Privacy Policy

This privacy notice is provided to individuals who spontaneously, or in response to a job vacancy, submit their curriculum vitae to BOAT LIFT S.R.L., pursuant to Article 13 of Italian Legislative Decree no. 196 of June 30, 2003 (“Personal Data Protection Code”) and Article 13 of Regulation (EU) 2016/679 (“General Data Protection Regulation” – GDPR).

Data Controller Identity

The Data Controller processing the personal data of natural persons, or individuals acting on behalf of corporate clients, is BOAT LIFT S.R.L., with registered office at Strada Provinciale Alba-Narzole, 19, 12055 Diano D’Alba (CN), Italy.

Source of Personal Data

The personal data processed are those provided in the context of:

  • Submission of a curriculum vitae;

  • Evaluation interviews;

  • Direct contacts during exhibitions, trade fairs, events, etc.;

  • Referrals by third parties.

Purpose of processing

The personal data of individuals who submit their CVs, either spontaneously or in response to a job posting, are processed for purposes related to recruitment and candidate evaluation, and possibly to propose other job opportunities consistent with the candidate’s professional profile.

Legal Basis for Processing

The legal basis for processing is the implementation of pre-contractual measures taken at the request of the data subject.

Recipients of Personal Data

Personal data processed by the Controller will not be disseminated—meaning they will not be disclosed to unspecified parties in any form, including making them available for simple consultation.

However, data may be communicated to the Controller’s employees, certain external collaborators, or companies and consultants appointed as external Data Processors. Finally, data may be disclosed to parties authorized to access them by virtue of legal provisions, regulations, or EU legislation. Specifically, based on their roles and duties, certain employees have been authorized to process personal data within the limits of their competence and in accordance with the instructions provided by the Controller.

Data Transfer

IThe Data Controller does not transfer personal data to third countries or international organizations. However, the Controller reserves the right to use cloud services; in such cases, service providers will be selected from those who provide adequate safeguards as required by Art. 46 of GDPR 679/16.

Data Retention

The Data Controller stores and processes personal data for the time necessary to fulfill the stated purposes. Specifically, all aforementioned data will be retained for a period not exceeding thirty (30) months from the date of receipt.

Rights of the Data Subject

In reference to Art. 7 of Legislative Decree 196/2003 and Articles 15–22 of GDPR 679/16, the data subject may exercise the following rights:

  • Art. 15: Right of access

  • Art. 16: Right to rectification

  • Art. 17: Right to erasure (Right to be forgotten)

  • Art. 18: Right to restriction of processing

  • Art. 20: Right to data portability

  • Art. 21: Right to object

  • Art. 22: Right to object to automated decision-making

To exercise these rights, the data subject may write to the Data Controller at the physical address provided above or via email at info@boatlift.it, specifying the subject of the request and the right they intend to exercise, while attaching a photocopy of an identity document to verify the legitimacy of the request.

Withdrawal of Consent

With reference to Art. 23 of Legislative Decree 196/2003 and Art. 6 of GDPR 679/16, the data subject may withdraw any consent previously given at any time. However, the processing described in this notice is lawful and permitted even without explicit consent, as it is intended for the execution of pre-contractual measures (candidate evaluation and selection) adopted upon the implicit request of the data subject. To request erasure, please email info@boatlift.it. The Controller will acknowledge receipt and process the request within 48 (forty-eight) business hours.

Right to Lodge a Complaint

The data subject has the right to lodge a complaint with the supervisory authority of their state of residence.

Refusal to Provide Data

The data subject may refuse to provide their personal data to the Controller. Providing data is optional; however, a refusal to provide some or all data may make it impossible for us to evaluate or select the candidacy.

Automated Decision-Making

The Controller does not subject the data of those who submit their CVs (spontaneously or via job search) to any processing involving automated decision-making processes.

This information is provided to natural persons who access and consult the BOAT LIFT S.R.L. website, pursuant to Art. 13 of Legislative Decree no. 196 of June 30, 2003 ("Personal Data Protection Code") and Art. 13 of GDPR 679/16 ("European General Data Protection Regulation").

