INFORMATION DOCUMENT ON THE USE OF COOKIES

1.

WHAT ARE COOKIES?

The Site uses “cookies” and similar technologies. Cookies are small text files which are downloaded by the browser to the navigation software used by the User when he/she visits an internet site. The cookies are then successively retransmitted during the navigation session (“temporary cookies”) or on every successive visit made by the User (“permanent cookies”) to the site they came from or to any other site capable of recognising that specific cookie. This allows the site to recognise the navigation device of the individual user.

2.

What they do

They are used by site managers to, amongst other things, remember the User’s log-in data and then automatically recognise them (thus removing the need to retype username and password every time), to manage services such as home banking and online shopping, to personalise a website, to make navigation easier for the user, and, by checking the number of times the various web pages are accessed, present the information most frequently requested by the User more effectively.

Sometimes cookies can come from third parties who are different from the manager of the site visited by the User (“third party cookies”). These cookies may or may not contain personal information about the user.

3.

The main types:

Cooks can generally be divided into 2 main categories:

Technical cookies, which include:

(1)navigation or session cookies: these are essential to allowing the User to navigate the site and use its services. It would be impossible, in fact, to provide the services requested by the User without them. Examples are cookies designed to make home banking transactions secure, for instance,  or cookies that save purchases in online shopping as well as those that facilitate the downloading of webpages visited;

(2)  Performance/analytical cookies:  these gather information relating to the pages most often visited by Users, and error or malfunction messages relating, for example, to  incorrect displaying of web pages; they don’t collect personal information regarding individual Users, simply aggregate information useful to improving the functioning of the site;

 

(3)Cookies functional to the usability of the Site and services (“functionality cookies”): these allow the site to remember certain information chosen by the User or referable to him/her (for example, user name, pre-selected language, nationality, preferences) to improve the navigation experience; they can also allow the recording of choices made regarding the layout of pages visited or facilitate the provision of services requested by the User (for instance,  by saving the geographical area the User comes from and automatically linking the services requested to it). They gather personal data which normally remain anonymous;

Profiling cookies, which include:

(1)   Targeting or marketing cookies: these remember the browsing patterns of the User with the aim of providing the latter with advertising messages that correspond to his/her interests and preferences or to avoid resending the same advertising message as well as to measure the efficacy of advertising campaigns through statistical analysis of data;

 

(2)  Third party targeting or marketing cookies: these are used in certain cases by advertising operators with the consent of the site manager and can supply not just the manager of the site but also third-party advertisers with information on the User’s navigation habits.

COOKIES USED BY THE SITE

1.

Data Controller and Data Processor

As manager of the Site, the Data Controller for the information gathered using cookies is: Ferrari S.p.A., whose legal headquarters is at Via Emilia Est no. 1163, Modena, and whose operational headquarters is at Via Abetone Inferiore no. 4, 41053 Maranello (Mo); c.f./P. IVA 00159560366; REA MO- 88683.

With reference to the personal data processed:

  • for Ferrari S.p.A., the in-house Data Processor is the Director of Organisational Development;
  • [Triboo Digitale S.r.l. ] is the Data Processor for Ferrari in relation to [the sending of newsletters and promotional and informational communications to Users ].

Any requests relating to the personal data processed by Ferrari S.p.A. may be addressed in writing to the in-house Data Processor at the following email address: customercare@ferraristore.com;

2.

Purposes of processing

The Site uses cookies belonging to the following categories for the purposes indicated:

 

Technical cookies:

1 – navigation or session cookies to allow web pages be downloaded, to allow the products added to shopping carts to be saved;

2 – performance or analytical cookies to improve the functioning of the site;

3 – functionality (‘usability’) cookies which remember the User’s country of original, selected language and list of favourite cars.

Ferrari_preferred_language: used to remember the language-country pair selected by the user

diff_ecosystem: used to check difference between navigation language and geographical area of provenance  (en_us ecosystem only)

Localization_Hint: used to display warning message that navigation language differs from geographical area of provenance  ( en_us ecosystem only)

 

Profiling cookies:

4 – marketing cookie sent by the Site manager to remember the User’s navigation habits and send the User advertising messages that mirror their interests and preferences as well as to avoid resending the same publicity messages. They also measure the efficacy of marketing campaigns through statistical analysis of data;

 

5 – marketing cookies of third parties sent by publicity operators for the marketing purposes indicated in point 4 with the aim of providing the site manager and third-party publicity operators with information on the navigation habits of the User.

The links to web pages containing information and consent requests of third parties which drop the cookies through the Site are as follows:

Google Analytics Cookie Types

_utma

This cookie is used to determine new and returning visitors.  It has an expiration time of 2 years.  If the ga.js library is executed and no _utma cookie exists, this will be recorded as the users’ first visit and a _utma cookie will be set.  If a _utma cookie is already in place, the expiration time is reset and the user is recorded as a return visitor.

