Privacy policy

Privacy Policy

Information on the processing of personal data

Under the terms of articles 13 and 14 of EU General Data Protection Regulation 2016/679 of 26 April 2016 (hereafter referred to as the ‘GDPR’), we provide the following information relative to the processing¹ of your personal data.

1. Who processes the personal data?

The controller² of the personal data is A2A S.p.A. with registered office in Via Lamarmora 230, 25124 Brescia, Italy.

2. Who can be contacted?

For all queries related to the processing of personal data and the exercising of rights, contact the Data Protection Officer at the following e-mail address dpo.privacy@a2a.eu.

3. Why is personal data processed?

Purpose of processing	Legal grounds of processing
Data on Internet activity is used for the purpose of the correct and optimal functioning and use of the website.	The legitimate interest of the data controller in order to guarantee the user the correct and optimal use of the website.
The data that you provide voluntarily by means of contact forms or registration for the newsletter is processed for the sole purpose of performing the service or the operation requested (e.g. enquiries, the sending of updates regarding initiatives of the data controller).	The carrying out of your request (in accordance with the legal basis of the execution of a contract to which the person involved is a party or the execution of pre-contractual measures adopted on the request of the same in accordance with Art. 6 section 1, part b of the GDPR)
Processing may be for the purpose of replying to any requests that should arrive from public authorities or agencies.	Compliance with a legal obligation.

4. Which personal data is processed?

The following categories of data are processed:

Internet use data (e.g. IP addresses, date and time of visit to website)

In the event of the compilation of forms and/or the sending of requests to the data controller, personal data relating to the following categories will be processed:

personal data (e.g. name and surname);
contact data (e.g. telephone numbers, landline and/or mobile, e-mail address).

5. How is the data processed?

The processing is carried out by the personnel authorized to do so in the performance of their duties, with or without the support of electronic equipment, in accordance with the principles of lawfulness and correctness so as to safeguard at all times the confidentiality and the rights of the party involved. For the purpose of ensuring the best possible use of the website, a virtual assistant has been implemented. This assistant will accompany the user during their use of the website. The assistant does not require any data concerning the user since the asking of freely formulated questions is not foreseen. The assistance foresees a guided, pre-defined sequence through the selection of suggestions put forward by the virtual assistant. The only data gathered by the virtual assistant by means of specific technical cookies are the IP address and date and time of the visit to the website.

6. Who is the personal data communicated to?

Your personal data can be made available to:

companies that provide services of record-keeping, IT services who will act as data controller;
public bodies or authorities who will act as data controllers.

If the project or initiative for which you have made enquiries for information or documentation involves other companies of A2A Group, your data may be shared with these other companies of the Group. Public bodies or authorities who will act as data controllers. Your data will not be divulged (made available to unspecified parties).

7. Is the data sent to other countries?

Your personal data will not be transferred to third countries outside the European Economic Area (EEA). If, in residual and exceptional circumstances, it should be necessary to transfer your personal data outside the EEA, the controller will ensure the adoption of the relevant guarantees required by the GDPR.

8. For how long is the data kept?

The data directly provided by you will be stored for the time necessary to achieve the purposes for which it is being processed or to ensure compliance with the law. In the event of disputes, the length of time for which data can be held can be extended to 10 years from the definition of the dispute.

9. Which rights can be exercised?

Lei ha il diritto di chiedere al Titolare del trattamento:

for confirmation that processing of your personal data is or is not under way and, if under way, that you can have access (right of access);
for correction of personal data that is incorrect or the completion of incomplete personal data (right of rectification);
for the deletion of the data if there is motivation as foreseen in the GDPR (right to erasure);
for limitation of the processing when one of the cases foreseen by the GDPR exists (right to restrict processing);
to receive the information provided to the data controller in a structured format, for normal use and readable using an automatic device, and to transmit such data to another data controller (right to data portability).

Right to object. We also inform you that, at any time, you may oppose processing performed for purposes relating to the legitimate interest of the data controller. In this case, the data processor will cease processing your personal data, except in the case of legitimate motives in order to proceed in the processing or verification, exercise or defence of a right in a judiciary seat

To exercise your rights, you can send a written request addressed to the data controller or to the Data Protection Officer, indicating the Group company to which the request is addressed. Except in the case of other administrative or legal complaints or appeals, you have the right to ask the Privacy Authority to ensure protection of your personal data should you deem that its processing violates the GDPR

10. From which source does personal data originate?

Internet data necessary for the technical administration of the website is acquired by means of IT systems and software procedures which regulated the functioning of the website. The personal data gathered by means of contact forms or request for registration for the newsletter is conferred by you and refusal to do so prevents your request from proceeding

11. Is the data subjected to automated decision making?

The data will not be subjected to decisions based solely on automated processing, including profiling, which may have legal effects that concern or significantly affect your person.

12. Cookie

Cookies are typically strings of text which websites or portals (‘publishers’) visited by the user or other websites, portals or web servers (‘third parties’) position and memorize – directly, in the case of publishers, and indirectly, by means of these, in the case of “third parties” – within a terminal device available to the user. In the sphere of the website, use is made only of technical cookies strictly necessary to guarantee the correct and optimal functioning of the website itself (including functioning of the virtual assistant) and analytical cookies of third parties for the processing of supplementary statistics and for which have been adopted the measures required to make them comparable to technical cookies (with anonymity of the IP address of the user). For the purpose of the installation and use of these technical and analytical cookies, the consent of the user is not required. Further information is available on the dedicated page of the website of the privacy regulator (https://www.garanteprivacy.it/temi/cookie).

TYPES OF COOKIE INSTALLED ON THIS WEBSITE
For details of our Cookie Policy, you can consult the dedicated page

Notes

Processing: any operation or series of operations, carried out with or without the involvement of automated processes and applied to personal data or series of personal data, such as the gathering, organization, structuring, recording, adaptation, modification, consultation, use, communication by means of transmission, divulgation or any other means of making available, comparison or interconnection, limitation, deletion or destruction.
Data controller: the physical or juridical person, public authority which determines the purpose and means of processing of personal data.

Useful resources

Our method

Useful resources

Send your investment deck Our contacts

Our method

Challenges Corporate Venture Capital Internal innovation

A2A S.p.A. - P.I. 11957540153

Legal notes Privacy policy Cookie policy Edit cookie preferences