Information pursuant to art. 13 of EU Regulation 2016/679 of the European Parliament and of the Council of 27 April 2016 (General Data Protection Regulation so-called “GDPR”)
- Ownership of the treatment
Pursuant to art. 13 of Regulation (EU) 2016/679 (hereinafter “GDPR 2016/679”), on the protection of individuals with regard to the processing of personal data and on the free movement of such data, we wish to inform you that the personal data you provide will be processed in compliance with the above-mentioned legislation and with the confidentiality obligations referred to in the aforementioned legislation by the Company Navigazione Libera del Golfo Spa. with registered office in Naples at Via G. Melisurgo no. 4, which operates as Data Controller for all legal purposes.
- Nature of the data, purpose and legal basis of the processing
The personal data you provide are, in the normal case, “common” data such as, for example, personal data (name, surname, date of birth, age, sex) and any other information suitable for identifying a single individual (code tax, physical address or e-mail address, landline or mobile phone, etc.) and will be processed for the following purposes:
– conclude the contracts for the transport services offered by the Company;
– fulfill the pre-contractual, contractual and tax obligations deriving from existing relationships with you;
– fulfill the obligations established by law, by a regulation, by community legislation or by an order of the Authority;
– pursue the legitimate interests of the Data Controller or of third parties, for example the right to defense in court.
For the aforementioned purposes, the provision of your personal data is mandatory and does not require your consent, as failure to provide it would result in the impossibility of managing the relationship with you and the inability of Navigazione Libera del Golfo Spa. to conclude the contract and provide the related services.
III. Method of use and storage times
The processing will be carried out in an automated and / or manual form, with methods and tools, in compliance with the security measures referred to in art. 32 of the GDPR 2016/679, by persons specifically appointed.
We point out that, in compliance with the principles of lawfulness, purpose limitation and data minimization, pursuant to art. 5 GDPR 2016/679, the retention period of your personal data is established for a period of time not exceeding the achievement of the purposes for which they are collected and processed and in compliance with the deadlines prescribed by law.
- Circulation of data
IV.1a area attributable to the same Owner
The data may be used by personnel of Navigazione Libera del Golfo Spa. who have been assigned a specific role of data controller or processor and who have been given appropriate operating instructions, as well as by third party companies that carry out instrumental activities on behalf of Navigazione Libera del Golfo Spa, the latter acting as data processors and under the direction and control of Navigazione Libera del Golfo Spa.
IV.1b within the same corporate group for contractual or accounting purposes
Furthermore, the data may also be transmitted to other Group companies, to fulfill specific legal obligations or for contractual and accounting purposes.
IV.2 Communication and dissemination scope
We also inform you that the data collected will never be disclosed to undetermined recipients and will not be communicated without your explicit consent, except for the communications necessary for the performance of the services covered by the contract and for any administrative practices required by law, which they may involve the transfer of data to public bodies and private companies.
- Transfer of data abroad
Your data may be transmitted in the territory of the European Union and processed by entities, however falling within the categories mentioned in point IV. above, located in the territory of the European Union for the performance of instrumental activities on behalf of Navigazione Libera del Golfo Spa.; in this case, these entities act as data controllers and the activity is subject to specific guarantees to protect personal data through the adoption of ad hoc contractual clauses.
- Rights
At any time, you can exercise, pursuant to art. 15-22 of the GDPR 2016/679, the right to:
- ask for confirmation of the existence or otherwise of their personal data;
- obtain information about the purposes of the processing, the categories of personal data, the recipients or categories of recipients to whom the personal data have been or will be communicated and, when possible, the retention period;
- obtain the correction and deletion of data;
- obtain the limitation of the treatment;
- obtain data portability, i.e. receive them from a data controller, in a structured format, commonly used and readable by an automatic device, and transmit them to another data controller without impediments;
- oppose the processing at any time and also in the case of processing for direct marketing purposes;
- oppose an automated decision-making process relating to natural persons, including profiling.
You may exercise your rights by written request sent to Navigazione Libera del Golfo Spa..:
– by e-mail, to the address: privacy@nlg.it;
– by fax, to the number: 081-4109460;
– by post, to the address: Via G. Melisurgo n. 4 – 80133, Napoli.
In the event of failure or partial response by the Data Controller to the aforementioned requests, you will have the right to lodge a complaint or appeal with the Guarantor for the protection of personal data within the terms and according to the methods provided for by the applicable EU and national legislation.