_utmb

This cookie is used to determine a new session.  The cookie is set when the ga.js library executes and there is no _utmb cookie in place.  It has an expiration time of 30 minutes, therefore if a user is inactive for a period longer than this, a new cookie will be set when the library executes and the interaction will be recorded as a new session.

_utmz

This cookie is used to determine the traffic source, medium, campaign name and campaign term which delivered the user to your website.  It is created when the javascript library executes and expires after 6 months.  This helps Google collect the data which can then help them to determine which traffic sources assist conversions within the multi-channel section of Analytics.

_utmc

Not used in ga.js. Set for interoperability with urchin.js. Historically, this cookie operated in conjunction with the __utmb cookie to determine whether the user was in a new session/visit.

 

WordPress Cookie Types

wordpress_COOKIEHASH

Provides details of the social platform used to log in e.g “Facebook”, “googleplus” or “twitter”

wordpress_logged_in_COOKIEHASH

WordPress sets this once you are logged in so that WordPress knows who you are.

 

Geolocation Cookie Types

Custom Plugin

 GeoLocation / GeoLocationV2

Geolocation service, with address geolocation.ferrari.com, who once called making a localization of the visitor returning the two cookies named GeoLocalization and GeoLocalizationV2

 

simpleSSO Cookie Types

Custom Plugin

simpleSSO_auth_cookie

Single sign-on (SSO)is a session/user authentication process that permits a user to enter one name and password in order to access on entire ferrari’s world (ex. “.ferrari.com”)

Single sign-on (SSO)is a session/user

simpleSSO_auth_cookie_local

Single sign-on (SSO)is a session/user authentication process that permits a user to enter one name and password in order to access on single site of ferrari’s world (ex. “.auto.ferrari.com”)

 

Gigya Cookie Types

_gig_llp

Provides details of the social platform used to log in e.g “Facebook”, “googleplus” or “twitter”

_gig_llu

Provides the username value of the current user e.g “Joe Bloggs”.

_glt_HASH

Gigya session cookie for unique session identification. ucid – hashed value, given by gigya as a unique identifier for the user.

Hubspot Cookie Types

These cookies helps us to personalize your online experience. The purpose of this cookie is to tell the Web server that you have returned to a specific page. This data help us to deliver customized content to our visitors, based on their interests and preferences.

__hstc

The main cookie for tracking visitors (Expires: 2 years)

hubspotutk

This cookie is used for to keep track of a visitor’s identity (Expires: 10 years)

__hssc

Cookie for keeping track of sessions (Expires: 30 min)

__hs_opt_out

This cookie is used by the opt-in privacy policy to remember not to ask the user to accept cookies again (Expires: 2 years)

THRON tracking cookies

_TA_tracking

Third party, used to identify subsequent content views from same device. Duration: 1 year.

_TA_privacy

Third party, used to store user opt-out status. If value is 1, user will not be tracked. Duration: 1 year.

_sp_ses

Session cookie. First party. It is used to identify different browsing sessions. Duration: 30 minutes

_sp_id

user visits cookie. First party. Lasts 2 years. Stores last user visits timestamps, per domain.
sp: clojure collector cookie. Third party. It is used by the tracking library gather anonymous analytics data. Duration: 1 year.

Users can opt-out from THRON tracking here

INFORMATION ON PERSONAL DATA PROCESSING FOR MARKETING AND PROMOTIONAL ACTIVITIES at this link.

Provision of data and processing methods, browser configuration and deleting cookies  

The data gathered using cookies is processed electronically.

Use of cookies is voluntary.

Even though most of the browsers currently being used automatically accept cookies, the User has the option to configure his/her browser to block the downloading of cookies at any time and also to delete already-downloaded cookies from their navigation device.

For an illustration of the procedure used to block any cookie for the main browsers, follow this link.

However, aside from preventing your navigation habits being saved, blocking cookies can slow or even prevent access to certain parts of the Site. Deleting cookies already downloaded will also result in the deletion of your preferences as managed and saved using those cookies.

WHO HAS ACCESS TO THE DATA GATHERED USING COOKIES

Ferrari and its dealership network

The data gathered using cookies can be accessed by individuals performing corporate roles in Ferrari and/or companies controlled by, controlling of and associated with it across the world (the “Group”), Ferrari and Group employees involved in the provision of products/services, for the data processing purposes indicated in this information document; Data Processors and those charged with the processing of personal data in the performance of their professional duties.

Furthermore, the User’s Personal Data may possibly be accessed by companies and individuals that are part of Ferrari’s worldwide dealership and assistance network, franchisees, sponsors, licensees across the world,  including in the role of autonomous controllers to whom the data can be communicated.

Triboo (or other vendor)

Data gathered using cookies can also be accessed by the employees of  Triboo (and/or other vendors of Ferrari products and services) involved in the provision of services, for data processing purposes indicated in this information document, with which Triboo (or any other vendor) is directly involved as Data Controller or Processor, particularly those individuals charged with the processing of personal data in the performance of their duties.

