Privacy Policy

INFORMATION PURSUANT to art. 13 EU Reg. 2016/679 (GDPR) (Privacy Policy)

In compliance with the provisions of EU Reg. 2016/679 (European Regulations for the protection of personal data), with this statement the I.S.Y.L. Italian Super Yacht Life, Technical Institute for Sustainable Mobility, with registered office at Istituto Galilei Artiglio, Via Aurelia Nord 342, 55049 Viareggio (LU), P. IVA and C.F. 91050240463 – as Data Controller – provides the necessary information regarding the processing of personal data provided by you on this site.

This information is not valid for other websites that may be consulted via links on the website of the owner. Users / visitors must read this Privacy Policy carefully before submitting any personal information.

According to article 13 of EU Reg. 2016/679, therefore, we provide you with the following information:

1. HOLDER, RESPONSIBLE AND AUTHORIZED

Data controller, pursuant to art. 4 and 24 of EU Reg. 2016/679 is I.S.Y.L. Italian Super Yacht Life, Technical Institute for Sustainable Mobility, with registered office at Istituto Galilei Artiglio, Via Aurelia Nord 342, 55049 Viareggio (LU), P. IVA and C.F. 91050240463. The Owner can be contacted at the following e-mail address privacy@isyl.it.

The updated list of the Data Processors and any Authorized Persons may be consulted at the Foundation’s registered office.

2. DATA PROTECTION MANAGER (DPO)

The person responsible for the protection of personal data has not been appointed. The Foundation does not fall within the cases envisaged by art. 37 of the EU Reg. 2016/679 and, therefore, is not obliged to the obligatory designation of this figure.

3. TYPES OF DATA PROCESSED

– Navigation data (eg IP addresses or domain names of computers and terminals used by users);

– Data communicated by the user: identification data, contact data and other data provided by users in the appropriate forms;

– Cookies and other tracking systems: cookies are not used for user profiling, nor are other tracking methods used.

4. PURPOSE, LEGAL BASIS AND LICENSE OF TREATMENT

The legal basis for processing is the execution of a contract, a requested service or the execution of pre-contractual measures.

The Foundation informs you that it will process your personal and contact details, communicated by you, in compliance with the conditions of lawfulness provided for by art. 6 EU Reg. 2016/679 and to the extent strictly necessary to fulfill the following purposes:

– navigation and use of services on this website;

– to give feedback to an eventual request for information addressed to the data controller by sending an e-mail or through the appropriate contact form;

– to manage requests for enrollment in courses and participation in activities organized by the Foundation;

– subject to specific consent, for marketing activities by sending emails or newsletters containing news and information related to the activities of the Foundation.

The optional, explicit and voluntary sending of messages to the address of the Data Controller involves the acquisition of the contact details of the sender, necessary to respond, as well as all personal data included in the communications.

5. ADDRESSEES OR CATEGORIES OF ADDRESS OF PERSONAL DATA

The collected data may be communicated to recipients, named ex art. 28 EU Reg. 2016/679, which will process the data as external managers and / or as natural persons acting under the authority of the Owner and the Data Processor.

Precisely, the data can be communicated to the following subjects:

-society of services for the management / maintenance of the information system, of the communication networks and of the web platform;

– studies or companies in the field of legal assistance and tax / labor advice;

– competent authorities for compliance with legal obligations and / or provisions of public bodies, upon request.

6. DATA TRANSFER TO A THIRD COUNTRY AND / OR AN INTERNATIONAL ORGANIZATION

Personal data provided to the Foundation will not be transferred abroad, either within or outside the European Union.

7. PERIOD OF CONSERVATION OR CRITERIA USED TO DETERMINE THIS PERIOD

The processing will be carried out using IT and manual methods and tools aimed at guaranteeing maximum security and confidentiality, by persons specifically authorized to do so.

In compliance with the provisions of art. 5 EU Reg. 2016/679 and the principle of minimization, the collected data will be stored on protected computer systems or in paper form with methods that allow the identification of data subjects for a period of time not exceeding the achievement of the purposes for which the personal data are collected, until revocation of consent and in any case no later than 24 months from collection.

