Privacy Policy

Privacy notice pursuant to Article 13 of EU Regulation 2016/679 for Levante Mare Charter S.r.l. programs

For users of the website LEVANTEYACHTS.COM

We take data protection very seriously, which is why we wish to inform you about how your data is processed and the rights you can exercise under the relevant data protection regulations, specifically EU Regulation 2016/679 (hereinafter also referred to as the “GDPR”).

Data Controller and Data Protection Officer (DPO)
Levante Mare Charter S.r.l.
Via Montegrappa, 24
63822 Porto San Giorgio (FM) – Italy
info@levanteyachts.com

Data Protection Officer (DPO)
Levante Mare Charter S.r.l.

2. The categories of data that are subject to processing

The data processed by the Controller are exclusively “personal data” (as defined in Art. 4.1 of the GDPR).
In particular, the categories of relevant personal data may include, by way of example but not limited to:

  • Personal and Identification Data (name, date of birth, place of birth, nationality, tax code, VAT number, occupation/profession, etc.).
  • Contact details (address, email address, phone number, and similar information).
  • Data related to services provided by Levante Mare Charter S.r.l. and used by the user or candidate, with particular reference to services, applications, newsletter subscriptions, event participation, information requests, discounts, and other benefits offered by Levante Mare Charter S.r.l. and other non-sensitive data.
  • Data related to navigation on the Levanteyachts website, the LevanteYachts App, and any other digital communication channels, including links to cookies accepted within the displayed content.
  • Data related to interactions in their various forms (such as online purchases, email interactions, app notifications).

3. Lawfulness and purposes of the processing.

3.1 Purposes related to the fulfillment of a legal obligation (Article 6, paragraph 1 (c) of the GDPR).

a. Fulfillment of obligations established by laws, regulations, and EU legislation, or by provisions issued by authorities or supervisory and control bodies in relation to or connected with the existing and/or future legal relationship. The retention period for personal data, for the purposes of this section, is: For purpose: a, 10 years, from the end of the contractual or commercial relationship, in case of any bookings or service provision. These periods may be extended in the event of legal disputes or legal provisions.

3.2 Purposes related to the execution of a contract or pre-contractual measures (Article 6, section 1 (b) of the GDPR).

a. Execution of pre-contractual activities, including the first contact;
b. Fulfillment of contractual obligations and legal agreements, particularly the finalized agreement or signed contract (for example, provision of a service following the signing of a rental contract, sending of promotional material, etc.), including:
management of newsletter subscriptions the user subscribes to,
operational management of activities necessary to enable users to enjoy and recognize offers, services, and other details related to their respective loyalty program;
c. Management of administrative, accounting, fiscal, and financial processes related to the provision of the service offered;
d. Protection of contractual rights or any rights arising from the relationships between the parties.
The retention period for personal data, for the purposes of this section, is:
For purpose: a, until the end of the pre-contractual activity;
For purposes: b, c, d, 10 years from the end of the contractual or commercial relationship in the case of service provision, except for data related to the newsletter subscription, which will be deleted within a period no longer than a quarter after the deactivation or cancellation of the profile.
These periods may be extended in the event of legal disputes or special contractual provisions.

3.3 Purposes for the pursuit of a legitimate interest (Article 6 (1f) of the GDPR).

Please note that the data provided may be processed for the protection of the controller’s legitimate interests, and in particular for:
a) Intra-group reporting for statistical purposes and internal controls;
b) Management of any disputes not related to the protection of contractual rights;
c) Conducting advertising or promotional activities in the broadest sense of the term (e.g., sending newsletters and promotional material, requesting participation in surveys or polls, etc.), via email, for the sale of products or services similar to those purchased by the data subject.
The retention period for personal data, for the purposes of this section, is:
For purpose: a, until the end of the service subscription to which the data subject subscribes;
For purpose: b, 10 years from the end of the contractual or commercial relationship, except for data related to the internet profile, which will be deleted within a period no longer than a quarter after the deactivation or cancellation of the profile, unless such data are relevant to any ongoing or potential disputes;
For purpose: c, until the termination of the established legal relationship or up to 24 months from the last purchase made, unless the data subject objects.

