Privacy Policy

PRIVACY NOTICE FOR THE WEBSITE

pursuant to Article 13 of Regulation (EU) no. 2016/679 (“GDPR”)

d’Amico società di Navigazione S.p.A., with registered office in Palermo, street Enzo ed Elvira Sellerio, no. 27, 90141, Italy, Tax Code/VAT no. 01206680991 and operation office in Rome, Corso d’Italia no. 35/B, 00198, Italy, Tax Code/VAT no. 00768720823 (hereinafter, “d’Amico”, the “Data Controller” or the “Company”), is committed to protection the personal data of users (“User/Users”) of the website https://en.damicoship.com/ (“Website”) and, as Data Controller, is required, pursuant to Article 13 of the GDPR, to provide the User with certain information regarding the processing of personal data.

If the User provides personal data on behalf of another person, the User must ensure, in advance, that the relevant data subjects have read this Privacy Notice.

This Privacy Notice does not apply to other websites owned by third parties that may be accessed through links on the Website. Please read the privacy notices of such third-party websites regarding the processing of personal data carried out by them. The Company reserves the right to amend the terms of this Privacy Notice at any time in connection with updates to the Website; such amendments shall take effect on the date of the relevant update.

WHAT PERSONAL DATA MAY BE PROCESSED
A) Browsing data and cookies.

The IT systems and software procedures used to operate the Website acquire, during their normal operation, certain personal data whose transmission is inherent to the use of Internet communication protocols. This information is not collected in order to be associated with identified individuals; however, by its very nature, it may, through processing and association with data held by third parties, allow Users to be identified. This category of data includes: the IP addresses of the computers used by Users who connect to the Website; the URI (Uniform Resource Identifier) addresses of the requested resources; the time of the request; the method used to submit the request to the server; the size of the file obtained in response; the numerical code indicating the status of the response provided by the server (successful, error, etc.); and other parameters relating to the operating system used. Such data are used solely to obtain anonymous statistical information on the use of the Website and to check its proper functioning and are deleted immediately after processing. The data may be used to ascertain liability in the event of cybercrimes against the Website.

In addition, the Website does not use cookies other than technical cookies and does not use tracking tools other than those necessary for its operation, as indicated in our cookie policy available at: https://en.damicoship.com/privacy-cookies-policy/.

B) Personal data voluntarily provided by the User.

The Company processes certain personal data that may be voluntarily provided by Users in order to:

contact the Company through the email addresses available in the “Contacts” section (information that may be provided: first name, last name, email address, and any data contained in the email);
submit reports of irregularities or unlawful conduct through d’Amico’s whistleblowing platform, accessible via an external link in the “Governance & Ethics” section of the Website. The collection and management of personal data relating to whistleblowing reports are carried out in accordance with the processing purposes and methods described in the relevant privacy notice available at: https://en.damicoship.com/damico-group/corporate-governance/#_whistleblowing.

(collectively, the “Personal Data”).

FOR WHAT PURPOSES PERSONAL DATA MAY BE PROCESSING
A) Performance of a contract or or taking steps at the request of the User prior to entering into a contract.

The Company may process the User’s Personal Data to perform a contract to which the User is party or take steps at the User’s request prior to entering into a contract, including handling and responding to enquiries submitted through the “Contacts” section.

Legal basis: performance of a contract or taking steps at the request of the data subject prior to entering into a contract, pursuant to Article 6(1)(b) of the GDPR.

Provision of Personal Data for this purpose is mandatory. If such data are not provided, the Company will be unable to respond to the User’s requests.

B) Purposes related to obligations provided for by laws, regulations or EU legislation, as well as by provisions/requests of authorities legally entitled to do so and/or supervisory and control bodies.

The Company may process the User’s Personal Data in order to comply with obligations to which it is subject.

Legal basis: compliance with a legal obligation to which the Data Controller is subject pursuant to Article 6(1)(c) of the GDPR.

Provision of Personal Data for this purpose is mandatory. If such data are not provided, the Company will be unable to fulfil specific legal obligations.

C) Defence of rights in judicial, administrative or out-of-court proceedings and in the context of disputes arising in relation to the services/activities offered.

The Company may process Personal Data in order to defend its rights, take legal action, and/or assert claims against you or third parties.

Legal basis: the pursuit of the Controller’s legitimate interest, consisting in the protection of its rights, pursuant to Article 6(1)(f) of the GDPR.

