Privacy Policy

Our Company will process the personal data you provide when joining ClubQ8 and throughout the contractual relationship. Specifically, the Company will collect:

• Your identification details (name and surname or company name), your address or registered office, your tax code, your date of birth, your contact information (phone number, email address), your gender, and any other data necessary for the conclusion and execution of the contract.
• Information related to the use of the Customer Identification Code (e.g., transactions made, purchase volumes, types of purchases, refueling frequency), the payment methods used, as well as information related to the use of any additional services introduced by the Company or participation in dedicated promotions, contests, or prize draws.
• Data related to the location of your device collected via GPS, in case you use services provided through the ClubQ8 App that require geolocation.

Please note that if you register for ClubQ8 through the website or app using social login (e.g., via your Facebook or Google account), the Company will only collect your email address from the social network you select.

You can request the deletion of such data by following the instructions in paragraph 6, by submitting your request through the Privacy section of the website www.Q8.it.

Providing the data marked as mandatory during registration is necessary for joining ClubQ8 and using the related services. The provision of additional data may be necessary for the provision of certain requested services; if not provided, we will be unable to offer those services.

1. To Provide You with the Requested Services and Enable You to Enjoy the Benefits of ClubQ8 Your personal data will be processed by the Company to provide the requested services. For example, your data will be processed to carry out administrative and operational activities necessary for issuing and using the Customer Identification Code, to allow you to enjoy the services offered within ClubQ8, for payment transactions, the issuance of administrative, accounting, and tax documents, for the Newsletter service, and to ensure your participation in any promotions or prize contests you may join. For these purposes, the Company will process all personal data listed in points i) and ii) of paragraph 1 to execute the contract, pursuant to Art. 6(b) of the Regulation.

2. To Provide You with Services Through the ClubQ8 App that Require User Geolocation With your consent, the Company may process data related to your device’s location, acquired via GPS, to provide certain services through the ClubQ8 App that require user geolocation, such as the "Store Locator" service. Additionally, the location data may be used to verify available payment methods at a specific Q8 point of sale and allow you to use the "pump unlock" refueling feature via the app. This data will be acquired and processed only when you request to use the specific service and for the time strictly necessary to provide the service. The data related to your device’s location will be processed based on your consent, which can be revoked at any time in the dedicated section of the ClubQ8 App.

3. To Comply with Legal Obligations Your personal data will be processed by the Company to comply with legal obligations. For example, the Company may process your data for tax-related obligations connected to the execution of the contract. For this purpose, the Company may process the data listed in points i) and ii) of paragraph 1.

4. For Marketing Purposes With your explicit and specific consent, the Company may process your personal data to send you commercial communications about its products and services, for promotional initiatives (current and future), and to conduct market research and customer satisfaction analysis. Commercial communications may be sent using both traditional methods (postal mail, calls with an operator) and automated communication systems (e.g., SMS, email, calls without an operator, notifications on the ClubQ8 App, social media channels). For this purpose, the Company may process the data listed in point i) of paragraph 1; additionally, if you have consented to profiling activities as described in letter e) below, the Company may process for marketing purposes the information listed in point ii) of paragraph 1. You may withdraw your consent at any time by accessing your personal area on the www.Q8.it website, the CLUBQ8 App, or via POS terminals at the enabled points of sale.

5. For Profiling Purposes With your explicit and specific consent, the Company may process your data to better understand your habits and interests and, consequently, offer you products and services tailored to your preferences. For this purpose, the Company may process the data listed in points i) and ii) of paragraph 1. You may withdraw your consent at any time by accessing your personal area on the www.Q8.it website, the CLUBQ8 App, or via POS terminals at the enabled points of sale.

6. For Communication of Your Data to Third Parties for Marketing Purposes With your explicit and specific consent, the Company may share certain personal data with companies operating in the following sectors, with which it may enter into partnership agreements: publishing, consumer goods, distribution, finance, insurance, automotive, services, telecommunications, as well as charitable and humanitarian organizations. These companies may use your data for commercial and promotional purposes, using both automated systems (e.g., SMS, email, calls without an operator) and traditional channels (calls with an operator, postal mail). The personal data that may be shared includes your identification details, address or registered office, and contact information (phone number and email address). You may withdraw your consent at any time by accessing your personal area on the www.Q8.it website, the CLUBQ8 App, or via POS terminals at the enabled points of sale.

