Information pursuant to Art. 13 of Regulation (EU) 2016/679 - Update of January 10, 2022
Version n.0 of 07-01-2022
By means of this document ("Information"), the Data Controller, as defined below, wishes to inform you of the purposes and methods of processing your personal data and of your rights under Regulation (EU) 2016/679 on the protection of individuals with regard to the processing of personal data and on their free movement ("GDPR").
This Policy may be supplemented by the Owner if any additional services requested by you should
involve further treatment.
HOLDER OF THE TREATMENT
CONERO BOAT with headquarters in Via Mascino, 60125 Ancona AN(entrance in via Mazzola) Pontile W3, Italy
Phone: +39 331 87 26 697 / +39 328 254 0741
Email: coneroboat@gmail.com
VAT / CF: IT02624960429
DATA PROTECTION OFFICER/DPO
Email Address: coneroboat@gmail.com
TYPES OF DATA PROCESSED
The processing activities carried out are aimed at the acquisition of the following personal data:
- Cookies: Profiling Cookie.
- Behavioral data: Navigation logs.
- Common data: Master data.
- Economic data: Banking.
PURPOSE OF PROCESSING AND CONDITION THAT MAKES PROCESSING LAWFUL
CUSTOMERS - Execution of the Contract
The processing of personal data is necessary for the acquisition of information necessary for the conclusion and execution of the contract entered into with the Data Controller.
Condition of Lawfulness: Execution of Contract - Art. 6, c.1, let. b. GDPR
Purpose of processing: Execution and management of the contract stipulated with the Data Controller.
Acquisition of information prior to the conclusion of contracts.
Communications transmitted and/or received to/from customers related to the execution and/or stipulation of the contract, carried out by various means of communication such as telephone, email (electronic mail), instant messaging, paper mail.
Nature of conferral: Mandatory - Failure to provide data will make it impossible for the Data Controller to perform the contract.
Period of conservation of personal data: Personal data, used for the execution of the contract, will be processed for the time necessary to manage the existing relationship with the Data Controller.
The information collected for the evaluation of the conclusion of the contract, if not completed, will be deleted within 6 months.
Method of Treatment: The treatment is carried out, mainly, with computer tools.
CUSTOMERS - Compliance with the law
The processing of personal data is necessary for the fulfilment of obligations provided for by laws, regulations and/or community rules, by supervisory/control bodies or by other authorities legitimated to do so.
Condition of Lawfulness: Legal Obligation - Art. 6, c.1, let. c. GDPR
Purpose of processing:
Storage of accounting and administrative documents in paper form.
Storage of accounting and administrative documents in digital form.
Digital storage of invoices issued/received (electronic invoicing).
Nature of conferral: Mandatory - Failure to provide data will make it impossible for the Data Controller to perform the contract.
Period of conservation of personal data: Personal data will be processed for this purpose for the time necessary for the fulfillment of legal obligations under applicable law.
In this respect, personal data will be retained for 10 years from the termination of the contract or, if later, from a binding decision issued by a competent authority, without prejudice to any retention obligations relating to particular categories of data, for longer periods of time, prescribed by law.
Method of Treatment: The treatment is carried out, mainly, with computer tools.
SITE - Navigation Data
To obtain anonymous statistical information on the use, to check the correct functioning of the site, to ascertain responsibility in case of hypothetical computer crimes against the Owner.
Condition of Lawfulness: Legitimate Interest - Art. 6, c.1, let. f. GDPR
Purpose of processing:
Data analysis to perform website evolution and maintenance.
Establishment of responsibility in case of potential computer crimes against the site and / or data subjects.
Anonymous statistical analysis on the use of the site.
Nature of conferral: Mandatory - Failure to provide data will make it impossible for the company to provide the web service provided.
Period of conservation of personal data: Data is retained for 30 days.
Method of Treatment: The treatment is performed with computer tools.
SITE - Site Requests
Requests made by interested parties through the website of the Data Controller.
Condition of Lawfulness: Execution of Contract - Art. 6, c.1, let. b. GDPR
Purpose of processing: Submit requests via web platform tools.
Nature of conferral: Optional - Failure to provide data will make it impossible for the Data Controller to respond to the requests of the interested party.
Period of conservation of personal data: Request processing.
Method of Treatment: The treatment is carried out with computer tools.
SITE - Service Use and Restricted Area
Use of the services offered through the reserved area of the Owner's website.
Condition of Lawfulness: Execution of Contract - Art. 6, c.1, let. b. GDPR
Purpose of processing:
Registration in the reserved area.
Use of the service provided through access to the reserved area of the site.
Nature of conferral: Optional - Failure to provide data will make it impossible for the Data Controller to provide services through the reserved area of the site.
Period of conservation of personal data: User Deletion.
Method of Treatment: The treatment is carried out with computer tools.
SOCIAL FACEBOOK PAGE
When a user uses the Page administered by the Owner, Facebook ("Social Media") collects information such as the types of content viewed or interacted with, the actions performed as well as information about the devices used (IP addresses, operating system, browser type, language settings, cookie data).
