Personal Data Protection Policy
pursuant to Article 13 of Regulation (EU) 2016/679
We wish to inform those who provide their personal data to MAREVIVO s.r.l., in order to use our services, that the processing of your Personal Data is carried out pursuant to and for the purposes of Reg. EU 2016/679, not only to comply with legal obligations, but also because transparency and fairness are fundamental parts of our activities under GDPR 679/2016.
Users are informed that the data you provide will be processed in accordance with the legislative provisions of the above-mentioned regulation and the confidentiality obligations contained therein according to the principles of correctness, lawfulness, transparency and protection of your privacy.
This page describes how the personal data of users who consult Marevivo srl’s websites accessible electronically at the following addresses are processed: www.mondomarevivo.com
LEGAL BASIS
The processing of customer data is based on consent provided directly by the customer, or through the use or consultation of this site by visitors and users who explicitly approve this privacy policy and consent to the processing of their personal data in relation to the methods and purposes described below, including any communication to third parties if explicitly provided for.
Art. 6 paragraph 1) letter a) the data subject has given consent to the processing of their personal data for one or more specific purposes;
DATA CONTROLLER AND DATA PROTECTION OFFICER
The Data Controller of your personal data is MAREVIVO s.r.l., VAT No. 02504730751- Via Super Panoramica, 51 – 73030 Castro (LE) – Italy, responsible for the legitimate and correct use of your personal data and which you can contact for any information or request at the following contact details:
contact details: Tel. 08361955986 email: info@mondomarevivo.com
The Data Controller, pursuant to art. 37 GDPR has appointed a Data Protection Officer, contact details: Tel. 0833546700 email: privacy@mondomarevivo.com.
Purpose of Data Processing
User Data is collected to allow the Data Controller to provide its services, as well as for the following purposes:
- management of relationships with customers and suppliers and fulfillment of any contractual obligations; handling contact requests from the interested party, assistance requests including through communication to third parties;
- fulfill regulatory obligations, particularly accounting and tax obligations;
- management of disputes;
- sending (with your written consent) promotional offers on our services and updates on rates and offers as well as greetings by regular mail or via email, SMS, telephone contact;
- We may use your email address to send you, with your written consent, our newsletters via email, SMS, telephone contact, and our holiday greetings.
- Data derived from implicit transmission in the use of Internet communication protocols, through processing to identify users, IP addresses or domain names of computers used by users connecting to the site, URI (Uniform Resource Identifier) addresses of requested resources, including the time of the request, the method used to submit the request to the server, the size of the file obtained in response. These data are collected in exclusively aggregate form in order to verify the correct functioning of the site, and for security reasons used only to obtain anonymous statistical information on the use of the site or for technical reasons of correct functioning;
- The data could also be used to ascertain responsibility in case of hypothetical computer crimes against the IT structure (legitimate interests of the controller).
- MAREVIVO s.r.l. carries out profiling according to regulatory methods and limits, with Registration and authentication, sending promotional information related to our services, Payment management, Contacting the User, Address management and sending of email messages, SMS, Remarketing and behavioral targeting, Statistics, Advertising, Hosting and backend infrastructure, Backup saving and management and Display of content from external platforms;
Types of Data collected
Among the Personal Data collected by MAREVIVO s.r.l. independently, there are: name, surname, date of birth, number of children, telephone number, email, Cookie and Usage Data.
Personal Data may be, or in the case of Usage Data, automatically collected during the use of MAREVIVO s.r.l.
The Data requested by MAREVIVO s.r.l. are freely provided by the User, so they are not mandatory, however they are necessary for MAREVIVO s.r.l. to provide the requested services, if the User refuses to communicate them, it might be impossible for MAREVIVO s.r.l. to provide the requested services.
Users who may have doubts about which Data are mandatory can contact the Data Controller.
Social media:
if you choose to participate in offers or activities on social media sponsored by MAREVIVO s.r.l., Facebook, and Instagram, we may collect certain information from your social media profiles, consistent with your settings within the social media service, for example location, activities, interests, photos, status updates and friend list. We may also allow you to participate in contests to provide photos, such as those of your visit to our operational facilities (e.g. fish fry shops), which you could share with your social media contacts to receive votes, shared offers or other promotions.
Information we collect from third parties:
We may also collect information about you from third parties, including information from our partners (travel agencies, airlines, payment cards) and other partners; from social media services consistent with your settings on such services; and from third-party sources. Users who may have doubts about which Data are mandatory can contact the Data Controller.
Who Processes the data
The Data Controller, for some processing, will be joined by the following companies that will act as joint controllers of the processing, meaning “two or more companies that jointly determine the purposes and means of processing” as provided by Article 26 of the Regulation:
- Panoramico srl Via Panoramica, 100 73030 Castro (LE) P.IVA: 04597290750
The Joint Controllers have entered into a joint controllership agreement, pursuant to Article 26 of the Regulation, whereby they have undertaken to:
- jointly determine certain purposes and methods of Processing your Personal Data;
- jointly determine, in a clear and transparent manner, the procedures for providing you with a timely response should you wish to exercise your rights, as provided for in Articles 15, 16, 17, 18 and 21 of the Regulation as well as in cases of portability of Personal Data provided for in “Article 20 of the Regulation as better described in” Section I of this Policy,
- jointly define this Policy in the parts of common interest indicating all the information required by the Regulation.
