INFORMATION ON THE PROCESSING OF PERSONAL DATA FOR THE ISSUE OF THE SECOND HOME OWNER CARD

BN DI NAVIGAZIONE S.P.A.
with registered office in CALATA ITALIA 24/A – 57037 – PORTOFERRAIO (LI) – P.I.: 01968710994 PEC: [email protected] – E-MAIL : [email protected]
TEL.:+390565.269752-FAX:+390565.919894 (hereinafter, the “Company”or “the Data Controller”) informs that it is the Data Controller of your personal data.

The Data Controller may process the following types of personal data:

–  personal and contact details (name, date and place of birth; tax code; headquarters, place of residence, residence and / or domicile; telephone number, vehicle registration plate, email address);
–  data contained in the cadastral survey relating to your property;
–  copy of the front and back of your identity document;
–  card number and card code.

The personal data, referred to above, will be processed, also by means of computer systems, for the following purposes:

a) for the verification of the existence of the contractually required requirements to be able to issue the “Second Home Owner Card” and, in particular, the ownership on the territory of the Island of Elba of a second home in the hands of the applicant;
b) for the issuance of the “Second Home Owner Card”, and the code associated with it, necessary to proceed with the booking of trips at discounted rates at the Company’s ticket offices or through the online ticketing system;
c) for service communications relating to the “Second home owner card”;
d) the copy of your identity document, uploaded to the Holder’s system, will be viewable, via tablet, by the ground staff during boarding, in order to verify that you are actually the passenger who presents himself for boarding with a facilitated ticket associated with his “Second home owner card”;
e) for reporting any abuse in the use of the “Second Home Owner Card”;
f) for the application of the penalties provided for in the contract in case of illicit use of the “Second Home Owner Card”;
g) for purposes related to obligations established by law;
h) for sending commercial communications relating to the facilities and ancillary services related to the “Second Home Owner Card”.

The processing of your personal data for the purposes referred to in letters a), b), and c), referred to in the previous point, has as its legal basis the execution of the contract.
The processing of your personal data for the purposes referred to in letters d), e), and f), referred to in the previous point, has as its legal basis the legitimate interest of the owner to prevent illicit use of the facilities reserved for owners of second homes on the territory of the Island of Elba, prevailing result with respect to the consequent compression of your right to privacy deriving from such treatment.
The processing of your personal data for the purposes referred to in letter g) has as its legal basis the legal obligations to which the Data Controller is bound.
The processing of your personal data for the purposes referred to in letter h), in the case of communications sent by means of the e- mail used by you to proceed with the request for the “Second home owner card”, has as its legal basis art. 130 D.lgs. 196/2003 (so- called soft spam). In case the aforementioned communications are sent through other contact details, the legal basis that justifies such processing is the legitimate interest of the Data Controller balanced with its interest in receiving communications relating to the benefits granted through the “Second Home Owner Card”. You may, at any time, request the Data Controller to stop receiving commercial communications relating to the facilities and ancillary services related to the “Second Home Owner Card”, by writing to the [email protected] e-mail address or by registered letter with return receipt addressed to BN DI NAVIGAZIONE S.P.A., CALATA ITALIA 24/A – 57037 – PORTOFERRAIO (LI).

Your personal data will be kept for the entire duration of validity of the “Second Home Owner Card” and their cancellation is expected at the end of the relationship, unless other regulatory obligations (eg tax) and not (eg defense in court of a right of the Data Controller or third parties) do not require longer storage times.

The personal data communicated by you for the purposes described in art. 3 above, may be brought to the attention of or communicated to the following subjects:
(i) employees and/or collaborators of the Data Controller, as well as professionals and/or professional firms in charge of the administrative and accounting management of the contractual relationship;
(ii) public or private entities pursuing tax purposes, etc. (e.g. Revenue Agency, etc.);
(iii) public or private entities that, by virtue of legal provisions and / or an administrative or judicial measure, have the right to access it;
(iv) private subjects used by the Data Controller for the pursuit of one or more purposes among those indicated in paragraph 3. In particular, the persons in charge of the port company who perform check-in operations at embarkation may have access to a copy of your identity document by means of display on a tablet provided by the Company;
(v) subjects responsible for the processing that the Data Controller uses for the execution of activities related to the execution of the service or companies that the Data Controller uses for hosting and development of booking / administration services (SITRAP – SISTEMI TRASPORTO PERSONE SRL).

The Data Controller does not transfer personal data to third countries or to international organizations. The list of “responsible for the processing of personal data” pursuant to art. 28 of the GDPR eventually appointed will be available at the headquarters of the Data Controller or can be requested by sending a written request to: [email protected]

The Data Controller has appointed a Data Protection Officer (“Data Protection Officer”, “DPO”, “DPO”), whom you can contact to exercise your rights, as well as to receive any information relating to the same and / or this Information, by writing to: [email protected] or, by ordinary mail by writing to the attention of the data protection officer at the Company’s registered office.
Or by sending a certified e-mail to the PEC address: [email protected]

Pursuant to Article 77 of the GDPR, if the interested party considers that the processing concerning your personal data violates EU Regulation 2016/679, he has the right to lodge a complaint with the Supervisory Authority, which in Italy is the Guarantor Authority for the protection of personal data, Piazza Venezia n. 11 – Scala B, 00187, Rome (RM) – www.garanteprivacy.it , or to refer to the appropriate Judicial Offices as required by art. 79 GDPR.