With this document, we inform you that your data will be processed in the following ways and for the following purposes:
The companies of the RINA Group (hereinafter the "Joint Controllers" or "RINA") are the Joint Controllers of the processing and can be reached through the contacts indicated on the website www.rina.org. The Data Protection Officer can be contacted at the email address rina.dpo@rina.org.
The Joint Controllers have defined an agreement in which their respective roles and relationships have been identified. In summary, the Joint Controllers undertake to carry out all the obligations provided by the personal data protection regulations, in full compliance with the guidelines, the code of ethics, and the Group's procedures. Personal data is processed according to the principles of legality, fairness, and minimization, ensuring confidentiality and privacy. The agreement provides that the contact point for exercising the rights of the data subjects is the email address: rina.dpo@rina.org.
Your personal data is collected automatically while browsing the site.
When accessing to obtain information about RINA Group services, without registering for specific services or sections, information about the user (e.g., type of device, browser, date and time of visit, pages visited) is collected. This data, necessary to ensure the site's functionality and effectiveness, includes information such as cookies and tracking tools that may allow indirect identification of users. For more details on the cookies used, refer to the cookie policy and preference management on the site.
Additionally, further personal information (e.g., name, surname, email address, job position) may be voluntarily provided through forms on the site, such as "Contacts" or registrations for webinars and/or events.
Personal data contained in access logs, use of digital services (e.g., websites, applications, and/or collaborative platforms) by registered users, and related security functions, as well as data related to the devices you use (e.g., IP address and technical specifications of the device), will also be processed.
The processing of the above-mentioned data will pursue the following purposes:
- responding to requests for information or support through data voluntarily provided by the user;
A refusal to provide data will result in the inability to respond to your requests for information and/or support.
The legal basis that legitimizes the processing of the aforementioned data lies in the execution of pre-contractual measures adopted at your request so that you can receive responses to the requests for information or support submitted.
- use of data necessary to ensure the site's functionality and effectiveness, including information such as cookies and tracking tools that may allow indirect identification of users;
- in case of a previously established relationship with RINA (subscription to a contract, submission of a request for information or support, participation in one of our events), sending newsletters, promotional material for services, or involvement in RINA initiatives similar to those subject to the relationship, or measuring satisfaction with the quality of products and/or services subject to the contract/service, by sending surveys or requests via email or phone contacts;
- ensuring the exercise of RINA's right of defense.
The legal basis for these processes coincides with RINA's legitimate interest in ensuring the site's functionality and the ability to use it effectively. You can object to this purpose at any time by requesting to disable your account as described in point 6 of this notice.
- sending newsletters, promotional material, or involvement in RINA initiatives only for data subjects with whom no previous relationship has been established or in the case of communications about services not similar to those subject to the ongoing relationship.
The legal basis for these processes is your consent; you will always be free to revoke it in the manner indicated in paragraph 6 of this notice. Refusal to consent to the processing will only result in the inability to receive newsletters, promotional material, or engagement in collaborative initiatives
The data processed in the context of service provision will be stored for the time strictly necessary to achieve the purposes indicated in the notice, and in any case no longer than 10 years from the termination of the contractual relationship or 2 years from collection for marketing or engagement purposes, unless consent is renewed.
Browsing/log data will be deleted within six months of the event that generated them.
In exceptional and duly documented cases, data may be stored for longer periods to protect your rights or those of RINA, limiting access to the legal office manager only.
Your data may be made accessible for the purposes referred to in paragraph 2, in addition to the subjects authorized to process by RINA, also to the following recipients:
- companies or other third parties (professional firms, consultants, suppliers, entities providing services for the management of the information system and telecommunications networks, etc.) used by RINA bound by appropriate legal instruments, including data processors;
- public entities, supervisory bodies, judicial and control authorities, accreditation or notification bodies, auditing firms, etc., for the fulfillment of legal or sector regulatory obligations.
Personal data is stored on servers located within the European Union. However, it is understood that RINA, if necessary, will have the right to transfer personal data to non-EU countries. In this case, the transfer of data outside the EU will be carried out in accordance with applicable legal provisions, including through the provision of standard contractual clauses provided by the European Commission and the adoption of binding corporate rules for intra-group transfers.
As a data subject, you have the right to:
i. Obtain confirmation of the existence or otherwise of personal data processing concerning you, as well as obtain a copy of the said data;
ii. Obtain the indication: a) of the origin of personal data; b) of the purposes and methods of processing; c) of the logic applied in case of processing carried out with the aid of electronic instruments; d) of the identification details of RINA, the data processors, and the data protection officer; e) of the subjects or categories of subjects to whom personal data may be communicated or who may become aware of it as designated representatives in the State's territory, data processors, or persons in charge;
iii. Obtain: a) the updating, rectification, or integration of data; b) the deletion, transformation into anonymous form, or blocking of data processed in violation of the law; c) the certification that the operations referred to in letters a) and b) have been notified, also regarding their content, to those to whom the data has been communicated or disseminated, unless this proves impossible or involves a disproportionate effort; d) obtain from RINA in a structured, commonly used, and intelligible format the personal data concerning you and, where technically feasible, obtain the direct transmission of the said data from one controller to another;
iv. Object a) to the processing of your personal data, even if pertinent to the purpose of collection; b) to the processing of your personal data for the purpose of sending advertising material or commercial communication via email;
v. Revoke the consent previously given.
As a data subject, you also have the right to lodge a complaint with the competent supervisory authority.
The RINA Group has appointed a Data Protection Officer, who can be contacted at any time for all matters relating to the processing of your personal data and the exercise of related rights by sending an email to rina.dpo@rina.org. Please note that you have the right to revoke the consent given at any time by writing to rina.dpo@rina.org; as well as by accessing your personal Preference Center.
This notice is updated as of March 2025.
RINA reserves the right to further update the content of this notice to reflect changes in applicable privacy regulations and internal data protection procedures. RINA invites you to periodically consult the website www.rina.org and your Preference Center for information on any changes.