The controller of the personal data is A2A S.p.A. with registered office in Via Lamarmora 230, 25124 Brescia, Italy.
For all queries related to the processing of personal data and the exercising of rights, contact the Data Protection Officer at the following e-mail address: firstname.lastname@example.org.
|Purpose of processing||Legal grounds of processing|
|To provide a response following your requests for contact, received by means of the relative form.||The carrying out of your request (in accordance with the legal basis of the execution of a contract to which the person involved is a party or the execution of pre-contractual measures adopted on the request of the same in accordance with Art. 6 section 1, part b of the GDPR)|
|To assess, on your request, the coherence of the business plan and the services/products of your start-up with the investment policies of the data controller.|
|To send updates on the initiatives and news of the data controller by means of the newsletter service to which you freely subscribed.|
|To reply to any requests that should arrive from public authorities or agencies.||Compliance with a legal obligation.|
The following categories of data are processed:
The processing is carried out by the personnel authorized to do so in the performance of their duties, with or without the support of electronic equipment, in accordance with the principles of lawfulness and correctness so as to safeguard at all times the confidentiality and the rights of the party involved.
Your personal data can be made available to companies that provide services of record-keeping and IT services who will act as data controller or processor.
If the project or initiative for which you have made enquiries for information or documentation involves other companies of A2A Group, your data may be shared with these other companies of the Group.
Public bodies or authorities who will act as data controllers.
Your data will not be divulged (made available to unspecified parties).
Your personal data will be processed within the European Economic Area (EEA). If it should be necessary to transfer your personal data outside the EEA, such transfer will be made on the basis of a decision of acceptability by the European Commission, if applicable, or in the presence of adequate guarantees required by the GDPR.
The data directly provided by you will be stored for the time necessary to achieve the purposes for which it is being processed or to ensure compliance with the law.
In the event of disputes, the length of time for which data can be held can be extended to 10 years from the definition of the dispute.
You have the right to ask the Data Controller:
Right to object. If processing should be performed on the basis of the legitimate interest of the data controller, we inform you that, at any time, as of this moment, you may oppose this. In this case, the data controller will cease processing your personal data, except in the case of legitimate motives in order to proceed in the processing or verification, exercise or defence of a right in a judiciary seat.
To exercise your rights, you can send a message to the e-mail address email@example.com or make a written request addressed to the Group company of the Data Controller.
Except in the case of other administrative or legal complaints or appeals, you have the right to ask the Privacy Authority to ensure protection of your personal data should you deem that its processing violates the GDPR.
The personal data gathered by means of contact forms or request for registration for the newsletter is conferred by you and refusal to do so prevents your request from proceeding.
The data will not be subjected to decisions based solely on automated processing, including profiling, which may have legal effects that concern or significantly affect your person.