Legal Notice & Privacy

Pursuant to Article 13 of the GDPR (EU Regulation 2016/679), the following information is provided, in accordance with the principle of transparency, in order to make the user aware of the characteristics and modalities of data processing:

1 - Identity and contact details

Please note that the “Data Controller” is: Rana Diving SpA
Legal Representative: Alessandro Buffa
Registered Office: Italy; via del Trabaccolo 16; Post Code 48122; City: Ravenna
The following contact details are provided: Telephone: +39 0544 530742; fax: +39 0544 531015 certified e-mail address (PEC): ranadiving@registerpec.it

2 - Contact details of the Data Protection Officer (DPO)

Pursuant to and for the purposes of UE Regulation 679/2016 on the protection of personal data (GDPR), interested parties may exercise their rights by sending a request at Rana Diving’s Data Protection Officer (DPO): studiobarbieri@mywaysec.com

3 - Purpose of the processing, legal basis and legitimate interest

The processing of personal data requested from the data subject is carried out for the following purposes:

1. for assessment of work experience, qualifications, skills, and suitability for the job;
2. for compliance with legal obligations, contractual, operational and commercial requirements, national and international guidelines, as well as the business requirements of Rana Diving and its clients;
3. for regulatory, contractual, operational, commercial, administrative and insurance requirements;
4. for commercial publications on websites, brochures, catalogues, calendars, social media, trade fairs, corporate presentations of photos or films from work activities.

The provision of data is an essential requirement for the performance of contractual obligations. Failure to provide personal data will result in the inability to provide the services requested. The processing of personal data may take place using paper and/or with the help of computer tools, whether or not connected to the network, with logic closely related to the stated purposes and, in any case, so as to ensure the security and confidentiality of the data.

Processing is permitted where one or more of the following conditions apply in the present case:

1. The data subject has given his or her consent for one or more purposes (Article 6(1)(a).
2. Processing is necessary for the performance of a contract to which the data subject is party or of precontractual measures required of him or her (Article 6(1)(b).
3. The processing is necessary to perform a legal obligation to which the data controller is subject (Article 6(1)(c).
4. The processing is necessary for the pursuit of the legitimate interest of the data controller to comply with the contractual obligations signed between the parties.

4 - Recipients and any categories of recipients of personal data

The data are processed within the body by authorized subjects of data processing under the responsibility of the Data Controller for the above purposes. The data may be communicated to the following external data processors who have signed specific agreements, conventions or protocols of understandings, contracts with the data controller. The data may be communicated to the following categories of recipients:

• companies controlled by Rana Diving, including its own consultants or collaborators;
• contracting companies, including their representatives, consultants and subsidiary and similar companies;
• Rana Diving contact persons in the workplace, responsible for means of support or transfer;
• agencies, control bodies, competent authorities, insurance companies, certification companies, travel and transport sites, hotels, consulates, embassies, company doctors, health facilities, social security and welfare institutions, banking and financial companies, revenue agencies, trade associations and trade unions;

5 - Transfer of data to third countries (not belonging to the European Union)

The Data Controller shall not transfer the data to a third country or to an international organization.

6 - Data Storage Period

The duration of data storage is determined by the existence of one or more of the purposes referred to in point 3 of this Privacy Notice.
Data shall be kept for the time necessary to achieve the purposes for which the data were collected and in any case to meet its legal obligations in accounting, tax and anti-money laundering matters.

7 - Data rights

Please note that, with regard to Your personal data, You can exercise the following rights: 

1. right of access to your personal data; right to obtain the rectification or erasure of personal data or the restriction of processing operations concerning you;
2. right to object to the processing;
3. right to data portability (right applicable only to data in electronic form), as regulated by Article 20 of the GDPR.

Please note that where data processing is based on Article 6(1)(a) of EU Regulation 2016/679 You are entitled to withdraw your consent at any time without prejudice to the lawfulness of the processing based on your consent prior to the withdrawal.
With regard to the manner in which the above rights can be exercised, the data subject can write to: privacy@ranadiving.it

8 - Complaints

Please note that you have the right to complain to the supervisory authority and can contact the Italian supervisory authority.
For further information, please consult the institutional website of the Italian supervisory authority www.garanteprivacy.it

9 - Data Disclosure

Please note that the disclosure of personal data is a contractual obligation and a necessary requirement for entering into a contract.

10 - Provision of data

The provision of data is mandatory as the disclosure of data is a contractual obligation and a necessary requirement for entering into the contract. Failure to provide the data will not allow the data subject to proceed to complete the procedure.

11- Different purposes of processing

If the data controller intends to further process the personal data for a purpose other than that for which they were collected, prior to such further processing, the data controller shall provide the data subject with information regarding such other purpose and with any further relevant information.

12 - Profiling

The data controller shall not use any automated profiling process.

-----------------------

For personal data, pursuant to Article 4.1(a), GDPR means: 'any information relating to an identified or identifiable natural person (‘data subject’); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person'.