PRIVACY NOTICE FOR THE PROCESSING OF PERSONAL DATA

With this document, we inform you that your data will be processed in the following ways and for the following purposes:

JOINT CONTROLLERS AND DATA PROTECTION OFFICER

The companies of the RINA Group (hereinafter the "Joint Controllers" or "RINA") are the Joint Controllers of the processing and can be reached through the contacts indicated on the website www.rina.org. The Data Protection Officer can be contacted at the email address rina.dpo@rina.org.

The Joint Controllers have defined an agreement in which their respective roles and relationships have been identified. In summary, the Joint Controllers undertake to carry out all the obligations provided by the personal data protection regulations, in full compliance with the guidelines, the code of ethics, and the Group's procedures. Personal data is processed according to the principles of legality, fairness, and minimization, ensuring confidentiality and privacy. The agreement provides that the contact point for exercising the rights of the data subjects is the email address: rina.dpo@rina.org.

1. APPLICABILITY OF THE NOTICE AND TYPES OF PERSONAL DATA PROCESSED

Your personal data is collected automatically while browsing the site.

When accessing, information about the user (e.g., type of device, browser, date and time of visit, pages visited) is collected. This data, necessary to ensure the site's functionality and effectiveness, includes information such as cookies and tracking tools that may allow indirect identification of users. For more details on the cookies used, refer to the cookie policy and preference management on the site.

Personal data contained in access logs, use of digital services (e.g., websites, applications, and/or collaborative platforms) by registered users, and related security functions, as well as data related to the devices you use (e.g., IP address and technical specifications of the device), will also be processed.

2. PURPOSES AND LEGAL BASIS FOR PROCESSING

The processing of the above-mentioned data will pursue the following purposes:

  - responding to requests for information or support through data voluntarily provided by the user;

A refusal to provide data will result in the inability to respond to your requests for information and/or support.

The legal basis that legitimizes the processing of the aforementioned data lies in the execution of pre-contractual measures adopted at your request so that you can receive responses to the requests for information or support submitted.

 - use of data necessary to ensure the site's functionality and effectiveness, including information such as cookies and tracking tools that may allow indirect identification of users;

 - ensuring the exercise of RINA's right of defense.

The legal basis for these processes coincides with RINA's legitimate interest in ensuring the site's functionality and the ability to use it effectively. You can object to this purpose at any time by requesting to disable your account as described in point 6 of this notice.

3. METHODS OF PROCESSING AND DATA STORAGE

The data processed in the context of service provision will be stored for the time strictly necessary to achieve the purposes indicated in the notice, and in any case no longer than 10 years from their collection.

Browsing/log data will be deleted within six months of the event that generated them.

In exceptional and duly documented cases, data may be stored for longer periods to protect your rights or those of RINA, limiting access to the legal office manager only.

4. DATA RECIPIENTS

Your data may be made accessible for the purposes referred to in paragraph 2, in addition to the subjects authorized to process by RINA, also to the following recipients:

 - companies or other third parties (professional firms, consultants, suppliers, entities providing services for the management of the information system and telecommunications networks, etc.) used by RINA bound by appropriate legal instruments, including data processors;

 - public entities, supervisory bodies, judicial and control authorities, accreditation or notification bodies, auditing firms, etc., for the fulfillment of legal or sector regulatory obligations.

5. DATA TRANSFER

Personal data is stored on servers located within the European Union. However, it is understood that RINA, if necessary, will have the right to transfer personal data to non-EU countries. In this case, the transfer of data outside the EU will be carried out in accordance with applicable legal provisions, including through the provision of standard contractual clauses provided by the European Commission and the adoption of binding corporate rules for intra-group transfers.

