PRIVACY POLICY

PRIVACY POLICY - Policy Document pursuant to and for the purposes of Article 13 of Regulation (EU) 2016/679 (GDPR)


perché queste informazioni? WHY DO YOU NEED THIS INFORMATION?

In accordance with Regulation (EU) 2016/679 (hereinafter "GDPR"), this page describes the methods of processing the personal data of users who visit this website.  This policy is provided pursuant to Art. 13 GDPR. The policy does not apply to other third party websites that may accessible through links on this website, for which we shall not be held liable.

Personal data that can be processed
Personal data: any information concerning an identified or identifiable natural person ("Data Subject"). A natural person is considered identifiable, directly or indirectly, with particular reference to an identification such as the name, identification number, data relating to location, to an online identification, to one or more features of its physical, physiological, genetic, mental, economic, cultural or social identity (C26, C27, C30 GDPR). 
Data of Customers and potential Customers
In particular, we collect and process the personal data (hereinafter also just "data") of Customers or of those who could potentially use the many Services offered by the Group, thereby becoming our Customers:
- identification data: name and surname of the user, province of residence;
-contact data: e-mail address, telephone number;
Applicants
We collect and process the personal data provided by Users who send their applications and attach their curriculum vitae to cover a possible work position:
- the identification and personal data of the natural person applying (e.g. name, surname, date and place of birth);
- contact details (e.g. location, province, landline and mobile phone number, e-mail address); 
- any "special categories of personal data" concerning the health status category protected under Italian law 104)
- any other data or information included in the curriculum vitae

Browsing data
During normal operation, the computer systems and software used to run this website acquire some personal data whose transmission is implicit in the internet communication protocols.  This information is not collected to be associated with identified Data Subjects, but due to their nature, they may allow users to be identified by processing and associating data held by third parties.  This data category includes the IP addresses or domain names of computers used by users that connect to the website, the addresses in URI number (Uniform Resource Identifier) of the requested resources, the time of the request, the method used to submit the request to the server, the size of the file obtained in reply, the numerical code indicating the status of the server's reply (successful, error, etc.) and other parameters related to the user's operating system and computing environment.

Data communicated voluntarily by the Data Subject
The optional, explicit and voluntary sending of messages to the contact addresses indicated on this website and/or the filling in of the form to collect data involves the subsequent acquisition of the sender’s address to respond to the requests, as well as other possible personal data entered.

cookie Cookies. What are Cookies? What are cookies for?

Cookies are small text files that the websites visited by users send to their terminals, where they are stored to be retransmitted to the same websites on the next visit. So called "third-party" cookies are set by a website other than the one the user is visiting. This is because there are elements on each website (images, maps, sounds, specific links to web pages of other domains, etc.) that reside on servers other than the website being visited. The cookies are used for different purposes: computer authentication, session monitoring, storing information on specific configurations regarding users that access the server, storing preferences, etc. For further information on the cookies used on this website, see the cookie policy noted in the footer and at the following link.

titolare del trattamento dati 1. WHO IS THE DATA CONTROLLER? HOW CAN YOU CONTACT HIM?

The Data Controller is AGN ENERGIA Spa - Via Amalfi, 6 - 10088 Volpiano (TO) - Italy, VAT number 03223210109, in the person of its pro tempore legal representative. The Data Controller's contact data and telephone number are given in the "Contacts" section of the website www.agnenergia.com - email privacyagn@agnenergia.com

responsabile 2. HAS THE DATA PROTECTION OFFICER BEEN APPOINTED? WHAT ARE THEIR CONTACT DETAILS?

AGN ENERGIA Spa has appointed its Data Protection Officer (RPD/DPO - Data Protection Officer) pursuant to art. 37 – 39 GDPR. To contact the DPO, send an e-mail to dpo@agnenergia.com

3. PURPOSE OF THE PROCESSING, LEGAL BASIS, DATA RETENTION PERIOD AND NATURE OF THE PROVISION

finalità PURPOSE OF PROCESSINGbase giuridica LEGAL BASISperiodo di conservazione RETENTION PERIODnatura del conferimento NATURE OF THE PROVISION

Browsing this website.
The data necessary for use of web services is also processed for the purpose of:

  • obtaining statistical information on the use of services (most visited pages, number of visitors per time or day, geographical areas of origin, etc.);
  • checking correct operation of the services offered;
  • determining responsibilities in the event of hypothetical cyber crimes against the website.

