PRIVACY POLICY
Pursuant to and for the effects of EU Regulation 2016/679
Pursuant to the current legislation on the processing of personal data, in accordance with the provisions of EU Regulation 2016/679 of 27 April 2016 (hereinafter “GDPR”), we hereby inform you that the processing of the data provided or otherwise acquired will be carried out in full compliance with fundamental freedoms, always adopting principles inspired by fairness, lawfulness, and transparency, and for purposes that do not exceed the purposes of the collection, in order to ensure the protection and confidentiality of the data.

1 – Purpose of data processing
Your personal data, provided by you or collected by us in compliance with current legal provisions, will be used for the following purposes:
• For the execution of contracts with you or, prior to their conclusion, for operational and management purposes.
Legal basis: Contractual performance.
• For operational management strictly related to the possible conclusion of contracts, as well as to fulfill your specific requests prior to the possible conclusion of contracts.
Legal basis: Pre-contractual measures.
• To fulfill obligations required by current laws or regulations, including community ones.
Legal basis: Legal obligation.
• Contract management, such as relationships with agents, representatives, clients, and/or contractors.
Legal basis: Legal obligation.
• For any external professional
collaborations to fulfill legal obligations.
Legal basis: Legal obligation.
• For the management of litigation related to contractual breaches, transactions, debt recovery, legal disputes.
Legal basis: Judicial proceedings.
• For evaluation purposes of the service.
Legal basis: Legitimate interest of the Data Controller.
• For communication with institutions (municipality, health authorities, Coast Guard, region, state police, Civil Protection, others).
Legal basis: Legal obligation.
2 – Data processing methods
The processing of personal data will be carried out using paper, computer, telematic, or any other automated means, also entrusted to specifically appointed third parties. It will be carried out with logic strictly related to the purposes indicated, in compliance with the principles of lawfulness and transparency and, in any case, in such a way as to protect the confidentiality and rights of the data subject, in accordance with the applicable regulations.
3 – Provision of data
While respecting the personal autonomy of the data subject, the provision of personal data is mandatory for the purposes referred to in point 1 above, therefore, any refusal to provide such data may result in the impossibility for 5 Star Mooring Srl to carry out the aforementioned relationships.
4 – Persons authorized to process data and recipients or categories of recipients to whom the data may be communicated
Subject to communications made in compliance with legal obligations, your personal data may be communicated, for the purposes mentioned in paragraph 1, to:
• Banks and financial institutions
• Professional firms, consulting firms, and
auditing companies
• Maritime agencies
• Intermediaries
The collected personal data are also processed by authorized personnel who have been duly instructed and need to be aware of such data in the performance of their duties, as well as by external individuals appointed as Data Processors. The data will not be disseminated or communicated to any third parties, except for ordinary company management supported by external suppliers (banks and financial institutions, professional firms, consulting and auditing companies, maritime agencies, intermediaries, etc.) in compliance with confidentiality and security requirements, and only when it is not possible to manage the same data internally or anonymously. An updated list of any appointed Data Processors to whom the data is communicated is available upon request. Personal data will not be subject to disclosure except in cases provided by law.
5 – Categories of processed data
User information necessary for identifying the contracting party of the service agreement; Information about the payment subject and billing data for the completion of monetary transactions and for carrying out billing and internal management obligations related to closing accounts and deadlines; Information about the vessel, ship, yacht for the proper execution of the service agreement, billing obligations, and mandatory communication to the relevant authorities; Information about the captain of the vessel, ship, yacht for the proper execution of the service agreement and mandatory communication to the relevant authorities.
6 – Duration of processing and data retention period
The processing and retention of your personal data will be carried out in accordance with the current legislation for a period not exceeding the time necessary to achieve the purposes mentioned in point 1 for which they are processed, except for the ten-year retention period for civil law data only and for the fulfillment of any other legal obligations.
7 – Rights of the data subject
According to the European Regulation, the data subject has the right to obtain, at any time, confirmation of whether or not personal data concerning them is being processed and to access such data, as well as to obtain specific and detailed information (Article 15, right of access to data). They have the right to verify the accuracy or request the integration and updating of the data through rectification (Article 16, right of rectification); to request erasure (Article 17, right to be forgotten); to restrict the processing (for legitimate reasons and as provided by the Regulation) (Article 18, right to restriction of processing); to receive their data in a structured, commonly used, and machine-readable format and transmit it to another controller (Article 20, right to data portability); to object, for reasons related to their particular situation, to the processing of data (Article 21, right to object); to not be subject to a decision based solely on automated processing, including profiling, with certain exceptions (Article 22, automated decision-making concerning individuals, including profiling). The data subject has the right to withdraw consent at any time, limited to cases where the processing is based on their consent for one or more specific purposes and concerns common personal data (Article 7, Conditions for consent). Requests should be addressed in writing to the Data Controller. Please note that the data subject also has the right to lodge a complaint with a supervisory authority (Italian Data Protection Authority – www.garanteprivacy.it).

 

8 – Data Controller
The processing of data by 5 Star Mooring Srl is carried out after identifying the subjects who have specific obligations and responsibilities.
Data Controller: 5 Star Mooring Srl, with registered office in Olbia, 07026, Via Vignola n.18 (SS)
Email: info@5starmooring.com;
pec: 5starmooringsrl@pec.it;
Tel: +39 3512261514, to whom you can address for the exercise of the rights provided by the GDPR.