Il Miglio Blue di Alosi Cristoforo (hereinafter “Il Miglio Blue”) protects the confidentiality of personal data and guarantees its necessary protection against any event that may put it at risk of violation. As provided for by European Union Regulation n. 679/2016 (GDPR) and Article 13 in particular, please find below the information required by law relating to the processing of your personal data.
Who we are and what data we process (Article 13, 1st paragraph 1 (a), Article 15, (b) GDPR)
Il Miglio Blue, represented by Alosi Cristoforo, with office at I VICO Spiaggia di Ponente 12 – 98057 Milazzo (ME), rents pleasure boats owned by the company and also works as a Charter Broker, mediating rentals of boats owned by other companies, email info@ilmiglioblue.com, telephone +39 090 922 4163, and collects and/or receives information relating to you, such as:
Personal details and contact information: First name, last name, physical address, date and place of birth, nationality, province and city of residence, document of identity, sailing license, VHF radio license, phone numbers, fax numbers, fiscal codes, email addresses
Banking information: IBAN and banking/postal account information (except for Credit Card number)
Internet traffic data: Log, originating IP address
Il Miglio Blue does NOT require you to supply so-called “private” data, that is, according to the provisions of the GDPR (Art. 9), personal data that identifies race or ethnicity, political opinions, religion or philosophy, or any union affiliation, nor any genetic or biometric information used to uniquely identify a physical person, data associated with health or one’s sex life, or sexual orientation. In the event the services requested from Il Miglio Blue require the processing of this data, you will first receive specific notification with a request for your consent.
Why we need your data (Art. 13, 1st paragraph GDPR)
When you make a request, we receive your personal details (first name, last name, email address, phone number, etc). Your details are used to then reply to your request for information / availability of a pleasure boat for rent.
When a pleasure boat for rent is reserved, we receive further personal details. Your personal information is used by the Company to complete the reservation (contract, invoice, crew list).
You can sign up for our newsletter or follow us on Social Media and receive updates and can ask at any time to then be removed.
In no case will Il Miglio Blue resell any of your personal information to third parties nor use it for any purpose not stated.
In addition, your data may be used for business promotional activities on Services/Products that are different from the ones you purchased, for market research studies involving the Services/Products that the Company offers but only if you have authorized this processing and have not opposed it.
This processing may occur by the following automated methods: email, sms, telephone contact.
And may occur:
1. if you have not withdrawn your consent for the use of your data;
2. if processing is done through contact with a telephone operator, and you are not registered on the non-call registry as outlined in Presidential Decree No. 178/2010;
The legal basis for this processing is the consent you initially granted for the processing itself, which you may freely withdraw at any time.
The Company will immediately notify you if there is any risk of violation of your data, except for any obligations noted in the provisions of Art. 33 GDPR associated with notifications of personal data violations.
The legal basis for this processing is to comply with legal requirements and the legitimate interest of the Company in undertaking processing for the purpose of protecting corporate assets and the security of Il Miglio Blue’s offices and systems.
Your personal data may also be processed for profiling purposes (such as analyzing the transmitted data and the pre-selected Services/Products, suggesting advertising messages and/or business offers in line with user selections) exclusively when you have given explicit and informed consent. The legal basis for this processing is the consent you initially granted for the processing itself, which you may freely withdraw at any time.
Communication to third parties and categories of recipients (Article 13, 1st paragraph GDPR)
Your personal data is communicated mainly to third parties and/or recipients whose activity is necessary to perform the activities relating to the contract established, and to meet certain legal requirements, such as:
Companies that rent pleasure boats: Fulfillment of contractual services
Accountant: Accounting services
Banks/Post Offices: Managing deposits, payments, reimbursements associated with the contractual services
External professionals/consultants and consulting firms: Fulfillment of legal requirements, exercising rights, protecting contractual rights, credit recovery
Financial Administration, Public Agencies, Legal Authorities, Supervisory and Oversight Authorities: Fulfillment of legal requirements, protection of rights; lists and registries held by Public Authorities or similar agencies based on specific regulations relating to the contractual service
Formally mandated subjects or those with recognized legal rights: Legal representatives, administrators, guardians, etc.
The Company requires its third party providers to adhere to security measures that are equal to those adopted for you by restricting the scope of action to processing directly related to the requested service. The Company will not transfer your personal data to countries where the GDPR is not applicable (countries outside the EU) except where specifically indicated otherwise, in which case you will be notified first, and if necessary asked for your consent. The legal basis for this processing is fulfillment of the services outlined in the established contract, compliance with legal obligations, and the legitimate interests of Il Miglio Blue to perform the processing necessary for these purposes.
What happens when you do not provide your identification information as needed to perform the requested service? (Article 13, paragraph 2 (e) GDPR)
The collection and processing of your personal data is necessary to fulfill the service requests as well as to perform the Service and/or supply the requested Product. Should you fail to provide your personal data the Company will not be able to carry out the processing associated with managing the requested services.
What happens when you do not provide the consent for processing personal data for the business promotion activities on Services/Products that are different from those prior?
