Digibusiness Srl is located in Collecchio (PR – Italy), Strada Consortile 2, REA PR-217228 number and VAT number IT02184210348, date of incorporation July 10, 2001.
Social object: the design and development of IT systems and applications and the provision of services, which originate from the same to benefit customers in the pursuit of their business objectives.
Navis.net: a CRM (Customer Relations Management) Management Application is provided to the Marine Companies.
This document describes the Processing of Personal Data carried out by Digibusiness, compliance with the GDPR and fulfilments as well as the organizational, physical and practical security measures that Digibusiness has decided to adopt in order to minimize the risks to the data of destruction or loss, even if accidental, unauthorized access or processing or non-compliance with its original purpose, and to comply with the obligations under current legislation on the protection of personal data (EU Regulation 2016/679). Further information about this topic is contained in the DPIA (Data Protection Impact Analysis) Digibusiness, available to those who request it.
In particular, with regard to the data processed by the CRM-Managing Application called Navis.net, the document describes:
The provisions of the document apply to all the processing operations of which the company is the Owner and to those for which the Company is appointed Manager by the Companies that use Navis.net for their commercial activities and for this purpose hold within this System the personal data of their Clients and potential Clients.
Hereafter the terms Owner, Manager, Distributor, Processing, Personal Data and Sensitive Data are used in accordance with the definitions of the Code. Periodic checks are carried out on the application of the provisions contained in this document or relating to it. The result of these checks is documented in a report the details of which and any references to the documentation produced will be included in the review of this document.
Digibusiness srl is a company that provides Consultancy Services, Application Service Services (ASP) and Hosting Services. In the performance of its functions, the Company is the owner of personal data relating to its Employees, Customers and Suppliers, while it is responsible for the processing of data that its Customers (hereinafter also referred to as System Users) enter into the Systems and/or Information Environments that the Company manages.
Digibusiness SRL has its own systems, located at its headquarters for design and development activities, and computer resources provided by third parties for the management of the Company and the supply to its customers of ASP and Hosting Services. In particular, except for the activities of design and development software, the Servers and Archiving Systems are provided by external providers: Microsoft’s AZURE and GOOGLE, companies with which Digibusiness has service contracts that define the service parameters and the criteria of security and data protection.
The Company also makes use of third parties, both for the management of administrative and accounting data and for the management of personnel data.
This section describes the processes carried out by the Owner on the data managed directly (1), but also the processes carried out by the Owner as Manager appointed by third parties (2), with an indication of the nature of the data and the designated internal or external resources (site, function, etc..), as well as the digital systems used.
Digibusiness SRL, on the date of updating this document, has assigned to its Director, Mr. Gabriele Mendi, the role of Data Controller of the personal data of which the Company is the Data Controller. The Data Controller is responsible for making decisions regarding the purposes and methods of processing personal data, and also has the task of monitoring, including through periodic checks, compliance by the Data Processor with his instructions, as well as compliance with current regulations on processing, including the security profile. The role of Manager of all personal data processing is attributed equally to the active members of the Company, Mr. Vincenzo Campanini and Fausto Aimi, the latter simultaneously fulfilling the role of System Administrator. All employees, who, to varying degrees and with specific authorizations, have to be able to process, even occasionally, the personal data of Digibusiness and its Users, have been allocated a specific task according their specific skills and with certain limitations. The list of roles and tasks to be performed is included in the DPIA Digibusiness, which is available on request.
The processing involves contracts and invoicing and refers exclusively to shared data; no sensitive or legal data is present.
The personal data of the Users (Clients of Digibusiness SRL) is kept on the premises, while an external company (Studio Vignetti, Vicolo Politi 7 - 43121 Parma-Italia) is responsible for the administrative accounting summaries, which provides its own resourcing. The purpose of the processing is to manage the relationship between Supplier and Customer from a contractual and fiscal point of view and with regard to the services provided and work in progress. In some cases, this data may also be provided to the employees and/or partners of these companies with whom we wish to develop a supply relationship, but they are limited to telephone and/or correspondence numbers.
The Information on the processing of Users' data is contained in the Service Charter, which is an integral part of the Contract signed by Customers who give their implicit consent to process their data. Digibusiness does not carry out automatic processing of the data of its customers and potential customers and does not transfer to third parties the same except for administrative and accounting information.
Particular reference should be made to the data that Digibusiness obtains from public sources, to identify the companies to which it offers its services (Potential Users) with the aim of expanding its customer base. In this case, the information and acquisition of consent to the processing is managed during the first contact.
Navis.net is a Management Application that Digibusiness owns but it is also a platform of services provided to companies (Users) that sell pleasure boats.
The services of the Navis.net platform include all the features that enable users to best manage commercial activities and in particular: the management of Boats for Sale, the management of Advertising, relations with customers and yachtsmen, relations with other companies in the industry and with their suppliers.
Navis.net services are provided to Users in Application Service Provider (ASP) mode.
Navis.net GDPR compliance - update 15 May 2018