PRIVACY NOTICE pursuant to Article 13 of EU Regulation No. 679/2016 (“Regulation”)
1. Data Controller
Yacht Club Italiano (hereinafter the “Data Controller”), VAT No. 00432320109, with registered office in 16128 Genoa, Porticciolo Duca degli Abruzzi, e-mail: info@yci.it
2. Categories of data, purposes and legal basis of the processing
The Data Controller provides you with this notice regarding the processing of personal data of users who browse and use the services of the website www.yachtclubitaliano.it (the “Website”). This notice is provided solely for the Website and not for other websites that may be consulted by the user through links.
Browsing data: the IT systems and software procedures used to operate the Website acquire, during their normal operation, certain data whose transmission is implicit in the use of Internet communication protocols.
This information is not collected to be associated with identified data subjects; however, by its very nature, it could, through processing and association with data held by third parties, allow users to be identified.
Processed data: this category of data includes the IP addresses or domain names of the computers used by users who connect to the Website, the URI (Uniform Resource Identifier) addresses of the requested resources, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numerical code indicating the status of the server’s response (successful, error, etc.) and other parameters relating to the user’s operating system and IT environment.
Legal basis: provision of services aimed at allowing users to browse the Website; legitimate interest consisting in ensuring the proper functioning of IT systems and verifying possible offences (possibly also on the basis of a legal obligation).
Data retention period: no longer than 24 months.
Contact forms: your data will be processed by the Data Controller for the purpose of responding to the requests received.
Processed data: contact details (name, surname, e-mail address, telephone number, and other data voluntarily provided by the user in the form/e-mail).
Legal basis: performance of a contract and/or fulfilment of pre-contractual obligations.
Data retention period: for the time necessary to process the request. In the event a contractual relationship is established, information on the data retention period will be provided in the customer privacy notice.
Sailing School contact form: your data will be processed by the Data Controller for the purpose of responding to the requests received.
Processed data: contact details (name, surname, e-mail address, telephone number, and other data voluntarily provided by the user in the form/e-mail).
Legal basis: performance of a contract and/or fulfilment of pre-contractual obligations.
Data retention period: for the time necessary to process the request. In the event a contractual relationship is established, information on the data retention period will be provided in the customer privacy notice.
Guest Quarters contact form: your data will be processed by the Data Controller for the purpose of responding to the requests received.
Processed data: contact details (name, surname, e-mail address, telephone number, and other data voluntarily provided by the user in the form/e-mail).
Legal basis: performance of a contract and/or fulfilment of pre-contractual obligations.
Data retention period: for the time necessary to process the request. In the event a contractual relationship is established, information on the data retention period will be provided in the customer privacy notice.
Newsletter and commercial communications: your data will be processed by the Data Controller for the purpose of sending commercial communications, newsletters, communications regarding initiatives and events, offers and promotions (via e-mail) relating to the products and services offered by the Data Controller.
Processed data: contact details (name, surname, e-mail address, company).
Legal basis: if you are already our customer, communications may be sent in the context of the performance of a contract and/or fulfilment of pre-contractual obligations and/or the pursuit of a legitimate interest. In all other cases, the legal basis is your specific consent.
Your consent may be withdrawn at any time by clicking on the appropriate section within the marketing e-mail received. Withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.
Data retention period: 24 months, without prejudice to possible earlier withdrawal of consent.
Management of disputes: where applicable, your data may be processed by the Data Controller for the management of complaints and/or disputes, for the prevention and repression of unlawful acts, and, in general, for the protection of the rights and legitimate interests of the Data Controller and/or third parties, including in court.
Legal basis: legitimate interest (the interest of the Data Controller corresponds to the right to legal action and defence as set out in Article 24 of the Constitution).
Data retention period: until the expiry of the time limits for the exercise of appeals.
The Website uses cookies as better specified in the relevant cookies policy available at the following link https://www.yachtclubitaliano.it/cookie-declaration
Your personal data will not be communicated to third parties, except for suppliers involved in the activities and always in strict connection with and in accordance with the purposes described above.
The Data Controller may transfer your personal data outside the European Economic Area (“EEA”). In order to protect your data in the context of international transfers, the Data Controller adopts appropriate safeguards, including adequacy decisions of the European Commission pursuant to Article 45 of the Regulation, standard contractual clauses approved by the European Commission, and contractual tools offering adequate guarantees (Article 46 of the Regulation). Alternatively, transfers will take place in the presence of the derogations set out in Article 49 of the Regulation (i.e. consent of the data subject, necessity of the transfer for contractual/pre-contractual measures, overriding public interest, legal defence, vital interests of the data subject or others, data contained in a public register).
Your data will be stored for a period equal to the duration necessary to provide the requested services.
The browsing data collected is necessary to allow the data subject to browse the Website.
The data collected relating to additional services of the Website (such as contact forms, collaborations, newsletters and commercial communications) is necessary to allow the data subject to access such services.
We inform you that, as a data subject, you have the right to obtain from the Data Controller:
Right of access: (Art. 15 of the Regulation) namely, confirmation as to whether or not personal data concerning you is being processed and, where that is the case, the right to obtain, among other things, access to your personal data and to information relating to the purposes of the processing, the categories of personal data concerned, and the recipients or categories of recipients to whom the personal data has been or will be disclosed.
Right to rectification: (Art. 16 of the Regulation) (i) rectification of inaccurate personal data concerning you without undue delay and (ii) completion of your personal data, if incomplete.
Right to erasure (“right to be forgotten”): (Art. 17 of the Regulation) erasure of personal data concerning you without undue delay (the Data Controller is obliged to erase without undue delay the personal data in the cases provided for by Article 17 of the Regulation).
Right to restriction of processing: (Art. 18 of the Regulation) restriction of processing in the cases referred to in Article 18 of the Regulation.
Right to data portability: (Art. 20 of the Regulation) receipt, in a structured, commonly used and machine-readable format, of the personal data concerning you and held by us; the right to transmit such data to another data controller without hindrance from the controller to which the personal data has been provided, in the cases referred to in Article 20 of the Regulation.
Right to object to processing carried out pursuant to Article 6(1), letters (e) or (f): (Art. 21 of the Regulation) the right to object, at any time, on grounds relating to your particular situation, to the processing of personal data concerning you pursuant to Article 6(1), letters (e) or (f), including profiling based on those provisions.
At any time, you may exercise the above-mentioned rights by sending a request to the e-mail address indicated in paragraph 1 of this notice.
You also have the right to lodge a complaint with the Italian Data Protection Authority if you believe that the processing concerning you violates the provisions of EU Regulation No. 679/2016.
This privacy notice may be subject to changes. Users are invited to periodically consult the privacy policy available on the Website for updates.