3.4 Purposes covered by the consent of the data subject (Article 6, paragraph 1 (a) of the GDPR).

The purposes may require the explicit consent of the data subject. The purpose requiring consent is:
a) Conducting advertising or promotional activities, in the broadest sense of the term (e.g., sending newsletters and informational material, requesting brochures, organizing events, etc.) and other marketing activities, through telephone contacts (with or without an operator), email, regular mail, and SMS;
b) Conducting profiling activities, such as analyzing users’ consumption habits or choices, mainly using data entered by the user on the website www.levanteyachts.com, data related to the user’s participation in seminars and/or events, data related to their participation in surveys, questionnaires, and generally in market research, as well as data related to purchases and services used, and other behaviors and data that the Controller may become aware of in any way, including any data resulting from web browsing analysis or analysis of cookies installed through the site.
The retention period for personal data, for the purposes of this section, is:
For purpose: a, b, 24 months from the granting of consent, unless revoked.
The data subject may revoke their consent at any time. Please consider the general principle that the revocation of consent only affects the future. Any data processing that occurred prior to the revocation will not be affected and will remain lawful.

4. Recipients or categories of recipients of personal data (Article 13, paragraph 1 (e) of the GDPR).

The Data Controller may disclose your data to:

  • Internal offices and functions of the Data Controller, for all the purposes mentioned above;
  • Certain service companies, for purposes related to the execution of established contracts (which provide: management of technological infrastructure and IT services; support for consulting services to the user; support for the delivery of other services to the user, particularly with regard to sales);
  • Service providers, such as companies providing IT services, including hosting services, for purposes related to the execution of established contracts;
  • Companies providing strategic consulting aimed at improving brand positioning, as well as creating targets to send commercial communications to: these companies acquire identifying data (indicating only the registration number and excluding the first and last name), demographic data, purchase data, and other non-sensitive data collected within the loyalty program, related to the data subjects, before proceeding with the aggregation of these data; the services provided by these suppliers do not constitute direct marketing and/or profiling activities, but are merely instrumental activities to pursue the aforementioned purpose of analyzing consumption habits or choices (as described in section 3.4, letter b);
  • Any public administrations and public authorities, if requested by them within the scope of their institutional activities, for the fulfillment of legal obligations;
  • Shipowner companies for users who provide data for the purpose of applying as crew members hired aboard yachts we represent and others.

The complete and updated list of Data Controllers, Data Processors, Recipients (Article 4.9 of the GDPR), both within the EU and outside the EU, is available at the offices of the Data Controller.

5. Recipients or categories of recipients of personal data (Article 13, paragraph 1 (f) of the GDPR) and data transfer to non-EU countries.

The Data Controller informs you that it has no intention of transferring your data to countries outside the EU and EEA for the purposes mentioned above.

6. Rights of the Data Subject (Article 13, paragraph 2 (b) of the GDPR).

The data subject may exercise the following rights:

  • Right of access by the data subject [Article 15 of the EU Regulation] (the right to be informed about the processing of their personal data and, if applicable, to receive a copy);
  • Right to rectification of personal data [Article 16 of the EU Regulation] (the data subject has the right to rectify inaccurate personal data concerning them);
  • Right to erasure of personal data without undue delay (“right to be forgotten”) [Article 17 of the EU Regulation] (the data subject has, as well as will have, the right to have their data erased);
  • Right to restriction of processing of personal data in the cases provided by Article 18 of the EU Regulation, including in the case of unlawful processing or the data subject contesting the accuracy of the personal data [Article 18 of the EU Regulation];
  • Right to data portability [Article 20 of the EU Regulation], the data subject may request their personal data in a structured format in order to transmit them to another controller, in the cases provided by the same article;
  • Right to object to the processing of personal data [Article 21 of the EU Regulation] (the data subject has, as well as will have, the right to object to the processing of their personal data);
  • Right not to be subject to automated decision-making processes [Article 22 of the EU Regulation] (the data subject has, as well as will have, the right not to be subject to a decision based solely on automated processing).

Further information regarding the rights of the data subject can be obtained by requesting the full extract of the above-mentioned articles from the Data Controller. Regarding the purposes for which consent is required, the data subject may withdraw their consent at any time, and the effects will take place from the moment of the withdrawal, without prejudice to the terms provided by law. In general terms, the withdrawal of consent only takes effect for the future. The above-mentioned rights can be exercised in accordance with the Regulation by also sending an email to the following address: info@levanteyachts.com. In accordance with Article 19 of the EU Regulation, the Data Controller will inform the recipients to whom the personal data has been disclosed about any rectifications, deletions, or restrictions of processing requested, where this is possible. To allow a quicker response to your requests made in the exercise of the above-mentioned rights, these may be addressed to the Data Controller by directing them to the contact details indicated in section 1.

