Information pursuant to Art. 13 EU Reg. 2016/679 (GDPR)

(Privacy Policy)

In compliance with the provisions of EU Reg. 2016/679 (European Regulation for the protection of personal data), with this information notice the Foundation I.S.Y.L. Italian Super Yacht Life, Technical Institute for Sustainable Mobility, with registered office c/o Istituto Galilei Artiglio, Via Aurelia Nord 342, 55049 Viareggio (LU), VAT and Tax Code 91050240463 – as Data Controller – provides the necessary information regarding the processing of personal data you provide on this site.

This Privacy Policy does not apply to other websites that may be consulted through links on the Owner’s domain website. Users/visitors should read this Privacy Policy carefully before submitting any personal information.

Pursuant to Art. 13 EU Reg. 2016/679, we therefore provide you with the following information:

1. DATA CONTROLLER AND DATA PROTECTION OFFICER

The Data Controller, pursuant to Articles 4 and 24 of EU Reg. 2016/679 is I.S.Y.L. Italian Super Yacht Life, Istituto Tecnico per la mobilità sostenibile, with registered office c/o Istituto Galilei Artiglio, Via Aurelia Nord 342, 55049 Viareggio (LU), VAT and Tax Code 91050240463.The Holder can be contacted at the following e-mail address es. privacy@isyl.it.

The Data Protection Officer (DPO) is CLARIS SRL, with registered office in Via L.Repaci 16, 55049, Viareggio (LU).

The person identified as the contact person is Mr Domenico Vispo, who can be contacted at the e-mail address d.vispo@clarissrl.it.

2. TYPE OF DATA PROCESSED

– Browsing data (e.g. IP addresses or domain names of computers and terminals used by users);

– Data provided by the user: identification data, contact data and other data provided by users in the forms;

Cookies and other tracking systems: no cookies are used for user profiling, nor are any other tracking methods employed.

3. PURPOSE, LEGAL BASIS AND LAWFULNESS OF PROCESSING

The legal basis legitimising the processing is the performance of a contract, a requested service or the execution of pre-contractual measures.

The Foundation informs you that it will process your personal and contact data, communicated by you, in compliance with the conditions of lawfulness provided for in Article 6 EU Reg. 2016/679 and to the extent strictly necessary to fulfil the following purposes:

– navigation and use of services on this website;

– to respond to a possible request for information addressed to the data controller by sending an email or using the contact form;

– to manage applications for courses and participation in activities organised by the Foundation;

– subject to specific consent, for marketing activities by sending emails or newsletters containing news and information on the Foundation’s activities.

The optional, explicit and voluntary sending of messages to the Controller’s addresses entails the acquisition of the sender’s contact data, which are necessary to reply, as well as any personal data included in the communication.

4. RECIPIENTS OR CATEGORIES OF RECIPIENTS OF PERSONAL DATA

The data collected may be communicated to recipients, appointed ex art. 28 EU Reg. 2016/679, who will process the data as external Data Processors and/or as natural persons acting under the authority of the Data Controller and the Data Processor.

Specifically, the data may be communicated to the following entities:

-service company for the management/maintenance of the IT system, communication networks and web platform;

– firms or companies in the context of legal assistance and tax/employment consultancy relationships;

– competent authorities to fulfil legal obligations and/or provisions of public bodies, upon request.

5. DATA TRANSFER TO A THIRD COUNTRY AND/OR INTERNATIONAL ORGANISATION
Data of a personal nature provided to the Foundation will not be transferred abroad, neither within nor outside the European Union.
6. RETENTION PERIOD OR CRITERIA USED TO DETERMINE THAT PERIOD

Processing will be carried out using computerised or manual methods and tools designed to guarantee maximum security and confidentiality, by persons specifically authorised to do so.

In compliance with the provisions of Art. 5 EU Reg. 2016/679 and the principle of minimisation, the data collected will be stored on protected computer systems or in paper form in a manner that allows the identification of the data subjects for a period of time not exceeding the achievement of the purposes for which the personal data are collected, until consent is revoked and in any case no later than 24 months after collection.

Browsing data (which may be collected) are not stored for more than 7 days and are deleted immediately after their aggregation.

After this time, the data will be destroyed or rendered anonymous. If for any reason you consider that the purpose of the processing (before the aforementioned deadline) has been fulfilled, you must notify the Foundation in writing, which will proceed to the immediate deletion of the data collected.

7. RIGHTS OF THE PERSONS CONCERNED AND HOW TO EXERCISE THEM

As a data subject, you may assert your rights under Chapter III (Articles 15-22) of Reg. EU 2016/679 by contacting the Data Controller by e-mail at privacy@isyl.it, by registered mail with return receipt – c/o the address of the Foundation’s registered office – or by paper delivery.

Your rights under Reg. EU 2016/679, are precisely the following:

  • access;
  • rectification;
  • cancellation;
  • withdrawal of consent;
  • limitation of processing;
  • opposition to processing;
  • portability.

These rights are granted to you without any particular charges or formalities for their exercise, which is essentially free of charge.

Without prejudice to any other action in administrative or judicial proceedings, you may also submit a complaint to the Supervisory Authority in accordance with the provisions of EU Regulation 2016/679 and the Privacy Code, as amended by Legislative Decree 101/2018.

8. MODALITIES OF DATA PROCESSING

The personal data you provide will be recorded, processed, managed and stored in paper form and/or with the aid of electronic computerised tools and in any case in such a way as to guarantee their security and confidentiality.

Personal data are processed without the intervention of automated systems or processes and no profiling is involved.

9. NATURE OF CONFERMENT AND CONSENT

The provision of personal data for the purposes set out in point 4 is optional. The partial or total failure to provide data will result in the partial or total impossibility of benefiting from the services offered by the data controller, e.g. to receive a reply to a request for information submitted. Failure to consent to the use of data for marketing activities does not prevent the use of other services offered by the site. Any consent given may be revoked at any time in the manner set out in point 7 without affecting the lawfulness of the processing based on the consent given before revocation,

10. DISSEMINATION OF DATA

The personal data collected shall in no case and for no reason be disclosed to third parties not authorised by the Data Controller and may only be shown at the request of the Judicial, Financial and Guarantor Authorities, as well as to all other parties to whom disclosure is required by law for the fulfilment of the aforementioned purposes.

The Data Controller
I.S.Y.L. Italian Super Yacht Life Foundation

Table of Contents