PRIVACY POLICY DI NIKE GROUP

Dear User,

Welcome to our website!

NIKE Group is particularly attentive to the aspects concerning the privacy of its users.
Through this page we intend to describe to you how to manage our website (www.nikegroup.it) with reference to the processing and protection of personal data of visitors who access it.
This is a general information provided in compliance with EU Regulation 679/2016 “Regulations concerning the protection of individuals with regard to the processing of personal data, as well as the free circulation of such data” to those who consult our site.

The information is provided only for the NIKE Group institutional website and not for other websites that you could possibly consult via links on our pages. Access to some sections or features of this site may involve the processing of personal data relating to identified or identifiable users. If you wish to access sections or features that require the provision of personal data, we invite you to carefully read the Privacy Policy that follows, to learn how NIKE Group collects and uses personal data through this site and for what purposes. For reading convenience, we have structured our policy into separate sections, which answer frequently asked questions about these topics.

What is meant by “Processing of personal data?”. 3

What personal data does this site collect and how?. 3

For what purpose does NIKE Group collect personal data?. 3

What measures has NIKE Group taken to protect users’ personal data?. 4

Does NIKE Group transfer data to third parties?. 4

How does this site interact with social networks and Google?. 5

With what legal bases does NIKE Group carry out the different treatments?. 5

Where is the data managed by NIKE Group processed?. 6

How long does NIKE Group retain the data collected?. 6

Does NIKE Group process personal data for marketing purposes?. 6

What rights can users exercise regarding the processing of their personal data?. 7

Does this site use cookies?. 8

Further information on treatment 8

Changes to this Privacy Policy. 8

Data Controller. 8

What is meant by “Processing of personal data?”

“Processing” of personal data means “any operation or set of operations, performed with or without the aid of automated processes, and applied to personal data or sets of personal data, such as collection, registration, organization, the structuring, conservation, adaptation or modification, extraction, consultation, use, communication by transmission, dissemination or any other form of provision, comparison or interconnection, limitation, cancellation or destruction “(Art. 4 EU 679/2016).

What personal data does this site collect and how?

Our site may collect the following types of personal data, either independently or through third parties (see specific paragraph):

Cookies (see specific policy); usage data; first name; surname; sex; date of birth; telephone number; VAT number; business name; profession; address; fax number; state; province; e-mail; POSTAL CODE; city; Fiscal Code; business sector; personal website address.

These data can be traced back to the following macro-categories:

Navigation data – The computer systems and software procedures used to operate this website acquire, during their normal operation, some personal data whose transmission is implicit in the use of Internet communication protocols. This information is not collected to be associated with identified interested parties, but by their very nature could, through processing and association with data held by third parties, allow users to be identified and have the purpose, for the company, of obtaining anonymous statistical information on the use of the site.

Cookies. Our site may use cookies (small text files stored in the user’s browser) that may contain personal data, in order to improve the experience of use of our users and / or to monitor the correct functioning of the site.

For more information on the use of cookies and the possibilities to monitor them, please read our Cookie Policy.

Data provided voluntarily by the user

Some sections and features of this site allow you to voluntarily provide us with your data, in the following ways:

  • Sending mail to the addresses mentioned on the site

Sending e-mails to the addresses indicated on this site entails the subsequent acquisition of the sender’s address, necessary to respond to requests (eg request for information), as well as any other personal data entered in the e-mail or in its attachments (eg . CV).

  • Form filling

Some features of this site will require you to fill out short forms, containing some of your personal data, such as your name, surname, company membership, position held, email address, etc. The voluntary compilation of the forms present on the site involves the acquisition of your data, which are stored in the company in the competent corporate sector.

As a rule, these data are collected for the purpose of 1) promoting our products and services, 2) sending technical or commercial information requested by the user, 3) activating free trials, 4) recruiting potential new employees or collaborators (section “Work with us”).

In no case will you be obliged to provide us with your data. However, failure to provide data may make it impossible for us to provide you with certain information, documents or services that require processing.

  • Entry of login and password

A section of this site gives access to some paid portals and / or services provided by NIKE Group. To access these services, you will need to enter your personal userid and password, which the system will recognize, allowing you to log in to authorized users. For more information, please refer to the Privacy Policy on each specific portal or service.

For what purpose does NIKE Group collect personal data?

