In compliance with the provisions of EU Reg. 2016/679 (European Regulation for the protection of personal data) and Legislative Decree 196/2003, as amended by Legislative Decree 101/2018, through this privacy policy Next Yacht Group S.r.l. – as Data Controller – provides you with the necessary information regarding the processing of personal data provided by the contracting companies, with specific reference to the processing of data of individuals who represent the companies, are employed by or are otherwise related in various capacities to the company for the purposes of the performance of the construction contracts and subcontracts.

Pursuant to art. 13 and 14 EU Reg. 2016/679, therefore, we provide you with the following information

1. DATA CONTROLLER
Data Controller – pursuant to art. 4 and 24 of EU Reg. 2016/679 – is Next Yacht Group S.r.l., with registered office in Lungocanale Palombari dell’Artiglio 41, 55049, Viareggio (LU), VAT number 02466190465.
The Data Controller can be contacted at the following e-mail address: privacy@nextyachtgroup.com
The Data Controller has also appointed a Data Protection Officer (DPO) who can be contacted for questions relating to the processing of your personal data at the following e-mail address: dpo@nextyachtgroup.com

2. TYPE OF PROCESSED DATA
The Data Controller processes the data of individuals who represent the suppliers, are employed by, or are otherwise related in various capacities to suppliers for the purpose of performing construction contracts and subcontracts.
Specifically, the personal data processed are the following:
– data evidencing regular employment (regularity of contributions, wages and insurance) and a copy of the LUL (Employee register) and UNILAV (Employment Form);
– position, contractual classification level, qualifications and suitability to perform certain activities (e.g., safety and machinery training
certificates);
– data contained in certificates of medical fitness for the performance of work duties;
– biographic data (including the image of the worker’s face) for issuing access badges to company sites;
– data on the presence in the workplace.

3. LEGAL BASIS, LAWFULNESS AND PURPOSE OF THE DATA PROCESSING
We inform you that we will process your personal data in compliance with the conditions of lawfulness
– pursuant to art 6 EU Reg. 2016/679
– within the limits and to the extent strictly necessary to accomplish the following purposes:
(a) management of occupational health and safety in accordance with legislative decree 81/08;
(b) protection of the company with respect to solidarity contribution constraints provided for by law;
– issuing the access badges to company sites;
The legal basis legitimizing the processing is the performance of a contract or pre-contractual measures, the fulfillment of legal obligations and, in the cases expressly provided for, the legitimate interest of the Controller in the protection of security and its business assets.

4. RECIPIENTS OR CATEGORIES OF RECIPIENTS OF PERSONAL DATA
The personal data collected may be disclosed to recipients, appointed pursuant to Art. 28 EU Reg. 2016/679, who will process the data as Data Processors and/or to recipients who will process the transmitted personal data as Data Controllers.
Specifically, the data may be disclosed to the following persons/entities:
– firms as part of legal aid and tax advisory relationships, lending institutions, debt collection companies, IT consulting and support, and companies entrusted with surveillance and security services;
– companies and/or third-party construction sites at which personnel are to perform part of the work;
– specially authorized in-house personnel;
– internal supervisory bodies and competent authorities/public bodies for the performance of the duties requred by the law.

5. TRANSFER OF DATA TO A THIRD COUNTRY AND / OR AN INTERNATIONAL ORGANIZATION
Data will not be transferred to third countries outside the European Union.It should be noted that the use of cloud services may involve the transfer of data to servers located abroad (both EU and non-EU), always in compliance with the applicable legal provisions and, in any case, ensuring respect for maximum security of the data.

6. PERIOD OF STORAGE OR CRITERIA USED TO DETERMINE SUCH PERIOD
Personal data acquired and processed for the purpose of fulfilling administrative/accounting and legal obligations will be kept for 10 years after the end of the contract and in any case to the extent required by law.
Regarding the personnel of contractors and subcontractors employed by the company, the personal data acquired will be stored for the time during which the Contract giver is jointly and severally liable for social contribution, time-limit of 2 years starting from the termination of the construction contract.
However, this is without prejudice to the right to object at any time to processing based on legitimate interest for reasons related to your particular situation.

