PRIVACY POLICY

We inform you that the identification and contact data of your employees and/or collaborators and/or legal

representatives, as well as of the users of the In-Yacht software (together "Data Subjects") will be processed

1. Nature of the data

The personal data of the Data Subjects, collected and processed exclusively insofar as they relate to your

company, will be those of your representatives, proxies, employees and collaborators with whom our company

has contact, necessary to achieve these purposes ("contact data") (name, surname, email address and telephone

number) or for the signing of contracts ("contract data") and in this case will be exclusively identification data.

Personal data of In-Yacht users relating to the use of the software itself (e.g. logs) may also be processed.

2.2 Personal data may also be processed where necessary to comply with any legislation with which the

company is required to comply.

2.3 Certain information generated in the context of the use of the In-Yacht platform, such as log data, may

be processed for security purposes and troubleshooting of IT issues (e.g. bugs).

2.4 The data connected with the use of the In-Yacht platform may also be processed in order to conduct

statistical analyses for the development and improvement of the software.

2.5 Lastly, personal data may be processed for the exercise and defence of the Company's rights in all

For the purpose referred to in paragraph 2.1, the processing of personal data is carried out on the basis

of the legitimate interest of the customer and the Company in the proper and effective management of

their business relations (Art. 6 c. 1 lett. f) of the Regulation).

The processing of personal data referred to in paragraph 2.2 is carried out insofar as it is necessary to

comply with legal obligations (Art. 6 c. 1 lett c) of the Regulation).

lett. f) of the Regulation).

The processing of personal data referred to in paragraph 2.5 will be carried out, if necessary, on the basis

of the Company's legitimate interest in protecting itself in court (Art. 6 c. 1 lett. f) of the Regulation).

3.2. Processing methods

Personal data will be processed by means of hard copy and IT tools, using instruments and procedures

that guarantee security and confidentiality, in compliance with the provisions in force on the protection

of personal data.

We inform the Data Subjects that within the limits strictly pertinent to the obligations, tasks or purposes

indicated above, the personal data collected may be communicated to independent third parties (such as public

bodies) for legal fulfilments and/or to third parties who carry out auxiliary activities on behalf of the Company

(such as third parties who provide banking or accounting and tax services), who, where required by the

regulations in force, are appointed by the Company as data processors pursuant to Article 28 of the Regulation.

In addition, personal data may be accessed by or communicated to Amico Servizi Srl, an Amico Group

company, for administration and accounting purposes.

5. Data retention period

Personal data referred to in paragraphs 2.1 and 2.2 will be stored for no longer than is necessary to fulfil

obligations or tasks required by law, regulations or contractual provisions.

The personal data referred to in purpose 2.3 are stored for different periods of time depending on the type of

data. You can request details of these timeframes by writing to the email address at the end of this notice.

The personal data referred to in purpose 2.4 will be stored for no longer than is necessary for the pursuit of the

6. Compulsory or optional nature of providing personal data, consequences of a refusal to the

provision

We would like to inform you that, among the rights conferred on Data Subjects by the Regulation, they have,

in particular, the right to request from the Data Controller access to their personal data, to obtain their update

and rectification or (in the cases provided for by the Regulation) their deletion, the restriction of the processing

concerning them or to object to their processing; where provided for by the Regulation, they also have the right

to receive such personal data in a structured, commonly used and machine-readable format and to transmit

them to another Data Controller without hindrance. They also have the right to lodge a complaint with the Data

Protection Authority in accordance with the law.