Last update: 25/05/2018

Privacy Policy for Processing of Personal Data of Users

 De Agostini S.p.A. ("De Agostini"), acting as data controller would like to inform the users (the "Users") of the website (the "Site") about the modalities in which it processes the personal data provided to De Agostini, according to the Legislative Decree No. 196/2003 (the "Privacy Code") and to the new European Regulation No. 679/2016 on the protection of personal data (the "Privacy Regulation").

  1. Data controller and data processor

De Agostini S.p.A. with registered office in Via Giovanni da Verrazano, 15 28100 Novara (Italy) is the data controller, which can be contacted at the following email address: A complete list of the data processors can be requested through the abovementioned email address.

  1. Personal data collected

De Agostini will process the personal data provided by its Users through the email address available on the Site according to this privacy policy.

Health data or in general other special categories of personal data according to article 9 of the Privacy Regulation will not be processed. Personal data of minors will be processed according to the modalities explained in paragraph 8 below.

The abovementioned data will be processed only in so far as it is necessary to the pursuit of the purposes described in paragraph 4 of this privacy policy.

  1. Processing of personal data

Personal data of the Users will be processed using automated and/or paper means and will be protected with the implementation of adequate security measures to ensure safety and confidentiality of the personal data. Specifically, De Agostini adopts appropriate technical and organizational measures to protect personal data against loss, theft, unauthorised use, disclosure, or alteration thereof.

When it is no longer necessary to process the personal data in an identifiable way for the purpose for which they were collected, or at the end of the retention period (further explained in paragraph 10), De Agostini will anonymize personal data and will remove identifiers.

  1. Purposes of the processing

De Agostini asks its Users to provide their personal data in order to answer to the questions of the User submitted through the email address available on the Site.

  1. Legal basis for the processing

The processing of personal data for the purposes described in paragraph 4 is mandatory, since it is necessary to answer to the requests of the Users.

  1. Communication of personal data

For the purposes explained in paragraph 4, De Agostini might communicate Users' personal data, strictly necessary to each type of processing, to the following categories of subjects:

a)     employees, collaborators and suppliers of De Agostini, within the performance of their tasks and/or contractual obligation, in relation to the commercial relations with the Users;

b)    subproviders and/or subcontractors within the context of the activities connected to the performance of services and the offer of products by De Agostini;

c)     other companies of the De Agostini group in Italy or abroad, nationals and internationals, in countries specified in the following paragraph 7;

d)    postal offices and couriers to send and deliver products purchased by the Users and/or other materials related to the services offered by De Agostini;

e)     to legal, administrative and tax consultants, within the limits of what is necessary or functional to the activities of De Agostini, in the ways and for the purposes explained above; and

f)     to financial institutions for the management of revenues and payments deriving from the performance of the contract with the User.

Personal data of the Users will not be disseminated.

  1. Overseas transfer of personal data

Personal data can be freely transferred outside the national territory, to other countries in the European Union.

  1. Data subjects under 18 years old

The Site is not directed to minors, and it does not offer information society services.

  1. Rights of the Users

Users will have at any time, and with no additional charge, the right to: (a) obtain confirmation as to the existence of personal data concerning him and, where that is the case, access to the personal data; (b) to know the origin of the data, the purposes of the processing, the ways in which the data are processed and the logic applied to the processing carried out through automated means; (c) to request the update, correction or - if he is interested - the integration of his data; (d) to request the erasure, the anonymization or the blocking of data unlawfully processed, and to object to the processing for legitimate reasons; (e) to object, fully or partially, to the processing of his personal data for direct marketing purposes carried out through automated and/or traditional means; (f) to withdraw his consent to the processing of his data at any time, without affecting the lawfulness of the processing based on the consent before its withdrawal.

Together with the abovementioned rights, Users will also enjoy the rights enshrined in the following paragraph 10 c).

Users will be able, at any time, to exercise their right, to modify the contact details, to notify De Agostini updates regarding their data, to obtain the removal of the data communicated by third parties, or to obtain further information on the processing of their personal data carried out by De Agostini, by writing an email to the following address:

  1. Further provisions according to the Privacy Regulation

The following provision are applicable according to the Privacy Regulation.

a)     Retention periods: De Agostini will process personal data for the time necessary to fulfil the specific purposes for which the data was collected according to paragraph 2 above. Personal data will be processed for an additional period of time of 10 years from the date of the request of the User.

b)    Additional rights: the User, at any time and in the ways and manners explained in the previous paragraph 9 will have the right to: (a) ask for a restriction of the processing when: (i) the accuracy of the personal data is challenged, for a period necessary for the controller to verify the accuracy of the personal data; (ii) the processing is unlawful and the User objects the to the erasure of the personal data and requests the restriction of their use instead; (iii) De Agostini no longer needs the personal data for the purposes of the processing, but they are required by the User for the establishment, exercise or defence of a legal claim; (iv) the User has objected to the processing pursuant to Article 21.1 of the Privacy Regulation, pending the verification on whether the legitimate reasons of the controller override those of the User; (b) object at any time to the processing of his personal data, except when De Agostini has an overriding legitimate interest; (c) ask for the erasure of his personal data without undue delay; (d) obtain the portability of his personal data; (e) where there are the conditions, bring a claim before the national data protection authority.

  1. Updates

This privacy policy will be effective from the date indicated in its heading.

De Agostini might change and/or integrate this document, also as a consequence of further modifications and/or integration of the Privacy Regulation. Updates and modifications will be notified in advance and Users will always be able to view the updated privacy policy at the following link

If the User has doubts, questions or complaints with regard to the collection and processing of his personal data, he may contact De Agostini by writing an email to the address: