This Privacy Notice explains how personal data (“Data”) of Employees, Representatives and Collaborators of our Dealers, Importers or Distributors (“Data Subjects”) is handled by Iveco Limited (“we”, “us”, “our”, or the “Company”) in compliance with applicable laws and regulations. We are committed to protecting and respecting Data Subject’s privacy.
1. HOW WE OBTAIN DATA
Data that may be collected, processed and stored are the following:
a. Identification and Contact Data
b. Professional Data
c. Computer Device and Authentication Data
Ordinarily, Data will be provided to us by the Data Subject Employer, but in some cases, we may collect Data directly from the Data Subject, from a third party or from public records. We protect Data obtained from such third parties according to the practices described in this privacy notice.
2. HOW WE USE DATA
Data collected may be processed by us for the following purposes:
i. to allow the execution of the activities related to Agreements between us and our Dealer, Importer or
ii. to fulfil our legitimate interest of establishing, maintaining and improving our business relationship with our Dealer, Importer or Distributor;
iii. to comply with legal and regulatory obligations;
iv. to fulfil our legitimate interest of managing access to and security of our tools, systems, assets, data, infrastructures and facilities, delivering training initiatives, organizing company events, delivering company communications, allowing audit activities and litigation management, protecting our and the Iveco Group rights or property, exercising our rights before judicial authorities.
Data may be processed electronically within IT systems, and manually, in paper form. Data will be processed and stored for its whole lifecycle, ensuring security and confidentiality of the same in compliance with principles of fairness, lawfulness and transparency and in accordance with the provisions of applicable laws and regulations.
3. CONSEQUENCES OF FAILURE TO PROVIDE DATA
Submitting Data is never mandatory. However, not providing Data that is necessary to meet the purposes
described in this Privacy Notice may prevent Dealer, Importer or Distributor to fulfil an agreement with us, or
may prevent us from complying with legal obligations. In both cases this may result in termination of the
4. HOW WE SHARE DATA
We are part of the Iveco Group, a global leader in the capital goods sector. Data may be shared and communicated to our subsidiaries and affiliates of the Iveco Group, trusted external parties, service providers, authorised dealers and distributors and business partners, based in and outside the United Kingdom, which are under specific contractual obligation and may use it solely for the fulfilment of the purposes listed above.
Date may be communicated to third parties to comply with legal obligations, to operate and maintain our and the Iveco Group security, protect our and the Iveco Group rights or property, to respond to order of Public Authorities, or to exercise our rights before judicial authorities.
5. HOW WE TRANSFER DATA
In order to perform Data processing activities as detailed above, we may transfer Data in countries outside of the United Kingdom (UK), including storing such Data in digital or physical databases managed by entities acting on our behalf. Database management and Data processing are limited to the purposes of the processing and are carried out according to applicable data protection laws and regulations.
In case Data are transferred outside of the UK, the Company will use any appropriate contractual measures to
guarantee adequate protection of the Data, including – among others – agreements based on appropriate Data
Protection Clauses applicable to the transfer of personal data outside the UK.
6. RETAINING DATA
We maintain Data in our systems and archives for as long as necessary to pursue the purposes described in this Privacy Notice taking into account, when applicable, legal and contractual requirements.
When Data is no longer necessary for the purposes for which it is processed, Data is deleted or kept in a form which does not permit the identification of data subjects, provided that we are not legally required or permitted to hold such Data. We may continue to store Data for a longer period, as may be necessary to protect our interests related to potential liability connected to the provision of the services or products or the processing of Data.
7. DATA CONTROLLER
Iveco Limited, with registered office in Cranes Farm Road, Basildon, SS14 3AD is the Controller for the Data it collects, processes and stores in the framework of this Privacy Notice.
8. DATA SUBJECT RIGHTS
Data Subjects may exercise their rights as defined by applicable laws and regulations, among these:
Data Subjects can exercise the abovementioned rights by contacting us as follows:
In case a Data Subject submits a request, we may need to obtain additional personal information from Data Subjects to verify their identity and contact them, if necessary. This information, together with other Data we already withhold, will then be processed to meet Data Subject’s request, as required by applicable law. Where necessary, certain information may be transferred to other companies within or outside the Iveco Group that act as data processors, in order to comply with the request. Data will be processed for the necessary amount of time to evaluate and handle the request, after which Data will be archived for a suitable time period allowing us to demonstrate that the request has been handled correctly and timely.
9. UPDATES TO THIS PRIVACY NOTICE
This Privacy Notice was updated in January 2022. We reserve the right to amend or update the Privacy Notice
from time to time to reflect changing legal requirements or our processing activities.