Privacy Policy

Privacy Notice for the Processing of Personal Data

With this document, we inform you that your personal data will be processed in accordance with applicable data protection laws and regulations, including Regulation (EU) 2016/679 (“GDPR”), and for the purposes described below.

Joint Controllers and Data Protection Officer

The companies of the RINA Group, including Foreship Group companies (hereinafter the “Joint Controllers” or “RINA”), act as joint controllers of the processing of personal data.

The Joint Controllers have defined an agreement in which their respective roles and relationships have been identified. In summary, the Joint Controllers undertake to carry out all the obligations provided by the personal data protection regulations, in full compliance with the guidelines, the code of ethics, and the Group's procedures. Personal data is processed according to the principles of legality, fairness, and minimization, ensuring confidentiality and privacy. 

The Data Protection Officer (DPO) of the RINA Group can be contacted at the following email address: rina.dpo@rina.org

This contact point may be used for any request relating to the processing of personal data or to exercise your rights under applicable data protection legislation.

 

1.Applicability of the Notice and Types of Personal Data Processed

Your personal data is collected automatically while browsing the site.

When accessing to obtain information about RINA Group services, without registering for specific services or sections, information about the user (e.g., type of device, browser, date and time of visit, pages visited) is collected. This data, necessary to ensure the site's functionality and effectiveness, includes information such as cookies and tracking tools that may allow indirect identification of users.

For further information on cookies and similar technologies, please refer to the relevant section available on the website.

Additionally, further personal information (e.g., name, surname, email address, job position) may be voluntarily provided through forms on the site, such as "Contacts" or registrations for webinars and/or events.

Personal data contained in access logs, use of digital services (e.g., websites, applications, and/or collaborative platforms) by registered users, and related security functions, as well as data related to the devices you use (e.g., IP address and technical specifications of the device), will also be processed.

 

2. Purpose and Legal Basis for Processing

The processing of the above-mentioned data will pursue the following purposes:

- responding to requests for information or support through data voluntarily provided by the user;

A refusal to provide data will result in the inability to respond to your requests for information and/or support.

The legal basis that legitimizes the processing of the aforementioned data lies in the execution of pre-contractual measures adopted at your request so that you can receive responses to the requests for information or support submitted.

- use of data necessary to ensure the site's functionality and effectiveness, including information such as cookies and tracking tools that may allow indirect identification of users;
- in case of a previously established relationship with RINA (subscription to a contract, submission of a request for information or support, participation in one of our events), sending newsletters, promotional material for services, or involvement in RINA initiatives similar to those subject to the relationship, or measuring satisfaction with the quality of products and/or services subject to the contract/service, by sending surveys or requests via email or phone contacts;
- ensuring the exercise of RINA's right of defense.

The legal basis for these processes coincides with RINA's legitimate interest in ensuring the site's functionality and the ability to use it effectively. You can object to this purpose at any time by requesting to disable your account as described in point 6 of this notice.

- sending newsletters, promotional material, or involvement in RINA initiatives only for data subjects with whom no previous relationship has been established or in the case of communications about services not similar to those subject to the ongoing relationship.

The legal basis for these processes is your consent; you will always be free to revoke it in the manner indicated in paragraph 6 of this notice. Refusal to consent to the processing will only result in the inability to receive newsletters, promotional material, or engagement in collaborative initiatives

 

3.Processing Methods and Data Retention

Processing can be carried out in paper or electronic format.

The data processed will be stored for the time strictly necessary to achieve the purposes indicated in the notice and, in any case, no longer than 10 years from the termination of the relationship or 2 years from collection for marketing purposes, unless consent is renewed.

The data with which you registered on Digital Services will be processed for two years from your last access; after this period, your profile will be deleted.

Navigation/log data will be deleted within six months of the event that generated them.

In exceptional and properly documented cases, data may be retained for longer periods to protect your or Foreship 's rights, limiting access to the legal office only.

 

4. Data Recipients

Your data may be made accessible for the purposes referred to in paragraph 2, in addition to the subjects authorized to process by RINA, also to the following recipients:

- companies of the RINA Group
- companies or other third parties (professional firms, consultants, suppliers, entities providing services for the management of the information system and telecommunications networks, etc.) used by RINA bound by appropriate legal instruments, including data processors;
- public entities, supervisory bodies, judicial and control authorities, accreditation or notification bodies, auditing firms, etc., for the fulfillment of legal or sector regulatory obligations.

 

5.Data Transfer

As a rule, personal data are stored on servers located within the European Union. However, should it become necessary, RINA may transfer personal data to non-EU countries, including without limitation where the personal data is to be processed by a RINA Company established outside the European Union (such as in the United Kingdom or the United States). In such cases, the transfer of data outside the EU will be in accordance with applicable legal provisions, including standard contractual clauses established by the European Commission and the adoption of binding corporate rules for intra-group transfers.

 

6.Data Subject Rights

As a data subject, you have the right to:

1. Obtain confirmation of the existence or otherwise of personal data processing concerning you, as well as obtain a copy of the said data;
2. Obtain the indication: a) of the origin of personal data; b) of the purposes and methods of processing; c) of the logic applied in case of processing carried out with the aid of electronic instruments; d) of the identification details of RINA, the data processors, and the data protection officer; e) of the subjects or categories of subjects to whom personal data may be communicated or who may become aware of it as designated representatives in the State's territory, data processors, or persons in charge;
3. Obtain: a) the updating, rectification, or integration of data; b) the deletion, transformation into anonymous form, or blocking of data processed in violation of the law; c) the certification that the operations referred to in letters a) and b) have been notified, also regarding their content, to those to whom the data has been communicated or disseminated, unless this proves impossible or involves a disproportionate effort; d) obtain from RINA in a structured, commonly used, and intelligible format the personal data concerning you and, where technically feasible, obtain the direct transmission of the said data from one controller to another;
4. Object a) to the processing of your personal data, even if pertinent to the purpose of collection; b) to the processing of your personal data for the purpose of sending advertising material or commercial communication via email;
5. Revoke the consent previously given.

As a data subject, you also have the right to lodge a complaint with the competent supervisory authority.

 

7.Exercising Your Rights

The RINA Group has appointed a Data Protection Officer, who can be contacted at any time for all matters relating to the processing of your personal data and the exercise of related rights by sending an email to rina.dpo@rina.org. Please note that you have the right to revoke the consent given at any time by writing to rina.dpo@rina.org

 

Updates to this Notice

RINA reserves the right to update this privacy notice to reflect changes in applicable legislation or internal procedures. Users are encouraged to periodically review this page.

 

For Foreship suppliers, please visit the privacy notice here.