Processing methods
The Data Controller adopts appropriate security measures to prevent unauthorized access, disclosure, modification or destruction of Personal Data.
The processing is carried out using IT tools, with organizational methods and with logic strictly related to the purposes indicated. In addition to the Data Controller, in some cases, other subjects involved in “the organization of MAREVIVO srl (administrative, commercial, marketing, legal personnel, system administrators) or external subjects (such as third-party technical service providers, postal couriers, hosting providers, IT companies, communication agencies) also appointed, if necessary, as Data Processors by the Controller. The” updated list of Processors can always be requested from the Data Controller.
Place of Processing
The Data is processed at the operational headquarters of the Data Controller and in any other place where the parties involved in the processing are located. For further information, contact the Data Controller.
The Data Controller informs that it will process the data provided, predominantly directly or through appointment to another entity but always within the European area.
DATA RECIPIENTS
The data being processed will not be disseminated, sold or exchanged with third parties without the express consent of the data subject.
The scope of data communication is limited exclusively to subjects competent for the fulfillment of contractual operations and compliance with legal obligations. They may therefore be communicated to third parties belonging to the following categories: subjects that provide services for the management of the information system; firms or companies in the context of assistance and consulting relationships; Administrations, Public Bodies and Authorities, for the fulfillment of legal obligations and/or provisions of public bodies; private subjects directly involved in the fulfillment of the service or entitled to know the data according to the law. In any case, only the necessary and relevant data with respect to the purposes of the processing for which they are responsible will be communicated to the mentioned subjects.
The following subjects are also recipients of the data collected as a result of consulting the sites listed above, pursuant to Article 28 of the Regulation, as data processors.
- Envision S.r.l., in relation to the sites as a provider of web platform development and maintenance services;
- Hetzner Online GmbH in relation to hosting and backend services
- OVH S.r.l in relation to hosting and backend services
DATA SHARING
The Identifying Personal Data voluntarily provided by the user may be shared with companies of the same group or joint controllers of the processing, having as their object compatible activities pursuant to Art. 4 paragraph 6), for commercial promotion activities in compliance with the purposes.
EXERCISE OF RIGHTS – COMPLAINT
- You can exercise every right described in this section against the Data Controller by sending an email to info@mondomarevivo.com, (privacy@mondomarevivo.com). We remind you that we may ask you to verify your identity before taking further actions based on your request.
- To exercise the rights under Art. 15 of EU Regulation 679/2016, you can contact the Data Controller by writing to: MAREVIVO srl with headquarters in Via Super Panoramica, 51 – 73030, Castro (Le) or by sending an email to info@mondomarevivo.com, (privacy@mondomarevivo.com).
THE DATA SUBJECT
- pursuant to Article 15 of EU Regulation 679/2016 has the right to:
- obtain confirmation of the existence or not of data concerning them
- obtain information “on the” origin, purposes and methods of processing of data concerning them;
- obtain the cancellation, transformation into anonymous form or blocking of data processed in violation of the law, “the” updating, rectification and/or integration of data;
- obtain information about the subjects or categories of subjects to whom the data is communicated or who can become aware of it as Data Processors or Authorized Persons
- obtain information about the subjects who can become aware of it as Data Processors or Authorized Persons, also following activities performed by other affiliated companies on the basis of service contracts;
- request the portability of the data provided by you, where processed in an automated manner for the contractual services requested by you, within the limits of what is provided for by the Regulation (art. 20).
- obtain information “on the” origin and purposes and methods of processing, “the” updating, rectification, integration of data,
- Obtain the cancellation of data processed in violation of the law and has the right to object to the processing for the purpose of sending advertising material
Access to data
- You have the right to request copies of personal data that you have provided to us in a structured, commonly used and electronically readable format, and/or request us to transmit such information to another service provider (where technically feasible).
Duration of Processing – Retention
In general, Marevivo srl keeps your personal data for short periods of time, or for the time necessary to execute the stipulated contract.
In cases where personal data is provided freely and voluntarily, the Data Controller may keep the Personal Data for a longer period, until such consent is revoked.
We may retain some of your personal data to the extent necessary to fulfill our legal and tax obligations as well as to protect our contractual interests.
Exceptionally, we may retain some of your personal data for the conduct of investigative activities, as required by law.
Withdrawal of consent and limitation of personal data processing.
You can at any time revoke your consent to the processing of personal data by sending us a communication expressing your desire to revoke consent, or proceed directly with unsubscribing where provided.
The withdrawal of consent does not affect the legitimacy of any processing activity based on it before its withdrawal.
Privacy Policy updated on 06.04.2018