Privacy Policy
Information on the processing of personal data. Last updated: January 28, 2022 (11:32:08)
With this information, pursuant to EU Regulation no. 679/2016 (hereinafter GDPR) and specific compatible national legislation, Alocin Media Srl, with registered office in Piazza Duca degli Abruzzi, 11/11 16167 Genoa GE, Tax Code/VAT Number 02499470991, as “Data Controller” (hereinafter “Controller”), informs you of the methods and circumstances with which it will process the personal data and information provided by accessing the website superyacht24.it, of which Alocin Media Srl is the owner.
Type of data being processed
-
Personal details
The personal data processed by the Data Controller are the following: name, surname, date of birth, gender, telephone number, residential address, zip code, telephone number, and email address. For complete details, please refer to the specific section of this policy.
-
Navigation data
This information is collected automatically by the Data Controller through the Website, newsletters, or third-party applications. This information includes: date and time, IP addresses, URI (Uniform Resource Identifier) addresses, the time of the request, the method used to submit the request to the server, the size of the response, the numerical status code, as well as browser and operating system, language, and country.
-
Cookie
Cookies are small text files sent from a website to the user's terminal (usually the browser), where they are stored before being re-sent to the website upon the same user's next visit. A cookie cannot retrieve any other data from the user's hard drive, transmit computer viruses, or capture email addresses. Each cookie is unique to the user's web browser. Some cookie functions can be delegated to other technologies. In this document, the term "cookie" refers to both cookies themselves and all similar technologies. For more information on the use of cookies, please consult the Cookie Privacy document on this website.
Active modules on the site
Legal basis and purpose of the Processing
-
Data essential for contractual execution
Upon obtaining the User's consent, data will be processed solely for purposes related to providing the specific service. For example, if a request for information is made, the data will be used solely to respond to the User by providing the requested information. This data is essential for the performance of the contractually requested services.
-
Promotional, commercial and marketing purposes
Subject to the User's explicit consent, data processing will be carried out for the purposes of sending the Data Controller, on a periodic basis, commercial communications, initiatives, discounts, and offers from the Data Controller or third parties. Data entered by the "Data Controller" on the Site may be subject to processing, if obtained directly from the "Data Controller" or from third parties, in compliance with applicable legislation. In any case, the User's data will not be disclosed and/or transferred to third parties under any circumstances.
Owner, persons in charge and data controllers
-
Data controller
The data controller of the data provided by users is the Data Controller, as defined in the introduction, in the person of its legal representative pro tempore.
-
Data controllers
The persons appointed by the Data Controller may become aware of your data as they are responsible for carrying out certain processing operations connected and instrumental to the provision of the service and/or for additional purposes consented to by the User.
-
Data controllers
In order to technically manage the above, the Data Controller has appointed the following external data processors:
- Edinet Srl, Corso Italia, 66 Pietra Ligure SV
Mode of treatment
Personal data will be processed using manual or electronic tools, using methods strictly related to the purposes indicated above and, in any case, in a manner that guarantees the security, protection, and confidentiality of the data. Furthermore, it is further specified that personal data will be processed using methods that minimize the risk of destruction or loss, even accidental, of the data, unauthorized access, or processing that is unauthorized and inconsistent with the purposes of collection. Specifically, in processing data, the Data Controller and the parties identified as data processors will employ organizational, physical, and logical measures to ensure the security and confidentiality of the data, using all appropriate measures to ensure the classification, storage, and confidentiality of the data. Personal data may be processed by employees, collaborators, and consultants of the Data Controller, specifically appointed as data processors, to perform specific operations necessary to achieve the aforementioned purposes, under the direct authority and control of the Data Controller.
responsibility of the Owner and in accordance with the instructions given by the same.
Recipients of the data
The data provided by the User will NOT be disclosed under any circumstances to third parties for purposes other than those for which they have been specifically authorized. This does not apply to cases (e.g., security requirements by law enforcement authorities, etc.) specifically indicated in EU Regulation 679/2016.
