Privacy Policy

0. Premise

This page is intended to inform users about the policies observed by G&G Luxury Yachts USA Corp, with registered office in 1680 Michigan Ave Ste 700, Miami (FL) - USA, regarding the collection, storage, use, and eventual disclosure of any personal information of users acquired during the use of the services offered on the ggyachts.com website.

This privacy policy is subject to updates and modifications. Such events will be communicated via newsletter or highlighted in the relevant sections of the website. Users are advised to check this privacy policy periodically in any case. G&G Luxury Yachts USA Corp guarantees compliance with the aforementioned regulations, inviting users to carefully read this Privacy Policy before sending any personal information, specifying that this policy is provided only for this website. The management and ownership of the website www.ggyachts.com belong exclusively to G&G Luxury Yachts USA Corp.

1. Data Controller and Data Protection Officer

The Data Controller is G&G Luxury Yachts USA Corp, VAT no. 04341410266, with registered office in 1680 Michigan Ave Ste 700, Miami (FL) - USA.

Data Protection Officer (DPO): For any information concerning the processing of personal data by G&G Luxury Yachts USA Corp, including the list of data processors, contact: info@ggyachts.com

2. Types of Data Collected

The Data Controller informs that, for the normal operation of the website, it will process data which by its nature can be defined as personal data. Personal data means any information relating to an identified or identifiable natural person, even indirectly, by reference to any other information, including a personal identification number.

The personal data processed through the website are as follows:

a) Browsing Data

During the normal operation of the website, the computer systems and software procedures acquire certain personal data whose transmission is implicit in the use of Internet communication protocols. This information is not collected to be associated with identified data subjects, but by its very nature could, through processing and association with data held by third parties, allow users to be identified. This category of data includes IP addresses or domain names of the computers used by users connecting to the website, the addresses in URI (Uniform Resource Identifier) notation of the requested resources, the time of the request, the method used in submitting the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response given by the server (successful, error, etc.) and other parameters relating to the user's operating system and IT environment.

b) Common Personal Data

To access certain services on the website, the provision of common personal data may be required. Such personal data may include, by way of example and not exhaustive: name, surname, e-mail address, telephone number, etc.

c) Special Categories of Personal Data

When using the contact form in the 'Contact' section to submit applications, the provision of personal data falling within the categories mentioned in Art. 9 of the Regulation, the so-called special data, may occur: "[...] data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, or trade union membership, and [...] genetic data, biometric data for the purpose of uniquely identifying a natural person, data concerning health or data concerning a natural person's sex life or sexual orientation". These categories of data will be processed only with the consent of the data subject.

We also inform you that, for the purpose of collecting applications, G&G Luxury Yachts USA Corp may analyze your professional social media profiles, which you have made freely available on the Internet (e.g. LinkedIn).

d) Cookies

Please refer to the cookie policy at the following link.

3. Purposes of Processing

The data provided by you, including personal and any special data, will be processed for the following purposes:

• a. to respond to any contact requests received via email or by filling out the appropriate form on the Contact page;
• b. to establish an immediate question/answer channel through a real-time chat accessible from every page of the website;
• c. to publish comments related to blog articles;
• d. to collect applications, evaluate CVs, and eventually contact candidates;
• e. to send newsletters or commercial and marketing communications;
• f. to carry out administrative-accounting activities in general. For the purposes of applying the provisions on personal data protection, the processing carried out for administrative-accounting purposes are those connected to the performance of organizational, administrative, financial and accounting activities, regardless of the nature of the data processed. In particular, these purposes include internal organizational activities, activities functional to the fulfillment of contractual and pre-contractual obligations, and informative activities.

4. Processing Methods

The processing will be carried out in paper and/or computerized form, but in any case with suitable measures to guarantee maximum security, by specially trained and appointed individuals.

Data Retention Periods:

• The data collected for the purposes referred to in section 3(a,b,c,f) will be stored for the time strictly necessary to achieve those purposes.
• Regarding the storage of data for the purpose of collecting applications referred to in section 3(d), the identified time is 12 months from the date of receipt of the application.
• In the case of data processing for commercial and marketing purposes referred to in section 3(e), the storage time has been set at 24 months.

Further information regarding the data retention period and the criteria used to determine this period can be requested by writing to G&G Luxury Yachts USA Corp at: info@ggyachts.com

5. Legal Basis and Mandatory or Optional Nature of Processing

• The legal basis for the processing of personal data for the purpose referred to in section 3 (d,e) is Art. 6(1)(a) of the Regulation, as the processing is subject to the acquisition of explicit consent.
• The legal basis for the processing of personal data for the purposes referred to in section 3 (a,b,c,f) is Art. 6(1)(b) of the Regulation, as the processing is necessary for the provision of services or for responding to requests from the data subject.

