INFORMATION NOTICE ON THE PROCESSING OF PERSONAL DATA

Pursuant to art. 13 of Regulation (EU) no. 2016/679, “on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC” (hereinafter the “GDPR”), the companies Grimaldi Group S.p.A., Grimaldi Euromed S.p.A. and Grimaldi Deep Sea S.p.A., as joint controllers of the processing of your personal data (hereinafter the “Joint Controllers”), are required to provide you with some information regarding the methods and purposes related to the processing.

In accordance with art. 26 of the GDPR, the abovementioned Joint Controllers have determined, by means of an internal agreement, their respective responsibilities, for the External Relations area, regarding compliance with the obligations deriving from the GDPR.

The table below provides a very brief summary of the contents of this information notice.

Joint Controller

Grimaldi Group S.p.A.

Joint Controller

Grimaldi Euromed S.p.A.

Joint Controller

Grimaldi Deep Sea S.p.A.

Purposes of personal data processing

Sending of information material (newsletter); sending of newspapers, magazines and/or other information material by publishing companies which are business partners of the Joint Controllers

Legal basis for the processing of personal data

Consent of the data subjects;

promotion of products and services similar to those purchased by the data subjects (art. 130, paragraph 4, of the Privacy Act)

Transfer of data outside the European Union

Not applicable

Rights of the data subjects

- to access to personal data;

- to obtain correction or erasure of data or limitation of processing;

- to withdraw consent without prejudice to the lawfulness of the processing carried out before the withdrawal;

- to object to the processing of data;

- to obtain data portability;

- to lodge a complaint with the competent supervisory authority (e.g. the Italian Data Protection Authority);

such rights can be exercised by contacting the following address: privacy@grimaldi.napoli.it.

 

The Joint Controllers have appointed a Data Protection Officer, who has a specialist knowledge of data protection rules and practices and is therefore able to carry out the tasks referred to in art. 39 of the GDPR, who can be contacted at the following e-mail address: DPO@grimaldi.napoli.it.

You may contact the Joint Controllers at the following email address: privacy@grimaldi.napoli.it.

Your common personal data – name, surname and contact details - are processed. No special categories of personal data pursuant to art. 9 of the GDPR will be processed and, if the Joint Controllers receive them, they will immediately delete them.

Your personal data are processed (i) for the purpose of disclosing and promoting the activities and the services of Grimaldi Group; and (ii) to send you information content (for example, newspapers, magazines, etc.) produced by third-parties publishing companies, which are business partners of the Joint Controllers.

Your personal data’s processing activities are based on your express and specific consent. We remind you that with a single consent you can authorize us to send you commercial communications by non-automated means (telephone with operator, paper mail) and automated means (sms, push notifications, email), in compliance with the provision of the Italian Data Protection Authority dated May 15, 2013, but that you can at any time object to such communications, even by selecting the contact tools (e.g. email yes, sms no).

Please note that your consent is not required if you have already purchased products and/or services from the Joint Controllers and the information material sent to you concerns similar products and/or services (art. 130, paragraph 4, of Italian Legislative Decree 196/2003 the “Privacy Act”).

The provision of your personal data is optional. However, failure to provide, even partially, the requested data will make it impossible for the Joint Controllers to proceed with the full provision of the service provided.

We would also like to inform you that your personal data are processed, also using IT tools, in compliance with the principles set forth in the GDPR, which provides that the data shall be:

Your personal data will be kept until it is necessary for the purposes of the processing, as indicated above.

We inform you that your personal data may be communicated by the Joint Controllers to public and/or private organizations authorized to receive them by law (e.g. to the financial administration, to the authorities appointed by law, to supervisory and control bodies, within the limits of the legislative, regulatory or contractual provisions), to publishing companies which are business partners of the Joint Controllers, to suppliers that deal with the dispatch of information communications in paper form as well as to persons, companies, associations or professional firms that provide services or activities of assistance and advice to the Joint Controllers, with particular but not exclusive reference to accounting, administrative, tax, IT and/or financial matters and to legal consultants.

Your personal data will not be subject to transfer to third countries with respect to the European Union.

You may exercise your rights at any time under articles 15-22 of the GDPR:

You may exercise the abovementioned rights by sending your request to the following e-mail address: privacy@grimaldi.napoli.it. With respect to information communications received in electronic form, you may exercise your right to object by using the “unsubscribe” function at the bottom of each email received from the Joint Controllers.