Privacy information for site users

With this disclosure, as required by current legislation on the protection of personal data (articles 13 and 14 of the General Data Protection Regulation, hereinafter also GDPR or Regulation), Cocoon L&R Italia Srl, in the person of the legal representative pro tempore, (hereinafter also the “Owner” or “Company”) provides users (“interested parties”) who access the marineelements.com website (hereinafter also the “website”) information relating to the processing of their data.

WHO IS THE OWNER AND HOW TO CONTACT HIM

The Data Controller is Cocoon L&R Italia Srl, with headquarters in Corso Sommeiller 35, Turin, VAT number 12353500015. The Company can be contacted via the email address info@marineelements.com

WHICH DATA IS PROCESSED

The data processed are navigation data and data provided spontaneously by the user.

Data provided directly by the user

This category includes all personal data provided by the user on an optional basis (such as, for example, when information is requested by writing to the e-mail addresses listed on the site).

As regards the data provided by the user who wishes to purchase the products on the site or participate in the initiatives promoted through the site, please refer to the specific information provided at the bottom of the dedicated forms.

Navigation data

The computer systems and software procedures used to operate this website acquire, during their normal operation, some personal data whose transmission is implicit in the use of Internet communication protocols.

This is information that is not collected to be associated with identified interested parties, but which by their very nature could, through processing and association with data held by third parties, allow users to be identified.

This category of data includes the IP addresses or domain names of the computers used by users who connect to the site, the addresses in URI (Uniform Resource Identifier) notation of the requested resources, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response given by the server (successful, error, etc.) and other parameters relating to the operating system and the user’s IT environment.

Cookies and other tracking systems

The site uses cookies, indicated in detail in the cookie information to which reference is made.

WHAT ARE THE PURPOSES AND LEGAL BASES OF THE TREATMENT?

Data provided directly by the user

The personal data provided by the user in an optional way by contacting the owner are used only to process any requests made.

The legal basis for the processing of such data is therefore the execution of pre-contractual measures.

The data may also be used for the legitimate interest of the owner to verify the security and correct functioning of the IT systems used and to carry out defensive activities or assert or defend a right in court.

Navigation data

Navigation data is acquired for security purposes and to check the correct functioning of the site and could be used to ascertain responsibility in the event of any computer crimes against the website.

The legal basis for the processing of such data is the legitimate interest and, in the case of requests from the Authorities, the legal obligation.

Cookies and other tracking systems

As regards the cookies used by the site, please refer to what is indicated in the cookie information.

HOW IS THE DATA MANAGED?

The data collected is processed with IT tools that guarantee adequate security measures to prevent data loss, illicit or incorrect use and unauthorized access.

Data transfer abroad

For the processing of data connected to the website services, servers located within the European territory are used.

Some services offered by companies and consultants that the owner uses to manage the data collected may involve the transfer of data abroad. However, this transfer always takes place in compliance with the provisions of EU regulation 2016/679 and, precisely, on the basis of the standard contractual clauses and the adequacy decisions of the European Commission.

Storage times

The data provided directly by the user is kept for the time strictly necessary to process the requests and then cancelled, without prejudice to defensive needs (which could make further conservation necessary).

The navigation data is stored by the hosting provider without the company having control over the storage times.

As regards the data acquired through cookies and similar tools, please refer to what is indicated in the cookie information.

WHAT HAPPENS IF THE DATA ARE NOT PROVIDED?

With the exception of the navigation data necessary to implement IT and telematic protocols, the provision of data by users through the various methods made available is free and optional.

However, failure to provide the data will make it impossible to proceed with the requests forwarded or that the user intends to forward.

WHO CAN KNOW THE DATA?

The data will be processed by the Data Controller’s personnel authorized for processing.

The data may be known by the competent authorities in the event of specific requests which the owner is required, by law, to follow up on, by the IT companies that the owner uses for the hosting service and for system assistance and maintenance services used, by the Swiss Cocoon L&R Sarl which carries out activities connected to the site for the owner and by the consultants for the management of disputes and for legal assistance in the event of any disputes for which their involvement is necessary.

It should be noted that some of the subjects indicated operate as data processors and that the communication to those who operate as independent data controllers is carried out because prescribed by legal obligations or necessary to implement the obligations deriving from the contractual relationship or the legitimate interest of the data controller consisting in maintaining the security of IT systems and in carrying out defensive activities through legal advisors.

The interested party may request from the Data Controller the list of external subjects who carry out their activity as data controllers.

The communication is in any case limited to the categories of data whose transmission is necessary for the performance of the activities and purposes pursued.

WHAT ARE THE RIGHTS OF THE INTERESTED PARTY?

The law recognizes the interested party’s right to ask the data controller to access personal data and to rectify or cancel them or limit their processing or to oppose their processing, in addition to the right to data portability. .

The interested party may assert your rights at any time, without formalities, by contacting the data controller.

The rights recognized by current legislation on the protection of personal data are detailed below.