We collect and use personal data relating to site users for the following purposes:

  1. a) Obtain anonymous statistical information on site usage (eg navigation data – See above)
  2. b) Check its correct functioning (eg cookies)
  3. c) To ascertain any liability in the event of offenses committed against the site, the Data Controller or third parties.
  4. d) Allow the user to access the portals and / or services he has purchased and use them (eg userid and password) and, more generally, fulfill the contractual commitments entered into with our customers.
  5. e) Allow the download and / or sending of documents or information requested by the user (eg data requested in the forms present in various sections of the site)
  6. f) Activate free trials of our products and services, requested by the user (eg “Request a free trial” form)
  7. g) Search and select potential new employees and collaborators, or activate new internships (eg data requested in the form of the “Work with us” section or contained in the attached CVs)
  8. h) Perform statistical analyzes of various kinds relating to our Business Lines, products and services (eg data requested in the forms present in various sections of the site)
  9. i) Promote our products and services (eg data requested in the forms present in various sections of the site), also by sending mail.

In no case will you be obliged to provide us with your personal data. However, failure to provide your data for the purposes mentioned in points d), e), f), g) may prevent us from providing the services or providing the information you requested or including you in our recruiting processes.

You will always be asked to consent to the processing of personal data for commercial or marketing purposes. At any time, you can withdraw this consent to use the data or request the deletion of the data by sending an email to: privacy@nikegroup.it

If you were to provide us with personal data of another person (eg a candidate) through this website, you will be responsible for ensuring that this person is aware of the information contained in this privacy policy and that he has given his consent to the provision of his given to NIKE Group, freeing us from any liability to third parties.

This website may contain links to other sites (the “links”) that have no connection with our company or are not websites operated by NIKE Group.

The company does not control or monitor such websites and their contents.

It cannot be held responsible for the contents of these sites and the rules adopted by them with regard to privacy and the processing of personal data of its users during navigation operations.

We therefore ask you to pay attention when you connect to these websites through the links and carefully read their terms and conditions of use and privacy regulations.

What measures has NIKE Group taken to protect users’ personal data?

NIKE Group has taken appropriate measures to guarantee the physical, technical and organizational security of all personal data in our possession. Our protocols, controls, policies and internal procedures ensure the effectiveness of these measures, taking into consideration the risks associated with the categories of personal data and the processing to which they are subjected.

For example, although we do not have a legal obligation based on the characteristics of the treatments performed, we have chosen to use the figure of a Data Protection Officer (DPO), adapting our systems to a higher level of protection, regulatory framework, policy and internal procedures.

In fact, we want to guarantee the maximum security of the data entrusted to us by our customers, suppliers, partners, employees and collaborators, users of our sites and portals, and of anyone in general having contacts with our company.

Does NIKE Group transfer data to third parties?

In general, no personal data acquired from the site is disseminated and we do not perform data profiling activities.

In some cases, however, some external parties (such as third party technical service providers, hosting providers, IT companies, communication agencies, etc.) may have access to the personal data collected by this site.

Where necessary, these parties are always appointed External Data Processing Managers by NIKE Group. The updated list of managers can always be requested from NIKE Group at privacy@nikegroup.it

How does NIKE Group handle the data collected?

All personal data in our possession, including those collected through this site, are processed in written form and / or on paper, magnetic, electronic or telematic support, with appropriate tools to guarantee the confidentiality and security of the same, in accordance with what established by EU Regulation 679/2016 (with particular reference to Articles 24, 32 and 35).

The data are processed with lawfulness, correctness, transparency and attention to the protection of privacy and the rights of the user, only by personnel formally authorized by NIKE Group, or by the External Data Processors, specifically appointed pursuant to Art. 28 of EU Regulation 679/2016 (see previous paragraph).

How does this site interact with social networks and Google?

It is possible to make interactions with social networks, or with other external platforms, directly from the pages of this site.

The interactions and information acquired by social networks are in any case subject to the user’s privacy settings relating to each social network.

We advise you to disconnect from the respective services when you browse on our site to ensure that the data processed on our site are not reconnected to your User profile.

  • Like Button and Facebook social widgets (Facebook, Inc.)

The “Like” button and Facebook social widgets are interaction services with the Facebook social network, provided by Facebook, Inc.

Personal Data collected: Cookies; Usage data.

Place of processing: USA – Privacy Policy.

  • +1 Button and Google+ social widgets (Google Inc.)

The +1 button and Google+ social widgets are interaction services with the Google+ social network, provided by Google Inc.

Personal Data collected: Cookies; Usage data.

Place of processing: USA – Privacy Policy.

  • Recommend button and LinkedIn social widgets

The Recommend button and LinkedIn social widgets are interaction services with the LinkedIn social network, provided by Linkedin Corp.

Personal data collected: Cookies; Usage data

Place of processing: USA, Singapore – Privacy Policy

  • Like button and YouTube social widgets (YouTube LLC, a company belonging to Google)

The “Like” button and YouTube social widgets are interaction services with the YouTube social network, provided by YouTube LLC

Personal Data collected: Cookies; Usage data.

Place of processing: USA – Privacy Policy

NIKE Group uses Google Analytics to monitor and analyze traffic data and track user behavior.

  • Google Analytics (Google Inc.)

Google Analytics is a web analysis service provided by Google Inc. (“Google”). Google uses the personal data collected for the purpose of tracking and examining the use of this website, compiling reports and sharing them with other services developed by Google.

Google may use personal data to contextualize and personalize the ads of its own advertising network.

Personal Data collected: Cookies; Usage data.

Place of processing: USA – Privacy Policy – Opt Out

With what legal bases does NIKE Group carry out the different treatments?

NIKE Group, as the Data Controller, processes personal data relating to Users in the event of one of the following conditions:

  • the User has given consent for one or more specific purposes.

Remember that, in some non-European jurisdictions, the Data Controller may be authorized to process personal data without the User’s consent or another legal basis specified below, as long as the User does not object (” opt-out “) to this treatment.

This is not applicable if the processing of personal data is regulated by European legislation on the protection of personal data.

  • Processing is necessary for the execution of a contract with the User and / or for the execution of pre-contractual measures.
  • Processing is necessary to fulfill a legal obligation to which the Owner is subject.
  • Processing is necessary for the performance of a task of public interest or for the exercise of public powers vested in the Owner.
  • The processing is necessary for the pursuit of the legitimate interest of the Owner, in the provision of services and in the efficient and legitimate management of the activity, as long as these interests do not prevail over the interests of the user.

However, it is always possible to ask NIKE Group to clarify the concrete legal basis of each treatment and to specify whether the treatment is based on legal obligations, provided for by a contract or necessary to conclude a contract.

Where is the data managed by NIKE Group processed?

The data is processed at the NIKE Group’s operating offices, at the ICT Farms of our Cloud Service Providers and in general in any other place where the parties involved in the treatment are located.

The User’s Personal Data may be transferred to a country other than the one where you are.

In any case, apart from exceptions, neither NIKE Group nor the External Processors appointed by us carry out processing outside the European Union area.

It is however your right to obtain information regarding the legal basis of data transfer outside the European Union or to an international organization of public international law or constituted by two or more countries, such as the UN, as well as in about the security measures taken by NIKE Group to protect data.

To obtain further information on the place of treatment or on the aspects described above, write to privacy@nikegroup.it.

How long does NIKE Group retain the data collected?

The data is processed and stored for the time required for the purposes for which it was collected.

Therefore:

  • Personal data collected for purposes related to the execution of a contract between the NIKE Group and the User will be retained until the execution of this contract is completed. Beyond this deadline, NIKE Group will keep your data for the sole purposes and for the maximum storage periods established by the GDPR Regulation and / or by law, in cases where such storage is mandatory.
  • Personal data collected for purposes related to the legitimate interest of NIKE Group will be retained until such interest is satisfied. You can get more information about the legitimate interest pursued by NIKE Group in the relevant sections of this document or by contacting us at privacy@nikegroup.it

.

When the processing is based on your explicit consent, we will be able to keep personal data until such consent is revoked.

Furthermore, we may be obliged to keep personal data for a longer period, in compliance with a legal obligation or by order of an authority.

At the end of the storage period personal data will be deleted. Therefore, after this deadline, the right of access, cancellation, rectification and the right to data portability can no longer be exercised.

Does NIKE Group process personal data for marketing purposes?

Subject to your explicit consent, NIKE Group may process your personal data to send you information and promotional communications, including newsletters and special offers, referring to our and / or third-party services, as well as for carrying out market research, via e-mail and via the postal service.

The legal basis for this treatment is the user’s express consent (Article 6.1.a) of the Regulations).

You can revoke your consent at any time and / or object to the processing of your data for marketing purposes:

  • Contacting NIKE Group at the following address: Privacy@nikegroup.it,
  • Through the appropriate link present in every communication sent by e-mail.

The provision of personal data for the purpose of generic marketing is optional: there is no legal or contractual obligation to provide such data and / or to consent to the processing of your personal data for this purpose.

For the purpose of generic marketing, NIKE Group will process your data until the revocation of the consent and / or the exercise of the right of opposition and, in any case, no more than four years from the collection of data, reserving the right, before the expiration of this term, to ask you to renew the consent and / or update the data.

In case of revocation of your consent and / or opposition to the processing of your data for marketing purposes, NIKE Group will keep the minimum personal data necessary to keep track of your request and avoid contacting you again.

What rights can users exercise regarding the processing of their personal data?

Users may exercise certain rights with respect to their personal data processed by NIKE Group.

