Information pursuant to art. 13 of EU Regulation 2016/679 of the European Parliament and of the Council of 27 April 2016 (General Data Protection Regulation so-called “GDPR”)
- Ownership of the treatment
Pursuant to art. 13 of Regulation (EU) 2016/679 (hereinafter “GDPR 2016/679”), concerning the protection of individuals with regard to the processing of personal data, as well as the free circulation of such data, we wish to inform you that the personal data you provided will be processed in compliance with the aforementioned legislation and the confidentiality obligations referred to in the aforementioned legislation by the Società Navigazione Libera del Golfo s.r.l. with registered office in Naples at Via G. Melisurgo n. 4, which operates as Data Controller for all legal purposes.
- Nature of the data, purpose and legal basis of the processing
The personal data you provide are, in the normal case, “common” data such as, for example, personal data (name, surname, date of birth, age, sex) and any other information suitable for identifying a single individual (code tax, physical address or e-mail address, landline or mobile phone, etc.) and will be processed for the following purposes:
– conclude the contracts for the transport services offered by the Company;
– fulfill the pre-contractual, contractual and tax obligations deriving from existing relationships with you;
– fulfill the obligations established by law, by a regulation, by community legislation or by an order of the Authority;
– pursue the legitimate interests of the Data Controller or of third parties, for example the right to defense in court.
For the aforementioned purposes, the provision of your personal data is mandatory and does not require your consent, as failure to provide it would make it impossible to manage the relationship with you and the impossibility of Navigazione Libera del Golfo s.r.l. to conclude the contract and provide the related services.
III. Method of use and storage times
The processing will be carried out in an automated and / or manual form, with methods and tools, in compliance with the security measures referred to in art. 32 of the GDPR 2016/679, by persons specifically appointed.
We point out that, in compliance with the principles of lawfulness, purpose limitation and data minimization, pursuant to art. 5 GDPR 2016/679, the retention period of your personal data is established for a period of time not exceeding the achievement of the purposes for which they are collected and processed and in compliance with the deadlines prescribed by law.
- Circulation of data
IV.1a area attributable to the same Owner
The data can be used by the staff of Navigazione Libera del Golfo s.r.l. who have been assigned a specific role of manager or person in charge of the processing and who have been given adequate operating instructions, as well as by third-party companies that carry out instrumental activities on behalf of Navigazione Libera del Golfo s.r.l., the latter act as data processors and under the management and control of Navigazione Libera del Golfo s.r.l.
IV.1b within the same corporate group for contractual or accounting purposes
Furthermore, the data may also be transmitted to other Group companies, to fulfill specific legal obligations or for contractual and accounting purposes.
IV.2 Communication and dissemination scope
We also inform you that the data collected will never be disclosed to undetermined recipients and will not be communicated without your explicit consent, except for the communications necessary for the performance of the services covered by the contract and for any administrative practices required by law, which they may involve the transfer of data to public bodies and private companies.
- Transfer of data abroad
Your data may be transmitted within the territory of the European Union and processed by subjects, however falling within the categories mentioned in point IV. above, located on the territory of the European Union for the execution of instrumental activities on behalf of Navigazione Libera del Golfo S.r.l .; in this case, these entities act as data processors and the activity is subject to specific guarantees for the protection of personal data through the adoption of contractual clauses ad hoc.
- Rights
At any time, you can exercise, pursuant to art. 15-22 of the GDPR 2016/679, the right to:
- ask for confirmation of the existence or otherwise of their personal data;
- obtain information about the purposes of the processing, the categories of personal data, the recipients or categories of recipients to whom the personal data have been or will be communicated and, when possible, the retention period;
- obtain the correction and deletion of data;
- obtain the limitation of the treatment;
- obtain data portability, i.e. receive them from a data controller, in a structured format, commonly used and readable by an automatic device, and transmit them to another data controller without impediments;
- oppose the processing at any time and also in the case of processing for direct marketing purposes;
- oppose an automated decision-making process relating to natural persons, including profiling.
You can exercise your rights with a written request sent to Navigazione Libera del Golfo S.r.l .:
– by e-mail, to the address: privacy@nlg.it;
– by fax, to the number: 081-4109460;
– by post, to the address: Via G. Melisurgo n. 4 – 80133, Napoli.
In the event of failure or partial response by the Data Controller to the aforementioned requests, you will have the right to lodge a complaint or appeal with the Guarantor for the protection of personal data within the terms and according to the methods provided for by the applicable EU and national legislation.