For the use of cookies and similar technologies, see the cookie policy in the footer

The processing is necessary to pursue the legitimate interests of the Data Controller or third parties, provided that the interests or fundamental rights and freedom of the Data Subject requiring the protection of personal data do not prevail, taking into account the reasonable expectations of the Data Subject and the activities strictly necessary for operation of the website and browsing (Art. 6, par. 1 f and 47 of the GDPR).
On request, the Data Subject can obtain information on the balancing of interests test.


For non-technical cookies, the processing is based on consent to process personal data (Art 6, par. 1 a and C42, C43 of the GDPR).

Consent is given through the banner and the website cookie policy

Browsing data will be retained for up to the duration of the browsing session, and in any case for no longer than seven days (except for any need to determine crimes by the judicial authority).


For cookies, see the cookie policy in the website footer

The provision is necessary for browsing the website.


For cookies, see the cookie policy in the website footer

 
In addition to browsing, personal data will be processed after filling out forms in the reference area for:

finalità PURPOSE OF PROCESSINGbase giuridica LEGAL BASISperiodo di conservazione RETENTION PERIODnatura del conferimento NATURE OF THE PROVISION

A) CONTACT AREA, for sending contact, information, support requests.

the processing is necessary for the execution of a contract in which the Data Subject is a party or for the execution of pre-contractual measures adopted upon request of the same; (C44) Art. 6, par. 1 b) of the GDPR

Maximum 12 months

Provision is necessary.
Failure to provide the necessary data will make it impossible to be contacted and receive information

B) NEWSLETTER SUBSCRIPTION AREA FOR DIRECT MARKETING PURPOSES, for sending advertising or direct sales material or for carrying out market research, approval or commercial communication and newsletters by automated means (e-mail, SMS).
The communications may contain promotional activities and/or logos of third-party partners and companies belonging to the group.
For a complete list of group companies and partners, send a request to privacyagn@agnenergia.com.
For the list of group companies, you can also look at the contact section.
There will be no transfer of personal data.

To compare and possibly improve the results of Communications, the Data Controller uses systems for sending newsletters and promotional communications with reports. The reports will allow the Data Controller to know, for example: the number of readers, openings, unique "clickers" and clicks; the devices and operating systems used to read the communication; details on the activity of individual users; the details of the emails sent, emails delivered and those not delivered among those forwarded; All this data is used for the purpose of comparing, and possibly improving, the results of communications.

the processing is based on consent to the processing of personal data (C42, C43) Art. 6 par. 1 la) of the GDPR

Until withdrawal of consent

(opt-out)

Provision is optional.

Failure to provide the necessary data will make it impossible to receive promotional communications and newsletters

C) WORK WITH US AREA, to apply for staff selection, searching for and selecting personnel for the purpose of employment, even for any positions other than those for which the Data Subject applies spontaneously; storage of personal data, including for future selections; managing applications in response to job vacancies posted on our website; interviews and any video-interviews (data processing including image/audio).


For the above selections, the Data Controller may communicate personal data and send the curriculum vitae to group companies of the group.  List of group companies available on request from privacyagn@agnenergia.com

the processing is necessary for the execution of pre-contractual measures adopted on request of the same (C44) Art. 6 par. 1 b) of the GDPR


the processing of data communication to group companies is necessary for their selection, for the pursuit of the legitimate interests of the Data Controller or third parties, provided that the interests or fundamental rights and freedom of the Data Subject that require the protection of personal data do not prevail (C47-C50) Art. 6 par. 1 b) of the GDPR

maximum 12 months

In principle, the data collected during the recruitment process will be deleted as soon as it becomes clear that no job offer will be made or that the offer will not be accepted by the applicant


maximum 12 months, unless opposed

Provision is necessary.