Data Controller Identity

This website is managed by BOAT LIFT S.R.L., with registered office at Strada Provinciale Alba-Narzole, 19 12055 Diano D’Alba (Cn), Italy.

The Data Controller guarantees the security, confidentiality, and protection of the personal data in its possession at every stage of the processing. Collected personal data is used in compliance with Legislative Decree 196/2003 and GDPR 679/16.

Data Subjects

This policy is addressed to individuals who fill out the "Contact" form provided on the website www.boatlift.it. of BOAT LIFT S.R.L., with registered office at Strada Provinciale Alba-Narzole, 19 12055 Diano D’Alba (Cn), Italy.

Source of Data

Data is provided voluntarily by the data subject through the contact form on the aforementioned website.

Purposes of Processing

Personal data of individuals who complete the "Contact" form is processed solely to process and fulfill their specific requests.

Legal Basis for Processing

The processing is lawful as it is necessary for the performance of pre-contractual measures and information provided at the request of the data subject (the submitted inquiry).

Data Recipients

Personal data processed by the Data Controller will not be disseminated—meaning it will not be made known to indeterminate subjects in any possible form, including making it available or simple consultation. However, it may be communicated to the collaborators of BOAT LIFT S.R.L. and, within the strictly necessary limits, to subjects who must provide goods and/or perform services or tasks on our behalf for the purpose of fulfilling your request. Finally, data may be communicated to subjects entitled to access it by virtue of legal provisions, regulations, or EU legislation

Data Transfer

The Data Controller does not transfer personal data to third countries or international organizations. However, the Controller reserves the possibility of using cloud services; in such cases, service providers will be selected from among those who provide adequate guarantees, as provided for by Art. 46 of GDPR 679/16.

Data Retention

Personal data voluntarily provided by the data subject will be processed by the Controller and stored for a period of 5 years, after which it will be deleted if a contractual relationship (customer-supplier-employee) has not been established. If a contractual relationship is established, specific information notice will be provided.

Rights of the Data Subject

The individuals to whom the personal data refers have the right at any time to obtain confirmation of whether or not such data exists and to know its content and origin, verify its accuracy, or request its integration, updating, or rectification (Article 7 of the Personal Data Protection Code). Pursuant to Regulation (EU) 2016/679, the data subject has the right to:

  • Art. 15 – obtain from the data controller confirmation as to whether or not personal data concerning them are being processed and, if so, to obtain access to the personal data and other specific information;

  • Art. 16 – obtain from the data controller the rectification of inaccurate personal data concerning them without undue delay;

  • Art. 17 – obtain from the data controller the erasure of personal data concerning them without undue delay;

  • Art. 18 – obtain restriction of processing in specific cases;

  • Art. 20 – receive the personal data concerning them in a structured, commonly used, and machine-readable format;

  • Art. 21 – object at any time to the processing of personal data concerning them carried out for marketing purposes (commercial communications sent by the controller).

To exercise these rights, the data subject may send an email to info@boatlift.it. The controller will inform you of the receipt and follow up on your request within 48 (forty-eight) working hours. Pursuant to Art. 19, requests relating to the rights under Arts. 16, 17, and 18 will be transmitted by the controller to the recipients.

Pursuant to the same article, you have the right to request the cancellation, transformation into anonymous form, or blocking of data processed in violation of the law, as well as to oppose its treatment in any case for legitimate reasons. Requests should be addressed to:

  • Via email: info@boatlift.it

  • Or by post: Strada Provinciale Alba-Narzole, 19 - 12055 Diano D’Alba (CN).

Right to lodge a complaint with a supervisory authority

The data subject also has the right to lodge a complaint with the competent Supervisory Authority — Garante per la Protezione dei Dati Personali — at the following PEC address: boatlift@businesspec.it

Withdrawal of consent

With reference to Art. 23 of Legislative Decree 196/2003 and Art. 6 of GDPR 679/16, the data subject may withdraw consent at any time. To withdraw consent, it is necessary to send an email to info@boatlift.it to request cancellation. The controller will inform you of the receipt and follow up on your request within 48 (forty-eight) working hours.

Filling a complaint

The data subject has the right to lodge a complaint with the supervisory authority of their state of residence.

