This site collects some of your personal data, for that reason we ask you to read carefully this policy, which is based on article 13 of the General Data Protection Regulation (Reg. (EU) 2016/679 or simply “GDPR”).

1. Why, when and how we collect your personal data

Our main objective is to provide excellent service in the transport of passengers, hazardous and non-hazardous waste. Below we list the main purposes for which your data are processed. By clicking on each of them you can find out which categories of data have been collected and how we use this data in each case.

a. Provide information regarding your requests concerning our services (with website email)

We need to know your name, contact details and the content of the request. Without this information, we are unable to provide the service offered on this site. We will use this information to process your requests. This processing is carried out for the execution of pre-contractual measures taken at the request of the data subject (Article 6.1(b) GDPR).
In addition, and only where explicit and specific consent is given, we will use your contact details to send you newsletters and marketing communications via email or SMS about our products and services that may be of interest to you. This processing is based on the consent of the data subject, pursuant to Art. 6.1 (a) GDPR, and you can withdraw your consent at any time by sending us an email via the contact email address provided in section 1 of this notice.

b. Completion and management of the reservation service for passenger, hazardous and non-hazardous waste transport and subscription issue.

To use our services, you must provide your name, contact details, date of birth and nationality at the time of booking or requesting a subscription. We also record some information about your service choices, for example data of the vehicle, the company for which you transport, copy FIR, copy ADR documentation, copy SDS safety data sheet, contract of carriage, Authorisation for the transport of waste and type of transport required. We process this data on the basis of our contractual relationship with you (Article 6.1(b) GDPR).
Information on valid transport documents and authorisations shall also be provided, where applicable. We process this information to comply with regulatory requirements, therefore on the basis of an existing legal obligation (Article 6.1(c) GDPR). You are not required to provide this data, however, if you do not provide it, we will not be able to meet your specific needs.
When you make a booking through a service agency, that agency will enter the above data into our reservation systems, acting as independent data controller. The service agency will be responsible for the processing it carries out on your personal data and for the adoption of appropriate data protection measures. Please contact your local agency for more information on how they process personal data.

c. Sending you personalised newsletters and communications based on your preferences

When you send us a message using the “Contact us” page and express your wish to receive personalized information about our products and services by clicking on the consent box, we will contact you via e-email, SMS or WhatsApp to let you know about our latest offers and services that we believe may be of interest to you. Also, where you have given your consent, we will contact you to promote products and services offered by our company. You can give your informed and specific consent to receive personalized information from us when you sign up for our newsletter, or when you request a brochure or call from us. In all of the above, you are not required to consent to receive personalized messages and offers from us, but without your consent we will not be able to send you personalized offers.
Since the processing of data for the above purposes is based on the specific consent of the data subject (article 6.1 (a) GDPR), you can revoke this consent at any time by clicking on the link “unsubscribe” at the bottom of an e-mailmarketing emails received from us, or using the contact email address provided in section 1 of this policy.

d. Sending information about products and services similar to those already booked

When you provide us with your e-mail in the context of a booking for a waste transport service, we will send you information about products or services similar to or related to those you have booked, unless you exercise your right to no longer receive marketing communications from us at the time of booking. For example, we will send you information about transport offers or additional services related to the service you have booked. If you do not wish to receive this type of information, simply select the opt-out box at the time of booking or click on the “unsubscribe” link in each of the emails we have sent.

This data processing is carried out on the basis of our legitimate interests in informing you about similar or related products and services that we offer and which could improve your experience (Article 6.1(f) GDPR). You can obtain, upon request, information regarding the evaluations carried out, using the contact e-mail address provided in section 1 of this notice.

e. Handling of questions, complaints and comments

We keep track of comments and complaints submitted to respond appropriately to your requests. We process this data in connection with our service provision, therefore on the basis of the reservation contract (Article 6.1(b) GDPR). You may submit a complaint or anonymous comment, but please note that we will be unable to follow up on the complaint or provide assistance and support.

