I henhold til artikel 13 i forordning (EU) 2016/679 (herefter “GDPR”), informeres du hermed om, at dine data vil blive behandlet på følgende måder og til følgende formål.
RINA S.p.A., with registered office in Genoa (GE), via Corsica 12, CF and VAT no. 03794120109, and the other RINA Group Companies are the Joint Data Controllers pursuant to art. 26 GDPR, who can be reached through the contacts indicated on the website www.rina.org. The Data Protection Officer may be contacted at the e-mail address rina.dpo@rina.org.
The Controller processes personal data of a common type (name, employing company, town/city, telephone number, and e-mail address), provided by you by completing the form available in the “Contacts” section of the website.
In addition, normal operation of the website makes it necessary to obtain some personal data. This is information that is not collected to be associated with identified data subjects but that, by its very nature, could make it possible to identify the users by processing and associating the same with data collected by third parties. This category of data includes cookies, which are small text files that websites visited by the users send to their terminals, where they are stored to be sent back to the same sites at the time of subsequent visits. For further information on cookies used by the website, please see section below on cookies.
a. Your personal data are processed for the following purposes:
b. In addition, with your explicit consent, your data will be processed to:
The Controller will process personal data in accordance with the principles of lawfulness, fairness and transparency.
Your personal data are processed by means of the following operations: collection, recording, organization, structuring, storage, consultation, adaptation or alteration, use, dissemination, disclosure by transmission, retrieval, alignment, combination, restriction, erasure and destruction of the data. Your personal data are subjected to both hard-copy and electronic processing.
The Controller will process the personal data for the time necessary to carry out the purposes indicated above and, in any case, not for more than 2 years from collecting the data.
However, the Controller may store the data for longer than 2 years if erasure of the same may compromise its legitimate right to defense or, in general, to safeguard its company assets. Such storage will take place, limiting access to the same to heads of departments only, in order to guarantee the legitimate exercising of the right of defense of the Controller.
Your data may be made accessible for the purposes indicated in art 3.a and 3.b to the following recipients:
Without requiring your explicit consent, the Controller may communicate your data for the purposes indicated in art 3.a to supervisory bodies, judicial authorities, insurance companies for providing insurance services, as well as to entities to which communication is mandatory in terms of the law, for carrying out said purposes.
Personal data are stored on servers located within the European Union. In any case, it is understood that, should this be necessary, the Controller will have the right to move the servers even outside the EU. In such a case, the Controller hereby guarantees that transfers of data outside the EU will be done in accordance with the applicable laws, also by means of including standard contractual clauses provided for by the European Commission, and adopting binding corporate rules for intra-group transfers.
The provision of data and related processing for the purposes indicated in point 3.a is necessary in order to guarantee the Controller’s services you have requested, and for executing the requests made. If refused, you cannot successfully submit requests and cannot receive a response from the Controller.
Providing data for the purposes indicated in point 3.b, on the other hand, is not mandatory. You may, therefore, decide not to provide any data or subsequently refuse processing of data already provided – the only consequence of any such refusal will be that receiving newsletters, commercial communications, and advertising materials related to the services offered by the Controller will not be possible. However, you will continue to have a right to the services indicated in point 3.a.
In your capacity as the data subject in processing of the data in question, you have the rights provided for in the GDPR, including the right to ask the Data Controller, by contacting the Data Protection Officer for: access to the personal data, indication of the means, purposes and logics involved in the processing, the right to object, to request restriction of processing, data portability, rectification and erasure of the same, within the limits and in the ways provided for in the GDPR.
Where processing of data is based on consent, you have the right to withdraw the same at any time.
In addition, you always have the right to object to the sending of newsletters and processing of all or several data for marketing or commercial purposes.
Therefore, in your capacity as the data subject, you have the rights pursuant to Arts. 15 – 21 of GDPR, as well as the right to lodge a complaint with the competent Authority pursuant to art. 77 of GDPR.
The Controller has appointed a Data Protection Officer, who can be contacted for all matters related to processing of your personal data and the exercising of related rights.
Therefore, you may contact the Data Protection Officer at any time, using the following procedures:
We wish to state that you have the right to withdraw the consent given at any time by writing to rina.dpo@rina.org.
EU Persondataforordningen (GDPR), som regulerer behandlingen af personoplysninger, med virkning fra 25. maj 2018, kræver at der udarbejdes databehandleraftaler mellem den dataansvarlige og databehandleren. Kontakt os for udarbejdelse af databehandleraftale for Renomatic.
Hvis du har spørgsmål til vores vilkår og betingelser eller databehandleraftalen, er du meget velkommen til at kontakte os.
Regler for behandling af dine personoplysninger findes på Persondataforordningen og Vejledning om registreredes rettigheder (Datatilsynet)