7. Right to lodge a complaint (Article 13 paragraph 2 (d) of the GDPR)

The data subject, if they believe their rights have been compromised, has the right to lodge a complaint with the Data Protection Authority, following the procedures indicated by the same Authority at the following web address: https://www.garanteprivacy.it/web/guest/home/docweb/-/docweb-display/docweb/4535524, or by sending a written communication to the Data Protection Authority, Piazza Montecitorio n.121, 00186 Rome.

The possible consequence of the failure to communicate data, the nature of the data provision (Article 13, paragraph 2 (e) of the GDPR).

8.1 In case of fulfillment of legal or contractual obligations.

It is informed that if the purposes of processing are based on a legal or contractual obligation (or even pre-contractual), the data subject must necessarily provide the requested data. Otherwise, the Data Controller will be unable to proceed with the pursuit of the specific processing purposes.

8.2 In case of pursuing legitimate interest.

Similarly, regarding purposes based on a legitimate interest that do not require consent, the data subject’s objection will result in or will result in the inability to proceed with the realization of the respective purposes and any related services to which the data subject has objected, unless there are overriding legitimate reasons or reasons aimed at the protection of rights in judicial proceedings.

8.3 In case of the data subject’s consent.

For other purposes for which consent is required, the data subject can withdraw their consent at any time, and the effects will take place from the moment of revocation, subject to the terms provided by law. In general terms, the revocation of consent only has an effect for the future. Therefore, any processing carried out before the revocation of consent will not be affected and will retain its legitimacy.
Failure to provide full or partial consent may not ensure the complete execution of the data controller’s activities, limited to those connected to the specific purposes for which consent is denied, but will not prevent the fulfillment of contractual obligations.
When the data is no longer necessary for the purposes outlined above, it will be regularly deleted. If deletion is impossible or only possible with disproportionate effort due to a particular storage method, the data will not be processed and must be archived in areas that are not accessible.

Existence of automated decision-making processes (including profiling)

The use of purely automated decision-making processes, as detailed in Article 22 of the GDPR, is currently excluded. If in the future such processes are established for specific cases, the data subject will be notified separately if required by law or through an update of this privacy notice.

10. Methods of processing

Personal data will be processed in paper, computerized, and telematic form and entered into the relevant databases (customers, users, etc.), which can be accessed and thus made known to the employees expressly designated by the Data Controller as Data Processing Managers and Authorized persons. They will be able to carry out operations such as consultation, use, processing, comparison, and any other appropriate operation, including automated ones, in compliance with legal provisions necessary to ensure, among other things, confidentiality, data security, and the accuracy, update, and relevance of the data in relation to the declared purposes.

CONSENT UNDER ARTICLE 7 OF REGULATION (EU) 2016/679

In accordance with Article 7 of EU Regulation, the undersigned declares that they have fully understood the information provided by Levante Mare Charter Srl, as the Data Controller, and:
Regarding section 3.4 letter a: “the performance of advertising or informational activities, in the broadest sense of the term (e.g., sending newsletters and informational materials, requesting brochures, organizing events, etc.) and other marketing activities, through telephone contacts (with or without an operator), e-mail, regular mail, and SMS;
Regarding section 3.4 letter b: “the performance of profiling activities, such as the analysis of habits, mainly using the data entered by the user during browsing on the site www.levanteyachts.com, the data related to the user’s application in the “Crew” section, the data related to their participation in surveys, questionnaires, and general market research conducted, as well as the data related to purchases and services used, and other behaviors and data that the Data Controller may know in any way, including any data derived from the possible analysis of web browsing or the analysis of any cookies installed through the website”;
The Data Controller, while respecting the full freedom of the Data Subject and their rights to provide free consent, informs them that, regarding the purposes mentioned in points 3.4 letters a) and b), even partial consent may not guarantee the achievement of the specific purpose for which consent is partially denied.
PRIVACY NOTICE UNDER ARTICLE 13 OF EU REGULATION 2016/679 Effective from 01/01/2025.