Refusal to provide data

The data subject may refuse to provide their personal data to the Controller as the provision is optional. However, filling in the indicated fields is essential to fulfill the requests received.

Automated decision-making processes

The Data Controller does not carry out processing that consists of automated decision-making processes.

This privacy notice is provided to natural persons who access and browse the website of BOAT LIFT S.R.L., pursuant to Article 13 of Legislative Decree No. 196 of June 30, 2003 ("Personal Data Protection Code") and Article 13 of Regulation (EU) 2016/679 ("General Data Protection Regulation" or GDPR).

Data controller identity

This website is managed by BOAT LIFT S.R.L., with registered office at Strada Provinciale Alba-Narzole, 19, 12055 Diano D’Alba (CN), Italy.

The Data Controller ensures the security, confidentiality, and protection of personal data in its possession at every stage of processing. Personal data collected are processed in compliance with Legislative Decree 196/2003 and GDPR 679/16.

Data subjects

This notice is provided to natural persons who subscribe to the newsletter offered by the website of BOAT LIFT S.R.L.

Source fo Data

Data are voluntarily provided by the data subject through the completion of the newsletter subscription form.

Purpose of processing

The personal data of individuals subscribing to the newsletter are processed for the purpose of sending the requested newsletter via email and to allow them to unsubscribe, either automatically or by submitting a request to the indicated certified email (PEC) address.

Legal basis for processing

Personal data are lawfully processed for the performance of pre-contractual measures taken at the request of the data subject (such as requests and potential purchases).

Data recipients

Personal data processed by the Data Controller will not be disclosed to unspecified parties in any form, including making them available or accessible.

Data may be communicated, within strictly necessary limits, to parties who must supply goods and/or perform services on behalf of the Data Controller in order to fulfill your request. They may also be communicated to parties entitled to access them by law, regulations, or EU legislation.

Certain employees of BOAT LIFT S.R.L., based on their roles and duties, are authorized to process personal data within the limits of their competencies and in accordance with the instructions provided by the Data Controller.

Datat retention

Personal data voluntarily provided will be processed and stored for a period of 5 years. At the end of the fifth year, the system will send an email to the data subject, who may freely renew consent for continued processing. Failure to renew consent will result in the inability to continue using the service.



Data subjects rights

Data subjects have the right at any time to obtain confirmation of the existence of their personal data and to know their content and origin, verify their accuracy, or request their integration, updating, or rectification.

Under Regulation (EU) 2016/679, the data subject has the right to:

  • Art. 15 – obtain confirmation as to whether personal data concerning them are being processed and access such data;

  • Art. 16 – obtain rectification of inaccurate personal data without undue delay;

  • Art. 17 – obtain erasure of personal data without undue delay;

  • Art. 18 – obtain restriction of processing in specific cases;

  • Art. 20 – receive personal data in a structured, commonly used, and machine-readable format;

  • Art. 21 – object at any time to processing for marketing purposes.

To exercise these rights, the data subject may send an email to: info@boatlift.it

The Data Controller will acknowledge receipt and respond within 48 (forty-eight) working hours.

Requests under Articles 16, 17, and 18 will be communicated to recipients in accordance with Article 19 GDPR.

The data subject also has the right to request deletion, anonymization, or blocking of data processed unlawfully and to object, for legitimate reasons, to their processing.

Requests may be sent:

  • by email to: info@boatlift.it

  • by post to: Strada Provinciale Alba-Narzole, 19, 12055 Diano D’Alba (CN), Italy

Right to lodge a complaint

The data subject has the right to lodge a complaint with the competent supervisory authority, namely the Italian Data Protection Authority (Garante per la Protezione dei Dati Personali), at the PEC address: boatlift@businesspec.it

Withdrawal of consent

Pursuant to Article 23 of Legislative Decree 196/2003 and Article 6 of GDPR 679/16, the data subject may withdraw consent at any time.

To withdraw consent, send an email to: info@boatlift.it

The Data Controller will acknowledge receipt and process the request within 48 (forty-eight) working hours.

Complaint submission

The data subject has the right to lodge a complaint with the supervisory authority of their country of residence.