Failure to provide the necessary data will make it impossible to apply


Provision of personal data to group companies is optional 
Failure to provide personal data will result in selection by the Data Controller alone and not by other group companies

D) CUSTOMER AREA, to access the reserved area on the website, to independently use a series of services: check consumption, download bills, enter self-reading, request refuellingthe processing is necessary for the execution of the contract in which the Data Subject is a party or for the execution of pre-contractual measures adopted upon request of the same (C44) Art. 6 par. 1 b) of the GDPRUntil termination of the contract and the technical time for disabling the credentials

Provision is necessary.

Failure to provide the necessary data will make it impossible to access the reserved area


persone 4. TO WHOM WILL PERSONAL DATA BE COMMUNICATED?

Depending also on the purposes provided in specific areas, personal data will be communicated to subjects who will process the data as independent Data Controllers, or Data Processors (Art. 28 GDPR) and processed by natural persons (Art. 29 GDPR) acting under the authority of the Data Controller and managers on the basis of specific instructions provided regarding the purposes and methods of processing. The data will be communicated to recipients based in Italy, belonging to the following categories:

  • Subjects based in Italy who provide website and communication network management services, including e-mail and SMS;
  • Subjects based in Italy who provide website hosts;
  • Related group companies, subsidiaries with headquarters in Italy;
  • Call centres based in Italy for phone call management and contacts;
  • Competent authorities for the fulfilment of legal obligations and/or provisions of public bodies, on request.

Depending on the purposes, to:

  • Subject to consent, to subjects based in Italy who provide services for the management of the information system, platforms for sending newsletters, SMS and commercial and promotional communications in general, communication agencies;
  • Freelancers, studios or companies based in Italy, in the context of support and consulting relationships, including, with regard to the “work with us” section any third parties and work consultants and companies for the purposes of staff selection.

The list of Data Processors is constantly updated and available by writing to privacyagn@agnenergia.com or to the other addresses given above.

mondo 5. WILL THE DATA BE TRANSFERRED TO NON-EEA COUNTRIES?

Personal data will not be transferred to non-EEA countries. For cookies, see the cookie policy in the website footer

processo 6. IS THERE AN AUTOMATED PROCESS?

Personal data will be subjected to conventional manual, electronic and automated processing. It should be noted that there are no fully automated decision-making processes.

diritti 7. WHAT ARE YOUR RIGHTS? HOW CAN YOU EXERCISE THEM?

You may assert your rights as expressed in Art. 15 as amended of the GDPR, by contacting the DPO/RPD at dpo@agnenergia.com or by contacting the Data Controller at privacyagn@agnenergia.com or the contacts given above. You have the right, at any time, to request access to your personal data (Art.15), rectification (Art.16), deletion (Art.17), restriction of processing (Art.18). The Data Controller communicates (Art. 19) any corrections, deletion or restriction of processing made to each of the recipients to whom the personal data has been transmitted. The Data Controller shall inform the Data Subject of the recipients if the Data Subject requests it. You have the right to data portability in the cases provided for (Art.20) and in this case they will be provided to you in a structured, commonly used and readable format, by automatic device. In the cases provided for (art.21), you the right to object to the processing of data at any time based on legitimate interest, as well as to withdraw the consent given in specific cases, without prejudice to the lawfulness of the processing based on consent before its withdrawal.
To stop receiving automated direct marketing communications (e-mail and SMS), simply write an e-mail to privacyagn@agnenergia.com with the subject "unsubscribe from automated" or use our automatic unsubscription systems provided for e-mails only (unsubscribe).
If you believe that the processing of personal data carried out by the Data Controller is in breach of the provisions of Regulation (EU) 2016/679, the Data Subject has the right to lodge a complaint with the supervisory authority, in particular in the Member State in which they normally reside or work or in the place where the alleged breach of the Regulation occurred (https://www.garanteprivacy.it/), or to bring the case before the appropriate court.

modifiche 8. Changes to the policy

The Data Controller reserves the right to modify, update, add or remove parts of this policy. In order to facilitate verification and modification of the text, the policy will contain the update date.
Update date: 3 May 2021
***