In this case, you are not required to provide additional, specific data, as the Company may pursue this further purpose, where necessary, by processing the Personal Data already collected for the purposes set out above, which are deemed compatible with this further purpose (also considering the context in which the Personal Data were collected, the nature of the data, the appropriate safeguards for their processing, as well as the link between the above purposes and this further purpose).

HOW WE KEEP PERSONAL DATA SAFE AND INTERNATIONAL DATA TRANSFERS

The processing of Personal Data will be carried out in accordance with the principles of fairness, lawfulness and transparency and may also be performed through automated means intended to store, manage and transmit such data. The Company adopts appropriate security measures to ensure the protection, security, integrity and availability of Users’ Personal Data. Such measures are aimed at preventing unauthorized access, disclosure, alteration or destruction of Personal Data.

All Personal Data are stored on the Company’s protected IT devices (or appropriately archived paper copies) or on those of our suppliers and are accessible and usable in accordance with our security standards and policies (or equivalent standards for our suppliers).

The Company informs you that Personal Data will be processed, for the purposes set out in this Privacy Notice, mainly within the European Economic Area (EEA). However, the use of certain tools by d’Amico may, albeit on a residual basis, involve the transfer of such data to entities established in countries outside the European Union (EU) or the EEA (the “Third Countries”). In any case, such transfers are carried out in compliance with Chapter V of the GDPR.

HOW LONG WE RETAIN PERSONAL DATA

We retain Personal Data only for as long as necessary to achieve the purposes for which they were collected or for any other related lawful purpose. Therefore, if Personal Data are processed for two different purposes, we will retain them until the longer retention period expires. In any event, we will no longer process Personal Data for a purpose once the relevant retention period has expired.

Accordingly, Personal Data will be retained only for the period necessary to respond to Users’ information requests.

Personal Data that are no longer necessary, or for which there is no longer a legal basis for retention, are irreversibly anonymized (and may thus be retained) or securely destroyed.

Browsing data are not retained by the Website, except where necessary to ascertain offences upon request by the judicial authority.

With specific reference to requests by authorities or compliance with legal obligations, or where the Company needs to protect its rights in legal proceedings (as per items B) and C) above), Personal Data will be retained for the time necessary to address the request or to pursue the protection of the Company’s rights.

WITH WHOM WE MAY SHARE YOUR PERSONAL DATA

Users’ Personal Data may be accessed by the Company’s employees duly authorized pursuant to Article 29 of the GDPR, as well as, where applicable, by external suppliers appointed, where necessary, as data processors.

You may contact the Company using the contact details indicated in the “Contacts” section of this Privacy Notice if you wish to request the list of data processors and other recipients to whom Personal Data are disclosed.

DATA PROTECTION RIGHTS AND RIGHT TO FILE COMPLAINTS BEFORE THE SUPERVISORY AUTHORITIES

Each User has the right to obtain from the Company, subject to the applicable legal conditions:

access to their Personal Data, as provided for by Article 15 of the GDPR;
rectification or completion of Personal Data held by the Company that are considered inaccurate, as provided for by Article 16 of the GDPR;
erasure of Personal Data where the Company no longer has a legal basis for processing, as provided for by Article 17 of the GDPR;
restriction of processing of Personal Data, where one of the conditions set out in Article 18 of the GDPR applies;
a copy of the Personal Data provided to the Company in a structured, commonly used and machine-readable format and the transmission of such Personal Data to another controller (so-called data portability), as provided for by Article 20 of the GDPR.

Right to object: in addition to the rights listed above, Users have the right to object at any time, on grounds relating to their particular situation, to the processing of Personal Data concerning them by the Company for the purposes of pursuing its legitimate interests.

If the User exercises any of the above rights, the Company will verify that the User is entitled to exercise such rights and will respond, as a rule, within one month. You may exercise your rights using the Company’s contact details indicated in the next section.

If the User believes that the processing of their Personal Data is in violation of the provisions of the GDPR, the User has the right to lodge a complaint to the Supervisory Authority or to bring the matter before a judicial court.

CONTACTS

The Company’s contact details, as Data Controller, are as follows: d’Amico Società di Navigazione S.p.A., with registered office in Palermo, Street Enzo ed Elvira Sellerio no. 27, 90141, Italy , Tax Code/VAT no. 01206680991, and operational office in Rome, Corso d’Italia no. 35/B, 00198, Italy, Tax Code/VAT no. 00768720823, by sending a registered letter with return receipt to the above Company address, or via certified email: [email protected].

The Company has appointed a Data Protection Officer (“DPO”) pursuant to Article 37 of the GDPR, who may be contacted at the following email address: [email protected].

Last updated: 19 december 2025.

COOKIE POLICY

d’Amico società di Navigazione S.p.A., with registered office in Palermo, street Enzo ed Elvira Sellerio, no. 27, 90141, Italy, Tax Code/VAT 01206680991 and operation office in Roma, Corso d’Italia no. 35/B, 00198 , Italy, Tax Code/VAT no. 00768720823 (hereinafter, “d’Amico”, the “Data Controller” or the “Company”), hereby provides information regarding browsing data and the operation of cookies within the website https://en.damicoship.com/ (the “Website“), also based on the guidance provided by the Italian Data Protection Authority.

This Cookie Policy is provided for the Website only and does not apply to any other third-party websites that the user MAY consult through links.

This Cookie Policy should be read in addition to the Website Privacy Notice available at the following link: https://en.damicoship.com/privacy-cookies-policy/ which is hereby referred to for any further information on the processing of personal data.

COOKIES

Cookies are generally text strings that the websites visited by the user (so-called publishers or “first parties”) or different websites or web servers (so-called “third parties”) place and store, either directly (in the case of publishers) or indirectly, i.e., through the publishers (in the case of “third parties”), within a terminal device available to the user. Such terminal devices include, for example, a personal computer, a tablet, a smartphone, or any other device capable of storing information.

Software used for browsing the Internet and operating such devices, such as browsers, may store cookies and then transmit them back to the websites that generated them upon a subsequent visit by the same user, thus keeping memory of the user’s prior interaction with one or more websites.

Information encoded in cookies may include personal data, such as an IP address, a username, a unique identifier or an email address, but it may also include non-personal data, such as language settings or information about the type of device a person is using to browse the Website.

Cookies may therefore perform various important functions, including session monitoring, storage of information on specific configurations relating to users who access the server, facilitating the use of online content, etc.

COOKIES USED BY THE WEBSITE

This Website uses technical cookies solely for the purpose of “carrying out the transmission of a communication over an electronic communications network, or as strictly necessary for the provider of an information society service explicitly requested by the contracting party or the user to provide such service”.

The category of technical cookies also includes so-called analytics cookies, which may be used, inter alia, to assess the effectiveness of an information society service provided by a publisher, for the design of a website, or to help measure its “traffic”, i.e., the number of visitors, possibly broken down by geographical area, connection time slots, or other characteristics.

In order to be considered technical, the analytics cookies used by the Website meet the following conditions:

they are used solely to produce aggregated statistics and in relation to a single website or a single mobile application;
for third-party analytics cookies, at least the fourth component of the IP address is masked;
third parties refrain from combining such analytics cookies with other processing activities (e.g., customer files or statistics of visits to other websites) or from transmitting them to third parties.

No prior user consent is required for the installation of technical cookies.

Below, for each technical cookie used by the Website, we provide: the name, purpose and duration.

Cookie name	Purpose	Duration
en.damicoship.com	ASP.NET_SessionId	Session
.damicoship.com	OptanonConsent , OptanonAlertBoxClosed	365 days; 365 days
openreportingsystem.damicoship.com	__RequestVerificationToken , ARRAffinity	Session, session

All browsers allow you to change cookie settings, usually found under the browser’s “options” or “preferences” menu. Below are some links that may be useful:

You may also use the “Help” option in your browser for further information.

If the use of technical cookies is blocked, the service provided to the user through the Website will be limited, thereby affecting the user’s experience when using the Website.

CONTACTS

Please note that d’Amico società di Navigazione S.p.A. with registered office in Palermo, street Enzo ed Elvira Sellerio, no. 27, 90141, Italy, Tax Code/VAT 01206680991 and operation office in Rome, Corso d’Italia no. 35/B, 00198, Italy, Tax Code/VAT no. 00768720823, may be contacted at the Company’s contact details by sending a registered letter with return receipt or via certified email: [email protected].

The Company has appointed a Data Protection Officer (“DPO”) pursuant to Article 37 of the GDPR, who may be contacted at the following email address: [email protected].

You may contact the above contact details in order to exercise the rights set out in Articles 15 to 22 of Regulation (EU) no. 2016/679 (“GDPR”).

Last updated: 19 december 2025.