in particular:

the right of access- article 15 of the RGPD the right to obtain confirmation that your personal data are being processed or not and to obtain access to your personal data – as well as a copy – and communication in particular, the following information:

purpose of treatment

categories of personal data processed

current and future recipients of your personal data

data retention period or criteria used

rights of the data subject (rectification, erasure of personal data, limitation of treatment and right to oppose the processing;

the right to make a claim;

the right to receive information on the origin of personal data if it has not been provided by the person concerned;

the existence of an automated decision-making process, including profiling;

the right of rectification – Article 16 of the RGPD: the right to obtain, without undue delay, the rectification of inaccurate personal data and / or the insertion of incomplete personal data;

the right to erasure (the right to be forgotten) – Article 17 of the GDPR: the right to obtain, without undue delay, the erasure of personal data when

(a) the data are no longer necessary for the purposes for which they were collected or otherwise processed;

(b) you have revoked your agreement and there is no longer any legal basis for their treatment;

c) you are successfully opposed to the processing of your personal data;

d) the data has been processed illegally;

e) the data must be erased to meet a legal obligation;

(f) the personal data has been collected for the purposes of providing the services of the responsible person’s company as referred to in Article 8 (1) of the GDPR.

The right to cancellation does not apply if the processing is necessary to fulfill a legal obligation or the performance of a mission of public interest or the exercise of public authority or for the purpose of ascertaining, the exercise or defense of a right in court.

the right to limit treatment – Article 18 of the GDPR: the right to obtain the limitation of treatment, where

(a) the data subject disputes the accuracy of the personal data;

(b) the processing is unlawful and the data subject objects to the deletion of the personal data, asking to limit its exploitation;

(c) the data controller no longer needs personal data for processing purposes but it is still necessary for the data subject to ascertain, exercise or defend his rights in court;

(d) the data subject objected to the processing, as mentioned above, pending verification of the predominance of the legitimate grounds of the controller over that of the data subject;

the right to portability of data – article 20 of the RGPD: the right to receive, in a structured format, commonly used and machine-readable, the personal data concerning him provided to the person in charge and the right to transmit these data to another person in charge of the processing without hindering the data controller to whom the personal data have been communicated, if the processing is based on consent and is carried out using automated processes. The data subject also has the right to have his personal data transmitted directly from one controller to another, where technically possible;

the right of opposition – Article 21 of the RGPD the right to oppose, at any time, the processing of your personal data based on the lawfulness of the legitimate interest, including profiling, unless the person in charge demonstrates that there are legitimate and compelling reasons for the treatment that prevails over the interests and rights and freedoms of the person concerned, or for the establishment, exercise or defense of rights in court;

right to lodge a complaint with the French Guarantor Authority for the protection of personal data, CNIL, 3 Place de Fontenoy – TSA 80715 – 75334 PARIS CEDEX 07

The aforementioned rights may be exercised vis-à-vis the person in charge, by contacting the supervisory authority mentioned in the preceding paragraph. The Person in charge will take care of your request and will provide you, without undue delay and, in any case, at the latest within one month of its reception, the information relating to the action undertaken concerning your request.

The exercise of your rights as a person concerned is free under article 12 of the RGPD. However, in the case of claims that are not manifestly or excessively substantiated, in particular because of their repetitiveness, the Manager is entitled to claim a reasonable fee for expenses, in view of the administrative costs involved in managing your request; he may also not respond to your request.

In the end, we inform you that the Manager may request other information necessary to confirm the identity of the person concerned.

COOKIES POLICY

We inform the user that CHATEAU REAL D’OR uses the technology of cookies to make more pleasant the navigation of all the users who visit the site.

Cookies are small files that the site visited by the user sends to the browser, where they are stored and then retransmitted to the site after the visit of the user.

Cookies are used for various purposes including the execution of computer authentication; session tracking; storing information about specific configurations regarding users accessing the server.