The Company may communicate some of your personal data to third parties it engages to carry out activities related to the provision of services under the contract. Specifically, your data may be shared with external companies that offer administrative, logistical, IT, accounting, and consulting services. These parties may process the data as data processors on behalf of the Company or as independent data controllers, in compliance with legal provisions.

The list of data processors can be requested by writing to clienticlub@Q8.it.

Additionally, the Company may share your data with its commercial partners as part of specific initiatives or prize contests you participate in. These parties will process your data as independent data controllers.

There is no provision for the dissemination of your data to unspecified parties.

Your data will be processed only for the time necessary to achieve the aforementioned purposes. Specifically, below are the main periods of use and retention of your personal data in relation to the different purposes of processing:

• For purposes related to the provision of requested services, the data will be processed by the Company for the entire duration of the contract and as long as there are obligations or requirements connected to the execution of the contract. The data will be stored for an additional 11 years thereafter, exclusively for purposes related to legal obligations and to allow the Company to defend its rights.

• For services provided via the ClubQ8 App that require user geolocation, your data will be processed by the Company only for the time strictly necessary to allow you to use the service and will not be retained in any case.

• For compliance with legal obligations, the data will be processed and retained by the Company for as long as necessary to fulfill such legal obligations.

• For marketing purposes or the communication of data to third parties for marketing purposes, the data will be processed for the entire duration of the contract and as long as there are obligations or requirements connected to the execution of the contract, unless you withdraw your consent.

• For profiling purposes, the data will be processed for a maximum period of 12 months or for a different period as may be required by law or by rulings from the Data Protection Authority. After this period, the data will either be retained if necessary for other purposes or will be permanently deleted.

Your data may be transferred outside the European Union by service providers that the Company uses for activities related to the management of the services covered by the contract, as well as when data is communicated to companies within the Group. Such transfers, if applicable, will be regulated with service providers and Group companies through the use of standard contractual clauses adopted by the European Commission or, alternatively, based on an adequacy decision by the Commission, binding corporate rules, and/or any other instrument permitted by applicable law.

You may obtain information about where your data has been transferred and request a copy of such data by writing to the clienticlub@Q8.it

We inform you that, in accordance with current regulations, you have the following rights:

• Request and obtain information regarding the existence of your data held by the Company and the processing of your personal data by the Company, as well as gain access to such data.
• Request and obtain your data in a structured, commonly used, and machine-readable format, if processed by automated means. You can also request the transfer of your data to another data controller.
• Request and obtain the modification and/or correction of your data.
• Request and obtain the deletion and/or restriction of processing of your data when such data or information is no longer necessary for the purposes outlined, or when the retention period has expired.

Such requests can be made to the Company through the website www.q8.it, by accessing the Privacy section, or through other channels the Company may make available to customers. Please note that any request made under these terms will be considered by the Company as referring solely to data held in relation to the Club Q8. If, in the context of other programs or contractual relationships with the Company, you have provided your personal data, the request you make in relation to Club Q8 will not apply to data provided under those other contracts.

Through the ClubQ8 App, you can make digital payments using various available systems, which are managed by payment service providers. These providers will process your data as data processors on behalf of Kuwait Petroleum Italia (Kupit), or, as indicated when you select the payment method, as independent data controllers.

With regard to digital payments managed by PayPal, we inform you that your personal data will be processed by PayPal (Europe) S.a.r.l. according to the methods described in their privacy policy [https://www.braintreepayments.com/it/legal/braintree-privacy-policy]. You can exercise your rights regarding payment services by contacting PayPal directly.

Additionally, we inform you that the Company has appointed a Data Protection Officer (DPO), who can be contacted at dpo@Q8.it.

Finally, please note that under current regulations, you have the right to file any complaints regarding the processing of your data with the Italian Data Protection Authority (Garante per la protezione dei dati personali).