Information on the processing of personal data – My Rancilio Group App 

Welcome to the ‘My Rancilio Group’ mobile app by Rancilio Group S.p.A with sole shareholder (hereinafter referred to as the “App”), which the user is accessing in their capacity as a customer.

Pursuant to and for the purposes of EU Regulation 679/2016 (hereinafter referred to as the “Regulation”), with this policy, Rancilio Group S.p.A. with sole shareholder intends to provide users with all information on the processing of personal data that is automatically collected or that the user voluntarily provides when accessing the App and using the services provided therein.

• Data controller

The data controller is Rancilio Group S.p.A with sole shareholder (Tax Code and VAT no. 09784580152), with registered office in Parabiago (MI), Viale della Repubblica no. 40, telephone no. 0331.408200, email address info@ranciliogroup.com and certified email address (PEC) ranciliogroup@legalmail.it (hereinafter referred to as the “Company”).

• Personal data 

Personal data means any information concerning the user (or data subject) and attributable to said user. The processing will involve personal data collected continuously and automatically when installing, accessing or using the App, as well as any personal data provided voluntarily by the user. Specifically: email address, further information provided voluntarily by the user, browsing data, log files and information collected through the use of the camera (hereinafter collectively referred to as “Data”).

• Purposes of processing

The Data will be processed for the following purposes:

1. for the user to log into their personal profile with authentication credentials provided directly by the Company – upon request – and use the services provided therein, including purchasing spare parts, consulting technical manuals, viewing videos and tutorials, and accessing the downloads area;
2. to provide technical support and assistance for using the App;
3. to enable the Company to exercise and defend its rights in any realm, including in judicial, administrative, arbitration proceedings and/or in mediation and conciliation procedures.

• Legal basis of processing

The processing of Data for the purposes referred to in para. 3) above has a legal basis under the following letters:

• a) in the pre-contractual measures taken at the user’s request and in the performance of the contract (art. 6.1 b) of the Regulation);
• b) in the performance of the contract (art. 6.1 b) of the Regulation);
• c) in the legitimate interest of the Company (art. 6.1 f) of the Regulation). 

• Data processing procedures

Data will be processed, within the purposes indicated in para. 3) above, primarily using electronic and automated means, in compliance with the provisions on personal data processing and with the application of suitable data security measures. The data processing will be managed by staff within the Company (for example, staff operating in the marketing, commercial and IT offices) who are specially trained in order to ensure the proper security and confidentiality of said Data, as well as to avoid any risk of loss and/or destruction thereof and access thereto by unauthorised parties. Furthermore, in order to make use of certain features offered by the App or the device on which it is installed, the user is required to grant it a number of permissions. Specifically:

– Permission to access the camera

To enable the user to scan the QR code and access the relevant service to extrapolate the settings of the coffee machine. Granting this permission is optional; however, failure to do so will make it impossible for the Company to provide the user with the service they have requested.

• Communication and dissemination of Data

Data shall not be disclosed or disseminated. Data may, within the limits associated with the purposes indicated in para. 3) above, be communicated the following parties: Public Administration bodies, including in the case of checks and inspections, Judicial Authorities, Ali Group S.r.l., as well as other parties who are entitled by law or regulation.

Data may also be disclosed to parties specifically appointed as Data Processors (individuals or entities that process Data on the documented instructions of the Company, such as, by way of example and not limitation, companies tasked with managing and maintaining the App, IT systems and any applications in use). The Company may be requested for an updated list of names of data processors, by sending and email to privacy@ranciliogroup.com. 

• Data retention period

Data will be kept for the period of time strictly necessary for the accomplishment of the purposes for which it was collected. Specifically, any Data processed for the purpose referred to in para. 3) above, letters:

• a) and b) will be retained for the entire duration of the contractual relationship, without prejudice to the user’s option to request that their profile be shut down at any point;
• c) will be retained for the entire duration of the dispute and, in any case, until the time limits for any appeal and/or for the statute of limitations of the relevant action have elapsed.

However, this is also without prejudice to the user’s ability to exercise the rights set out in para. 8) below, as well as the fulfilment of specific data retention obligations as established by law.

• Data subject’s rights

In reference to their Data, the user has the right to ask the Company, with the procedures indicated in the Regulation and without prejudice to the provisions and limitations as per Italian Legislative Decree no. 196/2003 (Part I – Title I – Paragraph III):

• to provide access, in the cases provided for (art. 15 of the Regulation);
• for rectification of inexact Data and integration of incomplete Data (article 16 of the Regulation);
• erasure of the Data for the cited reasons (article 17 of the Regulation), for example when it is no longer necessary for the purposes indicated above or is not processed in compliance with the Regulation;
• limitation of the processing for the cited cases (article 18 of the Regulation), such as when the exactness of the Data is disputed and its correctness needs to be verified; 
• portability, i.e. the right to receive the Data, in the cited cases (article 20 of the Regulation), in a commonly used structured format that is readable by an automatic device and to transmit such Data to another Data Controller; 
• objection to processing in the cited cases (article 21 of the Regulation).

Where a processing of Data is founded on consent, the user also has the right to revoke their consent at any time without compromising the legitimacy of any consensual data processing operations carried out prior to said revocation.
The user can exercise all of these rights by emailing the Company at privacy@ranciliogroup.com or by sending a registered letter to the address of its registered office. 

•  Redress

Should the user feel that the processing of their Data violates the provisions contained in the Regulation, they maintain the right to send a complaint to the Data Protection Authority as per art. 77 of the Regulation.

• Reason for providing the Data

The provision of Data is obligatory and strictly necessary for the pursuit of the purposes referred to in para. 3), letters a), b) and c) above. As such, even partial failure to provide the Data results in it being impossible for the Company to allow the user to access the App and use the services provided therein.

• Transfer of the Data abroad

Data is not subject to transfer abroad; it is stored at the Company’s headquarters and on servers located in the European Union.