Privacy Policy - Merenda Navigazione

This information (or “privacy policy”) is given under laws regarding protection of personal data currently in force and in particular under EU Regulation 2016/679 dealing with the protection of individuals regarding the processing of personal data, as well as the circulation of such data (“GDPR”) and legislative decree 196/2003 (Personal Data Protection Code or “Privacy Code”) regarding the processing of the personal data of users accessing the website www.merendanavigazione.it

This Privacy Policy aims to inform the users simply and transparently what personal data will be processed, for what purpose and how, and to tell them about the measures applied to protect their rights and freedom.

Therefore this Privacy Policy is to be applied to this website exclusively and is not given on behalf of other websites that the user may access via a link.

Index

Data controller
Purpose of treatment
Provision of data
What data is processed
Methods of data processing
Who can receive the data?
What are the rights of the data subject?
Right of revocation and opposition

1. Data controller
1. The data controller of the user’s personal data is Merenda Navigazione di Massimo Merenda Via Contrada Capistello snc legal headquarters in – contrada Capistello – 98055 Lipari (ME) Italy VAT number 02739080832 e-mail: info@merendanavigazione.it

2. Purpose of treatment

By accessing and consulting this website, as well as by using the services offered through the website to its users, information relating to users as identifiable individuals may be processed. Should such personal data be acquired they will be processed under current law regarding the protection of personal solely for the following purposes:
purposes closely linked to, and instrumental for, the use of the website, its functions and requested services;
To fulfill obligations under the law and European legislation;
To the controller’s operational and management needs relating to the services offered through the website;
On condition of anonymity and jointly, for statistic purposes.

2. The data collected from the users of the website for the above purposes could also be used for other purposes, but for any further processing the users must express their explicit and clear consent. In this way, the data collected from the users can be used only if the user will freely and clearly consent to each further processing.

3. Provision of personal data

Provision of personal data is mandatory for the aims under article 2, paragraph 1, since the judicial basis of the treatment is the execution of the services requested by the user, that is the fruition of the site and any other service expressly requested (such as the newsletter or forum) and made available by the site. Any refusal of this treatment may therefore prevent execution of the services requested; it will however be possible to consult the site without providing any personal data, though some functions may not be available and some services not provided.
In particular, the consequences of a refusal to provide personal date will always be explicitly and specifically connected to each service: for example refusal of such treatment may prevent consultation of the site and its functions (in the case of cookies) or reception of the newsletter (if a newsletter is offered). Therefore, the user will be adequately made aware of the modalities prescribed for each case, but in any case the user may consult the website despite a refusal of the treatment of persona data, where requested; in this case, some functions or characteristics of the website may be disabled.

4. What data is treated?

Depending on the service provided, different types of personal data may be treated, as specified in the following article.

4.1 Navigation data

The computer systems and software procedures used for the functioning of this website acquire, during their normal use, personal data the transmission of which is implicit to navigation of any website. Such information is not collected to be associated to identified individuals; its very nature may nonetheless make identification of the users possible through elaboration and association with data held by third parties. Among these are IP addresses or dominion names of the computers used to connect to the site, URL addresses of the requested resources, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numeric code bearing the state of the response provided by the server and other parameters relating to the operating system and the platform used. The data described above is used for the sole aim of obtaining anonymous statistic information regarding use of the website and to check its correct functioning; it is immediately deleted after elaboration. The data may be used to ascertain responsibility in the event of cybercrime against the website: with the exclusion of this event, all data of web contacts do not persist for longer than seven days. With regards to cookies please see par. 4.3 below.

4.2.1 Data voluntarily submitted by the user (communication)

The optional, explicit and voluntary submission of communication through contact forms available on the website or email to the addresses shown on this site, involves subsequent acquisition of the user’s personal data, including their email address, and consent to reply messages following their request.

Personal data thus submitted is used for the sole aim of satisfying or replying to the requests and is communicated to third parties only if strictly necessary.

