Privacy Policy (GDPR EU 2016-679)
The following information is provided pursuant to the Personal Data Protection Code (Legislative Decree 196/2003 and subsequent amendments) and Articles 13 and 14 of Regulation (EU) 2016/679 on the protection of personal data by Netus Yachts s.r.l., the company that owns the Netus Yacht Brokers trademark.
Data controller
The personal data submitted by interested parties are used for the purposes described below by Netus Yachts S.r.l., with registered office in Civitanova Marche (MC), Via Toscana n. 18, as Data Controller, which can be contacted at the following email address: [email protected]
Personal data collected by the user or third parties
Netus Yachts S.r.l. collects various types of personal data from the data subject, depending on the purpose of the processing and to the extent strictly necessary. Typically, these include common data (personal and contact details) and/or tax information. It may also be necessary to process special categories of data to fulfill the data subject’s requests (subject to the data subject’s prior consent).
Netus Yachts S.r.l. also processes personal data provided by the data subject to third parties, such as service providers, or personal data in the public domain, such as commonly recognized personal data, personal data visible on its website or blog, or posted on publicly accessible social media profiles. These third parties have different privacy policies, which we encourage you to consult on their respective websites. Specifically, personal data is processed by the Data Controller primarily using the CRM services called Navis.net, provided by Digibusiness SRL (Navis.net is a specific IT system for Customer Relationship Management in the nautical sector). By signing the Navis.net service contract, the Data Controller has formally appointed Digibusiness SRL as an external Data Processor. Digibusiness SRL is headquartered in Collecchio (PR – Italy) at Strada Consortile 2, and the processing methods used by this system ensure compliance with the GDPR EU 2016-679, in terms of data security and protection, as documented in a specific document published on the website www.navisnet.it in the Privacy section.
Personal data is collected on a voluntary or mandatory basis, as it is necessary to provide the requested service.
If providing personal data is mandatory, it will be marked as such by Netus Yachts S.r.l. If the data subject does not provide the data marked as mandatory, it may be impossible for the company to carry out the process or activity requested by that data subject.
In cases where Netus Yachts S.r.l. If you indicate some Data as optional, interested parties are free to refrain from communicating such Data, without this affecting the availability of the Service or its operation.
Legal basis and purpose of personal data collection
The Personal Data collected by Netus Yachts S.r.l. as indicated above is used based on a legitimate justification (so-called legal basis for processing) and for a series of purposes listed below. Netus Yachts S.r.l. may collect Personal Data with or without the consent of the Data Subject involved, according to the purposes listed below:
| Purposes for which the processing is carried out | Legal basis on which the processing is based |
| Satisfy interested parties’ information requests | Execution of pre-contractual measures |
| Inform customers about new products, events, promotional campaigns | Consent |
| Sign and manage the sales assignment | Performance of a contract |
| Personalize the assignment and/or service with the processing of so-called special data | Consent |
| Inform customers about additional services related to the purchased good or service | Consent |
| Periodic sending of newsletters via email | Consent |
| Personalize your experience with us based on your interests and purchasing habits and to improve our services, including through profiling. | Consent |
| Record and manage purchase orders, business expenses, and invoices from suppliers and service providers | Performance of a contract |
| Management of hiring processes by collecting CVs sent by candidates via the website or through selections | Performance of a contract |
| Prevention of fraud and crime | Legitimate interest |
| To ascertain, exercise and safeguard its rights or the rights of those the company represents (e.g. in disputes) before any jurisdiction of any country or even out of court (for example, among others, the right of Netus Yachts S.r.l to submit reminders aimed at obtaining the fulfillment of an outstanding invoice) | Legitimate interest |
Categories of recipients to whom the data will be communicated
The data collected (or part thereof) by Netus Yachts S.r.l., within the limits and depending on the purposes indicated, may be communicated to:
- anyone who collaborates with the company for the execution of the obligations arising from the contract (by way of example and not limited to: shipping/transport companies);
- public bodies, authorities and/or other entities for the fulfillment of legal obligations;
- third-party companies and/or banking institutions for credit management;
- Companies, firms, and individuals appointed as data controllers and/or privacy contacts who collaborate in providing the service on behalf of the data controller, duly appointed and trained, a list of which is available at the company headquarters upon explicit request by email to [email protected], in compliance with the confidentiality obligation (IT service companies, website management, system administration, accountants).
