Our company will process the personal data provided at the time you joined ClubQ8 and during the contractual relationship. In particular, the Company will acquire:

 i. your identifying data (name and surname or company name), your address or registered office, your tax code, your date of birth, your contact details (telephone, email address), your gender, and any other data necessary for the conclusion and execution of the contract; 

ii. information related to the possible use of the Customer Identification Code (e.g., transactions made, purchase volumes, type of purchases, frequency of refueling), the payment methods used, as well as information related to any additional services introduced by the Company or any participation in dedicated promotions, contests, or prize events; 

iii. data related to the location of your device acquired through GPS system, in case of using services provided through the ClubQ8 App that require user geolocation.

In the case of registration to ClubQ8 from a website or app through a social login (e.g. Facebook or Google), the Company will exclusively acquire your e-mail address from the selected social network.

You can request the deletion of the data acquired in this way using the methods described in paragraph 6, in particular by submitting a request to the Privacy section of the website www.q8.it.

In order to join ClubQ8 and enjoy the related services, it is necessary to provide the data indicated as mandatory at the time of registration. The provision of additional data may be necessary for the provision of some of the requested services; in the absence of such data, we may be unable to provide these services to you.

a. To provide you with the requested services and enjoy ClubQ8 benefits

Your personal data will be processed by the Company to provide the requested services. For example, your data will be processed for the administrative and operational activities necessary for the grant and use of the Customer Identification Code, to enable you to benefit from the services offered by ClubQ8, for payment transactions, the issue of administrative, accounting and tax documents, for the provision of newsletter services, as well as to ensure that you participate in any promotions or prizes that you may join. For this purpose, the Company shall process all personal data referred to in points i) and ii) of paragraph 1 for the performance of the contract in accordance with Article 6(b) of the Regulation.

b. To provide you with services offered through the ClubQ8 App that require user geolocation 

With your prior consent, the Company may process data related to the location of your device, acquired through GPS system, to provide you with certain services offered through the ClubQ8 App that require user geolocation, such as, for example, the "Store Locator" service; furthermore, data related to the location of your device may be used to verify the available and usable payment methods through the ClubQ8 App at the specific Q8 point of sale where you are located and allow you to use, through the app, the refueling mode with "pump unlock". These data will be acquired and processed exclusively at the time of your request to use a specific service and for the time strictly necessary to provide you with the service itself. Data related to the location of your device will be processed on the basis of your consent, which can be revoked at any time in the appropriate section of the ClubQ8 App.

c. For compliance with legal obligations:
In order to comply with legal obligations, your personal data are processed by the Company. For example, the Company may process your data in order to comply with the tax requirements related to the execution of the contract.

For this purpose, the Company may process the data referred to in points i) and ii) of paragraph 1.

d. For marketing purpose

With your explicit and specific consent, the Company may process your personal data to send commercial communications about its products and services, for promotional initiatives (both present and future), to conduct market research, and analyze customer satisfaction levels. Commercial communications may be sent using traditional methods (postal mail, calls with operators) and automated communication systems (e.g., SMS, emails, calls without operators, notifications on the ClubQ8 App, social media channels).

For this purpose, the Company may process the data referred to in point i) of paragraph 1; furthermore, if you have consented to profiling activities as described in section e) below, the Company may also process the information indicated in point ii) of paragraph 1.

The consent you provide can be revoked at any time by accessing your personal area on the website www.q8.it, via the ClubQ8 App, or at POS terminals located at authorized points of sale.

e. For profiling purposes:

With your explicit and specific consent, the Company may process your data to better understand your habits and interests and, consequently, offer you products and services that may be of interest to you. For this purpose, the Company may process the data referred to in points i) and ii) of paragraph 1.

The consent you provide can be revoked at any time by accessing your personal area on the website www.q8.it, via the ClubQ8 App, or at POS terminals located at authorized points of sale.

f. For the communication of your data to third parties for marketing purposes:

With your explicit and specific consent, the Company may disclose some of your data to companies operating in the following sectors, with which it may conclude partnership agreements: publishing, consumer goods, distribution, financial, insurance, automotive, services, telecommunications, as well as charitable and humanitarian organizations. These companies may use your data for commercial and promotional purposes, using both automated systems (e.g., SMS, emails, calls without operators) and traditional channels (calls with operators, postal mail).