The provision of personal data for these purposes is optional, but any failure to provide it would make it impossible to activate the services provided by the website, respond to requests, or evaluate CVs.

With specific reference to the purpose referred to in section 3(d) and the related analysis of professional social media profiles made freely available on the Internet referred to in section 2, the legal basis for the processing is Art. 6(1)(f) of the Regulation, i.e., the legitimate interest of G&G Luxury Yachts USA Corp in verifying any risks to the candidate's suitability for specific positions.

6. Recipients of Personal Data

Your personal data may be shared, for the purposes referred to in section 3, with:

• a. subjects acting as Data Processors, i.e.: subjects with whom it is necessary to interact for the provision of services (for example, hosting providers), or subjects delegated to perform technical maintenance activities;
• b. subjects, entities, or authorities to whom it is mandatory to communicate your personal data by virtue of legal provisions or orders from authorities;
• c. individuals authorized by G&G Luxury Yachts USA Corp to process personal data necessary to carry out activities strictly related to the provision of services, who have committed to confidentiality (e.g. employees of G&G Luxury Yachts USA Corp).

7. Transfer of Personal Data

To enable the execution of the purposes referred to in section 3(e), the collected data may be transferred abroad, including outside the European Union, in the forms and ways provided for by current legislation, guaranteeing an adequate level of protection in any case.

For sending commercial and marketing communications, G&G Luxury Yachts USA Corp uses MailUp, an Independent Data Controller, a proprietary mailing platform which, through statistical tracking systems, allows the detection of the opening of a message, clicks on the hypertext links contained within the email, from which IP address or with what type of browser the email is opened, and other similar details. The collection of this data is functional to the use of the platform and constitutes an integral part of the message sending system's functionalities.

8. Data Subject Rights

The data subject is granted specific rights:

• The data subject has the right to obtain confirmation as to whether or not personal data concerning them exists, even if not yet recorded, and to have it communicated in an intelligible form;
• The data subject also has the right to be informed: of the source of the personal data; of the purposes and methods of processing; of the logic applied in case of processing carried out with the aid of electronic tools; of the identity of the controller, processors, and designated representative, and their contact details; of the entities or categories of entities to whom the personal data may be communicated or who may become aware of it as designated representative in the territory of the State, as processors or persons in charge of processing.
• The data subject also has the right to obtain: the legitimate interests pursued by the data controller or by third parties, any recipients or categories of recipients of the personal data; the intention of the data controller to transfer personal data to a third country or an international organization and the existence or absence of an adequacy decision by the Commission; the data retention period or, if not possible, the criteria used to determine this period; the existence of automated decision-making; the right to lodge a complaint with a supervisory authority; the right to be informed if the communication of data constitutes a legal or contractual obligation or a necessary requirement for the conclusion of a contract.
• The data subject also has the right to obtain: a) the updating, rectification, or, where interested, integration of the data; b) the erasure, transformation into anonymous form or blocking of data processed unlawfully, including data whose retention is unnecessary for the purposes for which the data were collected or subsequently processed; c) certification that the operations referred to in letters a) and b) of this paragraph have been brought to the attention, also as regards their content, of those to whom the data have been communicated or disseminated, except in the case where this fulfillment proves impossible or involves a manifestly disproportionate use of means compared to the right protected.
• Finally, the data subject has the right to object, in whole or in part: a) for legitimate reasons, to the processing of personal data concerning them, even if relevant to the purpose of the collection; b) to the processing of personal data concerning them for the purpose of sending advertising material or direct sales or for carrying out market research or commercial communication.

The data subject can exercise the rights listed above by contacting the Data Protection Officer at the following address: info@ggyachts.com

G&G Luxury Yachts USA Corp will promptly provide an appropriate response, and in any case within a period not exceeding 1 month. In case of particular complexity, the response period, pursuant to the Regulation, may be 3 months. In any case, the controller will inform the data subject within 1 month of the request, including to communicate a denial in the cases specifically contemplated in the current provisions.

9. Right to Lodge a Complaint with a Supervisory Authority

We also inform you that, pursuant to Articles 77 et seq. of EU Regulation 2016/679, if the data subject believes their rights have been violated, they may contact the Guarantor for the Protection of Personal Data (or the relevant Supervisory Authority in their jurisdiction) as well as the ordinary judicial authority.

10. Language

Any translation of this document into a language other than English is provided for informational purposes only. In case of discrepancies, the English version of this document is the only legally valid and binding version.