Dimonios

PRIVACY POLICY (PURSUANT TO ARTICLE 13 OF THE PERSONAL DATA PROTECTION CODE and article 13 of (EU) Regulation 2016/679)

Dear Customer,

The Legislative Decree 30 June 2003, n. 196 - Personal Data Protection Code (hereinafter the "Code") - and the (EU) Regulation 2016/679 shall ensure that the processing of personal data takes place in respect of fundamental rights and freedoms as well as of the dignity of the data subject, with particular reference to confidentiality, personal identity and the right to personal data protection.

Under Article 13 of the Code and Article 13 of (EU) Regulation 2016/679, we inform You that Your personal data provided by you to our Company, will be the subject, in compliance with the aforementioned law and in accordance with the confidentiality obligations our company is inspired to, to the processing as defined by article 4 of the Legislative Decree 196/2003 and article 4 of the (EU) Regulation 2016/679. In particular, we want to inform You of the following:

Purpose of processing

Compagnia Italiana di Navigazione S.p.A. collects and processes personal data (e-mail), to forward and receive the newsletter about its services with informative and promotional content, even from third parties, in order to keep the user updated on promotions, deals and anything else for communication/advertising purposes.

Provision of personal data for such purposes is not mandatory. Failure to authorize such processing will not allow you to be updated on promotions/information from time to time provided by Compagnia Italiana di Navigazione S.p.A..

Communication to third parties and diffusion

The achievement of these purposes may also be done by means of disclosure and sharing of data with third parties, or group affiliates operating within the EU, thereby intending the third parties -  supporting Compagnia Italiana di Navigazione S.p.A. - authorized to the relevant data processing, as responsible for carrying out or providing specific technological services.

The names and addresses of such subjects are available upon request of the Data Subjects.

Diffusion and Transferring of data abroad

The personal data of the data subject will not be disseminated. The personal data may not be transferred abroad

Procedures of processing

Compagnia Italiana di Navigazione S.p.A. manages the personal data of the data subjects in a lawful and correct manner in order to insure their confidential nature and security. Processing is carried out using manual tools and computer telecommunications, according to organizational procedures and on the basis of principles strictly related to the purposes stated.

Retention Period

The data will be stored in a comprehensive manner throughout the period of time needed to attain the purposes in question.

Rights of the data subject

Under article 7 of Legislative Decree No. 196/2003 and articles 15 to 22 of (EU) Regulation 2016/679, the data subject may exercise the following rights:

1. Access to the following information:
   1. Purpose of processing,
   2. Categories of personal data concerned,
   3. Recipients or categories of recipients to whom the personal data have been or will be disclosed, in particular recipients in third countries or international organisations;
   4. Existence of the right of the data subject to request from the data controller rectification or deletion of personal data, or restriction of processing of personal data concerning him/her, or to object to such processing;
2. Rectification implies:
   1. Correction of inaccurate personal data concerning him/her without justified delay,
   2. Integration of incomplete personal data, even providing a supplementary statement;
3. Deletion of data concerning You without undue delay, if:
   1. The data are no longer necessary in relation to the purposes for which they were collected or otherwise processed,
   2. Consent is withdrawn and there is no other legal basis for the processing,
   3. You object to the processing and there is no overriding reason for processing,
   4. The personal data have been unlawfully processed;
   5. The personal data must be deleted in order to fulfil a legal obligation,
   6. The personal data have been collected in relation to the offer of information society services;
4. Restriction of processing:
   1. Whenever you question the accuracy of the personal data, for a period enabling the data controller to check the accuracy of these personal data;
   2. When the processing is unlawful and the data subject objects to the deletion of personal data and requests instead the restriction of their use;
   3. When personal data are necessary for the data subject to establish, exercise or protect a legal claim, although the data controller no longer needs them for the purpose of processing,
   4. If you object to the processing under the right to object;
5. Receive notification in the event of occurred rectification or deletion of personal data or restriction of processing;
6. Data portability or right to receive his/her personal data in a structured, commonly used and readable form by automatic device and has the right to disclose such data to another data controller, if;
   1. The processing is based on the express consent of the data subject for one or more specific purposes or occurs as a result of a contract signed with the data subject and
   2. The processing is carried out by automated means;
7. Objection at any time, for reasons relating to his or her particular situation, to the processing of personal data concerning him/her.

Data Controller and Data Protection Officer

The single data controller is Compagnia Italiana di Navigazione S.p.A., with registered office in Milano, Largo Augusto, 8 CAP 20122. Our company has appointed a Data Protection Officer (DPO), who can be reached at the following email address: dpo@tirrenia.it.