Privacy Notice pursuant to Article 14 of Regulation (EU) 2016/679 (GDPR)
This privacy notice is provided to inform you about the processing of your personal data.
1. Data Controller – Identity and Contact Details
The Data Controller is Volkswagen Group Italia S.p.A. (hereinafter "VGI"), headquartered at Viale G. R. Gumpert 1, 37137 Verona, Italy. Email: privacy@volkswagengroup.it.
VGI is the authorized distributor for vehicles, accessories, and spare parts under the brands Volkswagen, Škoda, Audi, SEAT, and Volkswagen Commercial Vehicles.
2. Data Protection Officer (DPO) – Contact Details
The DPO appointed by VGI, your designated point of contact for any data protection matters, can be reached via:
Email: dpo@volkswagengroup.it;
Mail: Volkswagen Group Italia S.p.A., Viale G. R. Gumpert 1, 37137 Verona, attn. Data Protection Officer
.
3. Purpose and Legal Basis for Processing
Your data has been shared with VGI by a third party, specifically SKICAROSELLO CORVARA CONSORZIO, Str. Col Alt 40, 39033 Corvara in Badia (BZ), and SKILINE by Alturos Destination GmbH, Lakeside B03, 9020 Klagenfurt, Austria. These entities collected your data independently and obtained your consent to forward it to VGI for marketing purposes.
Only basic personal data, such as contact and identification information, is processed.
Your personal data is processed for the following purposes:
a) Direct and indirect marketing communications from VGI;
b) Fulfillment of legal obligations;
c) Protection and defense of legal rights, both judicial and extrajudicial.
Marketing activities (point a) may include market research, customer satisfaction surveys, advertising, direct sales, promotional communications, and interactive messages.
Processing under point b) is mandatory under applicable laws. Failure to comply may result in legal sanctions.
Processing under point c) is based on VGI’s legitimate interest, as recognized under Recital 47 of the GDPR.
Consent is required solely for processing under point a).
4. Data Recipients
For the purposes described above, your data may be shared with:
1. Companies within the Volkswagen Group Italia network;
2. Volkswagen AG (Germany), ŠKODA AS (Czech Republic), Audi AG (Germany), SEAT S.A. (Spain);
3. IT service providers, software consultants, and data processors;
4. Research and statistics firms for market surveys or customer feedback;
5. Advertising, marketing, and event agencies operating in Italy;
6. Public authorities, legal advisors, and consultants for the protection of legal rights;
7. Professionals and business consultants assisting in VGI’s operations.
Only categories of recipients are listed due to frequent updates. An up-to-date list may be requested from the Data Controller via the contacts listed in Section 1.
5. Data Transfers to Third Countries
No personal data is transferred to non-EU or third countries under the scope of this notice.
6. Data Retention
Your data will be retained as follows:
- For marketing purposes (point a): 24 months from the date of consent;
- For legal obligations (point b): as long as required by law;
- For legal claims or defense (point c): up to 10 years from collection, or longer if required by applicable statute of limitations.
7. Data Subject Rights
You have the right to:
a. Access your personal data and obtain relevant information (purposes, categories, recipients, retention, etc.);
b. Request rectification, erasure, or restriction of data processing;
c. Object to processing based on your specific situation;
d. Receive your data in a structured, commonly used, and machine-readable format (data portability);
e. Withdraw consent where applicable;
f. File a complaint with the data protection authority (for Italy: Garante per la Protezione dei Dati Personali – http://www.garanteprivacy.it;
You may exercise your rights by contacting the Data Controller at the addresses provided in Section 1.
Requests will be handled without undue delay and, in any case, within one month. In complex cases or in the event of numerous requests, the deadline may be extended by up to two months.