The data that may be disclosed include your identifying data, your address or registered office, and your contact details (telephone number and email address).

The consent you provide can be revoked at any time by accessing your personal area on the website www.q8.it, via the ClubQ8 App, or at POS terminals located at authorized points of sale.

The Company may disclose some of your personal data to third-party entities it relies on to carry out activities related to the provision of services under the contract. In particular, your data may be disclosed to external companies providing administrative and logistical services, IT services, accounting, and consulting services. These entities may process the data as data processors on behalf of the Company or as independent data controllers in compliance with legal requirements.

The list of Data Processors can be requested from the Company by writing to clienticlub@Q8.it.

Furthermore, the Company may disclose your data to its commercial partners as part of specific initiatives or prize events you may participate in. These entities will process your data as independent data controllers.

There is no provision for the dissemination of your data to unspecified parties.

Your data will only be processed for a period of time necessary for the purposes described above. In particular, the main periods of use and retention of your personal data with reference to the various processing purposes are described below:

a. For purposes related to the provision of the requested services, the Company shall process the data for the duration of the contract and until there are obligations or requirements related to the execution of the contract and shall retain them for a period of 11 years after the termination of the contract only for the purpose of complying with legal obligations and enabling the Company to defend its rights.

b. For the provision of services provided through the ClubQ8 App that require user geolocation, your data will be processed by the Company for a limited period of time necessary to enable you to use the service and will not be retained.

c. In order to comply with legal obligations, the Company shall process and retain the data for as long as it is necessary to comply with such legal obligations.

d. As regards the processing for marketing purposes or the possible disclosure of data to third parties for marketing purposes, the data will be processed for the duration of the contract and for the duration of the obligations or requirements related to the execution of the contract, unless you withdraw the consent provided by you.

e. For profiling purposes, the data shall be processed for a maximum period of 12 months or for a different period as required by law or by measures of the supervisory authority, after which the data shall be retained, if necessary, for other purposes or shall be permanently deleted.

Your Data may be transferred outside the European Union by Service providers used by the Company for activities pertaining to the administration of the services encompassed within the contractual agreement, as well as for the dissemination of data to entities affiliated with the Group. The aforementioned transfer, if relevant, will be regulated in conjunction with said service providers and Group entities by means of employing standard contractual clauses endorsed by the European Commission. Alternatively, it may be based on a Commission adequacy decision, predicated upon binding corporate rules, and/or any other legally sanctioned instrument allowed under the applicable regulations. For further details regarding the location to which your data has been transferred and to obtain a copy of said data, please direct your inquiry to clienticlub@Q8.it.

We inform you that, under current regulations, you have the following rights:

• To ask for and obtain information about the existence of your data held by the Company and the processing of personal data carried out by the Company, as well as to obtain access to them.

• To request and obtain receipt of your data in a structured, commonly used, and machine-readable format if they are processed by automated means; you may also request the transfer of the data to another data controller.

• To request and obtain the modification correction of your data.

• To request and obtain the deletion – the limitation of processing – of your data if they are data or information not necessary – or no longer necessary – for the purposes stated above, after the retention period indicated in the preceding paragraph has elapsed. 

Such requests can be addressed to the Company through the website www.q8.it, by accessing the Privacy section, or through other channels that the Company may make available to its customers. We inform you that any request made in the aforementioned terms will be understood by the Company as referring exclusively to the data held with reference to ClubQ8. If, within the scope of other programs or other contractual relationships existing with the Company, you have provided personal data, the request made by you concerning ClubQ8 will not refer to data provided within the scope of such other contractual relationships.

Through the ClubQ8 App, you can make digital payments using various available systems; these systems are managed by payment service providers who will process your data as data processors for Kupit, or as independent data controllers as indicated at the time of selecting the payment method.

Regarding digital payments managed by PayPal, we inform you that your personal data will be processed by PayPal (Europe) S.a.r.l., as described in their privacy policy [https://www.braintreepayments.com/it/legal/braintree-privacy-policy]. You can exercise your rights about payment services by contacting PayPal.

We also inform you that the Company has appointed a Data Protection Officer, who can be contacted at dpo@Q8.it.

Finally, we inform you that, according to current regulations, you can lodge any complaints regarding the processing of your data with the Garante for the protection of personal data.