We may also use the content of your request, complaint or comment to improve our services. In this case, we limit as much as possible the use of data that could identify you personally. This processing is carried out on the basis of our legitimate interests in developing services in such a way as to ensure that our customers have a pleasant experience (Article 6.1(f) GDPR). You can obtain, upon request, information regarding the evaluations carried out, using the contact e-mail address provided in section 1 of this notice.

f. Ensuring safety

We keep track of the people who use our services to manage any crisis situations and ensure the safety of all during transport. Therefore, we record your name, transport details, date of birth, the people you travel with and any information about special needs that may require specific assistance in case of emergency. For security reasons, we use cameras at our access points and common areas. These cameras record 24 hours a day. We may check your personal data using publicly available databases to ensure security. We process this data based on the need to ensure public safety and manage potential crisis situations (Article 6.1(d) GDPR).

For security reasons, we use cameras at our access points and common areas. These cameras record 24 hours a day. For this processing, the data controller is Società Navigazione Arcipelago Ponzano S.r.l.

2. How long we keep the data

Pursuant to Article 5.1 (e) GDPR, personal data is stored in a form that allows the identification of the data subjects for a period not exceeding that necessary to achieve the purposes for which the data were collected or for which they are subsequently processed, and, in any case, for a period not exceeding that specified by the applicable laws on the matter.
We have defined a Company Data Retention Policy that specifies the period for processing data, at the end of which all copies of personal data are destroyed or anonymised using appropriate techniques that do not allow the subsequent identification of the person concerned.

3. Categories of data recipients and transfer of personal data

Sharing of data with public bodies and port authorities

As a transport operator, we need to share some information about our customers with local agents and port authorities for immigration and security purposes. Sharing data with these agents and authorities may trigger the transfer of data outside the EU/EEA if such entities are located abroad, outside the EU/EEA. These data are shared and transferred on the basis of the legal obligation for Società Navigazione Arcipelago Ponzano S.r.l. to provide information to the competent authorities, to which only the strictly necessary data is communicated. We are required to cooperate with state and law enforcement authorities in each country, including customs and immigration. Personal information about you may be shared with such entities prior to boarding, during transport or after disembarkation for security or immigration reasons. Our immigration officers can clarify any doubts about the data processing activities.

4. Rights of the data subject
   
   

The GDPR provides for a strengthening of rights and Società Navigazione Arcipelago Ponzano S.r.l. is committed to provide adequate control over your personal data.

In particular, the following rights are granted in relation to personal data:

1. Right to access

The right to access your personal data and obtain specific information about how we process it, in accordance with Article 15 of the GDPR. You should be aware that you can only exercise this right in relation to your own data or the data of a child or other vulnerable person, where such data has been provided as the holder of parental responsibility or legal responsibility. Società Navigazione Arcipelago Ponzano S.r.l. reserves the right to request proof of identity, as well as to refuse to provide personal data if the identity or its link with the interested party cannot be proven.

1. Right to rectification
   
   

The right to rectification of your personal data, in accordance with article 16 of the GDPR, including by submitting a supplementary statement.

1. Right of cancellation

The right to obtain the deletion of personal data concerning you, in accordance with article 17 of the GDPR, unless the data is not necessary for the exercise of the right to freedom of expression and information; to comply with a legal obligation requiring processing by the law of the Union or the Member State to which Società Navigazione Arcipelago Ponzano S.r.l. is subject or for the execution of a task carried out in the public interest or in the exercise of public authority To the Data Controller; for reasons of public interest in the field of public health pursuant to Article 9.2(h) and (i) and Article 9.3 GDPR; or for the establishment, exercise or defence of legal claims.

1. Right to restrict processing
   
   The right to restrict the processing of personal data. Pursuant to Article 18 of the GDPR, this right can be exercised in the following cases:
   
   

• Temporary restriction, where the accuracy of personal data is contested; in this case, we will limit the processing of your data for a period that allows us to verify the accuracy of such data and provide feedback on the revocation of the restriction.
•  The processing is unlawful and the data subject opposes the deletion of personal data, requesting instead that its use be limited.
• Although Società Navigazione Arcipelago Ponzano S.r.l. no longer needs it for processing purposes, the personal data are necessary to the interested party for the establishment, exercise or defense of a right in court.
• In the case where the data subject has opposed the processing pursuant to Article 21, paragraph 1, the processing shall be limited pending verification of whether the legitimate reasons of the Controller prevail over those of the data subject.
  
