The EU Regulation 2016/679 of the European Parliament and of the Council of 27 April 2016 concerning the protection of individuals with regard to the processing of personal data, as well as the free circulation of such data, so-called General Data Protection Regulation (hereinafter the "GDPR") and Legislative Decree 196/2003 and subsequent amendments. (hereinafter the "Privacy Code" and collectively together with the GDPR, the "Privacy Law") introduce rules for the protection of individuals with regard to the processing of personal data.
With this information, in accordance with the provisions of art. 13 of the GDPR, we provide you with the following information in relation to the policy adopted with reference to the sailingtheweb.com site (hereinafter the "Site"):
Holder of the treatment
The data controller is Paolo Grilli (hereinafter "Data Controller") e-mail: stw@sailingtheweb.com
Type of data processed and origin of the data
The Data Controller can process the following personal data:
A) Navigation data
In the event of a visit and consultation of the Site, the Data Controller does not generally collect the user's personal data, except for standard navigation data. The technological platform through which the Site is made available to the user automatically records some navigation data - the transmission of which is implicit in the use of Internet communication protocols - such as, for example, the name of the Internet access provider, site of origin, pages visited, date and duration of the visit, etc. This information can be used anonymously and in aggregate form for statistical purposes and to verify the correct functioning of the Site.
B) Data provided voluntarily by the user
The Data Controller collects and processes the personal data that the user voluntarily provides when registering on the Site for the activation of all the services offered to the same, by way of example, the consultation service of the technical data of boats, announcements, technical forums, favorite boats, the newsletter service (the "Services"). Such data may consist of name, surname, nationality, e-mail address.
Purpose and legal basis of the processing
Your personal data will be processed exclusively for the following purposes:
a) use of the Services;
b) personal account management;
c) operational management of navigation on the Site;
d) Site security management;
e) carrying out statistical and market surveys;
f) inclusion in the Data Controller's mailing list for the transmission of newsletters;
g) sending updates and / or information and promotional material relating to products and services offered by the Data Controller on its own and on behalf of third parties.
The legal bases for the processing of your personal data are as follows:
execution of a contract or pre-contractual measures (purposes referred to in letters a and b). The processing of your personal data is a necessary condition to allow the Owner to manage your account and to guarantee the correct use of the Services provided at your request. Therefore, failure, inaccurate or incomplete provision of data will make it impossible to use the Services;
legitimate interest of the data controller (purposes referred to in letters c, d, e, f and g). In these cases, the processing is based on the legitimate interest of the Data Controller in the correct functioning of its website, in the processing of statistics regarding navigation on the site by users and in promoting its commercial activity and developing services increasingly in line with the market demands. In any case, with reference to the purposes f and g, you may at any time exercise the right of opposition (so-called opt-out) by asking to stop the processing of personal data for the aforementioned purposes.
Nature of the provision
With the exception of navigation data (collected automatically by the system), the provision of data by the user is optional. The provision of personal data is necessary for the purpose of using the Services and other features of the Site. Failure to provide data will make it impossible to access the Services and the related features of the Site.
Methods of processing and data retention times
Your personal data will be processed with IT and telematic tools in compliance with current legislation on the protection of personal data, in particular the principles of lawfulness, correctness, transparency, minimization, accuracy, integrity and confidentiality of data and in order to guarantee, through the adoption of adequate organizational and technical measures, their safety and protection from unauthorized and unlawful processing, loss, destruction and accidental damage.
The data will be stored by the Data Controller:
for the entire duration of the subscription to the Services or, in the absence of a subscription, for the entire period of use of the Services;
up to your eventual request for deletion of data;
Recipients or categories of recipients of the data
Your data will be processed by the Data Controller's staff formally authorized to process it as part of their duties and within the limits of what is strictly necessary for the performance of their business.
In carrying out its activity, the Data Controller may make use of third parties designated "data processors", who may process your personal data, on behalf of the Data Controller, exclusively within the scope of their function and within the limits of what is strictly necessary for the pursuit of purposes indicated above.
Within the limits strictly necessary for the pursuit of the aforementioned purposes, the Data Controller may communicate your personal data to third parties who operate as "independent data controllers" such as - by way of example - public administrations, judicial authorities.
Scope of data processing
Your personal data are subject to disclosure to the extent that this is necessary for the purposes of carrying out the purposes indicated in point 2 lett. to).
Rights of the interested party
Pursuant to Chapter III of the GDPR, you, as an interested party, may exercise the following rights at any time, in the presence of the conditions provided for by the Regulation:
the right to obtain from the Data Controller confirmation of the existence or otherwise of the processing of personal data concerning you, and, if necessary, to obtain access to such data;
right to obtain the correction and cancellation of personal data concerning you;
right to obtain the limitation of data processing;
right to receive personal data in a structured format, commonly used and readable by an automatic device (so-called data portability);
right to object to the processing of personal data.
These rights may be exercised free of charge by sending a request by e-mail to the address: stw@sailingtheweb.com.
Furthermore, pursuant to art. 77 of the GDPR, you have the right to lodge a complaint with the competent supervisory authority if you believe that the processing of your personal data does not comply with the GDPR.
For more information and / or reports regarding the processing of your personal data, you can contact the Data Controller at the e-mail address indicated above.
Changes to this document
This Privacy Policy may be modified to comply with new legal provisions, with the changed methods of data processing by the Data Controller, due to changes in the operation of the Site or the provision of services rendered through it.
The Owner will take care to promptly communicate any updates by publishing them in this section of the Site. The Owner therefore invites users to periodically consult the Privacy Policy to ensure that they consult the latest published version.
Cookies
A) What are cookies?
Cookies are small files sent and stored on the computer directly by the websites visited or - when this is foreseen - also by third parties (so-called "third parties"). Cookies are stored in the browser's file directory. The next time the user visits the site, his browser reads the cookie and retransmits the information to the same site or to the third party that originally created the cookie.
B) Cookies used by the Site
The Site uses only "technical cookies". Therefore, the use of profiling cookies is not envisaged.
"Technical" cookies are those used for the sole purpose of "carrying out the transmission of a communication over an electronic communications network, or as strictly necessary for the provider of an information society service explicitly requested by the contractor or user to provide this service "(Article 122, paragraph 1, of the Privacy Code). They are normally installed directly by the owner or manager of the website and are divided into:
navigation or session cookies necessary for normal navigation and use of the website;
functionality cookies, which allow the user to navigate according to a series of selected criteria (for example, the language, the products selected for purchase) in order to improve the browsing experience on the site.
analytics cookies - in this case also from third parties (for example Google analytics) - used by the website manager to collect information in aggregate form on the number of users and on how to visit the site.
The prior consent of users is not required for the use of these types of cookies.
C) Browser settings
The user can decide whether or not to accept cookies using the settings on their browser.
The total or partial disabling of technical cookies can compromise the functioning of the Site.
Most browsers automatically accept cookies and allow control of most cookies through the browser settings, even if the user is not required to accept them. Cookies can also be disabled by changing the settings of your browser, by carrying out the procedure to configure these settings.
Last updated: December 2021