Refusal to provide data

The data subject may refuse to provide personal data, as provision is optional. However, completing the required fields is necessary in order to receive the requested newsletter.

Automated decision-making

The Data Controller does not carry out processing involving automated decision-making.

Service cancellation

To unsubscribe from the service, the user may:

  • Access their personal area on the website, click on “Remove Profile,” and confirm the choice;

  • Alternatively, where not available, send an email to info@boatlift.it requesting deletion.

The Data Controller will acknowledge receipt and process the request within 48 (forty-eight) working hours.

The content of this email is to be considered confidential. Therefore, the information contained herein and in any attachments is intended solely for the designated recipients. Any persons or entities other than the intended recipients, including pursuant to Article 616 of the Italian Criminal Code, are not authorized to read, copy, modify, or disclose the message to third parties. If you have received this communication in error, please do not use it or disclose it to anyone; instead, delete it from your mailbox and notify the sender.

The authenticity of the sender and the integrity of the contents are not guaranteed, except in the case of digitally signed documents.

Furthermore, pursuant to Article 13 of Legislative Decree 196/2003 and Article 13 of Regulation (EU) 2016/679 (GDPR), we inform you that our databases include email addresses relating to individuals, companies, and organizations with whom prior communications have taken place via email or other means, or who have voluntarily provided their email address during direct contact.

These email addresses are used in compliance with the data subjects’ willingness to receive communications from our company.

We also inform you that all email accounts within the domain “.....@boatlift.it” are corporate email accounts and, as such, are used for business communications. Therefore, for operational reasons, any incoming or outgoing message may be accessed by individuals other than the sender and/or the recipient.

If data subjects wish to have their email address removed from our records, or to exercise their rights pursuant to Article 7 of Legislative Decree 196/2003 and Articles 15 (right of access), 16 (right to rectification), 17 (right to erasure), 18 (right to restriction of processing), 20 (right to data portability), 21 (right to object), and 22 (right to object to automated decision-making) of GDPR 679/16, they may contact the Data Controller:

BOAT LIFT S.R.L.
Registered office: Strada Provinciale Alba-Narzole, 19
12055 Diano D’Alba (CN), Italy

Purpose and Legal Basis of Processing

The processing of the personal data you provide is aimed solely at fulfilling contractual obligations, responding to your specific requests, and complying with legal obligations, particularly accounting and tax requirements.

In particular, your data are processed for the following purposes: compliance with legal obligations, including accounting and tax requirements, as well as obligations arising from contractual relationships and the promotion of your company in case of requests from our partners.

For the purposes indicated above, the Data Controller will NOT process “special categories” of data as defined by Regulation (EU) 2016/679, such as data revealing racial or ethnic origin, religious, philosophical or other beliefs, political opinions, membership in political parties, trade unions, associations or organizations of a religious, philosophical, political or trade union nature, as well as data concerning health or sex life.

Processing Methods

In relation to the above purposes, your data are processed both electronically and in paper form. Processing operations are carried out in a manner that ensures the logical and physical security and confidentiality of your personal data.

Legitimate Interests

The legitimate interests pursued by the Data Controller correspond to the purposes indicated above.

Nature of Personal Data

The data processed consist of your personal data necessary for the performance of the contractual relationship between our organizations.

Mandatory or Optional Nature of Data Provision

Providing your data is not mandatory; however, refusal to provide such data may make it impossible to establish or continue the contractual relationship.

Scope of Communication and Disclosure of Data

Your data may be communicated to:

  • all parties entitled to access such data by virtue of legal provisions;

  • our employees and collaborators within the scope of their duties;

  • any natural or legal persons, public and/or private, where communication is necessary or functional to the performance of our activities, in the manner and for the purposes described above.

In particular, your data may be communicated, for the purposes indicated, to:

  1. parties who are legitimate recipients under legal or regulatory provisions (e.g. public authorities and offices);

  2. parties involved in fulfilling contractual obligations (e.g. banks, credit institutions, insurance companies);

  3. companies providing administrative services used by BOAT LIFT S.R.L. to meet legal or contractual obligations;

  4. consultants of our company;

  5. other companies collaborating with BOAT LIFT S.R.L. in the provision of contractual services.