Service providers

Data gathered via cookies can also be accessed by individuals/companies that collaborate with Ferrari and Triboo in the provision of products or services offered through the Site: for example (but not solely), individuals/companies who manage and maintain the Site and electronic and computer tools, send newsletters, dispatch and deliver products, manage payments, provide after-sales services, carry out market or statistical research or surveys,  organise events or send out commercial communications.

Furthermore the User’s data may possibly be accessed by insurance companies and consultants assisting Ferrari with regard to legal, tax, social security, accounting and organisational  issues.

Public authorities

Personal data may also be communicated to the public security authorities at their request and in compliance with current legislation.

Statistical data

Statistical data on the Site, on the database, on sales, on User volumes can all be transmitted to third parties for the execution of technical controls and implementations. However, such information will not contain any identifiable Personal Data of the Users.

Transfer of Data to non-EU countries  

The User’s Personal Data may be transferred abroad in compliance with existing legislation. This includes to non-EU countries that guarantee adequate levels of protection, and where the Company is pursuing its own interests.

Dissemination

The User personal data gathered using cookies  cookie will not be disseminated.

3.

The rights of the interested party

Interested parties can exercise the rights outlined in Article 7 Legal Decree no. 196/2004 which can be consulted by following this link.

Consent to use cookies

Consent to sending cookies is required only for profiling cookies.

Aside from the possibility of blocking cookies through browser settings, Users can also give consent to the use of profiling cookies and also revoke that consent at any time.

Users consent to receiving profiling cookies by giving their explicit consent via the banners displayed on accessing the Site or implicitly by continuing to navigate the Site.

Nonetheless, the User can at any time choose which profiling cookies to authorise by separately giving their consent via this link.


4.

Provision of data and processing methods, browser configuration and deleting cookies

The data gathered using cookies is processed electronically.

Use of cookies is voluntary

Even though most of the browsers currently being used automatically accept cookies, the User has the option to configure his/her browser to block the downloading of cookies at any time and also to delete already-downloaded cookies from their navigation device.

For an illustration of the procedure used to block any cookie for the main browsers, follow these links:

IE: http://windows.microsoft.com/it-it/windows7/block-enable-or-allow-cookies

Safari: https://support.apple.com/kb/ph19214?viewlocale=it_it&locale=it_it

Chrome: https://support.google.com/chrome/answer/95647?hl=it-it&hlrm=fr&hlrm=en

Firefox: http://support.mozilla.org/it-it/kb/enable-and-disable-cookies-website-preferences.

Nonetheless, blocking cookies can slow down your browsing or prevent you accessing certain sections of the site. Deleting cookies already received will result in the deletion of the favourites saved and managed by those cookies.

1.

Ferrari and its dealership network

The data gathered using cookies can be accessed by individuals with corporate roles in Ferrari and/or companies controlled by, controlling of and associated with it across the world (the “Group”), Ferrari and Group employees involved in the provision of products/services, for the data processing purposes indicated in this information document; data processors and those charged with the processing of personal data in the performance of their professional duties.

Furthermore, the user’s personal data may possibly be accessed by companies and individuals that are part of Ferrari’s worldwide dealership and assistance network, franchisees, sponsors, licensees across the world, including in the role of autonomous controllers to whom the data can be communicated.

2.

Triboo

Data gathered using cookies can also be accessed by the employees of Triboo (and/or other vendors of Ferrari products and services) involved in the provision of services, for the data processing purposes indicated in this information document, with which Triboo (or any other vendor) is directly involved as Data Controller or Processor, particularly those individuals charged with the processing of personal data in the performance of their duties.

3.

Service providers

Data gathered via cookies can also be accessed by individuals/companies that collaborate with Ferrari and Triboo in the provision of products or services offered through the Site: for example (but not solely), individuals/companies who manage and maintain the site and electronic and computer tools, send newsletters, dispatch and deliver products, manage payments, provide after-sales services, carry out market or statistical research or surveys,  organise events or send out commercial communications.

Furthermore, the user’s data may possibly be accessed by insurance companies and consultants assisting Ferrari with regard to legal, tax, social security, accounting and organisational issues.

4.

Public authorities

Personal data may also be communicated to the public security authorities at their request and in compliance with current legislation.

5.

Statistical data

Statistical data on the site, on the database, on sales, on user volumes can all be transmitted to third parties for the execution of technical controls and implementations. However, such information will not contain any identifiable personal data.

6.

Transfer of data to non-EU countries

The user’s personal data may be transferred abroad in compliance with existing legislation. This includes to non-EU countries that guarantee adequate levels of protection, and in which the Company is pursuing its own interests.

7.

Dissemination

The user’s personal data gathered using cookies will not be disseminated.

8.

The rights of the interested party

Interested parties can exercise the rights outlined in Article 7 Legal Decree no. 196/2004 which can be consulted by following link: