Personal data processing notice
This notice describes how personal data of users browsing www.capitanbrokers.com are processed by D&D Capitanbrokers Snc di Davide TONARELLI e Daniela MAZZEO (the “Controller”), in accordance with Regulation (EU) 2016/679 (“GDPR”) and applicable Italian law.
The Data Controller is D&D Capitanbrokers Snc di Davide TONARELLI e Daniela MAZZEO, with registered office at Via Guglielmo Oberdan n. 10, 55049 Viareggio (LU), Italia, Italy, VAT and Tax Code 02755330467, operating as a wholesale trade intermediary for ships and aircraft. Certified email (PEC): ddcapitanbrokers@pec.it.
The Controller may collect personal data when users browse the website, submit contact or information requests through its forms, select the newsletter option, interact with the Controller’s social-media pages, or use cookies and similar technologies as described in the Cookie Policy.
The Controller may process identification and contact data, browsing data, data voluntarily provided by users, and data arising from cookies and tracking technologies, as described in the separate Cookie Policy.
The computer systems and software procedures used to operate this website acquire, in their normal operation, certain personal data whose transmission is implicit in the use of Internet communication protocols. This includes IP addresses or domain names of devices, URI/URL addresses of requested resources, time of request, method used to submit the request to the server, response-file size, server response status code, and other parameters related to the user’s operating system and IT environment. Such data are used to provide the service, obtain aggregate statistics and check the correct functioning and security of the website.
When submitting a request, users may provide identification and contact data, including first name, last name, email address, telephone number, request type and message content. Fields marked as required are necessary for the Controller to respond; the remaining data are optional. The website also records whether the privacy notice has been accepted and, if selected, the newsletter option.
For detailed information on cookies, local storage, optional analytics and marketing technologies, and Google Maps, please consult the Cookie Policy.
For processing performed directly by social-media platform providers, please refer to their own privacy notices. The Controller processes data provided through its corporate social pages only to manage interactions with users, such as comments, messages and posts.
Browsing data necessary for the provision, operation and security of the website are required. Apart from these data, providing personal data is optional. However, failure to provide the data required by a form prevents the Controller from processing the request and, where applicable, from registering the user for the newsletter.
Data are processed using electronic tools, in compliance with the principles of lawfulness, fairness, transparency, data minimisation and security pursuant to Article 6 GDPR, by the Controller and authorised personnel acting under the Controller’s instructions. Data may be communicated to suppliers and/or other parties acting as processors, including hosting, email, certified email (PEC), payment, technical-service and consultancy providers, appointed pursuant to Article 28 GDPR, as well as to public authorities where required by law. Data are not disclosed to the public. The list of processors may be requested using the contact details above.
Personal data are retained for the duration of the relationship and, subsequently, for the applicable limitation periods and to meet tax and accounting obligations, currently up to 10 years. Data processed on the basis of consent are retained until consent is withdrawn, without affecting the lawfulness of processing carried out before withdrawal, except where retention is necessary to establish, exercise or defend legal claims or investigate offences.
The Controller does not intend to transfer personal data to countries outside the European Union. Should such a transfer exceptionally become necessary, the Controller will comply with the safeguards provided for by the Standard Contractual Clauses (SCCs) under Commission Implementing Decision (EU) 2021/914 of 4 June 2021 and will inform data subjects of the transfer to the third country and of the applicable safeguards and rights, including the right to object and lodge a complaint, in accordance with Articles 13(1)(f) and 14(1)(f) GDPR.
Data subjects may exercise their rights of access, rectification, erasure, restriction, portability and objection, and may withdraw consent at any time, by writing to davide.tonarelli@capitanbrokers.it. They also have the right to lodge a complaint with the Italian Data Protection Authority (www.garanteprivacy.it) pursuant to Article 77 et seq. GDPR, including through the competent courts.
Last updated: 29 July 2026.