Web Privacy Notice pursuant to EU Regulation 2016/679 on the protection of personal data
In compliance with the provisions of EU Regulation 2016/679 (General Data Protection
Regulation) and Legislative Decree 196/2003, as amended by Legislative Decree 101/2018,
this notice is provided by NA.VI.GO. Società Consortile a Responsabilità Limitata, with
registered office in Viareggio (LU), Via Michele Coppino no. 116, 55049, VAT/Tax Code no.
02077140461 – acting as Data Controller – to inform you about the processing of personal
data provided.
This notice does not apply to other websites that may be accessed through links on the Data
Controller’s website. Users/visitors are required to carefully read this Privacy Policy before
submitting any personal information and/or filling in any electronic form available on the
website.
Pursuant to Articles 13 and 14 of EU Regulation 2016/679, we hereby provide you with the
following information:
- DATA CONTROLLER AND DATA PROTECTION OFFICER
The Data Controller, pursuant to Articles 4 and 24 of EU Regulation 2016/679, is NA.VI.GO.
Società Consortile a Responsabilità Limitata, with registered office in Viareggio (LU), Via
Michele Coppino no. 116, 55049, VAT/Tax Code no. 02077140461.
The Data Controller can be contacted at the following email address:
privacy@navigotoscana.it.
The Data Controller has also appointed a Data Protection Officer (DPO), domiciled for this
role at the Data Controller’s premises and reachable at: d.vispo@clarissrl.it - TYPES OF DATA PROCESSED
Browsing data (e.g. IP addresses or domain names of users’ devices);
Data provided by the user: identification data, contact details and other data supplied
through forms or contact requests;
Cookies and other tracking systems: for more information on the use of cookies and
similar technologies, please refer to the specific Cookie Policy available on the
website. - PURPOSES, LEGAL BASIS AND LAWFULNESS OF PROCESSING
The legal basis for processing is the performance of a contract, the provision of a requested
service, or the execution of pre-contractual measures.
We inform you that the data you provide will be processed in compliance with the conditions
of lawfulness set out in Article 6 of EU Regulation 2016/679 and only to the extent strictly
necessary to achieve the following purposes:
browsing and use of the services offered on this website;
responding to information requests;
providing user support;
managing requests for participation in events. - RECIPIENTS OR CATEGORIES OF RECIPIENTS OF PERSONAL DATA
The collected data may be communicated to recipients appointed pursuant to Article 28 of
EU Regulation 2016/679, who will process the data as external Data Processors and/or as
individuals acting under the authority of the Data Controller or Processor.
Specifically, the data may be communicated to:
partner companies;
companies responsible for managing the web platform and companies in charge of
managing/maintaining IT systems and communication networks;
competent authorities, where required by law or by public authorities.
- TRANSFER OF DATA TO A THIRD COUNTRY AND/OR INTERNATIONAL
ORGANISATION
The personal data provided may be transferred abroad, both within and outside the
European Union, within the limits and under the conditions set out in Articles 44 et seq. of
EU Regulation 2016/679, for purposes related to such transfer.
It should also be noted that the use of cloud services may involve data transfers abroad
(both within and outside the EU), always in compliance with applicable legal provisions and
ensuring maximum data security. - DATA RETENTION PERIOD OR CRITERIA USED TO DETERMINE SUCH PERIOD
Processing will be carried out using manual and/or IT tools designed to ensure maximum
security and confidentiality, by duly authorised personnel.
In accordance with Article 5 of EU Regulation 2016/679 and the principle of data
minimisation, the collected data will be stored on secure IT systems or in paper form, in a
way that allows identification of data subjects only for the time necessary to achieve the
purposes for which the data were collected, as indicated in this notice.
After this period, the data will be deleted or anonymised. If, for any reason, you consider that
the purpose of processing has been fulfilled before the above-mentioned period, you may
notify the Data Controller in writing, who will promptly delete the collected data. - RIGHTS OF DATA SUBJECTS AND HOW TO EXERCISE THEM
As a data subject, you may exercise your rights under Chapter III (Articles 15–22) of EU
Regulation 2016/679 by contacting the Data Controller via email at
privacy@navigotoscana.it, by registered mail with return receipt to the registered office
address, or by delivering a written request.
The rights you are entitled to under EU Regulation 2016/679 are as follows:
right of access;
right to rectification;
right to erasure;
right to withdraw consent;
right to restriction of processing;
right to object to processing;
right to data portability.
These rights are guaranteed free of charge and without particular formalities.
Without prejudice to any other administrative or judicial remedy, you may also lodge a
complaint with the supervisory authority in accordance with EU Regulation 2016/679 and the
Italian Privacy Code, as amended by Legislative Decree 101/2018, by writing to Piazza
Venezia, 11 – 00187 Rome (Italy), by registered mail, by hand delivery, or by certified email
(PEC) to protocollo@pec.gpdp.it. - METHODS OF DATA PROCESSING
The personal data you provide will be recorded, processed, managed and stored in paper
form and/or with the aid of electronic IT tools, in such a way as to ensure their security and
confidentiality. Processing will be carried out by expressly authorised internal personnel.
Personal data are processed without the use of automated decision-making processes and
no profiling activities are carried out. - NATURE OF DATA PROVISION AND CONSENT
The provision of personal data for the purposes indicated above is optional. Any partial or
total failure to provide such data may result in the partial or total inability to use the services
offered by the Data Controller, for example to receive a response to an information request. - DISCLOSURE OF DATA
The personal data collected will not, under any circumstances, be disclosed to unauthorised
third parties and may only be made available upon request of Judicial, Financial or
Supervisory Authorities, as well as to any other entities where disclosure is required by law
for the fulfilment of the purposes indicated.
Updated on 01 January 2026
The Data Controller
NA.VI.GO. S.c.a.r.l.
