Policy in compliance with article 13 GDPR 679/2016: Policy for the Processing of Personal Data collected from the Data Subject

In compliance with the provisions of EU Reg. 2016/679 (General Data Protection Regulation) we provide you with the information regarding the processing of any personal data provided. The policy complies with article 13 of EU Regulation 2016/679 (General Data Protection Regulation).

TYPE OF DATA PROCESSED/PROCESSABLE
Processed/Processable Data “Personal Data”.
Personal Data, pursuant to art. 4 of the GDPR 2016/679, refers to any information concerning a natural person (“Data Subject”) who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person; (C26, C27, C30)”.
User Details.
Browsing Data
The information technology systems and software procedures used by this website during the course of its normal operation acquire some personal data whose transmission is implicit in the use of Internet communication protocols. This information is not collected to be associated with identified users but due to its nature, when elaborated and combined with data held by third parties, it may lead to their identification. This category of data includes IP addresses, domain names of the computers used by users to connect to the site; the addresses in URI (Uniform Resource Identifier) format of the resources requested, the time when the request is made, the method used to submit the request to the server, the size of the file obtained in response, the numerical code indicating the status of the server (successful, error, etc.) and other parameters concerning the user’s operating system and computer environment.
Data Provided Voluntarily
By optionally, voluntarily and explicitly sending emails to the addresses published on this website and/or filling in forms, the receiver automatically acquires the data required to reply to the requests.

COOKIES
For cookies and similar technologies, please see the Cookie Policy accessible from the footer of the website. For non-technical cookies and similar technologies, the legal basis is consent pursuant to art. 6, parag. 1, letter a) of the GDPR.

The DATA CONTROLLER, pursuant to art.4 of EU Reg. 2016/679, is LA MARINA DORICA SPA with Registered Office in Via G. Mascino 5/L , 60125 Ancona (An) Tel. 07154800, email info@marinadorica.it, in the person of its pro-tempore legal representative

PURPOSE OF PROCESSING

A) Browsing this website

  • LEGAL BASIS: Pursuant to art. 6, parag. 1, letter f), of the GDPR 2016/679, the legal basis is legitimate interest. “processing is necessary for the purpose of the legitimate interest pursued by the Data Controller or a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject which require protection of personal data, in particular where the data subject is a child.
    In this case, the legitimate interest is an activity strictly necessary for the correct operation of the website and to allow browsing.
  • DATA RETENTION: For the duration of the browsing session (except when otherwise requested by judicial authorities to ascertain crimes).
  • NATURE OF DATA PROVISION: The provision of data is necessary to browse the website.

 

B) Submitting contact forms: after receiving a contact form, the company will process the data in order to meet the user’s requests. Forms can be submitted only by users who are 14 years old or over (or older depending on the definition of minor applicable in their Country of residence). Users who do not meet the age requirement cannot submit forms with their personal details.

  • LEGAL BASIS: Pursuant to art. 6, parag. 1, letter b), processing is necessary in order to take steps at the request of the data subject prior to entering into a contract.
  • DATA RETENTION: Data will be retained until the request is met and for maximum 1 year.
  • NATURE OF DATA PROVISION: Data provision is optional, however the refusal to provide data marked as necessary will result in the impossibility for the company to meet the request.

C) Submitting request forms in the Brico area: after receiving a form, the company will process any data in order to meet the user’s requests. Forms can be submitted only by users who are 14 years old or over (or older depending on the definition of minor applicable in their Country of residence). Users who do not meet the age requirement cannot submit forms with their personal details.

  • LEGAL BASIS: Pursuant to art. 6, parag. 1, letter b), processing is necessary in order to take steps at the request of the data subject prior to entering into a contract.
  • DATA RETENTION: Data will be retained until the request is met and for maximum 1 year.
  • NATURE OF DATA PROVISION: Data provision is optional, however the refusal to provide data marked as necessary will result in the impossibility for the company to meet the request.

D) Submitting berth booking forms: after receiving a contact form, the company will process the data in order to meet the user’s requests. Forms can be submitted only by users who are 14 years old or over (or older depending on the definition of minor applicable in their Country of residence). Users who do not meet the age requirement cannot submit forms with their personal details.

  • LEGAL BASIS: Pursuant to art. 6, parag. 1, letter b), processing is necessary in order to take steps at the request of the data subject prior to entering into a contract.
  • DATA RETENTION: Data will be retained until the request is met and for maximum 1 year.
  • NATURE OF DATA PROVISION: Data provision is optional, however the refusal to provide data marked as necessary will result in the impossibility for the company to meet the request.

RECIPIENTS OR CATEGORIES OF RECIPIENTS Any personal data provided will be communicated to recipients who will process them as Data Processors (art. 28 Reg. 2016/679) and/or as natural persons acting under the authority of the Data Controller and the Data Processor (art. 29 of EU Reg. 2016/679), or autonomously as separate Data Controllers, for the purposes listed above.

DATA TRANSFERS TO THIRD PARTY COUNTRIES Data will not be transferred outside the EU.

DATA SUBJECT RIGHTS You may exercise the rights set out in EU Reg. 2016/679 art.15 et seq., by contacting the Data Controller. You have the right to request to access, rectify or erase your personal data at any time. You also have the right to request the portability of your data. You have the right to revoke your consent at any time, without affecting the legitimacy of the processing carried out before you revoked your consent. Without prejudice to any other judicial or administrative actions, if you believe your personal data has been processed in violation of EU Reg. 2016/679, pursuant to art.15 letter f), you have the right to complain to the Data Protection Authority (www.garanteprivacy.it).

AMENDMENTS TO THE POLICY The Data Controller reserves the right to change, amend, add, or remove at its sole discretion any part of this policy at any time. For convenience, in the event of any amendments the date of the latest update will be shown on the policy.

Updated 27/01/2023
The Data Controller
LA MARINA DORICA SPA