Privacy

Types of Data Collected

Among the Personal Data collected by this Website, either independently or through third parties, are: Cookie; Usage Data; first name; last name; email; various types of Data.
Full details on each type of data collected are provided in the dedicated sections of this privacy policy or by means of specific information texts displayed before the collection of the data itself.
Personal Data may be freely provided by the User or, in the case of Usage Data, automatically collected during the use of this Web Site.
Unless otherwise specified, all Data requested by this Web Site is mandatory. If the User refuses to provide it, it may be impossible for this Web Site to provide the Service. In cases where this Website indicates certain Data as optional, Users are free to refrain from communicating such Data, without this having any effect on the availability of the Service or its operation.
Users who may have doubts as to which Data is mandatory are encouraged to contact the Data Controller.
Any use of Cookies – or other tracking tools – by this Website or by the owners of third party services used by this Website, unless otherwise specified, is for the purpose of providing the Service requested by the User, in addition to the further purposes described in this document and in the Cookie Policy, if available.
The User assumes responsibility for the Personal Data of third parties obtained, published or shared through this Website and guarantees that he/she has the right to communicate or disseminate them, releasing the Owner from any liability towards third parties.

Method and place of processing of collected data
Treatment modes

The Owner adopts appropriate security measures to prevent unauthorized access, disclosure, modification or destruction of Personal Data.
The treatment is carried out through computer and/or telematic instruments, with organizational methods and logics strictly related to the indicated purposes. In addition to the Data Controller, in some cases, other subjects involved in the organization of this Website (administrative, commercial, marketing, legal, system administrators) or external subjects (such as third party technical service providers, postal couriers, hosting providers, IT companies, communication agencies) also appointed, if necessary, as Data Processors by the Data Controller, may have access to the Data. The updated list of Data Processors can always be requested from the Data Controller.

Legal basis of the treatment

The Data Controller processes Personal Data relating to the User if one of the following conditions exists:
the User has given consent for one or more specific purposes; Note: in some jurisdictions, the Controller may be authorized to process Personal Data without the User’s consent or another of the legal bases specified below, until the User objects (“opts out”) of such processing. However, this does not apply where the processing of Personal Data is governed by European legislation on the protection of Personal Data;
the processing is necessary for the execution of a contract with the User and/or the execution of pre-contractual measures;
the processing is necessary to comply with a legal obligation to which the Controller is subject;
the processing is necessary for the performance of a task carried out in the public interest or in the exercise of public authority vested in the Data Controller;
the processing is necessary for the pursuit of the legitimate interest of the Owner or third parties.
However, it is always possible to ask the Data Controller to clarify the concrete legal basis of each processing and in particular to specify whether the processing is based on law, provided for by a contract or necessary to conclude a contract.
Location
The Data are processed at the operational headquarters of the Data Controller and in any other place where the parties involved in the processing are located. For further information, please contact the Data Controller.
The User’s Personal Data may be transferred to a country other than the one in which the User is located. To obtain further information on the location of the processing, the User may refer to the section on Personal Data processing details.
The User has the right to obtain information on the legal basis for the transfer of Data outside the European Union or to an international organization under public international law or formed by two or more countries, such as the UN, as well as on the security measures adopted by the Data Controller to protect the Data.
The User can verify whether one of the transfers just described takes place by examining the section of this document relating to details on the processing of Personal Data or request information from the Controller by contacting him at the contact details given at the beginning.

Storage Period

Data is processed and stored for the time required by the purposes for which it was collected.
Therefore:
Personal Data collected for purposes related to the performance of a contract between the Data Controller and the User will be retained until the performance of such contract is completed.
Personal Data collected for purposes attributable to the legitimate interest of the Controller will be retained until such interest is satisfied. You may obtain further information regarding the legitimate interest pursued by the Controller in the relevant sections of this document or by contacting the Controller.
When processing is based on Your consent, the Controller may retain Personal Data longer until such consent is revoked. In addition, the Controller may be required to retain Personal Data for a longer period in compliance with a legal obligation or by order of an authority.
At the end of the storage period, the Personal Data will be deleted. Therefore, at the end of this period, the right of access, cancellation, rectification and the right to data portability can no longer be exercised.

Purposes of Data Processing

The User’s Data are collected to allow the Data Controller to provide the Service, comply with legal obligations, respond to requests or enforcement actions, protect its rights and interests (or those of Users or third parties), identify any malicious or fraudulent activities, as well as for the following purposes: Statistics, Contacting the User, Interaction with social networks and external platforms and Displaying content from external platforms.
To obtain detailed information on the purposes of processing and the Personal Data processed for each purpose, the User may refer to the section “Detailed information on the processing of Personal Data”.

Personal Data Processing Details

Personal Data is collected for the following purposes and using the following services:

Statistics

The services contained in this section allow the Data Controller to monitor and analyze traffic data and serve to keep track of the User’s behavior. Google Analytics
(Google Inc.)
Google Analytics is a web analysis service provided by Google Inc. (“Google”). Google uses the Personal Data collected in order to track and examine the use of this Website, compile reports and share them with other services developed by Google.
Google may use Personal Information to contextualize and personalize ads in its ad network.
Personal Data Collected: Cookies; Usage Data.
Place of processing: United States – Privacy Policy – Opt Out. Privacy Shield Adherent.

User Rights

At any time users can exercise their rights under Article 7 of the “Code” including the right to access the register of the Guarantor or access, correct, cancel or oppose the processing of data by writing to:

CM Nautica S.r.l.
Sede operativa
Via del Lago 57
28053 Castelletto Sopra Ticino (NO) Italy
Telefono +39  380 265 7921

CM Nautica S.r.l. offers however to the own customers the possibility to demand in whichever moment the modification or the cancellation of the conferred data.
This request can also be made by email by writing to info@cmnautica.it and indicating in the object “request for cancellation and / or change of data”.