Marina Portolabieno

Privacy

Personal data processing notice pursuant to Articles 13 and 14 of EU Regulation 2016/679 (GDPR).

We hereby inform you that, pursuant to Articles 13 and 14 of EU Regulation 679/2016 (hereinafter "GDPR"), the data you provide to us will be processed as set out below, in compliance with the principles of fairness, lawfulness, transparency and protection of your confidentiality and your rights.

Data Controller

The Data Controller is PORTOLABIENO Società Cooperativa srl, Viale De Angeli snc, 21014 Laveno Mombello, Italy (Tel/Fax 0332 666900, Mobile 333 2899977) — email: info@portolabieno.com.

Purposes of processing

  1. Mandatory legal obligations in the tax and accounting field.
  2. Managing the data needed to book transit or to rent/use a free berth at the marina.
  3. Communicating useful information (e.g. by SMS, email, phone).
  4. Recording entries to the marina to allow access only to authorised users.
  5. Managing any disputes.

Legal basis for processing

The purposes referred to in points 1) 2) 3) are necessary for the performance of the contract/business relationship to which you are a party and for statutory obligations. Purposes 4) 5) are based on the Data Controller's legitimate interests. Failure to provide the data makes it impossible to establish a relationship between the parties.

Recipients

In addition to the Data Controller, other parties involved in the organisation (appointed staff, administrative personnel) or external parties (such as third-party technical service providers, IT companies, system administrators, banks/credit institutions, etc.) may have access to the Data, also appointed, where necessary, as Data Processors by the Data Controller. The updated list of Data Processors can always be requested from the Data Controller.

Disclosure

Your data will not be disclosed.

Processing methods

The Data Controller adopts appropriate security measures to prevent unauthorised access, disclosure, alteration or destruction of Personal Data. Processing is carried out using IT and/or telematic tools, manually through paper files, with organisational methods and logic strictly related to the stated purposes.

Transfer of data abroad

If transmitted through certified email communications, your data will be transferred abroad (Europe and the United States), where the email server is located.

Categories of data

The data processed may include: first and last name, address, tax code/VAT number, phone number/email address, type of boat, make, model and registration number.

Retention period

Please note that, in compliance with the principles of lawfulness, purpose limitation and data minimisation under Article 5 of the GDPR, your data will be retained:

  • for the time necessary to satisfy the Data Controller's legitimate interest;
  • for a period not exceeding the achievement of the purposes for which it is collected and processed, for the performance of contractual purposes;
  • for a period not exceeding the achievement of the purposes for which it is collected and processed, in compliance with the mandatory statutory timeframes.

Rights

Data subjects may exercise certain rights with regard to the Data processed by the Data Controller. In particular, you have the right to:

  • access your Data: you have the right to obtain information about the Data processed by the Data Controller, about certain aspects of the processing, and to receive a copy of the Data processed.
  • verify and request rectification: you may verify the accuracy of your Data and request that it be updated or corrected.
  • obtain the erasure or removal of your Personal Data: under certain conditions, you may request the Data Controller to erase your Data.
  • withdraw your consent at any time: you may withdraw consent to the processing of your Personal Data previously given.
  • object to the processing of your Data: you may object to the processing of your Data when it is based on a legal basis other than consent.
  • obtain restriction of processing: under certain conditions, you may request that the processing of your Data be restricted.
  • obtain data portability: you have the right to receive your Data in a structured, commonly used and machine-readable format and, where technically feasible, to have it transferred without hindrance to another controller. This applies when the Data is processed by automated means and the processing is based on consent, on a contract to which you are a party, or on related contractual measures.
  • lodge a complaint: you may lodge a complaint with the competent data protection supervisory authority or take legal action.

Details on the right to object

When Personal Data is processed in the public interest, in the exercise of official authority vested in the Data Controller, or to pursue a legitimate interest of the Data Controller, you have the right to object to the processing on grounds relating to your particular situation. Please note that, if your Data is processed for direct marketing purposes, you may object to the processing without providing any justification.

How to exercise your rights

To exercise your rights, you may send a request to the Data Controller's contact details indicated in this document. Requests are handled free of charge and processed by the Data Controller as soon as possible, and in any case within one month.

We hereby inform you that, pursuant to Articles 13 and 14 of EU Regulation 679/2016 (hereinafter "GDPR"), the data you provide to us will be processed as set out below, in compliance with the principles of fairness, lawfulness, transparency and protection of your confidentiality and your rights.

Data Controller

The Data Controller is PORTOLABIENO Società Cooperativa srl, Viale De Angeli snc, 21014 Laveno Mombello, Italy (Tel/Fax 0332 666900, Mobile 333 2899977) — email: info@portolabieno.com.