7. RIGHTS OF THE INTERESTED PARTIES AND METHODS OF EXERCISE OF SUCH RIGHTS
In your capacity as an interested party, you can enforce your rights referred to in Chapter III (articles 15-22) of EU Reg. 2016/679 by contacting the Data Controller by e-mail at privacy@nextyachtgroup.com, by registered letter with acknowledgement of receipt to the address of the company’s registered office or by delivery of a hard copy.
The rights you enjoy, pursuant to EU Reg. 2016/679, are the following:
− access;
− rectification;
− cancellation;
− withdrawal of consent;
− limitation of processing;
− opposition to processing;
− portability.
These rights are guaranteed to you without any formalities for their exercise, which is essentially free of charge.
Without prejudice to any other administrative or judicial action, you can also lodge a complaint with the Supervisory Authority in accordance with the provisions of EU Regulation 2016/679 and the Privacy Code, as amended by Legislative Decree 101/2018.

8. METHODS OF DATA PROCESSING
The personal data provided will be recorded, processed, managed and filed in paper form and / or with the aid of electronic IT tools and in any case in such a way as to guarantee their security and confidentiality.
Relations with contractors will be handled by expressly authorized in-house personnel.
Personal data are processed without the intervention of automated systems or processes, and no profiling is carried out.

9. NATURE OF THE DATA PROVISION
The provision of data is understood to be necessary and failure to provide it, in whole or in part, will result in the impossibility for the Data Controller to follow up on the activities related to the main processing, i.e. the impossibility of managing the contract and the fulfilments, including legal ones, arising from the relationship established.

10. DISSEMINATION OF DATA
The personal data collected will in no case and in no way be disseminated to third parties not
approved by the Data Controller and may be exhibited only at the request of the Judicial, Financial and Guarantor Authorities, as well as to all other subjects to whom the communication is required by law for the accomplishment of the aforementioned purposes.

Pursuant to Article 13 of EU Regulation 2016/679 on the Protection of Personal Data
Dear Candidate,
In compliance with the provisions of EU Regulation 2016/679 (General Data Protection Regulation) and Legislative Decree no. 196/2003, as amended by Legislative Decree no. 101/2018, Next Yacht Group S.r.l. – in its capacity as Data Controller – hereby provides the necessary information regarding the processing of the personal data you have provided.

1. DATA CONTROLLER
The Data Controller – pursuant to Articles 4 and 24 of EU Regulation 2016/679 – is Next Yacht Group S.r.l., with its registered office at Lungocanale Palombari dell’Artiglio 41, 55049, Viareggio (LU), VAT no. 02466190465.
The Data Controller can be contacted at the following email address: privacy@nextyachtgroup.com
The Data Controller has also appointed a Data Protection Officer (DPO), who can be contacted for any matters relating to the processing of your personal data at the following email address: dpo@nextyachtgroup.com

2. TYPES OF DATA COLLECTED AND PROCESSED
The Controller will process the following personal data:
Personal details, contact information, tax code, telephone number, email address, and residence;
Information relating to your previous educational and professional experiences, as well as details concerning your most recent salary and contractual classification.

3. LEGAL BASIS, LAWFULNESS, AND PURPOSES OF PROCESSING
The legal basis legitimizing the processing is the performance of a contract and compliance with legal obligations.
Please note that any “special category data” necessary for establishing an employment relationship, if provided, will be processed in accordance with the safeguards and measures set out in Authorization no. 1/2016 issued by the Data Protection Authority.
We inform you that your personal data will be processed in compliance with the lawfulness conditions set forth in Article 6 of EU Regulation 2016/679, within the limits and to the extent strictly necessary to achieve the following purposes:
a) Recruitment and personnel selection, to allow for the proper evaluation of your professional profile;
b) Future contacts and potential interviews;
c) Creation and management of the Controller’s internal candidate database;
d) Establishment of a potential subsequent employment and/or collaboration relationship.

4. RECIPIENTS OR CATEGORIES OF RECIPIENTS OF PERSONAL DATA
The collected data may be communicated to recipients appointed pursuant to Article 28 of EU Regulation 2016/679, who will process the data as External Data Processors, and/or to entities acting as Independent Data Controllers. Specifically, the data may be shared with:
Professionals or companies providing legal or consultancy services (e.g., recruitment or personnel training consultants);
Internal staff authorized, where appropriate, for candidate selection and evaluation.

