You will find the basic information about how we process your personal information here.
The registered offices of Nabys S.r.l are at via Palmiro Togliatti n. 9, 50058 Signa (FI). Further information is available on the www.nabys.it website (that we will refer to as the “Website” throughout this document).
What you are reading
The purpose of this document (“Statement”) is to give you adequate information so you can understand how we process your personal information when you browse through our Website. You will get all the information you need so you can express your explicit and informed authorisation for the processing of your personal information while you browse and use this Website, should you deem this appropriate.
Nabys S.r.l has made a daily commitment to protect the online privacy of those visiting its Website, based on what we consider the priciples to be respected.
Generally speaking, any data or personal information that you share with Nabys S.r.l via the website, or that is collected in any way via the Website, for the use of the services we offer (the “Services”), as described in Paragraph 3 below, will be processed according to the internationally acknowledged principles of lawfulness, correctness, transparency, limitation of purpose and retention, minimisation of data, accuracy, integrity and confidentiality.
The Data Controller and the Data Protection Officer 1
Which personal information is subject to processing 2
Name, contact details and other Personal Information 2.1
Special categories of personal information 2.3
Data provided voluntarily by the user 2.4
Browsing data 2.5
Purpose of processing 3
Legal basis and the obligatory or voluntary nature of data processing 4
Recipients of your personal information 5
Transfer of personal information 6
Retention of personal information 7
Data Subject Rights 8
1. The Data Controller and the Data Protection Officer
As identified at the beginning of this statement, Nabys S.r.l is the Data Controller with regard to all personal information that is processed via the Website.
You can contact the Data Protection Officer (“DPO”) at Nabys S.r.l at the following address:
2 Which personal information is subject to processing
After you browse the Website, Nabys S.r.l will process information about you that may consist – also depending on how you decide to use the Services – of an identifier such as your name, an identity number, an online identifier or one or more elements that refer to your physical, physiological, psychological, financial, cultural or social identity so as to identify you or make you identifiable (simply called “Personal Information” in this document).
Your personal information may be collected because you provided it voluntarily (if you sign up for our Newsletter, for example) or by simply analysing your actions on the Website.
The following personal information is processed via the Website:
2.1 Name, contact details and other Personal Information
In various sections of the Website you will be asked to enter information such as your name, email address, your country of residence, and home address, etc.
Furthermore, every time you take part in a survey or a promotion through the Website, or when you contact Nabys S.r.l or its Customer Care team via the contact details on the Website, Nabys S.r.l may collect any additional information you decide to provide.
2.2 Special categories of personal information
Some sections of the Website include open fields where you can send information to Nabys S.r.l that may contain personal information.
Since these fields are open, you can use them to share (on a voluntary basis, or otherwise) certain sensitive categories of personal information, such as information revealing your race or ethnic group, political opinions, religion or philosophical beliefs, trade union membership, genetic information, or biometric data, that may unequivocally identify an individual, data relating to your health or sex life, or the sexual orientation of a person.
Nabys S.r.l suggests you do not send such personal information unless it is strictly necessary. Since entering such information is entirely optional, please remember that these special categories of personal information will only be processed with your explicit authorisation and in respect of current legislation pro tempore. Nabys S.r.l therefore stresses the importance of expressing your explicit authorisation for the processing of special categories of personal information, should you decide to share such information.
2.3 Providing third party data
As mentioned above, there are parts of the Website where you can enter text messages that are visible to Nabys S.r.l, which may contain (voluntarily or otherwise) personal information referring to another person.
As regards this possibility, you become an independent data processing controller and as such accept all obligations and legal liability. In this way, you confer complete indemnity relating to any disputes, demand, request for compensation for damages resulting from the processing of data etc. that was shared with Nabys S.r.l by the third party whose personal information was processed as a result of you using the functions of the Website in breach of applicable regulations for the protection of personal information.
Should you share or process the personal information of a third party in any other way when using the Website, you guarantee herewith – and accept all associated liability – that such potential data processing has the authorisation of the third party in question or has another legal basis that allows the processing of the information in question.