Purposes of processing

  1. Preparing quotes for booking transit or renting a berth.
  2. Communicating useful information (e.g. by SMS, email, phone).

Legal basis for processing

The purposes referred to in points 1) 2) are necessary for carrying out pre-contractual measures. Failure to provide the data makes it impossible to establish a relationship between the parties.

Recipients

In addition to the Data Controller, other parties involved in the organisation (appointed staff, administrative personnel) may have access to the Data. The updated list of Recipients can always be requested from the Data Controller.

Disclosure

Your data will not be disclosed.

Processing methods

The Data Controller adopts appropriate security measures to prevent unauthorised access, disclosure, alteration or destruction of Personal Data. Processing is carried out using IT and/or telematic tools, manually through paper files, with organisational methods and logic strictly related to the stated purposes.

Transfer of data abroad

Your data will not be transferred abroad.

Categories of data

The data processed may include: first and last name, phone number/email address, type of boat, make, model and registration number.

Retention period

Please note that, in compliance with the principles of lawfulness, purpose limitation and data minimisation under Article 5 of the GDPR, your data will be retained:

  • for the time necessary to satisfy the Data Controller's legitimate interest;
  • for a period not exceeding the achievement of the purposes for which it is collected and processed.

Rights

Data subjects may exercise certain rights with regard to the Data processed by the Data Controller. In particular, you have the right to:

  • access your Data: you have the right to obtain information about the Data processed by the Data Controller, about certain aspects of the processing, and to receive a copy of the Data processed.
  • verify and request rectification: you may verify the accuracy of your Data and request that it be updated or corrected.
  • obtain the erasure or removal of your Personal Data: under certain conditions, you may request the Data Controller to erase your Data.
  • withdraw your consent at any time: you may withdraw consent to the processing of your Personal Data previously given.
  • object to the processing of your Data: you may object to the processing of your Data when it is based on a legal basis other than consent.
  • obtain restriction of processing: under certain conditions, you may request that the processing of your Data be restricted.
  • obtain data portability: you have the right to receive your Data in a structured, commonly used and machine-readable format and, where technically feasible, to have it transferred without hindrance to another controller.
  • lodge a complaint: you may lodge a complaint with the competent data protection supervisory authority or take legal action.

Details on the right to object

When Personal Data is processed in the public interest, in the exercise of official authority vested in the Data Controller, or to pursue a legitimate interest of the Data Controller, you have the right to object to the processing on grounds relating to your particular situation.

How to exercise your rights

To exercise your rights, you may send a request to the Data Controller's contact details indicated in this document. Requests are handled free of charge and processed as soon as possible, and in any case within one month.

We hereby inform you that, pursuant to Articles 13 and 14 of EU Regulation 679/2016 (hereinafter "GDPR"), the data you provide to us will be processed as set out below, in compliance with the principles of fairness, lawfulness, transparency and protection of your confidentiality and your rights.

Data Controller

The Data Controller is PORTOLABIENO Società Cooperativa srl, Viale De Angeli snc, 21014 Laveno Mombello, Italy (Tel/Fax 0332 666900, Mobile 333 2899977) — email: info@portolabieno.com.

Purposes of processing

  1. Mandatory legal obligations in the tax and accounting field.
  2. Managing suppliers.

Legal basis for processing

The purposes referred to in points 1) 2) are necessary for the performance of the contract to which you are a party. Failure to provide your data makes it impossible to carry out the activities related to the supply relationship.

Recipients

In addition to the Data Controller, other parties involved in the organisation (appointed staff, administrative personnel) or external parties (such as third-party technical and IT service providers, system administrators, banks/credit institutions, other consultancy firms) may have access to the Data, also appointed, where necessary, as Data Processors by the Data Controller. The updated list of Data Processors is available at the above-mentioned registered office, upon request by email.

Disclosure

Your data will not be disclosed.

Processing methods

The Data Controller adopts appropriate security measures to prevent unauthorised access, disclosure, alteration or destruction of Personal Data. Processing is carried out using IT and/or telematic tools, manually through paper files, with organisational methods and logic strictly related to the stated purposes.

Transfer of data abroad

Data that may be transmitted through certified email communications will be transferred abroad (Europe and the United States), where the email server is located, in compliance with the appropriate safeguards provided for by the EU-US Data Privacy Framework.

Categories of data

The data processed may include: first and last name/company name, address, phone number/email address, bank details.

Retention period

Please note that, in compliance with the principles of lawfulness, purpose limitation and data minimisation under Article 5 of the GDPR, your data will be retained:

  • for a period not exceeding the achievement of the purposes for which it is collected and processed, for the performance of contractual purposes;
  • for a period not exceeding the duration of the services provided;
  • for a period not exceeding the achievement of the purposes for which it is collected and processed, in compliance with the mandatory statutory timeframes.

