Privacy notice & cookie policy

RINA S.p.A., with registered office in Genoa (GE), via Corsica 12, Italy, VAT no. IT03794120109, and the other RINA Group Companies are the Joint Data Controllers pursuant to art. 26 GDPR, who can be reached through the contacts indicated on the website www.rina.org. The Data Protection Officer may be contacted at the e-mail address rina.dpo@rina.org.

Your personal data is collected automatically while browsing the site.

While browsing to acquire information on the services provided by the Rina Group, i.e. without being registered for services or sections of the website, we will automatically collect and store certain user information (for example the type of device, the browser used, the date and time of visit, pages viewed) to help us provide an effective service (e.g. to adapt our website to the needs of your device - pc or tablet or smartphone - or to allow you to access restricted areas of our website). Furthermore, the normal functioning of the website makes it necessary to acquire some personal data which are not collected to be associated with identified data subject but which, by their very nature, could allow users to be identified through processing and association with data held by third parties, such as cookies or other tracking tools. For more information on the cookies used by the site, read the cookies policy at the bottom of this notice and visit www.rina.org in the specific sections dedicated to managing cookie preferences. The personal data collected is, therefore, necessary to guarantee access to the website.

The legal basis for this processing activity is the legitimate interest of the Data Controller in guaranteeing the functioning of the site and the possibility of using it effectively (art. 6, par. 1, lit.f) GDPR).
In addition, by using the website and browsing the individual sections, the user could provide further information by filling in the various forms: by way of example, the "Contacts" form, registrations for webinars and events. The data you could be asked are: name, surname, e-mail address, telephone number, any additional data included in the accompanying message (where provided); data may also be acquired relating to one's position in the company to which one belongs and, if necessary, also the job position held therein.
The legal basis that legitimizes the processing of the aforementioned data lies in the execution of pre-contractual measures adopted at the request of the data subject, so that he can be answered to requests for information or support forwarded, pursuant to art. 6, par. 1, lit. b) GDPR.

RINA, in fact, collects and uses these categories of personal data only to provide you with the services requested, to manage your registration, identify you and communicate with you.
In cases where a relationship with the Joint Controllers has previously been established (because a contract was signed, or because a request for information or support was made, or because you took part in one of our events), we may also contact you to detect the degree of satisfaction on the quality of the products and/or services covered by the contract/service, by sending surveys or requests via e-mail or via telephone contacts or also by sending you newsletters, commercial communications and/or advertising material on products and/or services offered by the company similar to those covered by the contract/service.

The legal basis of this processing coincides with the legitimate interest of the Data Controller to improve the quality of the services and to consolidate the contractual relationship already established with the data subject by keeping it updated, providing support, as well as improving the service (art. 6, par. 1, lit. f) GDPR).

Apart from the cases described above and regardless of the creation of an account on our website, provided that a contract has not been signed between the parties, the use of personal data for the possible sending of newsletters, advertising material, commercial information, sale of products or services by the Joint Controllers, can only take place after the user consent, by ticking the appropriate box in the specific sections of the site. The provision of this data is optional. You are therefore free to express your consent or refusal and to subsequently revoke the consent initially given. The legal basis of the processing above, can be found in the consent pursuant to art. 6, par. 1, lit. a) of the GDPR. Any refusal to consent to processing will result in the impossibility of receiving newsletters, commercial communications and advertising material on all RINA-branded products or services offered by the Joint Controllers.

Personal data is processed by the Data Controller in compliance with the principles of lawfulness, correctness, and transparency.

The Joint Data Controllers will process the personal data for the time necessary to fulfill the aforementioned purposes. For marketing purposes only, the data will be processed for two years from the provision of consent

Your data may be made accessible to the following recipients:

- to companies or other third parties (professional firms, consultants, suppliers, subjects who provide services for the management of the information system and telecommunications networks, etc.) who carry out outsourced activities on behalf of the Data Controller and who have been formally appointed Data Processors;

- public entities, for the fulfillment of legal obligations.

Without requiring your explicit consent, the Joint Controllers may communicate your data to supervisory bodies (such as ANAC), judicial authorities, insurance companies for the provision of insurance services, as well as to those subjects to whom the communication is mandatory by law for the accomplishment of said purposes.

Personal data are stored on servers located within the European Union. In any case, it is understood that, should this be necessary, the Joint Data Controllers will have the right to move the servers even outside the EU. In such a case, the Joint Data Controllers hereby guarantee that transfers of data outside the EU will be done in accordance with the applicable laws, also by means of including standard contractual clauses provided for by the European Commission and adopting binding corporate rules for intra-group transfers. 

In your capacity as the data subject of the processing in question, you have the rights provided for in the GDPR, including the right to ask the Joint Data Controllers, by contacting the Data Protection Officer for: access to the personal data, indication of the means, purposes and logics involved in the processing, the right to object, to request restriction of processing, data portability, rectification and erasure of the same, within the limits and in the ways provided for in the GDPR. 

Where processing of data is based on consent, you have the right to withdraw it at any time. 

In addition, you always have the right to object to the sending of newsletters and processing data for marketing or commercial purposes.  

Therefore, in your capacity as the data subject, you have the rights pursuant to Arts. 15 – 21 of GDPR, as well as the right to lodge a complaint with the competent Authority pursuant to art. 77 of GDPR.

The Joint Data Controllers have appointed a Data Protection Officer, who can be contacted for all matters related to processing of your personal data and the exercising of related rights.

Therefore, you may contact the Data Protection Officer at any time, using the following procedures:

- by sending a registered letter with notification of receipt to RINA S.p.A., via Corsica 12,16128 Genoa, Italy, for the attention of the Data Protection Officer, or by
- sending an e-mail message to rina.dpo@rina.org.
The withdrawal of consent for the newsletter service is possible by:
- unsubscribe from the mailing list for the newsletter service through the link that you will find at the bottom of the communication.
- where possible by accessing your private area and changing your preferences.