5. TRANSFER OF DATA TO A THIRD COUNTRY AND/OR AN INTERNATIONAL ORGANIZATION
The collected data will not be transferred to any third country and/or international organization.
However, it should be noted that the use of cloud services may involve the transfer of data to servers located abroad (both within and outside the EU), always in compliance with applicable legal provisions and, in any case, with the utmost attention to security standards.

6. DATA RETENTION PERIOD OR CRITERIA USED TO DETERMINE SUCH PERIOD
The Controller will process your personal data for the purposes indicated in point 3 above.
Your personal data will be retained and processed for a period not exceeding 12 months.
At the end of this period, all information will be permanently deleted.

7. DATA SUBJECT RIGHTS AND METHODS FOR EXERCISING THEM
As a data subject, you may exercise your rights under Chapter III (Articles 15–22) of EU Regulation 2016/679 by contacting the Data Controller via email at privacy@nextyachtgroup.com, by registered mail sent to the company’s registered office address, or by delivering a hard copy in person.
In accordance with EU Regulation 2016/679, you are entitled to exercise the following rights:
– Right of access;
– Right to rectification;
– Right to erasure;
– Right to withdraw consent;
– Right to restriction of processing;
– Right to object to processing;
– Right to data portability.
These rights may be exercised free of charge and without any particular formalities.
Without prejudice to any other administrative or judicial remedy, you may also lodge a complaint with the Supervisory Authority (Italian Data Protection Authority – Garante per la Protezione dei Dati Personali) as provided for by EU Regulation 2016/679 and the Italian Privacy Code, as amended by Legislative Decree no. 101/2018.

8. METHODS OF DATA PROCESSING
The personal data provided will be recorded, processed, managed, and stored in paper and/or electronic form, in such a way as to ensure their security and confidentiality.
Processing will be carried out exclusively by expressly authorized internal personnel and will not involve the use of automated systems or profiling activities.
The data are collected through:
i) the voluntary submission of a résumé/CV to the Controller;
ii) consultation of specialized databases;
iii) recruitment agencies and companies specialized in personnel search and selection.

9. NATURE OF DATA PROVISION
Providing personal data for the purposes set out in point 3 is entirely optional.
However, failure to provide all or part of the requested data will make it impossible to properly assess your professional profile and, if necessary, to contact you again.

10. DISCLOSURE OF DATA
The personal data collected will under no circumstances be disclosed or made available to unauthorized third parties.
Such data may only be provided upon request of the Judicial, Financial, or Supervisory Authorities, as well as to any other entities to whom communication is required by law for the fulfillment of the purposes described above.

Dear customer,

In compliance with the provisions of EU Reg. 2016/679 (European Regulation for the protection of personal data) and Legislative Decree 196/2003, as amended by Legislative Decree 101/2018, through this privacy policy Next Yacht Group S.r.l. – as Data Controller – provides you with the necessary information regarding the processing of your personal data.

1. DATA CONTROLLER
Data Controller – pursuant to art. 4 and 24 of EU Reg. 2016/679 – is Next Yacht Group S.r.l., with registered office in Lungocanale Palombari dell’Artiglio 41, 55049, Viareggio (LU), VAT number 02466190465.
The Data Controller can be contacted at the following e-mail address: privacy@nextyachtgroup.com
The Data Controller has also appointed a Data Protection Officer (DPO) who can be contacted for questions relating to the processing of your personal data at the following e-mail address: dpo@nextyachtgroup.com

2. TYPE OF PROCESSED AND COLLECTED DATA
The Data Controller will process the following personal data:
– biographic data; phone and mail contacts data; email address;
– invoicing and payment data, tax identification number and VAT number.