By allowing the site to recall the user’s data for the duration of the visit or for subsequent visits, cookies allow the user to surf the pages efficiently, by memorizing their preferences, and allowing last to interact with social networks like Facebook, Twitter, Linkedin, Google +, Instagram while offering the services of Google Maps.

Cookies can also be used to memorize the user’s login data and make automatic recognition of the user (and thus the user will no longer need to enter his username and password each time to access at the site).

The data processing is carried out with electronic tools or, in any case, automated, computer or telematic, with logic strictly related to the aforementioned purposes and, in any case, in order to guarantee the security and confidentiality of the data.

technical cookies (which do NOT require your consent)

According to the regulations in force in France for the use of cookies, the express consent of the user is not always necessary. In particular, technical cookies, that is to say those used only to transmit a communication on an electronic communication network or to the extent strictly necessary to provide a service explicitly requested by the user. In other words, these cookies are essential for the operation of the site or necessary to carry out activities requested by the user.

Among the technical cookies, which do not require express consent for their use, the guarantor for the protection of Italian personal data also includes:

– analytical cookies used directly by the site administrator to collect information, in aggregated form, on the number and manner of visiting the users’ site;

– browsing or session cookies (to authenticate, to make a purchase, etc.),

– Functionality cookies, which allow the user to navigate according to a series of selected criteria (for example, language, products selected for purchase) to improve the service rendered.

profiling cookies (which require your consent) Our site also uses profiling cookies that we can install only with your consent.

Profiling cookies are designed to create user profiles and are used to send advertising messages with the preferences shown by the latter in the context of web browsing. These cookies are used to present content more adapted to users and their interests. They can be used to display targeted advertisements or to limit the number of times advertisements are viewed. Because of the particular invasiveness that these devices may have in the context of the private sphere of users, the European and French regulations provide that the user must be adequately informed about the use of these and express his consent. valid. Profiling cookies require the prior acquisition of the informed consent of the user, which the site acquires in the forms provided for by the regulations through the banner displayed during the first visit and through the Information that allows the user to give or refuse consent.

First and third party cookies

If the cookies received by the user have been directly installed by the site manager that the user is visiting, they are first-party cookies. During the navigation on the site, the user can also receive cookies from different sites or servers (third party cookies) on which certain elements can be found (such as photos, maps, sounds, links specific to pages of other domains) present on the visited site. In this case, these are cookies that are set from a different website than the one the user is visiting.

Blocking cookies

The user can select which cookies to allow through the specific procedure provided below, as well as allow, block or delete (completely or partially) cookies through the specific functions of the browser program (browser): however, if all or some cookies are disabled, it is possible that the site can not be accessed or that certain services or functions of the site are not available or do not work properly and / or the user may be forced to modify or manually enter certain information or preferences each time he visits the site.

If the user wants to modify the settings of his cookies, below are instructions on how to perform this operation with the four most popular browsers:

Microsoft Internet Explorer

Click on the “Tools” icon in the top right corner and select “Internet Options”. In the pop-up window select “Privacy”. Here you can adjust the settings of your cookies.

Google Chrome

Click on the wrench in the top right corner and select “Settings”. Then select “Under the hood” and change the settings for “Privacy”.

Mozilla Firefox

From the tabbed menu in the top left corner select “Options”. In the pop-up window select “Privacy”. Here you can adjust the settings of your cookies.

Safari

From the tab menu in the upper right corner select “Preferences” Select “Security” and you can adjust the settings of your cookies.

As in the banner that appears on the first visit of the site, the consent to the use of all cookies will be provided by the user by selecting the virtual keyboard of acceptance (for example an OK, a check mark, etc.). ) or continuing to browse the site (for example by ignoring the banner / pop-up and performing other operations). The user will also have free access to the link with the Information, with all information relating to cookies (description, purposes and retention), in which the visitor to the site will have the opportunity to express his consent only for certain categories of cookies .