The navigation data (if any) is not stored for more than 7 days and is deleted immediately after their aggregation.

After these terms, the data will be destroyed or made anonymous. If for any reason you feel exhausted the purpose of the treatment (before the aforementioned term) must notify the Foundation in writing, which will proceed to the immediate cancellation of the data collected.

8. RIGHTS OF THE INTERESTED PARTIES AND MODALITIES OF EXERCISE OF THE SAME

As an interested party you can assert your rights under Chapter III (articles 15-22) of EU Reg. 2016/679 by contacting the Data Controller by email at privacy@isyl.it, by registered mail a / r – c / o the address of the Foundation’s registered office – or by paper delivery. Please note that in the case of non-acceptance by the Owner, you have the right to lodge a complaint with the Guarantor or a judicial appeal.

The rights it enjoys, pursuant to EU Reg. 2016/679, are precisely the following:

  • • obtain confirmation of the existence or not of personal data concerning you, even if not yet registered, and their communication in an intelligible form (right of access). In particular, the interested party has the right to access the following information: a) purpose of the processing; b) categories of personal data in question; c) subjects or categories of subjects to whom personal data can be communicated; d) the retention period of personal data or the criteria used to determine this period; e) the existence of the right of the interested party to request the owner to rectify or delete personal data concerning him or to oppose their processing; f) the right to lodge a complaint with the supervisory authority; g) information on the origin of the data, if not collected by the data subject; h) the existence of an automated decision-making process, including profiling, and in such cases at least the logic used; i) the right to be informed of existing safeguards when personal data are transferred to a third country; l) the right to obtain a copy of the personal data being processed;
  • • obtain: a) the adjustment or, when interested, the integration of data (right of rectification); b) the cancellation of personal data concerning him without unjustified delay (right to be forgotten); c) the limitation of the treatment (right of limitation of treatment); d) the attestation that the above operations have been brought to the attention, also with regard to their content, of those to whom the data have been communicated or disseminated, except in the case in which this fulfillment proves impossible or disproportionate;
  • • the right to receive their data in a structured format that is commonly used and readable mechanically in order to reuse them for other purposes and through different services and the right to transmit their data to another Owner without impediments (right to portability);
  • • the right to oppose at any time, for reasons connected with your particular situation, the processing of personal data concerning you, including profiling. If the data are processed for direct marketing purposes, the data subject has the right to object at any time to the processing of personal data concerning him / her for such purposes (right of opposition);
  • • the right not to be subjected to a decision based solely on automated processing (including profiling) that produces legal effects concerning him or who significantly affects his person in a similar way;
  • • the right to withdraw the consent at any time, without prejudice to the lawfulness of the treatment based on the consent given prior to the revocation, if the treatment is based on art. 6 par. 1, lett. a) EU Reg. or on art. 9 par. 2, lett. a) EU Reg
  • • in certain situations, the right to receive communications regarding the violation of personal data.

9. DATA PROCESSING METHODS

The personal data you provide will be recorded, processed, managed and stored in paper form and / or with the help of electronic computer tools and in any case in such a way as to guarantee the security and confidentiality of the same.

The processing of personal data takes place without the intervention of automated systems or processes and there is no provision for profiling.

10. NATURE OF CONFERENCE AND CONSENT

The provision of personal data for the purposes referred to in paragraph 4 is optional. Any partial or total failure to provide the data will result in partial or total inability to use the services offered by the Data Controller, for example to receive feedback on the request for information forwarded. Failure to consent to the use of data for marketing activities does not prevent the use of other services offered by the site. Any consent given may be revoked at any time in the manner specified in point 7.

11. DISCLOSURE OF DATA

The personal data collected will not be in any way and for any reason disseminated to third parties not authorized by the Owner and may be shown only upon request by the Judicial, Financial and Guarantor Authority, as well as to all other parties to whom the communication is obligatory by law for the accomplishment of said purposes.

The Data Controller I.S.Y.L. Italian Super Yacht Life

Viareggio, 25.5.2018