Data retention period
The User may object to the processing of their personal data at any time by sending an email to the address indicated in the "Data Controller's Contact Information" section of this policy. For newsletters, the User will also have the option to independently unsubscribe from the list using the link at the bottom of any email received from the aforementioned list. Even after unsubscription, some data may be retained. For example, data related to consent, data that may be subject to requests from the Authorities for the prevention of illegal activities, billing data, or issued invoices. If the sending of communications is based on the performance of a contract with the Data Controller, it will not be possible to delete the User's data until the contract has been concluded and/or until the parties have exercised their right of withdrawal, as required by current legislation.
Data transfer to non-EU countries
The Data Controller may use services offered by third-party companies, which will process your data as data processors and in accordance with the instructions given to them by the Data Controller. Some of the processing performed by these processors may take place outside the European Union, such as in the USA. In these cases, the Data Controller uses legal instruments to ensure adequate protection of your personal data (e.g., requiring such parties to sign Standard Contractual Clauses or complying with other specific data protection standards proposed or suggested by the European Union and the Italian Data Protection Authority).
User rights
As a data subject, you are granted the following rights regarding the personal data collected and processed by the Data Controller in the context of the processing outlined above:
-
Right of access
Article 15: The User has the right to obtain from the Data Controller confirmation as to whether or not personal data concerning him or her are being processed, and, where that is the case, access to the personal data and the following information: (i) the purposes of the processing; (ii) the categories of personal data concerned; (iii) the recipients or categories of recipients to whom the personal data have been or will be disclosed, in particular recipients in third countries or international organizations; (iv) where possible, the envisaged period for which the personal data will be stored, or, if not possible, the criteria used to determine that period; (v) the right to lodge a complaint with a supervisory authority.
-
Right to rectification, opposition and erasure
Article 16: You have the right to obtain the rectification of inaccurate personal data concerning you and, taking into account the purposes of the processing, the right to have incomplete personal data completed, including by means of providing a supplementary statement. Furthermore, you have the right to obtain the erasure of your personal data if one of the following grounds applies: (i) the personal data is no longer necessary in relation to the purposes for which it was collected or otherwise processed; (ii) the data is unlawfully processed; (iii) you have withdrawn consent on the basis of which the Data Controller was entitled to process your data and there is no other legal basis for the processing; (iv) you have objected to the processing and there is no overriding legitimate ground; (v) the personal data must be erased for compliance with a legal obligation. However, the Data Controller has the right to waive the exercise of the aforementioned rights to erasure if the right to freedom of expression and information prevails, or to exercise a legal obligation or defend a legal claim. You may object to processing at any time, even for just one of the purposes listed above.
-
Right to erasure (“right to be forgotten”)
Article 17: The User has the right to obtain from the Data Controller the erasure of personal data concerning him or her without undue delay, and the Data Controller has the obligation to erase personal data without undue delay if one of the grounds set out in Article 17, paragraph 1, letters a, b, c, d, e, f, paragraph 2, or paragraph 3, letters a, b, c, d, e, applies.
-
Right to restriction of processing
Article 18: The User has the right to obtain from the Data Controller restriction of processing: (i) for the period necessary for the Data Controller to verify the accuracy of the personal data concerning him or her whose accuracy you have contested; (ii) in the event of unlawful processing of his or her personal data; (iii) when he or she needs the data to be processed for the establishment, exercise, or defense of legal claims; (iv) for the period necessary to verify whether the legitimate grounds of the Data Controller override his or her request to object to processing.
-
Right to data portability
Article 20: The User has the right to receive, in a structured, commonly used and machine-readable format, the personal data provided to the Data Controller and processed by the latter on the basis of consent, as well as the right to transmit such data to another Data Controller indicated by the User without any hindrance.
-
Right to object
Article 21: The User has the right to object at any time, on grounds relating to his or her particular situation, to processing of personal data concerning him or her which is based on Article 6, paragraph 1, letter e) or f), including profiling based on those provisions. Where personal data are processed for direct marketing purposes, the User has the right to object at any time to processing of personal data concerning him or her for such purposes, including profiling to the extent that it is related to such direct marketing. If the User objects to processing for direct marketing purposes, the personal data will no longer be processed for such purposes.
Owner's contact details
The User may exercise his rights at any time by sending a request to the Data Controller in his capacity as data controller via email to the address capuzzo.nicola@gmail.com