Information on the processing of personal data pursuant to and for the purposes of art. 13, D.Lgs. n. 196/2003 and in compliance with EU Regulation no. 2016/679 (General data protection regulation c.d. “GDPR”).

​

In compliance with the provisions of Legislative Decree. n.196/2003, as amended by the EU Regulation 2016/679 of the European Parliament and of the Council of 27 April 2016 (from now on GDPR), the necessary information is provided regarding the purposes and methods of processing your personal data, in the context of communication and dissemination of the same. This information applies to all users, including registered and unregistered visitors, of our site: www.proteusdiving.it. The user is invited to read this information carefully. In case of doubts or questions, the user can contact us at the address: info@proteusdiving.it.

​

1. holder of the treatment

The Data Controller is PROTEUS di Luca Rossi, with headquarters in Arzachena (SS) in Via Savona 10/11 (07021).

2. Type of data processed and purpose of the processing

To provide our services, we need to collect personal information (personal and contact data) that the user provides to us based on the use of our services. The type of personal information we collect is the data that the user decides to provide, specifically it is: Name; email address; telephone number.

This information is used by the Data Controller in order to:

• provide and manage services at the request of the user (es. via contact form);

• respond to user requests (es. commercial requests; booking services);

• carry out communications with various means, including for promotional and marketing purposes (es. newsletter);

• exchange information aimed at the execution of the contractual relationship, including previous and subsequent activities;

• comply with the obligations established by law, regulations, or provisions issued by public authorities.
  
  

3. Processing methods

Users' personal data will be subject to processing operations in compliance with current legislation and principles of correctness, lawfulness, transparency and confidentiality. These data will be processed with and without the aid of electronic and IT tools. Users' personal data will be processed by the Data Controller and possibly by the Data Processor and / or by the Data Processors. Users' personal data will not be subject to automated decision-making processes, nor of any type of profiling, except as provided in the following points 4 e 5.

4. browsing data

The computer system used to operate this website acquires some personal data of the user during normal operation. This is information that is not collected to be associated with identified interests, but which by their nature could, through further elaborations and associations, allow users to be identified. It is about: IP addresses; URI rotation addresses; time of requests submitted; numeric code indicating the status of the response given by the server (es. mistake, ecc.). These data are used for the sole purpose of obtaining anonymous statistical information on the use of the site and to check its correct functioning.

6. provision of your data

The provision of the user's personal data is strictly necessary to implement the purposes referred to in point 2 of this information. The refusal by the user to provide their personal data makes it impossible to provide the requested services. In any case, the user has the right to withdraw the consent given at any time.

7. data communication

The user's personal data may be disclosed, for the purposes referred to in point 2 of this information, a:

• employees and collaborators;

• service providers (es. web host) and third parties that provide instrumental services to satisfy the user's requests (es. shipping company; ecc.).

The user's personal data are in no way subject to disclosure to indeterminate recipients.

8. recipients of the data

The user's personal data will not be disclosed to third parties and indeterminate subjects in any form (es. consultation of data, provision of data).

9. data transfer

The user's personal data may be transferred to European Union countries within the scope of the purposes referred to in point 2 of this information. For the pursuit of the same purposes, the user's personal data may also be transferred to Data Processors based in third countries or to international organizations. In such cases, the Data Controller guarantees that the data will be transferred exclusively to third countries or international organizations that provide adequate guarantees for the protection of personal information pursuant to art. 46 of the GDPR or pursuant to art. 45 of the GDPR.

10. data retention time collected

The Data Controller will process the personal data collected for as long as necessary to fulfill the purposes referred to in the point 2 of this information. Subsequently, the user's personal data will be stored, and not further treated, for a period of time that can vary significantly depending on: purposes pursued, type of data processed, legal obligations (es. tax, administrative, ecc.). In any case, if it is no longer necessary to keep such data, they will be deleted / destroyed in accordance with the provisions of the GDPR.

11. user rights

The user can at any time ask the Data Controller to exercise the following rights: art. 15 (right of access), art. 16 (right of rectification), art.17 (right to cancellation), art. 18 (right to limit the processing), art. 19 (obligation to notify in case of rectification or cancellation of personal data or limitation of processing), art. 20 (right to data portability) e 21 (right to object), art. 22 (automated decision making and profiling) of the GDPR, may at any time request access to personal data and the correction or cancellation of the same or the limitation of processing or to oppose their processing, in addition to the right to data portability, by sending written communication to the Data Controller. The interested party can lodge a complaint with the supervisory authority of the state in which he resides. The interested party also has the right, ex art. 34 GDPR, to receive communication from the owner, without undue delay, of any personal data breaches likely to present a high risk to the rights and freedoms of individuals.

12. How to exercise your rights

The interested party may at any time exercise the rights referred to in this information and in general the provisions of the GDPR legislation: (I) by sending a registered letter with return receipt to the Data Controller at the registered office of the company located in 07021 - Arzachena, Via Savona 10/11 or by sending an email to the address info@proteusdiving.it.

13. Consent to the processing of data