INFORMATION OF PRIVACY STATEMENT
(art. 13 of Regulation (EU) 679/2016 )
according to art. 13 of Regulation (EU) 679/2016 we inform as follow:
1. CONTROLLER OF PERSONAL DATA
The controller of personal data is IDROENERGY Spa with registered office in Livorno – Via dell’artigianato n. 2 P.IVA 00859650491 in person OF THE ceo Mr. Brunori Marcello
2. DATA PROCESSOR
Data processor is Mr. Brunori Marcello
3. DATA TREATMENT PURPOSE
We also would like to inform you that the European Regulation grant you certain rights, including rights of access to, adjustment, erasure, limitation of, or objection to the processing of your data, as well as data ortability rights, when and insofar as applicable (Articles 15-22 of the EU Regulations n. 679, 2016).
4. DATA PROCESSING
Data treatment consists of organization, registration, consultation or elaboration in according to the rules of. Art. 4 point 1 n. 2) regulation Ue 679/16.
In accordance with applicable privacy laws (EU Regulations n. 679, 2016), we would like to take this opportunity to inform you that your personal information will be processed in an ethical and transparent manner, only for lawful purposes, and in a manner that safeguards your privacy and your rights.
Processing takes place manually and using IT tools.
5. LAWFUL PURPOSE
All data processed must be done on one of the following lawful bases: consent, contract, legal obligation.
Where consent is relied upon as a lawful basis for processing data, evidence of opt-in consent shall be kept with the personal data.
Where communications are sent to individuals based on their consent. Should you refuse to submit the required data for the above purposes, we will not be able to provide you with the requested services.
6. SHARING PERSONAL DATA
Personal data can be share with third parties. Third parties includes payroll provides, Bank, State Authorities, Local Authorities Police Authorities, Pension Providers, Business Consultans, Lawyer.
Data can be shared according to specific legal requirement.
Personal data shall be transferred to countries or territories inside or outside European Economic Area for the purpose of point. 3
7. DATA RETETION PERIOD
We retain personal data for no longer that is necessary. The length of retention will be determinate in a manner consitent with pubblished legal and regulatory data retetion guidelines (5/10 yrs.)
7. DATA SUBJECTS’ RIGHTS
The articles 15, 16, 17, 18, 20 and 21 of the EU Regulation gives the interested party the exercise of specific rights, including those of:
– withdraw consent to the processing of personal data
– obtain access to their personal data,
– obtain from the holder confirmation of the existence or not of their personal data, as well as the categories of such data
– obtain information on the origin, the logic and the purposes for which the data are processed
– know how the data are processed,
– know the subjects and the categories of subjects to whom personal data can be communicated,
– know the retention period of personal data
– obtain a copy of the personal data being processed
The interested party also has the right to know the details of the Data Controller, also in order to request and obtain, without justified delay, the updating, rectification, integration of data and transformation into anonymous form.
The interested party has the right to obtain the cancellation (c.d. right to be forgotten) of personal data concerning him / her.
This is possible if: the data are no longer necessary with respect to the purposes for which they were collected; there is the withdrawal of consent to the processing by the interested party; there is opposition to the processing and there are no legitimate reasons for the holder to proceed with the processing; the data are unlawfully processed; there is a legal obligation to do so; if the owner has made public the personal data of the interested party.
The right to be forgotten is not applied to the extent that the treatment is necessary for the exercise of freedom of expression, for the fulfillment of a legal obligation, for reasons of public health interest, for purposes of archiving in the public interest, of scientific or historical or statistical research, for the exercise of the right of defense in court.
The interested party also has the right to obtain the limitation of the processing of their personal data in the event that the processing is not lawful, the data are not accurate or are necessary for the person concerned to exercise a right in court, or in the event that the interested party has opposed the treatment.
The interested party, in fact, can oppose the processing of their personal data both in case they were treated in violation of the law, and in the hypothesis in which such data were used in order to send advertising material for direct sale or for the carrying out market research or commercial communication.
Finally, the data subject may transmit personal data to a different holder (right to data portability) – upon receipt of data concerning him – if the processing is based on the consent of the interested party or if the treatment is carried out by automated means . The data subject may eventually obtain direct transmission of data to another holder if possible.
8. RIGHT OF PROPOSE CLAIM
According. to Art. 77 of Regulation 679/2016 You have the right to lodge a complaint with the Data Protection Authority, following the procedures and instructions published on the official website of the Authority on www.garanteprivacy.it;
CONTROLLER OF PERSONAL DATA