the right to contact the competent data protection authority in the event of unlawful processing of the data.the right to oppose the processing of the data where legitimate reasons for this exist, including data processed for marketing and profiling purposes, if this is envisaged the right to receive the data in a structured, commonly-used and easily readable format, as well as the right to transmit the data to another data controller the right to request the suspension of data processing for legitimate reasons the right to impose restrictions on the processing of personal data, i.e.the right to have inaccurate data rectified and/or to have incomplete data completed, and the right to have personal data erased for legitimate reasons the right to rectification and erasure, i.e.the right to obtain confirmation from the company as to whether or not data concerning him or her are being processed, and where this is the case, to obtain access thereto The data subject shall have the following rights: The Personal Data of journalists who access the 'Mediacenter' web area is stored for 24 months from the user's last access to the website Data collected during press events is stored for 1 year.Īlso, such Data may be kept for a longer period, in order to be able to manage any disputes related to the provision of the Service. The Data Subject can contact the Data Protection Officer at the email address OF PERSONAL DATA The Data Controller is Ferrari S.p.A., with registered office at via Emilia Est, no. THE DATA CONTROLLER AND THE DATA PROTECTION OFFICER These measures may include agreements based on standard contractual clauses for the transfer of data outside the EEA, as approved by the European Commission, among other methods. In cases where the data is transferred outside the EEA, the Company will take all appropriate contractual measures necessary and appropriate in order to ensure adequate levels of data protection. The management of the databases and the processing of the data therein must comply with the purposes for which this information was collected, and such activities shall be carried out in strict compliance with the applicable laws on the protection of personal data. This may occur via the insertion of the data into databases managed by third-party companies operating on behalf of the Company.

Within the context of the Company's contractual relations, the Data may be transferred outside the European Economic Area (“EEA”). TRANSFER OF DATA OUTSIDE THE EUROPEAN ECONOMIC AREA The data may be disclosed to third parties in order to comply with legal obligations or orders from public authority bodies, or to allow the company to exercise its rights in court. The Data may be processed by companies controlled by Ferrari. The data may be processed by parties operating on behalf of the Company in line with specific contractual obligations, in EU member states or in countries outside the EU. However, failure to provide the Data will render it impossible to provide the Service. The provision of personal data is voluntary.

Processing of the Data for each of the aforementioned purposes may be carried out using paper, automated or electronic means.ĬONSEQUENCES OF FAILURE TO PROVIDE THE DATA The legal basis for processing the Data is the performance of the Service. The personal data provided by the data subject (the 'Data') will be processed to provide the requested service of subscription to the web platform which includes regular updates on Ferrari news, downloads of press releases, photos and videos, participation in press events and also for any requests to use the individual services referred to in point 3 of the General Terms and Conditions of the website (the 'Service'). PURPOSES AND METHODS OF PROCESSING PERSONAL DATA In compliance with current legislation regarding personal data processing, as provided for by the provisions of Articles 13 and 14 of EU Regulation 2016/679 (' GDPR'), this statement is provided to describe the personal data processing activities carried out by Ferrari S.p.A.