SUBJECT: WEBSITE PRIVACY NOTICE PURSUANT TO NATIONAL LEGISLATION AND ART. 13 OF EU REGULATION 2016/679

1. DATA CONTROLLER
Pursuant to Articles 4 and 24 of EU Regulation 2016/679, the Data Controller is Sailing srl, with registered office at Via Emilia Romagna 8, 61020 Gallo di Petriano (PU), Tel. +39 0722 52176, privacy@formerin.it, represented by its legal representative pro tempore.

2. PURPOSES AND LEGAL BASIS OF PROCESSING
The personal data provided will be processed, in compliance with the conditions of lawfulness set out in Art. 6 of EU Regulation 2016/679, for the purpose of completing a form to request information. The legal basis of the processing is the legitimate interest (Art. 6, paragraph 1, letter f).

3. DATA RETENTION PERIOD
The collected data will be processed by manual, IT, or electronic tools, in accordance with the purposes for which they were collected and in a manner that guarantees their security and confidentiality. Personal data will be stored for the time necessary to fulfill the above-mentioned purposes, also taking into account statutory time limits for the protection of the User’s and the Controller’s legal interests. Therefore, pursuant to Art. 5, paragraph 1, letter e) of EU Regulation 2016/679, the retention period of the personal data provided depends on the processing purpose: for contact request data, the retention period is a maximum of 6 months.

4. RECIPIENTS OR CATEGORIES OF RECIPIENTS OF DATA
The personal data provided will be communicated to recipients who will process the data as processors (Art. 28 of EU Regulation 2016/679) and/or as natural persons acting under the authority of the Controller or the Processor (Art. 29 of EU Regulation 2016/679), for the purposes listed in point 2 above. Specifically, the data may be disclosed to:

• entities providing services for the management of the IT system and telecommunications networks, including e-mail and the website;

• professionals, firms, or companies within the context of assistance and consultancy relationships;

• competent authorities for compliance with legal obligations and/or orders of public authorities.

The entities belonging to the categories listed above act as Data Processors, or operate independently as separate Data Controllers.

5. DATA TRANSFER TO A THIRD COUNTRY
The Data Controller will not transfer your personal data to a third country or to an international organization. However, it reserves the right to use cloud services; in such cases, service providers will be selected among those offering adequate guarantees as provided by Art. 46 of EU Regulation 2016/679.

6. NATURE OF PROVISION AND REFUSAL
Apart from what is specified for browsing data, the user is free to provide their personal data. The provision of data may be optional or necessary depending on the specific purpose for which the data is processed. Failure to provide the data marked with the symbol * will result in the impossibility of obtaining the requested service or using the Controller’s services.

7. DATA SUBJECTS’ RIGHTS
You may exercise your rights as set out in Articles 15, 16, 17, 18, 19, 20, 21, and 22 of EU Regulation 2016/679 by contacting the Data Controller at info@sailingarredamenti.it. You have the right, at any time, to request from the Data Controller access to your personal data, rectification, erasure, or restriction of processing. You also have the right to object, at any time, to the processing of your data (including automated processing, e.g., profiling), as well as to data portability.

Without prejudice to any other administrative or judicial remedy, if you believe that the processing of your data breaches EU Regulation 2016/679, pursuant to Art. 15 letter f) of the Regulation, you have the right to lodge a complaint with the Italian Data Protection Authority. Furthermore, with reference to Art. 6, paragraph 1, letter a) and Art. 9, paragraph 2, letter a), you have the right to withdraw your consent at any time.

In the event of a data portability request, the Data Controller will provide you, in a structured, commonly used, and machine-readable format, with your personal data, without prejudice to paragraphs 3 and 4 of Art. 20 of EU Regulation 2016/679.