In particular, each User has the right to:

  • Withdraw consent at any time. The User can revoke the consent to the processing of his personal data previously expressed.
  • Oppose the processing of your data. The User may object to the processing of his / her data when it takes place on a legal basis other than consent. Further details on the opposition right are indicated in the section below.
  • Access your data. The User has the right to obtain information on the data processed by NIKE Group and / or on certain aspects of the processing and to receive a copy of the processed data.
  • Check and ask for rectification. The User can verify the correctness of his / her data and request its updating or correction.
  • Obtain treatment limitation. When certain conditions are met, the User can request the limitation of the processing of his data. In this case NIKE Group will not process the data for any other purpose than their storage.
  • Obtain the cancellation or removal of your personal data. When certain conditions are met, the User can request the cancellation of their data by NIKE Group.
  • Receive your data or have it transferred to another owner. The User has the right to receive his / her data in structured format, commonly used and readable by an automatic device and, where technically feasible, to obtain its transfer without obstacles to another Owner. This provision is applicable when the data is processed by automated tools and the processing is based on the consent of the User, on a contract to which the User is a party or on contractual measures connected to it.
  • Make a complaint. The User can make a complaint to the competent personal data protection supervisory authority or act in court.

Details on the right to object

When personal data is processed in the public interest, in the exercise of public powers vested in NIKE Group or in pursuing a legitimate interest of NIKE Group, Users have the right to oppose the processing for reasons connected to their particular situation.

We inform you that, if your data were processed for direct marketing purposes, you can oppose the processing without giving any reasons.

How to exercise your rights

To exercise your rights as a User, you can direct a request to: privacy@nikegroup.it and / or in any case to the contact details indicated at the end of this document.

Response times and methods

Requests are filed free of charge and processed by NIKE Group as soon as possible, in any case within one month.

According to the Regulation, in fact, the data controller must provide the interested party with information about the actions taken, in relation to a request to exercise the rights recognized by the art. from 15 to 22 of the same Regulation (ie right of access, right of rectification, right of cancellation, right to limit the treatment, right to data portability, right to object), without unjustified delay and, in any case, within one month of receipt of the request.

This deadline may be extended by two months, if necessary, given the complexity and number of requests. The data controller informs the interested party of such extension, and of the reasons for the delay, within one month of receiving the request.

If the interested party submits the request by electronic means, the information is provided, where possible, by electronic means, unless otherwise indicated by the interested party.

Right to lodge a complaint with a supervisory authority

If you believe that the processing of your personal data by NIKE Group is violating your rights, please let us know immediately: privacy@nikegroup.it.

Without prejudice to any other administrative or jurisdictional appeal, you still have the right to lodge a complaint with a supervisory authority, in particular in the Member State where you normally reside, work, or in the place where the alleged violation occurred. The supervisory authority to which the complaint was proposed will inform you of the status or outcome of the complaint, including the possibility of a judicial appeal.

Does this site use cookies?

This website uses cookies. Cookies are small text files stored in the user’s browser. To learn more, please see the Cookie Policy.

Further information on treatment

Defense in court

Your personal data may be used by the NIKE Group in court, or in the preparatory stages for its possible establishment, for the defense against abuse in the use of this website or the connected Services by the User.

Please note that NIKE Group may be required to disclose your information by order of public authorities.

Specific information

In addition to the information contained in this privacy policy, this website may provide additional and contextual information regarding specific services, or the collection and processing of personal data.

System log and maintenance

For needs related to operation and maintenance, this website and any third-party services it uses may collect system logs, which are files that record interactions and that may also contain personal data, such as your IP address.

Information not contained in this policy

You can request further information regarding the processing of your personal data by writing to: privacy@nikegroup.it and / or using the contact details at the end of this document.

Response to “Do Not Track” requests

This website does not support “Do Not Track” requests.

To find out if any third-party services used support them, please consult the respective privacy policies.

Changes to this Privacy Policy

This Privacy Policy may be subject to updates or modifications, especially due to the entry into force of new possible directives of the competent Authority.

NIKE Group reserves the right to make changes to this Privacy Policy at any time, giving information to Users on this page and, if possible, also in other sections of this site.

We therefore ask you to consult this page regularly, referring to the date of the last modification indicated at the bottom.

If the changes involve processing whose legal basis is consent, where necessary NIKE Group will collect the User consent again.

Data Controller

NIKE Group S.p.A.

P: VAT 13239820155

Owner email address: info@nikegroup.it

Address for issues related to Privacy / GDPR: privacy@nikegroup.it

4 Processing of data by the Organization for purposes of access and registration to the site, fulfillment of the purchase contract and / or execution of pre-contractual measures at the request of the interested party

Last modification: 11/18/2019