2.4 Browsing data
During the course of their operation, the IT systems and software procedures used for the proper functioning of this Website acquire certain personal information, whose transmission is required for using Internet communication protocols. This information is not collected by Nabys S.r.l in order to be associated with identified persons. However, given its very nature, users can potentially be identified should it be processed and associated with other data held by third parties.
IP addresses or domain names of the computers used by the users connected to the Website, addresses of requested resources in URI notation (Uniform Resource Identifier), the time of the request, the method used for submitting the request to the server, the dimension of the file obtained in response, the numerical code indicating the status of the reply given by the server (successful, error, etc.) and other parameters relating to the operating system and to the user’s IT environment, fall under this category of data.
This data is used exclusively to obtain anonymous statistics with regard to the use of the Website and to check it is operating correctly, in order to identify any anomalies and/or abuse. Except for cases where information is used to ascertain responsibility in case of potential computer crimes against the Website or third parties, such information is not retained for more than seven days.
3. Purpose of processing
Nabys S.r.l will use your personal information collected via the Website for the following purposes:
to control your identity; send you the newsletter if you signed up for this service; send you any information you explicitly requested; locate the dealer closest to you, and provide any other service you may require (“Providing the Service”);
to send you communications and/or commercial offers and/or and any informative material regarding our brands and models; invite you to events (public or private), fairs and/or boat shows, send you promotional communications, market research and surveys related to products and services offered by Nabys S.r.l or send you our house organ. Depending on the type of communication, we can contact you by email and/or telephone and/or messaging services and/or ordinary mail and/or social networks (“Marketing”);
to create your profile through the use of profiling cookies, subject to your authorisation, collecting and analysing information about the selections and choices you make on the Website and about how you use the Website in general. This profile will be used to send you information about other sites and /or services that Nabys S.r.l thinks might be of interest to you, and to show you advertising that may match your preferences. All the algorithms involved in this process are tested on a regular basis to guarantee a proper process is used and in order to prevent errors (“Preferences”);
to comply with legal obligations whereby Nabys S.r.l must collect and/or process certain types of personal information (“Compliance”);
to prevent or identify any abusive use of the Website or any fraudulent activity (“Abuse/Fraud”).
4. Legal basis and the obligatory or voluntary nature of data processing
The legal basis used by Nabys S.r.l for processing your personal information, as per the purposes indicated in Paragraph 3 above, is as follows:
Providing the Service: processing for this purpose is necessary in order to provide you with the Services and so in order to execute the contract stipulated with you. It is not obligatory to give Nabys S.r.l your personal information for this purpose but it will not be possible to deliver any service if you refuse.
Marketing: the data processing for this purpose is based on your consent. It is not mandatory to give your consent for this purpose but, in the absence of your consent, we will not be able to send you any type of communication, included commercial communication related to one of our products nor invite you to events and/or boat shows. If you give your consent you will still be free to revoke it at any time by following the instructions in Paragraph 8 of this Policy.
Preferences: data processing for this purpose requires your authorisation expressed via the cookie banner and/or a specific checkbox. You are under no obligation to authorise Nabys S.r.l for this purpose and are free to withdraw your authorisation at any time without suffering any consequence (except you will no longer be able to benefit from the customisation of commercial offers from Nabys S.r.l). You can withdraw your authorisation given previously by following the instructions in Paragraph 8 in this Statement.
Compliance: data processing for this purpose is necessary so that Nabys S.r.l can comply with any legal obligations. When you give your personal information to Nabys S.r.l, it is processed according to applicable regulations, which could require their retention and notification to the Authorities to comply with accounting, fiscal or other obligations.
Abuse/Fraud: the information collected for this purpose will be used exclusively to prevent and/or identify any fraudulent activity or abuse in the use of the Website (leading to criminal charges).
5. Recipients of your personal information
Your personal information may be shared with the persons indicated below (“Recipients”):
Anyone typically acting as the data processor, such as: i) persons, companies or professionals providing assistance and consulting services to Nabys S.r.l for accounting, administration, legal, taxation, financial and debt collection associated with the delivery of the Services;
Anyone with whom interaction is necessary in order to provide the Services (such as hosting providers or suppliers of platforms for sending mail);
Anyone authorised to handle technical maintenance (including maintenance of networking equipment and electronic communications networks);
Persons authorised by Nabys S.r.l to process personal information as required for actions closely linked to the provision of the Services, whether they are under the obligation of confidentiality or have a suitable legal obligation of confidentiality (e.g. employees of Nabys S.r.l);
Nabys S.r. companies for the purpose of internal administration, including the processing of Personal information of customers and employees;
Subjects, agencies or authorities to whom it is obligatory to notify your personal information for the purpose of Compliance, Abuse or Fraud prevention, or by order of the authorities.
