The data controller is Ferrari Financial Services GmbH, with registered office in Wolfratshauser Str. 42, 82049 Pullach i. Isartal, Germany. You can contact the Data Protection Officer of Ferrari at the email address: FFS-GmbH-DataPrivacy@ferrari.com.

Your personal information is collected in the following ways:
Information you give us
We receive personal information about you from you when you enquire, register or enter into an agreement with us for a Ferrari financial product, complete a form or enter information on our websites or correspond with us further in relation to such financial product (including your name, address, contact details, spousal details, business details and details of other individuals you are financially linked with). It also includes information provided to your dealer when purchasing or enquiring about purchasing a vehicle or financial product. 
If you are entitled to tax relief from Value Added Tax (or other equivalent tax) on an adapted motor vehicle, we may collect certain limited health information from you for the specific purpose of allowing you to claim such tax relief.
You may choose to provide additional information to us when you contact us or otherwise interact with us, including via e-mail, letter or by phone.
Information from third parties
We receive personal information about you from Credit Reference Agencies (“CRAs”) and Fraud Prevention Agencies (“FPAs”), such as credit information, fraud prevention information and information from public records (including the electoral register, county court judgments, and bankruptcy and insolvency information).
Information we collect automatically
As this Site is operated by Ferrari S.p.A., the latter may collect certain information by automated means, such as cookies and web beacons, whenever you visit our Site. This could include IP address, browser type, operating system, referring URLs, information on actions taken on a Site, and dates and times of Site visits. See Ferrari S.p.A.’s Cookie Notice under the following link: https://www.ferrari.com/it-IT/cookie-policy.

We use your personal information for the following purposes:
Where we have your consent

• To send you marketing communications where you have given us consent to do so. However, not all marketing activities require consent (see “Where we have a legitimate interest” below).
• To share limited health information with dealers and / or tax authorities for the specific purpose of allowing you to claim tax relief on an adapted motor vehicle where we have your explicit consent to do so. We may also have legal obligations to share your information with tax authorities.
• Or other specific situations where we may ask for your consent, which will be apparent at the time.

To provide a requested service or carry out a contract with you

• To manage and provide you with the services under Ferrari financial product agreements and any other agreement you enter into with us including:
• Hire Purchase Agreements; and
• Insurance Services Agreements.
• To provide you with other additional services that you express an interest in or we provide as a courtesy including Ferrari Financial Services Contact Plan Gifts.

Where we have a legal obligation

• To protect, investigate and deter against fraudulent, unauthorised or illegal activity.
• Where we are required to share your information with regulators, courts or law enforcement.

Where we have a legitimate interest

• To verify with our partners including CRA’s and FPA’s that the information you have provided is true and accurate, and to carry out credit checks, fraud and money laundering checks, and insolvency checks. This is to ensure that you are suitable for the applicable agreement and can finance it. Further information about credit checking is included in our finance application forms.
• To check your insurance details and to recover debts. This is to ensure that you are covered by insurance and that we get paid.
• For identity verification purposes where you change dealers.
• For market research and statistical analytic research purposes. This is to improve the services provided to clients.
• For marketing activities where consent is not required (such as by post), including for analysis, profiling to inform our marketing strategy, and to enhance and personalise your customer experience.
• To administer our websites, including for network and information security in order for us to take steps to protect your information against loss or damage, theft or unauthorised access.
• For internal record keeping. This is for our internal administration purposes, including managing your queries, complaints, or claims.
• For internal operations, testing, statistical purposes and pricing.
• To enforce or protect our contractual or other legal rights or to bring or defend legal proceedings.

Where we rely on legitimate interest as a basis for processing your personal information, we carry out a ‘balancing test’ to ensure that our processing is necessary and that your fundamental rights of privacy are not outweighed by our legitimate interests, before we go ahead with such processing.

We share your personal information in the following circumstances:

• We share your personal information with our other group companies for internal reasons, primarily for business, administrative and operational purposes in line with this privacy policy (See introduction section for details of these group companies).
• To share information (in particular, your full name) between our dealers and Ferrari Financial Services GmbH (or other relevant group companies) in order to provide you with a quotation. This is necessary in order to take steps at your request prior to entering into a contract with us (even if you do not ultimately end up entering into the contract).
• We also share information between our dealers if you change dealers, so as to ensure that we can continue to provide you with the services under the agreement you enter into with us, as necessary for the performance of the agreement between you and us.
• Information is shared with our trusted suppliers subject to appropriate controls. In particular we share information with:
  • CA Auto Bank GmbH (Hellenic Branch), Vouliagmenis Avenue 580A, 16452 Argyroupoli, Greece;
  • CA Auto Finance Suisse SA, Zuercherstrasse 111, 8952 Schlieren, Switzerland;
  • Georgios Margaritis & SIA O.E. - G.M. LANSOFT, Kallirrois 85, 11745 Athens, Greece;
  • Relational Technology SA, Pisistratou Street 52 and El. Venizelou Ave, 17674 Kallithea, Athens, Greece;
  • KPMG Advisory S.p.A, Via Vittor Pisani 27, 20124 Milan, Italy;
  • Free Lanz IT GmbH, Rudishaldenstrasse 9, 8800 Thalwil, Switzerland;
  • Kyndryl Italia S.p.A., Circonvallazione Idroscalo s.n.c., Segrate, 20054 Milan, Italy;
  • Kyndryl Hellas Sole Shareholder Co. SA, Kifissias Avenue 284, 15232 Halandri, Athens, Greece;
  • Priority Quality Consultants SA, Sofokli Venizelou 49-51, 14123 Lykovrisi, Greece;
  • Experian Limited, The Sir John Peace Building Experian Way NG2 Business Park Nottingham NG80 1ZZ, United Kingdom; TransUnion International UK Limited, One Park Lane, West Yorkshire, Leeds, LS3 1EP, United Kingdom for the purposes of credit check;
  • National Hunter, PO Box 4744, Stone, ST15 9FE for the purposes of fraud prevention (https://www.nhunter.co.uk/privacypolicy/);
  • HPI Limited, Capitol House, Bond Court, Leeds, West Yorkshire, LS1 5EZ, United Kingdom for vehicle check and valuation;
  • vehicle checking and valuation providers we may use from time to time, and
  • marketing services providers we also may use from time to time.
• We share your personal information with CRAs and FPAs when making checks about you and to providing them with information relating to your credit (such as repayments, defaults and any suspected or actual fraudulent activity).
• We share your personal information with law enforcement agencies who may access and use your personal information for prevention of crime such as fraud and money laundering. This includes exchanging information with other companies and other organisations for the purposes of fraud protection and prevention.
• We share your personal information in order to comply with (and/or where we believe we are under a duty to comply with) any legal obligation; or in order to enforce this Site Terms and any other agreement; or to protect the rights, property, safety, or security of Ferrari, third parties, visitors to our Site or the public.
• We may share information with a third party if we transfer, change or assign your agreement or we employ a third party to manage any aspect of your account and are required to pass relevant information about you to them.
• As we continue to develop our business, we may sell or purchase assets. If another entity acquires us or merges with us, your personal information will be disclosed to such entity. Also, if any bankruptcy or reorganization proceeding is brought by or against us, all such information will be considered an asset of ours and as such it is possible they will be sold or transferred to third parties.
• Where you give us express permission to share your personal information in the course of your relationship with Ferrari from time to time.

• Information that we collect will be retained for as long as needed to fulfil the purposes outlined in the ‘How does Ferrari use my personal information’ section above, in line with our legitimate interest or for a period specifically required by applicable regulations or laws, such as retaining the information for regulatory reporting purposes.
• When determining the relevant retention periods, we will take into account factors including:
• our contractual obligations and rights in relation to the information involved;
• legal obligation(s) under applicable law to retain data for a certain period of time;
• statute of limitations under applicable law(s);
• our legitimate interests where we have carried out balancing tests (see section on ‘How we use your personal information above);
• (potential) disputes; and
• guidelines issued by relevant data protection authorities.

Otherwise, we securely erase your information where we no longer require your information for the purposes collected.

Your information is stored within the EU generally and in limited circumstances may be transferred to Switzerland. The European Commission has deemed Switzerland a country with adequate privacy laws in place for the transfer of your information and we ensure your information is kept secure at all times. We will [otherwise] inform you by updating this privacy policy if there is ever a need to transfer your personal information outside of the European Economic Area (EEA).

By law, you have a number of rights (subject to certain conditions) when it comes to your information. Further information and advice about your rights can be obtained from the data protection regulator in your country. You can exercise any of these rights by contacting us through our details below.

We usually act on requests and provide information free of charge, but may charge a reasonable fee to cover our administrative costs of providing the information where permitted under data protection laws, for example, for:

• baseless or excessive/repeated requests, or
• further copies of the same information.

Alternatively, we may be entitled to refuse to act on the request. Please consider your request responsibly before submitting it. We will respond as soon as we can. Generally, this will be within one month from when we receive your request but, if the request is going to take longer to deal with, we will come back to you and let you know.

We may periodically make changes to this Privacy Policy. We recommend that you revisit this Privacy Policy regularly. We will notify you of any significant changes where we have a relationship with you and it is necessary to do so.