The Company "Cantiere Mostes Umberto & C. Snc di Mostes Maurizio", Via alle Rive n.19 - Faggeto Lario (CO), zip code 22020, as Data Controller, for the purposes referred to the legislation in the epigraph and subsequent amendments and additions, informs you about:

Purpose of the treatment.

Personal data (eg name, surname, company name, address, telephone number, e-mail address, bank account number, etc.), communicated by you, will be processed and stored, without the need of your express consent (artt. 6 GDPR - Article 24 of the Privacy Code), for purposes related to the conclusion of contracts relating to products and services offered by the Data Controller, and in particular for the fulfillment of all pre-contractual and contractual obligations, including legal, accounting and tax, arising from the relationship established with you, or to fulfill, before the conclusion of the contract, to your specific requests.

The same data may be processed and stored to fulfill any obligations imposed by law, including the Community, or to an order of the Authority, as well as to exercise a right of the Owner, such as, for example, the right to protection and defense in court.

The provision of data for the aforementioned purposes is mandatory for the fulfillment of the aforementioned pre-contractual and contractual, accounting and tax commitments, to which the Data Controller is bound, due to the relationship established with you, with the consequence that your refusal to supply them, in whole or in part, or their incorrect communication, could give rise to the impossibility for the owner to execute the contract, or to correctly perform all the obligations related to it and required by law, or before conclusion of the contract, the impossibility of satisfying your specific requests.

Only subject to your specific and distinct consent (Article 7 GDPR - Article 23 of the Privacy Code) your data may be processed and used by the Owner for marketing purposes, that is to send to you, via e-mail, mail, through the phone/s contact/s, including the use of text messages, commercial communications and / or advertising material on the products and services offered by the owner, newsletter, or questionnaires for the surveying of the degree of your satisfaction about the quality of products and services offered by the owner .

Navigation data

The computer systems and software procedures used to operate this website acquire, during their normal operation, some personal data whose transmission is implicit in the use of Internet communication protocols. This is information that is not collected to be associated with identified individuals, but which, by their very nature, could, through processing and association with data held by third parties, allow users to be identified.

This category of data includes IP addresses or domain names of the computers used by users connecting to the site, the addresses in the Uniform Resource Identifier (URI) notation of the requested resources, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response given by the server (success, error, etc.) and other parameters relating to the operating system and the user's computer environment.

These data are used in order to allow access and navigation of the site, to obtain anonymous statistical information on the use of the site, to check its correct functioning, and are processed for the time strictly necessary to fulfill the purposes, which in this case visitors to the site is 1 year. The data could be used to ascertain responsibility in case of hypothetical data processing crimes to the detriment of the site or of offenses committed during navigation.

The data processed by the undersigned company are protected by appropriate security measures as required by current legislation.

Data provided voluntarily by the user.

For the consultation of the site it is not required any transfer of personal data by the user. In particular, it is specified that cookies are not used for the purpose of profiling, neither first nor third parties, but only technical, functional and analytical cookies anonymous with the aim of improving the quality of user navigation inside the site in question.

However, it is possible, by the user to proceed with the registration to the site or to the request for information without carrying out the aforementioned registration. These operations involve the acquisition of personal data by the undersigned company, such as the address, e-mail or telephone number, necessary to fulfill the requests of users. These data will be used for the sole purpose of following up the user's request; if necessary, they will be processed for purposes related to contractual, tax and accounting obligations; historical billing; litigation and credit protection; fulfillment of obligations under current laws and may be disclosed to third parties only if this is necessary for this purpose. The treatment will be carried out with manual and automated systems on magnetic, electronic and telematic support, suitable to store, manage and transmit the data, with logics strictly related to the purposes, based on the data in our possession and with commitment on your part to promptly notify us of any corrections, changes, additions and / or updates.

For the processing of data collected on the basis of the subscription to the newsletter, your CONSENT is required because your contact details (e-mail and telephone number) can be used for direct marketing activities, such as sending e-mail advertising and communications material having informative and / or promotional content in relation to products or services provided and / or promoted by the Owner or by his business partners. Failure to consent does not imply any consequence on the possibility of consulting the site, if not forfeiting the receipt of advertising and promotional material and dedicated discounts.