When you do not give your consent to the processing of your personal data for these purposes, the processing will not be implemented for these specific purposes, but it will not affect the performance of the requested services or those for which you have already given your consent, if requested. In the event you have given consent and later withdraw it or oppose the processing for business promotional activities, your data will no longer be processed for these activities, although this will not create negative effects or consequences for you or the services requested.
How we process your data (Article 32, GDPR)
The Company makes use of appropriate security measures to preserve the confidentiality, integrity and availability of your personal data, and requires the same security measures from third party providers and the Processors
Where we process your data
Your data is stored in hard copy, electronic and remote archives located in countries where the GDPR is applicable (EU countries).
How long is your data stored? (Article 13, paragraph 2 (a) GDPR)
Unless you explicitly express your own desire to remove it, your personal data will be stored until required for the due purposes for which it was collected. In particular, the data will be stored for no longer than a maximum period of 12 (twelve) months after the end of the boat rental contract. For data provided to the Companh for the purposes of business promotion for services other than those you have already purchased, for which you initially gave consent, it will be stored for 24months, except when such consent is withdrawn. For data provided to the Company for the purposes of profiling, it will be stored for 12 months, again except when consent has been withdrawn. It is also important to add that, should the user forward to Il Miglio Blue personal data that has not been requested or that is unnecessary for the purposes of performing the services requested, or for the performance of services strictly connected thereto, Il Miglio Blue cannot be considered controller of this data and will proceed to delete it as soon as possible. Regardless of your determination to remove the data, your personal information will be, in any case, stored according to the terms outlined in current law and/or national regulations, for the exclusive purpose of guaranteeing specific requirements, applicable to certain Services. Furthermore, personal data will in any case be stored to comply with obligations (e.g. tax and accounting purposes) which may continue even after termination of the contract (Art. 2220 Civil Code); for these purposes, the Company shall retain only the data necessary to complete these activities. For those cases where the rights arising from the contract and/or registration are used in the courts, your personal data, exclusively required for these purposes, shall be processed for the time necessary to complete them.
What are your rights? (Articles 15 – 20 GDPR)
You have the right to obtain the following from the Company:
a) confirmation on whether your personal data is being processed and if so, to obtain access to your personal data and the following information:
1. the purposes of the processing;
2. the categories of personal data in question;
3. the recipients or categories of recipients that have received or will receive your personal data, in particular if these recipients are in third party countries or are international organizations;
4. when possible, the anticipated storage period of your personal data or, if not possible, the criteria used to determine this period;
5. whether you have the right to ask the Company to correct or delete your personal data or the limits on processing your personal data or to oppose the processing of the data;
6. the right to lodge a complaint with a supervisory authority;
7. in the event the data is not collected from you, all of the information available regarding its origin;
8. whether there is an automated decision process, including profiling, and, at least in these cases, significant information on the logic used, as well as the importance and consequences to you for this processing.
9. the suitable guarantees provided by the third party country (outside EU) or international organization to protect any transferred data
b) the right to obtain a copy of the personal data processed, again given that this right does not affect the rights and freedoms of others; for extra copies requested by you, the Company may assign a reasonable fee based on administrative costs.
c) the right to edit any of your incorrect personal data from the Company without unjustified delay
d) the right to have your personal data deleted by the Company without unjustified delay, if there are the reasons outlined in the GDPR, Article 17, including, for example, if the data is no longer needed for processing or if the data is considered illegal, and again, if there are no conditions outlined by law; and in any case, if the processing is not justified by another equally legitimate reason;
e) the right to obtain limits on the processing from the Company, in those cases outlined in Art. 18 of the GDPR, for example where you have disputed the correctness, for the period necessary for the Company to verify the data's accuracy. You must be notified, within an appropriate time, even when the suspension period has passed or the cause of limiting the processing has been eliminated, and therefore the limitation itself has been withdrawn;
f) the right to obtain information from the Company on the recipients who have received the requests for any corrections or deletions or limits on the processing implemented, except when this is impossible or would create a disproportionate effort.
g) the right to receive your personal data in a structured format, commonly used and readable by automatic devices as well as the right to forward this data to another person without obstruction from the original, in those cases outlined by Art. 20 of the GDPR, and the right to obtain direct forwarding of your personal data from one company to another, if technically feasible. For further information and to send your request, contact the Company at info@ilmiglioblue.com. To guarantee that the rights noted above are exercised by you and not by unauthorized third parties, the Company may require you to provide other information necessary for this purpose
How and when can you oppose the processing of your personal data? (Art. 21 GDPR)
For reasons associated with your particular situation, you may at any time oppose the processing of your own personal data if it is based on legitimate reasons or if it is done for business promotional activities, by sending a request to the Company at info@ilmiglioblue.com. You have the right to have your own personal data deleted if the Company has no legitimate reason prevailing over such request, and in any case, where you have opposed the processing for business promotional activities.