Data processing methods, data storage and related criteria
The processing will be carried out in an automated and/or manual manner, in compliance with the provisions of Article 32 of GDPR 2016/679 regarding security measures, by specifically appointed and trained personnel. Netus Yachts S.r.l.’s approach is not to retain the data subject’s personal data indefinitely. Personal data is retained by Netus Yachts S.r.l. to the extent necessary and for the sole purpose of pursuing the purposes described above. Once the purpose has been achieved, Netus Yachts S.r.l. will delete the personal data, unless its retention is required by law, whether national, European, or international. The criteria used by Netus Yachts S.r.l. to determine the data retention period takes into account the legal retention period (which is often ten years for tax and accounting obligations) and the statutory limitation period, typically ten years, within which any rights may be asserted against the company.
Transfer of personal data to third countries (non-EU)
Netus Yachts S.r.l. may need to transfer personal data to countries outside the EU. In any case of transfer of personal data to a non-EU country, Netus Yachts S.r.l. undertakes to:
- ensure an adequate level of protection by establishing appropriate safeguards and complying with the provisions of Regulation (EU) 2016/679;
- manage the transfer of Personal Data on the basis of:
- European Union adequacy decisions; or
- standard contractual clauses/binding corporate rules; or
- code of conduct approved by the relevant regulatory authority/official safety certifications.
- manage the transfer of Personal Data on the basis of the consent of the Data Subject whose Personal Data is to be transferred, or on the basis of the derogations pursuant to Article 49 of Regulation (EU) 2016/679 if the transfer cannot be carried out based on the aforementioned cases 1), 2), 3).
Rights of the data subject
If you have any questions about the protection of your personal data or the exercise of your rights, you may contact Netus Yachts S.r.l. at any time by writing to the following email address: [email protected].
After the personal data has been processed, you have various rights that can be exercised in the ways indicated below.
You must be as specific as possible whenever you wish to exercise your rights, as Netus Yachts S.r.l. can only adequately respond to requests formulated in sufficient detail.
Netus Yachts S.r.l. will verify your identity in as much detail as possible to prevent anyone other than you from attempting to exercise your rights. To this end, you will be asked to provide a valid form of identification when submitting such a request.
Right of access: If you wish to access the personal data that Netus Yachts S.r.l. holds, treats or would like more information about:
- purpose of the Processing;
- categories of Personal Data in question;
- categories of recipients to whom the Personal Data have been or will be communicated;
- expected period of data retention or the criteria used to establish such period;
- rights of the data subject;
- rights that the interested party can exercise with respect to the Processing by Netus Yachts S.r.l.;
- the existence of automated decision-making, including profiling, and the envisaged consequences;
and any other information available regarding the Processing of Personal Data, please write to the following email address: [email protected]
Netus Yachts S.r.l. will use the Personal Data provided by the data subject solely for the purpose of verifying and processing the request.
If the data subject exercises the right of access, Netus Yachts S.r.l. will provide a list as complete as possible or a copy of the Personal Data.
Right to supplement/rectify/erase/restrict the processing of your Personal Data: It may happen that some Personal Data held by Netus Yachts S.r.l. is not (or has ceased to be) accurate. The data subject may request the rectification or completion of their Personal Data at any time. If the data subject wishes Netus Yachts S.r.l. to erase their Personal Data, the request will be processed, unless there is an impediment or incompatibility arising from the law or legitimate interests regarding erasure. You may obtain the restriction of any Processing of your Personal Data already in place at any time.
Right to data portability: In certain circumstances, you have the right to receive all the personal data you have provided to us in a structured, commonly used, and machine-readable format. You may also request the portability of your Personal Data to another Data Controller where technically feasible.
Right to withdraw your consent: Whenever you provide Netus Yachts S.r.l. with your consent for the Processing of your Personal Data, you may subsequently withdraw that consent at any time by following the suggested procedure and as easily as you provided it. If you wish to withdraw your consent, you may do so at any time, without affecting the lawfulness of processing based on consent before its withdrawal.
Right to object to data processing and processing based on automated decision-making: The data subject has the right to object at any time, on grounds relating to his or her particular situation, to processing of personal data concerning him or her, including profiling. The data subject has the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning him or her or similarly significantly affects him or her. The data subject may exercise the above rights by submitting a written request to: [email protected]
Right to lodge a complaint with the supervisory authority: If you do not agree with the way Netus Yachts S.r.l. processes your personal data, you may lodge a complaint with the data protection authority in your country of residence.
Security measures for the protection of personal data
Netus Yachts S.r.l. has implemented appropriate security measures to maintain the integrity and security, as well as prevent accidental or unlawful destruction, loss, alteration, unauthorized disclosure, or access to Personal Data transmitted, stored, or otherwise processed, in accordance with Regulation (EU) 2016/679.
Changes to this data protection policy
This Data Protection Policy may be amended or updated in light of future international, European, and national legislation.
You can always find the most recent version of Netus Yachts S.r.l.’s Data Protection Policy on the website.