REGULATION (EU) 2016/679 OF THE EUROPEAN PARLIAMENT AND OF THE COUNCIL of 27 April 2016 on the protection of natural persons with regard to the processing of personal data, as well as the free movement of such data, and repealing Directive 95/46/EC (General Regulation on data protection and further amendments). In accordance with Art. 13 of the EU Regulation 2016/679, Sundeck Yachts S.r.l. informs that the personal data collected, with reference to the contractual relationships established, will be subject to processing in compliance with the aforementioned legislation; in relation to the aforementioned Sundeck Yachts S.r.l. processing. provides the following information:
PERSONAL DATA COLLECTED
The personal data collected, with your free and express consent, are related exclusively to:
- Identification data (e.g. first name, surname, address, telephone, fax, e-mail, etc.);
- Tax data (if required by law – e.g. tax code, VAT number, etc.).
The data controller is Sundeck Yachts S.r.l. The role of Data Controller has been conferred on the Data Controller, to whom the data subject can contact at any time, using the contact form on the site or email firstname.lastname@example.org, for the exercise of the rights referred to in paragraph 2(b), (c, d).
PURPOSE AND METHOD OF PROCESSING (paragraph 1 (c)
The purposes of the processing of personal data are as follows:
- Fulfilment of legal obligations related to the contractual relationship;
- Organizational management of the contractual relationship;
- Statistical analysis related to the service provided;
Personal data will be processed in paper, computerized and telematic form, and entered in the relevant databases that can only be accessed by the owner and his/her representatives. With regard to the data processed in electronic form, it should be emphasized that all those appropriate security measures have been taken to protect the rights, freedoms and legitimate interests of the data subject as per art. 22 par. 3 of the EU Reg. 2016/679.
POSSIBLE RECIPIENTS OF DATA (paragraph 1 (c, f)
In relation to the purposes set out in points 1, 2 and 3 of the previous paragraph, the data may be communicated to the following subjects or categories of subjects below:
- Studies of recognized accountants related to the profession of assistance to companies when communication is due by law, or is in the interest of the subject (natural or legal person);
- Recognized lawyers’ firms related to the profession of assistance to companies when communication is due by law, regularly charged with this form of treatment in full compliance with the minimum measures in force, or when communication is in the interest of the subject (natural or legal person).
- The data controller also announces that he does not intend to transfer the data to a non-EU third country or to an international non-EU organisation.
DATA RETENTION PERIOD (par. 2(a)
At the end of the provision or provision of the service, personal data will be stored exclusively for historical or statistical purposes, in accordance with the law, regulations, Community legislation and codes of ethics and good conduct signed pursuant to Article 40 of the EU Reg. 2016/679, for a period as per current legislation (usually 10 years), or, if they are not subject to any law, for a period not exceeding five years. After this period, personal data will be stored anonymously, or will be destroyed.
RIGHTS OF PERSONS CONCERNED (paragraph 2(b))
In relation to the aforementioned processing, the data subject has the right to request access to his personal data and the rectification or deletion of the same or the limitation of the processing concerning him or to oppose their processing, as well as having the right to the portability of the data.
RIGHT TO WITHDRAW CONSENT (paragraph 2(c))
If the processing is based on consent, the data controller informs the data subject that he has the right to revoke it at any time without prejudice to the lawfulness of the processing based on the consent given before the withdrawal.
RIGHT TO LODGE A COMPLAINT (paragraph 2(d))
The holder shall inform the person concerned that he has the right to lodge a complaint with a supervisory authority.
MANDATORY OR OPTIONAL NATURE OF DATA PROVISION (paragraph 2(c))
The provision of data and the related processing are mandatory in relation to purposes n. 1 and 2 relating to tax obligations; it follows that any refusal to provide the data for these purposes may determine the impossibility of the data controller to carry out the professional relationships themselves and the legal obligations. The provision of data and the related processing is to be considered optional in other cases, without any consequences.
POSSIBLE EXISTENCE OF AUTOMATED DECISION-MAKING (paragraph 2(f))
The owner informs the data subject that there is no automated decision-making process on this site, so in particular there is no profiling system.