4.2.2 Data voluntary submitted by the user (to receive marketing and/or advertising messages)

Only in the event that personal data (in particular email or phone number) is provided by the user to receive a service requested, such data may be used in order to send email messages relating to the services previously requested by the user, under article 130, paragraph 4, legislative decree 196/2003, without express and preventive consent (so-called soft spam). In every message, however, the user will be reminded that consent may be revoked at any time and without further procedures. The data will be cancelled upon the user’s request.

4.3 Cookies

What are they? Cookies are information memorized through a browser when a website is accessed from any kind of device (personal computer, tablet or smartphone). Each cookie contains different data (e.g. the name of the server used, an identifying number etc), and can remain in the system for one session (until the browser is shut down) or for a longer period of time and may thus contain a single identifying number.

What are they for? Cookies are used for various aims depending on their type: some are strictly necessary for a website’s functioning (technical cookies), while others optimize its performance so as to improve the user’s experience and obtain statistics regarding site use, such as cookie analytics, or that allow personalized advertising, such as profiling cookies.

Consent: any consent given by the user is stored by Merenda Navigazione di Massimo Merenda through a 12-month technical cookie. The user is informed both by short guidelines (banner displayed until consent is given or denied, as detailed in paragraph 4.4.3 “How to disable cookies”) and by longer guidelines; also, please consult the links to the privacy policies of third parties in paragraph 4.4.3, also for their disabling (where applicable).

How to disable them? It is possible to disable cookies both through browser settings (par. 4.4.3 “How to disable cookies”) and through procedures made available by third parties (par. 4.4.2 “Cookies used on our website”).

4.4.1 General cookie types used on our website

Technical cookies (first party): they are essential for the correct functioning and visualization of the website and to memorize user’s content to cookies.

Analytical cookies (first party): are used for aggregate analysis of access to the website.

Analytical cookies (third party): are used for aggregate analysis of access to the website, though the services of a third party.

Profiling cookies (third party): are used to create profiles for a user and are used to send advertising in line with the preferences shown during internet navigation, using third party services, including the advertising agency for most of them. The names of the third parties and links to their guidelines are available in the following paragraph.

4.4.2 Cookies used on the website

Cookies from a first party: technical cookies are used for the following aims: to store the user’s preference regarding cookies, the possibility to swipe when using a mobile device, authentication of the session (for the staff-reserved area).

Third party cookies: various types of third party cookies are used. Below we provide links to third parties’ privacy policies, also with regards to their specific disabling (without prejudice to the provisions detailed in par. 4.4.3 “How to disable cookies”)

Google Analytics: http://www.google.com/intl/it_ALL/analytics/learn/privacy.html (for disabling – opt-out): https://tools.google.com/dlpage/gaoptout), http://www.google.com/ads/preferences (to disable Google ads – Doubleclick based on Web interests);
For cookies stemming from sharing on social network platforms please consult each website the cookies relate to:
Facebook: https://www.facebook.com/about/privacy/cookies;
Google+: https://www.google.com/policies/technologies/cookies/;

4.4.3 How to disable cookies

Through your browser: Commonly used browsers (such as Internet Explorer, Firefox, Chrome, Safari) accept cookies through a predefined setting, but such setting can be modified at any time by the user. This is true both for pcs and mobile devices such as tablets and smartphones: it is a generally supported function.

Therefore, cookies can easily be deactivated or disabled by accessing the options or preferences of the browser used and can it is generally possible to block only third party cookies; these options will usually be effective for that browser only and on that device only, except if you have activated the option to unify your preferences on all devices. Specific instructions may be found on the help or option pages of the browser itself. Disabling technical cookies may however affect the full and/or correct functioning of various websites, including this one.