Transfer of Personal Data to Third Countries

The collected data will not be disclosed or transferred to third parties and will not be transferred either within or outside the European Union.

Automated Decision-Making

The Data Controller does not carry out processing involving automated decision-making.

Data Retention

Personal data will be stored using logical and physical methods that ensure confidentiality, for the time strictly necessary to achieve the purposes for which they were collected (i.e., for the duration of the relationship and for civil, tax, and accounting retention purposes).

Data Controller Identification

The Data Controller is BOAT LIFT S.R.L., with registered office in Diano d’Alba, Via Alba-Narzole 19, represented by its Legal Representative Roberto Cravanzola.

For any inquiries, the Data Controller can be contacted at: info@boatlift.it

Data Subject Rights

Right of Access and Rectification (Art. 15 and 16 GDPR)

The data subject has the right to obtain confirmation as to whether personal data concerning them are being processed and, where that is the case, access to such data and the following information:

  • purposes of processing;

  • categories of personal data concerned;

  • recipients or categories of recipients;

  • retention period or criteria used to determine it;

  • the right to request rectification, erasure, or restriction;

  • the right to lodge a complaint with a supervisory authority;

  • existence of automated decision-making, including profiling.

Right to Erasure (Art. 17 Reg. UE 2016/679)

The data subject has the right to obtain from the data controller the erasure of personal data concerning them without undue delay, and the data controller is obliged to erase personal data without undue delay where one of the following grounds applies:

a) the personal data are no longer necessary in relation to the purposes for which they were collected or otherwise processed;

b) the data subject withdraws consent on which the processing is based pursuant to Article 6(1)(a) or Article 9(2)(a), and where there is no other legal ground for the processing;

c) the data subject objects to the processing pursuant to Article 21(1), and there are no overriding legitimate grounds for the processing, or the data subject objects to the processing pursuant to Article 21(2);

d) the personal data have been unlawfully processed;

e) the personal data must be erased for compliance with a legal obligation under Union or Member State law to which the data controller is subject;

f) the personal data have been collected in relation to the offer of information society services referred to in Article 8(1) of Regulation (EU) 2016/679.


Right to Restriction of Processing (Art. 18)

The data subject has the right to obtain from the data controller the restriction of processing where one of the following applies:

a) the data subject contests the accuracy of the personal data, for a period enabling the data controller to verify the accuracy of the personal data;

b) the processing is unlawful and the data subject opposes the erasure of the personal data and instead requests the restriction of their use;

c) although the data controller no longer needs the personal data for processing purposes, the data are required by the data subject for the establishment, exercise, or defence of legal claims;

d) the data subject has objected to processing pursuant to Article 21(1) of Regulation (EU) 2016/679, pending verification of whether the legitimate grounds of the data controller override those of the data subject.

Right to Data Portability (Art. 20)

The data subject has the right to receive the personal data concerning them, which they have provided to a data controller, in a structured, commonly used, and machine-readable format, and has the right to transmit those data to another data controller without hindrance from the data controller.

Withdrawal of Consent to Processing and Notifications

You are entitled to withdraw your consent to the processing of your personal data by sending a registered letter with return receipt (A/R) to the following address:

BOAT LIFT S.R.L.
VIA ALBA-NARZOLE 19
12055 DIANO D’ALBA (CN), Italy

The request must include a copy of your identity document and the following text:
“withdrawal of consent to the processing of all my personal data”.

Upon completion of this procedure, your personal data will be removed from the archives as soon as possible.

If you wish to obtain further information regarding the processing of your personal data, or to exercise the rights referred to in point 10 above, you may send a registered letter with return receipt (A/R) to the above address or a certified email (PEC) to: boatlift@businesspec.it. A response will be provided as soon as possible.

In case of a report, the data subject may send an email to info@boatlift.it, or a PEC to boatlift@businesspec.it, or обратиться to the supervisory authority of their country of residence.

DATA CONTROLLER
BOAT LIFT S.R.L.
CRAVANZOLA ROBERTO (LEGAL REPRESENTATIVE)