Right of access, i.e. the right to obtain confirmation from the data controller as to whether or not personal data concerning him is being processed and, in this case, to obtain access to personal data and the following information: a) the purposes of the processing; b) the categories of personal data in question; c) the recipients or categories of recipients to whom the personal data have been or will be communicated, in particular if recipients from third countries or international organizations; d) when possible, the envisaged retention period for personal data or, if this is not possible, the criteria used to determine this period; e) the existence of the right of the interested party to ask the data controller to rectify or cancel personal data or limit the processing of personal data concerning him or to oppose their treatment; f) the right to lodge a complaint with a supervisory authority; g) if the data are not collected from the interested party, all the information available on their origin; h) the existence of an automated decision-making process, including profiling and, at least in such cases, significant information on the logic used, as well as the importance and expected consequences of such processing for the data subject. If personal data is transferred to a third country or to an international organization, the interested party then has the right to be informed of the existence of adequate guarantees relating to the transfer.

Right of rectification, ossia il diritto di ottenere dal titolare del trattamento la rettifica dei dati personali inesatti che lo riguardano senza ingiustificato ritardo. Tenuto conto delle finalità del trattamento, l’interessato ha il diritto di ottenere l’integrazione dei dati personali incompleti, anche fornendo una dichiarazione integrativa.

Right to cancellation, i.e. the right to obtain from the data controller the cancellation of personal data concerning him without unjustified delay if: a) the personal data are no longer necessary with respect to the purposes for which they were collected or otherwise processed; b) the interested party revokes the consent on which the treatment is based and if there is no other legal basis for the treatment; c) the interested party opposes the treatment carried out because it is necessary for the execution of a task of public interest or connected to the exercise of public powers vested in the owner or for the pursuit of the legitimate interest and there is no overriding legitimate reason to proceed with the processing, or opposes the processing for direct marketing purposes; d) the personal data have been processed unlawfully; e) personal data must be canceled to fulfill a legal obligation established by Union or Member State law to which the data controller is subject; f) personal data have been collected in relation to the offer of information society services to minors. However, the cancellation request cannot be accepted if the processing is necessary: a) for the exercise of the right to freedom of expression and information; b) for the fulfillment of a legal obligation which requires the treatment envisaged by the law of the Union or of the Member State to which the data controller is subject or for the execution of a task carried out in the public interest or in the exercise of public powers with which the data controller is invested; c) for reasons of public interest in the field of public health; d) for archiving purposes in the public interest, for scientific or historical research or for statistical purposes, to the extent that deletion risks making impossible or seriously jeopardizing the achievement of the objectives of such processing; or e) for the assessment, exercise or defense of a right in court.

Right of limitation, i.e. the right to obtain that the data be processed, except for conservation, only with the consent of the interested party or for the assessment, exercise or defense of a right in court or to protect the rights of a other natural or legal person or for reasons of significant public interest of the Union or of a Member State if: a) the interested party disputes the accuracy of the personal data, for the period necessary for the data controller to verify the accuracy of such personal data; b) the processing is unlawful and the interested party opposes the cancellation of personal data and instead requests that their use be limited; c) although the data controller no longer needs it for processing purposes, personal data are necessary for the data subject to ascertain, exercise or defend a right in court; d) the interested party has opposed the processing carried out because it is necessary for the execution of a task of public interest or connected to the exercise of public powers vested in the holder or for the pursuit of the legitimate interest of the holder of the treatment or of third parties, pending verification of the possible prevalence of the legitimate reasons of the data controller with respect to those of the interested party. ?

Right to portability, i.e. the right to receive, in a structured format, commonly used and readable by an automatic device, the personal data concerning him provided to the owner and has the right to transmit such data to another owner without impediments by the owner to whom he has provided them, as well as the right to obtain the direct transmission of personal data from one holder to another, if technically feasible, if the treatment is based on consent or on a contract and the treatment is carried out by automated means. This right does not affect the right to cancellation.

Right of opposition, i.e. the right of the interested party to object at any time, for reasons connected to his particular situation, to the processing of personal data concerning him carried out because it is necessary for the execution of a task of public interest or connected to the exercise of public powers of to which the data controller is invested or for the pursuit of the legitimate interest of the data controller or of third parties. If personal data are processed for direct marketing purposes, the interested party has the right to object at any time to the processing of personal data concerning him carried out for these purposes, including profiling to the extent that it is connected to such direct marketing.

The interested party is then informed that, if he believes that the processing of his personal data takes place in violation of the provisions of the Regulation, he has the right to lodge a complaint with the Guarantor, as provided for by art. 77 of the RGPD itself or to take the appropriate judicial offices, as provided for by art. 79 of the Regulation.

 

FURTHER INFORMATION

With regard to the cookies and similar tools used by the site, please refer to the cookie information.

Interaction with live chat platforms

ClickDesk Widgets

Personal Data: Data communicated while using the service; Usage data; Tracking Tool

Zendesk Chat

Personal Data: Data communicated while using the service

Interaction with support and feedback platforms

Zendesk widgets

Personal Data: Usage data

Management of support and contact requests

zendesk

Personal Data: various types of Data as specified in the privacy policy of the service