Browsers used today usually:

Offer the “Do not track” option, which is supported by some (but not all) websites. In this way, some websites may not be able to store certain navigation data;
Offer the option to navigate anonymously or incognito: this way data will not be processed from the browser and the chronology will not be saved, but the provider of the website visited may nonetheless be able to process navigation data;
Allow total or partial cancellation of memorized cookies, but when the website is accessed again these will usually be installed if such option is not blocked;

Links to the support pages of the most common browsers (with instructions on the disabling of cookies):

Firefox (https://support.mozilla.org/it/kb/Attivare%20e%20disattivare%20i%20cookie);
• Internet Explorer (http://windows.microsoft.com/it-it/internet-explorer/delete-manage-cookies#ie=ie-11);
• Safari (iOS)( https://support.apple.com/it-it/HT201265 );
• Chrome (desktop: https://support.google.com/chrome/answer/95647?hl=it; Android e iOS https://support.google.com/chrome/answer/2392971?hl=it).

Third party cookies: third party cookies may be disabled both in the way described above and by referring to each third party (following the links provided above).

Online tools: you can find further information regarding cookies and verify the installation of cookies on your browser/device on the following website http://www.youronlinechoics.com/it/.

4.4.4 SPAM protection

This kind of service analyses the traffic on this website which may potentially contain users’ personal data so as to filter the messages and content recognized as SPAM.

Google reCAPTCHA (Google Inc.)

Google reCAPTCHA is a SPAM protection service supplied by Google Inc.

Stored Personal Data: Cookies and Use Data

Place processed: USA – Privacy Policy.

5. Data processing Modality

Personal data is processed legally and correctly for the aims described in article 2. The processing will be effected in ways which will guarantee the confidentiality and security of personal data and with automated tools which memorize, manage and transmit such data. Specific security measures will be adopted to prevent the loss of data and contain the risk of its illicit or incorrect use and unauthorized access, and the personal data will be stored only for the time strictly necessary to complete the aims for which it has been stored (for example to check the request sent by the contract form on the website) and/or until consent given has been revoked under article 2 paragraph 1 letters e) and f).

6. Who can receive processed data?

The processing connected to the web services offered on this website take place at Merenda Navigatione di Massimo Merenda and are effected only the technical staff in charge of such treatment, both internal and external to the company. In particular, only following consent, data may be passed on to third parties with which Merenda Navigazione di Massimo Merenda will need to collaborate to complete the services offered. Data acquired through the website or deriving from it, may be communicated to technical and instrumental partners used by the owner of the company to carry out the services requested by the users under article 2. For this purpose, those who will have access to personal data must be authorized for such treatment by the owner and named as Processing managers, under articles 28 and 29 of the GDPR.
The data collected for the purposes described above may also be communicated to companies connected to the owner and to people authorized for this purpose under laws and European legislation currently in force.
A list of people to whom the owner may communicate the stored data for such aims is available and may be consulted at the owner’s head office and can be requested at the contacts given above.

7. What are the rights of data subjects?

A data subject is a physical person, identified or identifiable, to whom the personal data processed refers, and therefore the user who accesses the website and may require a service from Merenda Navigazione di Massimo Merenda.
Every data subject is recognized the right to access his or her data processed by the Owner (access right) in order to verify its correctness and the legality of the processing. The data subject may also exercise all the rights recognized by legislation currently in force, both national and European, regarding protection of personal data (legislative decree 196/2003 and EU reg. N. 2016/679 as subsequently amended and supplemented): in particular he or sh4e may at any time demand the correction or update of incorrect or inaccurate data, limitation of their processing and their cancellation (right to oblivion), as well as complain to the Privacy Authority.
Withy reference to automatically processed personal data, the data subject may also receive the data regarding him or her in structured and commonly used format and may transmit it to a different data controller (right to data portability).

8. Right to withdrawal and opposition

Each data subject enjoys the right to withdraw at any time the consent given, notwithstanding the legality of the processing by the data controller before such withdrawal.
The data subject is also recognized the right to oppose his or her data processing if it is carried out for direct marketing by the data controller; in this case his or her data will bo longer be the subject of processing for the aims for which consent was previously given, both by the data controller and any third parties (right to opposition).