3. PURPOSE, LEGAL BASIS AND LAWFULNESS OF THE DATA PROCESSING
The legal basis legitimizing data processing is the execution of contractual and pre-contractual obligations and the fulfilment of Law obligations.
We inform you that we will process your personal data in compliance with the conditions of  lawfulness – pursuant to art. 6 EU Reg. 2016/679 – within the limits and to the extent strictly necessary to accomplish the following purposes:
a) to implement pre-contractual requirements (such as, for example, requests for information or requests for quotations) in relation to the company services offered (specifically yachts and boats sales; yachts and boats refitting; yachts and boats maintenance);
b) to carry out operations strictly connected with and ancillary to the initiation of contractual relationships, including the acquisition of preliminary information necessary for the conclusion of the Contract;
c) to complete and enforce the contractual relationship with the interested party in relation to the company services offered by the Data Controller;
d) management of relationships for the activities of administration, accounting, shipping, invoicing and handling of any disputes;
e) in compliance with the legislation on the so-called soft spam, for sending promotional communications regarding products similar to those being sold, as well as communications relating to events organized by the Data Controller.

4. RECIPIENTS OR CATEGORIES OF RECIPIENTS OF PERSONAL DATA
The data collected may be disclosed to recipients, appointed pursuant to art. 28 EU Reg. 2016/679, who will process the data as external managers and / or entities acting as autonomous Data Controllers.
Specifically, the data may be disclosed to:
– third-party companies or other subjects (credit institutions, professional firms, consultants, insurance companies);
– subjects that provide services for the management of the information system and telecommunications networks;
– competent authorities for the fulfillment of legal obligations and/or provisions of public authorities, upon request.

5. TRANSFER OF DATA TO A THIRD COUNTRY AND / OR AN INTERNATIONAL ORGANIZATION
The processed personal data will not be transferred to a third country and / or an international organization.
It should be noted, however, that the use of cloud services may involve the transfer of data to servers located abroad (both EU and non-EU), always in compliance with the applicable legal provisions and, in any case, ensuring respect for maximum security of the data.

6. PERIOD OF STORAGE OR CRITERIA USED TO DETERMINE SUCH PERIOD
The Data Controller will process your personal data for the entire duration of the contractual relationship and for 10 years following its conclusion for the sole purpose of fulfilling legal, fiscal, and administrative obligations and for the management of any disputes (including provisions for time-barring of claims).
To send the newsletters, your personal data will be processed and stored in compliance with the legislation on the so-called soft spam, provided that the interested party does not refuse such use, initially or in case of subsequent communications.
At the time of collection and at the time of sending any communication made for this purpose, the interested party is informed of the possibility to object to the processing at any time, in a user-friendly way and free of charge.

7. RIGHTS OF THE INTERESTED PARTIES AND METHODS OF EXERCISE OF SUCH RIGHTS
In your capacity as an interested party, you can enforce your rights referred to in Chapter III (articles 15-22) of EU Reg. 2016/679 by contacting the Data Controller by e-mail at privacy@nextyachtgroup.com, by registered letter to the address of the company’s registered office or by delivery of a hard copy.
The rights you enjoy, pursuant to EU Reg. 2016/679, are the following:
– access;
– rectification;
– cancellation;
– withdrawal of consent;
– limitation of processing;
– opposition to processing;
– portability.
These rights are guaranteed to you without any formalities for their exercise, which is essentially free of charge.
Without prejudice to any other administrative or judicial action, you can also lodge a complaint with the Supervisory Authority in accordance with the provisions of EU Regulation 2016/679 and the Privacy Code, as amended by Legislative Decree 101/2018.

8. METHODS OF DATA PROCESSING
The personal data provided will be recorded, processed, managed and filed in paper form and / or with the aid of IT tools and in any case in such a way as to guarantee their security and confidentiality.
The processing will be carried out by expressly authorized internal staff.
We inform you that we do not adopt any automated decision-making process, including profiling activities.

9. NATURE OF THE DATA PROVISION
The provision of data is necessary to provide feedback to your requests for quotation and/or information, and/or to enforce the contract of which you are a party and to fulfill the legal obligations indicated in this information.
Any refusal to provide the aforementioned data could make it impossible to provide the requested services and/or to follow up on the contract you are a party to.
The provision of your data for marketing activities (purpose of letter d) is optional. Any failure to your consent to the provision will have the sole consequence of not being able to receive our promotional communications.