Rights

Data subjects may exercise certain rights with regard to the Data processed by the Data Controller. In particular, you have the right to:

  • access your Data: you have the right to obtain information about the Data processed by the Data Controller, about certain aspects of the processing, and to receive a copy of the Data processed.
  • verify and request rectification: you may verify the accuracy of your Data and request that it be updated or corrected.
  • obtain the erasure or removal of your Personal Data: under certain conditions, you may request the Data Controller to erase your Data.
  • withdraw your consent at any time: you may withdraw consent to the processing of your Personal Data previously given.
  • object to the processing of your Data: you may object to the processing of your Data when it is based on a legal basis other than consent.
  • obtain restriction of processing: under certain conditions, you may request that the processing of your Data be restricted.
  • obtain data portability: you have the right to receive your Data in a structured, commonly used and machine-readable format and, where technically feasible, to have it transferred without hindrance to another controller.
  • lodge a complaint: you may lodge a complaint with the competent data protection supervisory authority or take legal action.

Details on the right to object

When Personal Data is processed in the public interest, in the exercise of official authority vested in the Data Controller, or to pursue a legitimate interest of the Data Controller, you have the right to object to the processing on grounds relating to your particular situation.

How to exercise your rights

To exercise your rights, you may send a request to the Data Controller's contact details indicated in this document. Requests are handled free of charge and processed as soon as possible, and in any case within one month.

We hereby inform you that, pursuant to Articles 13 and 14 of EU Regulation 679/2016 (hereinafter "GDPR"), the data you provide to us will be processed as set out below, in compliance with the principles of fairness, lawfulness, transparency and protection of your confidentiality and your rights.

Data Controller

The Data Controller is PORTOLABIENO Società Cooperativa srl, Viale De Angeli snc, 21014 Laveno Mombello, Italy (Tel/Fax 0332 666900, Mobile 333 2899977) — email: info@portolabieno.com.

Purposes of processing

  • Protecting and safeguarding company assets.
  • Reviewing recordings in the event of intrusion by wrongdoers, as well as in the event of a specific investigative request from the judicial or law enforcement authorities.
  • Access control (real-time images) by office staff.

Legal basis for processing and nature of provision

Your data will be processed for the above purposes, which are necessary for pursuing the Data Controller's legitimate interest. In any case, please note that the recorded images will never be used to check compliance with the duty of diligence established for working hours.

Recipients

In addition to the Data Controller, other parties appointed to the processing by the Data Controller through written designation, who are authorised to use the equipment and, where indispensable for the purposes pursued, to view the recordings, may have access to the Data. External parties (e.g. police forces), also appointed, where necessary, as Data Processors by the Data Controller. The updated list of Data Processors can always be requested from the Data Controller.

Disclosure

Your data will not be disclosed.

Processing methods

The Data Controller adopts appropriate security measures to prevent unauthorised access, disclosure, alteration or destruction of Personal Data. Processing is carried out using IT and/or telematic tools, with organisational methods and logic strictly related to the stated purposes.

Transfer of data abroad

Your data will not be transferred to third countries outside the EU or to an international organisation.

Retention period

In compliance with the principles of lawfulness, purpose limitation and data minimisation under Article 5 of the GDPR, your personal data is retained for 24 hours following recording, except for special needs for further retention in relation to holidays or the closure of offices or premises, or where a specific investigative request from the judicial or law enforcement authorities must be complied with.

Rights

Data subjects may exercise certain rights with regard to the Data processed by the Data Controller. In particular, you have the right to:

  • access your Data: you have the right to obtain information about the Data processed by the Data Controller, about certain aspects of the processing, and to receive a copy of the Data processed.
  • verify and request rectification: you may verify the accuracy of your Data and request that it be updated or corrected.
  • obtain the erasure or removal of your Personal Data: under certain conditions, you may request the Data Controller to erase your Data.
  • withdraw your consent at any time: you may withdraw consent to the processing of your Personal Data previously given.
  • object to the processing of your Data: you may object to the processing of your Data when it is based on a legal basis other than consent.
  • obtain restriction of processing: under certain conditions, you may request that the processing of your Data be restricted.
  • obtain data portability: you have the right to receive your Data in a structured, commonly used and machine-readable format and, where technically feasible, to have it transferred without hindrance to another controller.
  • lodge a complaint: you may lodge a complaint with the competent data protection supervisory authority or take legal action.

Details on the right to object

When Personal Data is processed in the public interest, in the exercise of official authority vested in the Data Controller, or to pursue a legitimate interest of the Data Controller, you have the right to object to the processing on grounds relating to your particular situation.

How to exercise your rights

To exercise your rights, you may send a request to the Data Controller's contact details indicated in this document. Requests are handled free of charge and processed as soon as possible, and in any case within one month.