Privacy policy statement

Privacy policy statement – information pursuant to article 13 Reg. UE 679/2016 (“GDPR”)

We would like to explain how and why we process your personal data. This policy statement relates to the processing of personal data belonging to persons outside the Navionics s.r.l. organisation who send email messages to Navionics s.r.l. operators.

Who processes your data - Data Controller

Navionics S.r.l. having a sole quotaholder, registered office in Corso Magenta 43, 20123 Milan.

Data Processor Officer (DPO): [email protected]

Why and for how long we process your data - Purpose and legal basis of processing - Data retention period

We process your data in order to reply to emails which you send to us. The legal basis of this processing is Navionics’ legal interest to interact with clients, prospects, suppliers and commercial and administrative contact persons for its own corporate purposes. If you wrote to Navionics because you are interested in its products and services, the legal basis of processing is to carry out the pre-contractual activities which you requested. The data retention period is the time necessary for responding to your request. However, the purpose, legal basis and retention time may be different if you have written to Navionics for other specific reasons: in such case you can consult the privacy policy statements for

suppliers, if you operate on behalf of one of Navionics’ suppliers or trade partners
candidates, if you have sent your candidacy to Navionics
users of Navionics’ services and products

We may process your data for purposes of legal protection, in order to prevent or prosecute unlawful acts. The legal basis of this processing is Navionics’ legitimate interest to safeguard its rights and to prevent the commission of unlawful acts. In such case, the retention period is the time reasonably required for exercising our rights from the time when an unlawful act or possible commission of same comes to our attention.

Recipients or possible categories of recipients of personal data

We may share your data with our service providers. Navionics uses third-party services (cloud) which operate as data processors in accordance with agreements complying with article 28 GDPR and in accordance with provisions relating to the transfer of data to non-European Union countries, where there is actual transfer of this data. These parties only come into possession of personal data required for discharging their functions and may use the data solely for purposes of providing these services on our behalf or for complying with statutory rules. The updated list of third-party supplier’s operating as data processors in accordance with article 28 GDPR is available, subject to a request being sent to [email protected].

Furthermore, we may share your data with legal or administrative authorities. If you believe it is necessary to do so in order to comply with an order issued by a court or an authority, or in order to comply with legal obligations or to protect ourselves, or third parties, we may forward your data to a Court of Law or to an Administrative Authority within the State or in the European Union.

Transfer of personal data to a non-European Union country

The data shall be processed and stored in our offices in Via Fondacci, 269, Z.I. Montramito - 55054 Massarosa (LU) Italy. Your data may also be stored in the USA by Navionics’ suppliers to whom the data is forwarded on the basis that standard contractual clauses have been entered into in accordance with the European Commission decision on standard contractual clauses for the transfer of personal data and/or by virtue of an adequacy decision by the European Commission on the level of data protection (Privacy Shield). The updated list of third party suppliers, operating as data processors in respect of data-processing pursuant to article 28 GDPR, is available, subject to a request being sent to [email protected].

Your rights

You are entitled at any time to request access to your personal data, to correct or erase such data, to limit processing concerning you or to object to processing of your data. You may exercise these rights by contacting [email protected] or by writing to the address of the data controller shown above.

You are also entitled to file a complaint with the Data Protection Authority.  

Privacy policy statement updated on May 22, 2018