10. DISSEMINATION OF DATA
The personal data collected will in no case and in no way be disseminated to third parties not approved by the Data Controller and may be exhibited only at the request of the Judicial, Financial and Guarantor Authorities, as well as to all other subjects to whom the communication is required by law for the accomplishment of the aforementioned purposes.

Dear user,
in compliance with the provisions of EU Reg. 2016/679 (European Regulation for the protection of personal data) and of Legislative Decree 196/2003, as amended by Legislative Decree 101/2018, through this privacy policy Next Yacht Group S.r.l. – as Data Controller – provides you with the necessary information regarding the processing of your personal data.

1. DATA CONTROLLER
Data Controller – pursuant to art. 4 and 24 of EU Reg. 2016/679 – is Next Yacht Group S.r.l., with registered office in Lungocanale Palombari dell’Artiglio 41, 55049, Viareggio (LU), VAT number 02466190465.
The Data Controller can be contacted at the following e-mail address: privacy@nextyachtgroup.com
The Data Controller has also appointed a Data Protection Officer (DPO) who can be contacted for questions relating to the processing of your personal data at the following e-mail address: dpo@nextyachtgroup.com

2. TYPE OF PROCESSED AND COLLECTED DATA
The Data Controller will process the following personal data:
– biographic data;
– telephone number, email address;
– interest in the boat and any other data provided voluntarily by the user.

3. PURPOSE, LEGAL BASIS AND LAWFULNESS OF THE DATA PROCESSING
The legal basis legitimizing the data processing is the execution of pre-contractual obligations and the consent freely expressed by the interested party.
We inform you that we will process your personal data in compliance with the conditions of lawfulness – pursuant to art. 6 EU Reg. 2016/679 – within the limits and to the extent strictly necessary to fulfil the following purposes:
a) to respond to requests for information and to send information material (eg boat brochures, catalogues and other information material);
b) for the management of pre-contractual obligations;
c) for marketing / commercial purposes and to send your newsletter containing information on products and services, as well as promotions or invitations to events (for these purposes the express consent of the interested party is required).

4. RECIPIENTS OR CATEGORIES OF RECIPIENTS OF PERSONAL DATA
The data collected may be disclosed to recipients, appointed pursuant to art. 28 EU Reg. 2016/679, who will process the data as external managers and / or entities acting as autonomous Data Controllers. Specifically, the data may be disclosed to:
– firms or companies within relationships of assistance and consultancy;
– subjects that provide services for the management of the information system and the telecommunication networks;
– specifically authorized internal personnel.

5. TRANSFER OF DATA TO A THIRD COUNTRY AND / OR AN INTERNATIONAL ORGANIZATION
The collected data will not be transferred to a third country and / or an international organization.
It should be noted, however, that the use of cloud services may involve the transfer of data to servers located abroad (both EU and nonEU), always in compliance with the applicable legal provisions and, in any case, ensuring respect for maximum security of the data.

6. PERIOD OF STORAGE OR CRITERIA USED TO DETERMINE SUCH PERIOD
The Data Controller will process your personal data for the time necessary to pursue the aforementioned purposes according to the following temporal criteria:
– if information is requested, the data will be processed for the time necessary to provide feedback;
– if a quotation is requested, however, the data will be processed for a maximum of 36 months following the effective period of the proposal, without prejudice to further storage for the time necessary to settle any disputes that may have arisen;
– as to the sending of the newsletter, the data will be processed for 36 months, unless consent is revoked in advance.

7. RIGHTS OF THE INTERESTED PARTIES AND METHODS OF EXERCISE OF SUCH RIGHTS
In your capacity as an interested party, you can enforce your rights referred to in Chapter III (articles 15-22) of EU Reg. 2016/679 by contacting the Data Controller by e-mail at privacy@nextyachtgroup.com, by registered letter to the address of the company’s registered
office or by delivery of a hard copy.
The rights you enjoy, pursuant to EU Reg. 2016/679, are the following:
– access;
– rectification;
– cancellation;
– withdrawal of consent;
– limitation of processing;
– opposition to processing;
– portability.
These rights are guaranteed to you without any formalities for their exercise, which is essentially free of charge.
Without prejudice to any other administrative or judicial action, you can also lodge a complaint with the Supervisory Authority in accordance with the provisions of EU Regulation 2016/679 and the Privacy Code, as amended by Legislative Decree 101/2018.