6. Transfer of personal information
In light of the international scope of Nabys S.r.l, some of your personal information may be shared with Recipients who may be located outside the European Economic Area. Nabys S.r.l takes precautions that the processing of your personal information by these Recipients will comply with applicable regulations. In fact, the transfer of data is executed using appropriate guarantees, such as decisions of appropriateness, Standard Contractual Clauses approved by the European Commission, or other guarantees considered adequate. More details are available by writing to Nabys S.r.l at the following address: email@example.com.
7. Retention of Personal Information
Personal information processed for the purpose of Providing the Services will be retained by Nabys S.r.l for the time strictly necessary to achieve this purpose. However, since your personal information was processed in order to supply the Services to you, Nabys S.r.l may retain them for a longer period, especially if necessary for protecting the interests of Nabys S.r.l against potential liability in relation to the Services.
Personal information processed for the purposes of Marketing and Preferences will be retained by Nabys S.r.l until you withdraw the authorisation you gave earlier and regularly renewed. After you have withdrawn your authorisation, Nabys S.r.l will no longer use your personal information for these purposes, but may retain it, especially if this is necessary to protect the interests of Nabys S.r.l against potential liability based on said processing.
Personal information processed for the purpose of Compliance will be retained by Nabys S.r.l for the period stipulated in the specific legal obligations or in the applicable regulations.
Personal information processed for the purpose of preventing Abuse/Fraud will be retained by Nabys S.r.l for the period strictly necessary for said purpose and thus until the moment when Nabys S.r.l is required to retain them to protect itself legally for notification to the competent Authorities of said information.
8. Data Subject Rights
You have the right to ask Nabys S.r.l, at any time:
To gain access to your personal information (and/or a copy of said personal information) as well as additional information about any ongoing processing of them;
To have your personal information, processed by Nabys S.r.l, corrected or updated, should it be incomplete or be out of date;
To have your personal information deleted from the database of Nabys S.r.l, should you consider the processing to be unnecessary or unlawful;
To limit the processing of your personal information by Nabys S.r.l, should you consider your personal information to be incorrect, unnecessary, or processed unlawfully, or should you have refused processing;
To exercise your right to data portability, meaning obtaining a copy of the personal information supplied to Nabys S.r.l about you, in a structured format, commonly used and that can be read by an automatic device, or to ask for it to be sent to another Data Controller;
To refuse the processing of your personal information, using a legal premise related to your personal situation that you consider should prevent Nabys S.r.l from processing your personal information; or
To withdraw your authorisation for Marketing and Preferences purposes.
The majority of personal information supplied to Nabys S.r.l can be amended at any time, including your email preferences via mail: firstname.lastname@example.org.
When you sign up for the Services, you may have selected the channels of communication through which you want to be contacted for Marketing purposes (such as fax, phone, sms, email, post, or social media).
You can withdraw authorisation for Marketing sent by email using the link provided at the bottom of each email you receive. The same method can be used to stop receiving the Nabys S.r.l newsletter, if you signed up for this service.
You can withdraw your authorisation for Profiling via cookies by following the instructions in Paragraph 2.f .
In addition to the above, you can exercise your rights by writing to Nabys S.r.l at the following address: email@example.com.
You will always have the right to submit a complaint to the pertinent Controlling Authority should you consider your personal information was processed in breach of current regulations.
This statement has been valid since 25/5/2018. Nabys S.r.l may modify or simply update all or part of its content, also on account of amendments to the applicable regulations. Nabys S.r.l will notify you of any such amendments as soon as they are introduced and they will be binding as soon as they are published on the Website. Nabys S.r.l therefore suggests visiting this section on a regular basis in order to become familiar with the most recent and updated version of the statement so that you remain up to date with regard to the personal information collected and how it is used by Nabys S.r.l.