In accordance with the provisions under EU Regulation no. 679/2016, “on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC”, this document provides a brief summary of the main regulations on the processing of data carried out by Grimaldi Euromed S.p.A. (with registered office in Palermo at Via Enrico Amari 8, 90139, tax identification code/VAT number 00278730825), in its capacity as Data Controller, with regard to the activities of shipping freight and issuing of “Driver Cards”.
The Website may collect and process personal data and contact details of the user necessary for the conclusion, management and execution of the contract of carriage of goods, as well as to manage the request, issuance and subsequent obligations related to these activities of the “Driver Card”.
This notice is provided by the company Grimaldi Euromed as data controller, pursuant to and for the purposes of Article 13 of Regulation (EU) 2016/679 (“GDPR”).
The processing operations concern personal and contact data of Shipper, Consignee and Notify, Customers, Invoice Payer and Driver (the “Personal Data”).
Personal Data will be processed for purposes related to the obligations arising from the contract of carriage of goods or the issuance of the “Driver Card”. Data will be processed for the following purposes:
The legal basis of the processing operations listed above from point 1 to point 3 is found in the fulfillment of contractual obligations, pre-contractual and legal measures in order to manage the maritime transport contract (Art. 6, paragraph 1, letter b, of the GDPR).
For point 4, the legal basis of the processing is found in the fulfilment of legal obligations to which Grimaldi Euromed is subject and in the public interest in the protection of safety in ports (Art. 6, paragraph 1, letter c, of the GDPR).
For the points 5, 6, 7 and 8 the legal basis of the treatment is found in the execution of pre-contractual measures adopted at the request of the person concerned, in the fulfillment of legal obligations in order to manage the process of issuing the “Driver Card” and the use by the interested parties of the benefits provided by the card, as well as in the legitimate interest of Grimaldi Euromed to the management of the “Driver Card” itself (art. 6, paragraph 1, lett. b, c, f, of the GDPR).
The provision of Personal Data is necessary for the proper performance of contractual and pre-contractual obligations of Grimaldi Euromed and failure to provide them makes it impossible to process your requests related to entering into a contract of carriage of goods, the issuance and management of the “Driver Card”, as well as to fulfil exactly the legal obligations and those arising from the public interest to protect safety in ports.
Personal Data are stored according to the following table.
|Data||Storage time||Storage purposes|
|Personal data of Shipper, Consignee and Notify, Customers, Invoice Payer||10 years from the end of the transport||For the purpose of keeping accounting records and to resist in case of any dispute raised against Grimaldi Euromed|
|Personal data and contact details of the Driver||10 years from the issue of the “Driver Card”.||For the purpose of keeping accounting records and to resist in case of any dispute raised against Grimaldi Euromed|
Please note that Personal Data may be communicated not only to other companies belonging to the Grimaldi Group, but also to entities established in third countries, even outside the territory of the European Union, with the compliance of appropriate procedures and within the scope of the aforementioned purposes.
It may also be necessary for the Grimaldi Euromed – based on laws, legal proceedings, disputes and/or requests made by public or governmental authorities inside or outside the State of residence of the data subject, national security purposes other matters of public importance – to disclose personal data. When legally possible, we will inform the data subject prior to such disclosure.
We may also disclose personal data if we establish in good faith that it is reasonably necessary to assert and protect our rights and activate available remedies.