Page Insights are aggregate statistics created from certain events recorded by Facebook's servers when users interact with Pages and the content on them.
As explained in Facebook's Privacy Policy (https://www.facebook.com/policy), Social Media also collects and uses information to provide statistical data collection services referred to as Page Insights (https://www.facebook.com/business/pages/manage#page_insights) to page administrators to enable them to understand how people interact with content on pages.
Details of the treatment performed by Facebook are available at the following link:
https://www.facebook.com/privacy/explanation (https://www.facebook.com/privacy/explanation)
Details about the personal data processed for Insights can be found at the following link:
https://www.facebook.com/legal/terms/information_about_page_insights_data (https://www.facebook.com/legal/terms/information_about_page_insights_data)
Details about the cookies used by Facebook, are available at the following link:
https://www.facebook.com/policies/cookies/ (https://www.facebook.com/policies/cookies/)
The Data Controller as administrator of the Page and Facebook Ireland Limited (4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland) are joint data controllers in accordance with Article 26 of the GDPR for the processing of such personal data recorded for events delivered through Page Insights (https://www.facebook.com/business/pages/manage#page_insights) ("Insights Data").
The co-ownership agreement (https://www.facebook.com/legal/terms/page_controller_addendum), between the Owner and Facebook, covers the creation of such events and their aggregation in Insights in the Page provided to each administrator.
The legal basis for the processing is the legitimate interest of the Data Controller, Art. 6(1)(f) GDPR. Therefore, the acquisition of your prior consent to the processing is not necessary.
Condition of Lawfulness: Legitimate Interest - Art. 6, c.1, let. f. GDPR
Purpose of processing: Statistical surveys regarding the use of elements contained within the Facebook page administered by the Data Controller.
Nature of conferral: Mandatory - Failure to provide the requested data will make it impossible for the Owner to provide services through the Page published on Facebook.
Period of conservation of personal data: The data collected will be processed for the time strictly for the realization of the purposes described above as specified in the
Facebook policies described above.
Method of Treatment: The treatment is carried out by computer by the owner Facebook
EXTRA EU DATA TRANSFER
Personal data is processed exclusively within the European Union.
RIGHTS OF THE INTERESTED PARTY - COMPLAINT TO THE SUPERVISORY AUTHORITY
In relation to the processing described in this Information Notice, as a data subject you may, under the conditions set forth in the GDPR, exercise the rights set forth in Articles 15 through 22 of the GDPR and, in particular, the following rights:
right of access - Article 15 GDPR: right to obtain confirmation as to whether or not personal data concerning you are being processed and, if so, to obtain access to your personal data; right of rectification - Article 16 GDPR: right to obtain, without undue delay, rectification of inaccurate personal data concerning you and/or integration of incomplete personal data; right to erasure (right to be forgotten) - Article 17 GDPR: right to obtain, without undue delay, erasure of personal data concerning you. The right to erasure does not apply to the extent that the processing is necessary for the performance of a legal obligation or for the performance of a task carried out in the public interest or for the establishment, exercise or defense of legal claims.
Right to restriction of processing - Article 18 GDPR: right to obtain restriction of processing, when:
a) the data subject disputes the accuracy of the personal data;
b) the processing is unlawful and the data subject opposes the erasure of his/her personal data and requests instead that its use be restricted;
c) personal data are necessary for the establishment, exercise or defence of legal claims;
d) the data subject has objected to the processing pending verification of whether the legitimate reasons of the data controller prevail over those of the data subject.
Right to data portability - Article 20 GDPR: The right to receive, in a structured, commonly used and machine-readable format, the personal data concerning you provided to the Data Controller and the right to transmit them to another data controller without hindrance, if the processing is based on consent and is carried out by automated means. In addition, the right to have your personal data transmitted directly from this controller to another controller if this is technically feasible; right to object - Article 21 GDPR: right to object, at any time, to the processing of personal data concerning you based on the condition of legitimate interest, including profiling, unless there are legitimate reasons for the Controller to continue the processing that override the interests, rights and freedoms of the data subject or for the establishment, exercise or defense of a right in court.
Right not to be subjected to automated decision-making - Article 22 GDPR: You have the right not to be subjected to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you, unless this is necessary for the conclusion or performance of a contract or you have given your consent.
In any case, an automated decision-making process will not be able to affect your personal data and you will be able at any time to obtain human intervention by the data controller, express your opinion and challenge the decision.
Right to complain to the Guarantor Authority for the protection of personal data: http://www.garanteprivacy.it (http://www.garanteprivacy.it); to revoke the consent given at any time and with the same ease with which it was provided without affecting the lawfulness of treatment based on the consent given before the revocation.
The above-mentioned rights may be exercised in relation to the Data Controller by contacting the references indicated above.
The exercise of your rights as a data subject is free of charge pursuant to Article 12 GDPR. However, in the case of requests that are manifestly unfounded or excessive, including due to their repetitiveness, the Data Controller may charge you a reasonable fee, in light of the administrative costs incurred in handling your request, or deny you satisfaction of your request.
Finally, we inform you that the Data Controller may request further information necessary to confirm the identity of the person concerned.
English 
Italian