Who can you lodge a complaint with? (Art. 15 GDPR)
Without prejudice to any other ongoing administrative or judicial action, you may lodge a complaint with the applicable supervisory authority of the Italian territory (Italian Personal Data Protection Authority), that is, with the agency that performs its duties and exercises its rights within the member country where the GDPR violation occurred. Any updates to this information shall be communicated in a timely manner and through suitable means, and will be notified to you if the Company processes your data for purposes other than those outlined in this privacy policy prior to proceeding and after you have given your consent, if necessary.
COOKIE
General information, deactivation and cookie management
Cookies are data sent from the website and stored by the internet browser in your computer or other device (for example, tablet or cellphone). Technical and third party cookies may be installed from our internet site or associated subdomains. In any event, you can manage, that is, request general deactivation or deletion of the cookies by changing the settings on your web browser. However, this deactivation may delay or block access to some parts of the site. Settings to manage or deactivate cookies can change depending on the internet browser used. Therefore, to get more information on the methods by which these operations are completed, we advise you to consult the manual for your specific device or the "Help" function for your specific web browser.
Below are links that explain how to manage or disable cookies for the most common web browsers:
• Internet Explorer: http://windows.microsoft.com/it-IT/internet-explorer/delete-manage-cookies
• Google Chrome: https://support.google.com/chrome/answer/95647
• Mozilla Firefox: http://support.mozilla.org/it/kb/Gestione%20dei%20cookie
• Opera: http://help.opera.com/Windows/10.00/it/cookies.html
• Safari: https://support.apple.com/kb/PH19255
Technical cookies
The use of technical cookies, that is, those cookies needed to transmit communications over electronic communication networks, or those cookies that are strictly necessary for the provider to fulfill the service requested by the customer, allows our website to be used securely and efficiently. Session cookies can be installed to allow access and permanence within the portal's reserved area as an authenticated user. Technical cookies are essential for our website to work properly and are used to allow users to navigate normally and have the possibility of using the advanced services available on our website. The technical cookies used are considered session cookies, stored exclusively for the navigation period up until the browser is closed, while persistent cookies are saved in the user's device until they expire or are deleted by the user. Our site uses the following technical cookies:
• Technical navigation or session cookies, used to manage normal navigation and user authentication;
• Functional technical cookies, used to memorize user personalization, such as, for example, language;
• Technical analytic cookies, used to recognize the way in which the user utilizes our website, in order to evaluate and improve functionality.
Third party cookies
Third party cookies may be installed: these are analytic and profiling cookies from Google Analytics, Google Doubleclick, ShinyStat, Criteo, Rocket Fuel and Facebook. These cookies are sent to our website by these external third party websites. Third party analytic cookies are used to identify information on the behavior of users on the website. Identification is done anonymously to monitor services and improve the site's usability. Third party profiling cookies are used to create profiles associated with the users, to propose publicity messages in line with the choices made by the users themselves. The use of these cookies is governed by the regulations established by the third parties themselves, and therefore Users are asked to review the privacy information and information on managing or disabling the cookies published on the following web pages:
For Google Analytics cookies
-privacy policy: https://www.google.com/intl/it/policies/privacy/
-information to manage or disable cookies: https://support.google.com/accounts/answer/61416?hl=it
For Google Doubleclick cookies:
-privacy policy: https://www.google.com/intl/it/policies/privacy/
-information to manage or disable cookies: https://www.google.com/settings/ads/plugin
For Criteo cookies:
-privacy policy: http://www.criteo.com/it/privacy/
-information to manage or disable cookies: http://www.criteo.com/it/privacy/
For Facebook cookies:
-privacy policy: https://www.facebook.com/privacy/explanation
-information to manage or disable cookies: https://www.facebook.com/help/cookies/
For CrazyEgg cookies:
-privacy policy: https://www.crazyegg.com/privacy/
-information to manage or disable cookies: https://www.crazyegg.com/cookies/
For Rocket Fuel cookies:
-privacy policy: http://rocketfuel.com/it/privacy/
-information to manage or disable cookies: http://rocketfuel.com/it/cookie-policy/
For Youtube cookies:
-privacy policy: https://www.youtube.com/intl/it/yt/about/policies/#community-guidelines
-information to manage or disable cookies: https://support.google.com/accounts/answer/61416?hl=it
For Yahoo cookies:
-privacy policy and information to manage or disable cookies: https://policies.yahoo.com/ie/it/yahoo/privacy/euoathnoticefaq/
For Bing cookies:
-privacy policy and information to manage or disable cookies https://privacy.microsoft.com/it-it/privacystatement
Profiling cookies
Profiling cookies may be installed by the Company using so-called web analytics software. These are similar to those used to prepare detailed reports and real time analyses relating to information on: website visitors, originating search engines, key words used, user language, and most visited pages. They can also collect information and data such as IP address, nationality, city, date/time, device, browser, operating system, screen resolution, navigation origin, pages visited and number of pages, visit duration, and number of visits made. This data may be forwarded to Company in accordance with and within the limits established by current law and by the provisions outlined in this Privacy Policy.
Contact us for more information.