Particular data.

Through this website, the undersigned Company does not deliberately collect particular categories of data, defined in art. 9 of EU Regulation 679/16 as data revealing racial or ethnic origin, political opinions, religious or philosophical convictions, or union membership, as well as genetic data, biometric data intended to uniquely identify a natural person , data relating to the health or sexual life or sexual orientation of the person.

It is recommended not to provide these informations through this site. In the event that the communication becomes necessary (for example: belonging to protected categories in the case of sending a curriculum vitae for employment purposes), in response to a job announcement or in the case of an expression of interest to work at the Company, we invite you to send a special declaration to the registered office of the Company by registered letter containing written consent to the processing of the relative informations.

Access to data.

Exclusively for the purposes set out above, your data may be made accessible, or communicated, in Italy, to:

- employees and collaborators of the Data Controller, in their capacity as in charge person or responsible person of data processing;

- third-party companies or other subjects, such as, for example: professional firms, consultants, credit and insurance institutions, sales agents and representatives of trade, professional brokers, who carry out activities on behalf and on behalf of the Owner and in their capacity as Responsible (external) of the treatment;

- public bodies, state administrations supervisory bodies and in general all those subjects to whom the communication is mandatory by law or for the accomplishment of the purposes mentioned above.
These subjects will process your data as independent data controllers with the related responsibilities.

Any further and different communication or dissemination may take place only upon your explicit consent and any transfer to a third country, or to an international organization, will take place in compliance with the guarantees provided by the relevant legislation (Article 46 of the GDPR).

Method of treatment.

The processing of the data communicated includes the operations of collection, registration, organization, storage, extraction and consultation, communication, cancellation or destruction (Article 4 No. 2 GDPR), performed exclusively by persons appointed for this purpose, with or without 'aid of automated processes and electronic devices, on paper supports (eg estimates, orders, transport documents, invoices, sales preliminaries, project drawings), as well as on computer or telematic supports (eg insertion in management).

The data is stored on a company server located in Italy. It is understood that the Data Controller, where necessary, will have the right to move the server even outside the EU, ensuring right now that such transfer will take place in compliance with the provisions of the GDPR (articles 45 and 46) and, in any case, of the current legislation.

The Data Controller will process your data for the time strictly necessary for the fulfillment of the aforementioned purposes and, in any case, no more than ten years from the termination of the relationship for the contractual purposes c.d. and no later than two years from the collection for marketing and promotion purposes, as well as for statistical purposes.

Rights of the interested party.

As an interested party you have the rights set forth in articles 15 GDPR and 7 of the Privacy Code and, in particular:

- the right to obtain confirmation that the processing of your data and the right of access to it (right to obtain a free copy) is in progress or not;

- the right to obtain informations and indications about the origin of personal data, on the purposes and methods of processing, including the retention period or the criteria used to determine it, on the existence of automated decision-making processes, including profiling and, in most significant cases, on the used logic, as well as the importance and consequences of such processing;

- the right to obtain the identification details of the holder and informations on the recipients, or on the categories of recipients to whom the data have been or will be communicated and, if transferred abroad, the right to be informed about the existence of adequate guarantees pursuant to art. 46 of the GDPR;
- the right to request and obtain the updating, correction and, when interested, the integration of data, cancellation, limitation of processing, transformation into anonymous form or blocking of data processed in violation of the law, including those that do not need to be kept for the purposes for which the data were collected or subsequently processed;

- the right to object, in whole or in part, to the processing of data concerning you and the right to propose a complaint with the Guarantor Authority.

Data controller, responsible persons and in charge persons.

The owner of the processing of your personal data is the company "Cantiere Nautico Mostes Umberto & C. Snc di Mostes Maurizio", with registered office in Faggeto Lario (CO), zip code 22020, Via alle Rive, 19 (info@mostes-faggeto.com). The Data Controller keeps the updated list of the in charge persons and responsible persons of the processing.

Contacting the Data Controller at the indicated address, by registered letter or e-mail, you may exercise the aforementioned rights.