6. DATA SUBJECT'S RIGHTS

As a data subject, you have the right to:

 I. Obtain confirmation of the existence or otherwise of personal data processing concerning you, as well as obtain a copy of the said data;

 II. Obtain the indication: a) of the origin of personal data; b) of the purposes and methods of processing; c) of the logic applied in case of processing carried out with the aid of electronic instruments; d) of the identification details of RINA, the data processors, and the data protection officer; e) of the subjects or categories of subjects to whom personal data may be communicated or who may become aware of it as designated representatives in the State's territory, data processors, or persons in charge;

 III. Obtain: a) the updating, rectification, or integration of data; b) the deletion, transformation into anonymous form, or blocking of data processed in violation of the law; c) the certification that the operations referred to in letters a) and b) have been notified, also regarding their content, to those to whom the data has been communicated or disseminated, unless this proves impossible or involves a disproportionate effort; d) obtain from RINA in a structured, commonly used, and intelligible format the personal data concerning you and, where technically feasible, obtain the direct transmission of the said data from one controller to another;

 IV. Object a) to the processing of your personal data, even if pertinent to the purpose of collection; b) to the processing of your personal data for the purpose of sending advertising material or commercial communication via email;

 V. Revoke the consent previously given.

As a data subject, you also have the right to lodge a complaint with the competent supervisory authority.

7. EXERCISING RIGHTS AND COMMUNICATIONS

The RINA Group has appointed a Data Protection Officer, who can be contacted at any time for all matters relating to the processing of your personal data and the exercise of related rights by sending an email to rina.dpo@rina.org.

PRIVACY NOTICE UPDATE

This notice is updated as of March 2025.

RINA reserves the right to further update the content of this notice to reflect changes in applicable privacy regulations and internal data protection procedures. RINA invites you to periodically consult the website www.rina.org for information on any changes.

Cookie Policy

RINA S.p.A., with registered office in Genoa (GE), via Corsica 12, Tax Code and VAT No. 03794120109, and the companies of the RINA Group (hereinafter also RINA) are the Joint Controllers of the processing pursuant to Article 26 GDPR, reachable through the contacts indicated on the website www.rina.org. The Data Protection Officer can be contacted at the email address rina.dpo@rina.org.

The processing of Users' personal data is carried out in accordance with the current law, with particular reference to Regulation (EU) No. 679/2016, applicable to the use of cookies, and the related guidelines on the management of cookies and other tracking tools.

A cookie is a small text file that is recorded in the browser's temporary memory when a website is visited. The file stores certain information, which the site can read when it is accessed again later, and which may be necessary for the proper functioning of the site and to improve its usability. For example, cookies can determine if a connection has already been made between the computer and the site, highlight new features, or maintain "login" information.

RINA informs that its websites use technical cookies, analytical cookies, functional cookies, and profiling cookies, which for site optimization purposes may collect information, in aggregate or non-aggregate form, on the number of users and how they visit the site.

As required by applicable law, with reference to the legal basis of the processing, your prior consent is required for the installation of analytical, functional, and profiling cookies. For this reason, when accessing the Site or specific pages of it, a banner is displayed informing that (i) analytical, functional, and profiling cookies are used on the Site; (ii) you can accept the use of all cookies or decide to manage your preferences (deciding which to accept and which to refuse); (iii) by closing the banner through the appropriate command or continuing to browse, you do not consent to the use of analytical, functional, and profiling cookies, maintaining the default settings and thus the use of only technical cookies. In any case, you can also manage your consents with reference to each category of cookies used, when the aforementioned banner is displayed and at any time during site navigation in the appropriate sections.  

You will still be free to block the installation of analytical, functional, and profiling cookies at any time, without compromising the ability to visit the site and enjoy its contents.

For any further information on the topic of cookies, please refer to the following link: https://www.garanteprivacy.it/temi/cookie.

You can exercise the rights referred to in Articles 15 – 21 GDPR, as well as the right to lodge a complaint with the competent Authority referred to in Article 77 GDPR.

The RINA Group has appointed a Data Protection Officer, who can be contacted for all matters relating to the processing of your personal data and the exercise of related rights by sending an email to rina.dpo@rina.org.

Below is the detail of the active cookies on the different pages of the site and their characteristics.