  

1. Right to data portability
   
   

In accordance with Article 20 of the GDPR, You can exercise this right in cases where the processing is based on the consent of the data subject or on the contractual relationship with Società Navigazione Arcipelago Ponzano S.r.l. and the processing is carried out by automated means.

1. Right of opposition
   
   

The right to object, at any time, to the processing of your personal data. Pursuant to Article 21 of the GDPR, you may exercise this right when the processing is based on the performance of a task carried out in the public interest or in the exercise of an official authority conferred on us, or where the processing is based on our legitimate interests.

1. The data subject has the right not to be subjected to a decision based solely on automated processing, including profiling, which produces legal effects affecting him or which similarly significantly affects his person. In accordance with article 22 of the GDPR, the data subject may exercise this right unless the processing is necessary to conclude or execute a contract between the data subject and Snap s.r.l.; or is authorised by the legislation of the Union or the Member State to which we are subject and which also lays down appropriate measures to safeguard the rights and freedoms of the data subject and legitimate interests; or if the processing is based on the data subject’s explicit consent.
2. If the data subject believes that the processing of his data violates the GDPR (pursuant to Article 77), he has the right to lodge a complaint with a supervisory authority, in particular in the Member State where he or she is habitually resident, the place where the alleged breach occurred. The list of all European data protection supervisory authorities can be found at: http://ec.europa.eu/justice/article-29/structure/data-protection-authorities/index_en.htm.
   
   

To exercise the above rights, you can send requests by e-mail to the following addressaministrazione@snapnavigazione.it

5. Changes to this privacy policy
   
   

We reserve the right to update, modify, add or delete parts of this policy at any time. If so, we will post the updated policy on this page and update the “Last Updated” date below. A banner will be displayed on the website to highlight that changes have been made. Each version of the policy is effective from the moment it is published on the website.

Significant changes to the processing of personal data will require your consent, in accordance with applicable legislation. It will be your responsibility to ensure that you are aware of the current version. If you would like to obtain an earlier version of the notice, please contact us using our contact details provided in section 1 of this notice.

6. Cookies
   
   

Cookies are small text files sent by websites to users’ browsers for the purpose of automatic authentication, session tracking and storage of specific information about users. The cookies used on this website are essentially of three types: 

Technical cookies

Necessary for navigation within the site and use of some of its functions (e.g. timing of the display of certain pages in “pop-up” mode, etc.).

Statistical Cookies (Google Analytics)

Provided and managed by Google to statistically analyze the accesses to the site. The collection of information is only anonymous and aggregated and no personal data of users are kept. You can decide not to use Google Analytics cookies by following the information provided at the following link: Deactivation of Google Analytics.

Profiling cookies

Provided and managed by third parties to generate specific advertising messages based on users’ browsing habits and interests. These cookies do not, however, use sensitive user data. This site uses cookies from Google DoubleClick. For more information, and to disable this cookie, follow the information provided at the following link: Google DoubleClick Deactivation.

The cookies functionality can be deactivated through the dedicated page made available by EDAA (European Interactive Digital Advertising Alliance) Your Online Choices, or by adjusting the privacy settings of your browser. Without prejudice to the foregoing, it is necessary to bear in mind that the deactivation of cookies may affect the proper functioning of certain sections of the Site.

7. Contact us
   
   

Società Navigazione Arcipelago Ponzano S.r.l. is committed to ensuring that the privacy of the data subject is respected at all times and that the processing of personal data carried out complies with applicable data protection legislation. If you have any questions or concerns about the processing of your data by us, please contact us using the contact details provided in the contact section of the website snapnavigazione.it.