8. METHODS OF DATA PROCESSING
The personal data collected during fairs and events will be recorded, processed, managed and filed in paper form and / or with the aid of IT tools and in any case in such a way as to guarantee their security and confidentiality.
The processing will be carried out by expressly authorized internal staff and without the intervention of automated systems or processes and no profiling activities are carried out.

9. NATURE OF THE DATA PROVISION
The provision of data for the purposes referred to in point 3 is mandatory. Any partial or total failure to provide data will make it impossible to manage and respond to requests. The provision of data for the purposes referred to in point 3 lett. c) is optional and subject to explicit and separate informed consent, to be expressed at the bottom of this document.

10. DISSEMINATION OF DATA
The personal data collected will in no case and in no way be disseminated to third parties not approved by the Data Controller and may be exhibited only at the request of the Judicial, Financial and Guarantor Authorities, as well as to all other subjects to whom the communication
is required by law for the accomplishment of the aforementioned purposes.

Dear Supplier,
in compliance with the provisions of EU Reg. 2016/679 (European Regulation for the protection of personal data) and Legislative Decree 196/2003, as amended by Legislative Decree 101/2018, through this privacy policy NEXT Yacht Group S.r.l. – as Data Controller – provides you with the necessary information regarding the processing of your personal data.

1. DATA CONTROLLER
Data Controller – pursuant to art. 4 and 24 of EU Reg. 2016/679 – is NEXT Yacht Group S.r.l., with registered office in Lungocanale Palombari dell’Artiglio 41, 55049, Viareggio (LU), VAT number 02466190465.
The Data Controller can be contacted at the following e-mail address: privacy@nextyachtgroup.com
The Data Controller has also appointed a Data Protection Officer (DPO) who can be contacted for questions relating to the processing of your personal data at the following e-mail address: dpo@nextyachtgroup.com

2. TYPE OF DATA PROCESSED AND COLLECTED
The Data Controller will process the following personal data:
– biographic data; contacts data; email address;
– invoicing and payment data, tax identification number and VAT number.

3. PURPOSE, LEGAL BASIS AND LAWFULNESS OF THE DATA PROCESSING
The legal basis legitimizing data processing is the execution of contractual and pre-contractual obligations and the fulfilment of Law obligations.
We inform you that we will process your personal data in compliance with the conditions of lawfulness – pursuant to art. 6 EU Reg. 2016/679 – within the limits and to the extent strictly necessary to fulfil the following purposes:
(a) Performance of activities related to the conclusion of contracts/orders for the provision of professional services and performances and/or the awarding of related appointments and mandates;
(b) to carry out operations strictly connected with and ancillary to the initiation of contractual relationships, including the acquisition of preliminary information necessary for the conclusion of the Contract;
(d) management of relationships with the supplier for the activities of administration, accounting, purchasing orders, shipping, invoicing and handling of any disputes;

4. RECIPIENTS OR CATEGORIES OF RECIPIENTS OF PERSONAL DATA
The data collected may be disclosed to recipients, appointed pursuant to art. 28 EU Reg. 2016/679, who will process the data as external managers and / or entities acting as autonomous Data Controllers.
Specifically, the data may be disclosed to:
– firms or companies within the relationships of legal assistance and consulting (accountants, labor consultants);
– subjects that provide services for the management of the information system and telecommunications networks;
– competent authorities for the fulfilment of legal obligations and/or provisions of public authorities, upon request.

5. TRANSFER OF DATA TO A THIRD COUNTRY AND / OR AN INTERNATIONAL ORGANIZATION
The data collected will not be transferred to a third country and / or an international organization.
It should be noted, however, that the use of cloud services may involve the transfer of data to servers located abroad (both EU and nonEU), always in compliance with the applicable legal provisions and, in any case, ensuring respect for maximum security of the data.

6. PERIOD OF STORAGE OR CRITERIA USED TO DETERMINE SUCH PERIOD
The Data Controller will process your personal data for the entire duration of the contractual relationship and for 10 years following its termination for the sole purpose of fulfilling legal, fiscal, and administrative obligations and for the management of any disputes (including provisions for time-barring of claims).