POLICY ON PROCESSING VISITORS' PERSONAL DATA NOT OBTAINED FROM THE DATA SUBJECT
pursuant to art. 14 of EU regulation 2016/679
WHO IS the Data Controller of your data?
The Data Controller (hereinafter Controller) is AGN ENERGIA Spa, in the person of its pro tempore legal representative, with registered office in 10088 Volpiano (TO), via Amalfi 6, with which you have entered into and/or may enter into a contract. The Company is part of the Quiris Group and has adopted the same technical-organisational measures and best practices regarding protection of personal data as the group. The data subject can contact the data controller by writing to the e-mail address: email@example.com, or calling the number indicated in the “Contacts " section of the site www.agnenergia.com. You can also contact the Data Protection Officer (RDP or DPO) at the following e-mail address: firstname.lastname@example.org.
What is personal data and WHAT DATA do we process?
“Personal data” means any information suitable to identify, directly or indirectly, a natural person, in this case you (so called Data Subject), who has requested the services.
Your data was acquired by the company Lemonfour Srl to which you requested, via the Fotovoltaico per Te (Photovoltaic for You) platform, to be contacted by companies in the sector in order to receive a customised offer.
In order to comply with your request, we collect and process the following personal data you provided to Lemonfour:
identification data: for example the first and last name;
contact details: e.g. residence address, landline and mobile phone number, fax number and/or e-mail address;
preference data related to the specific types of service you requested;
in general, any other data and information provided by you for the quote request.
What are the PURPOSES and LEGAL BASES of the processing?
The Controller collects and processes personal data in order to comply with your request to be contacted in order to make you a customised offer.
The processing is necessary for the execution of pre-contractual measures adopted on your request pursuant to Art. 6 par. 1(b) of the GDPR.
The processing of your personal data is essential for the management and execution of the contractual relationship and does not require your prior consent.
What are the processing METHODS?
The processing of data for the purposes set out above is done with paper, computer or telematic tools, on electronic or magnetic media, and on paper. It should be noted that the Data Controller does not carry out fully automated decision-making processes.
HOW LONG do we keep your personal data?
For the above-mentioned purposes, your data will be stored for a maximum period of 12 months, after which it will be permanently and irreversibly deleted or made anonymous.
WHO will we communicate your personal data to?
We communicate your data exclusively to the subjects we use to carry out the activities needed to achieve the purposes described above, and who act as independent Controllers or appointed as Data Processors pursuant to Art. 28 of the GDPR, which include, for example, the following subjects:
companies or other third parties (for example: suppliers, credit institutions, professional firms, consultants, statutory auditing firms, external companies for the purposes of preventing and controlling the risk of insolvency, fraud control and credit protection, subjects operating in the field of credit recovery, out-of-court and judicial, etc.);
public authorities, supervisory bodies or judicial authorities for the fulfilment of legal obligations;
associated or subsidiary companies within the group, if this is necessary for the pursuit of the purposes described above.
WHERE do we transfer your data?
The processing will be carried out by AGN Energia within the European Economic Area (EEA). However, in some cases, your data may be transferred to third countries where the suppliers of SW platforms/services/products used by the group are established. If there are no adequacy decisions or international agreements for these third countries, the transfer is guaranteed by the Standard Contractual Clauses approved by the European Commission and made available by the suppliers.
What are your RIGHTS as a Data Subject?
In relation to the aforementioned processing, you may exercise the rights referred to in articles 15 to 22 of EU Regulation 2016/679.
In particular, in the cases provided for by the Regulation, the data subject has the right to ask the Data Controller for access to his/her data (art. 15 GDPR), the rectification (art. 16 GDPR) or the cancellation of the same (art. 17 GDPR). The data subject has the right to oppose to the processing (art. 17 GDPR) or to request the restriction of processing (art. 18 GDPR) and to obtain his/her data in a structured, commonly used and machine-readable format (art. 20 GDPR). You can also revoke the consents given pursuant to Art. 7 of the Regulation (Art. 21 GDPR) at any time.
Pursuant to the applicable legislation, the Data Subject can also lodge a complaint with the Guarantor Authority for the protection of personal data pursuant to Art. 77 of the Regulation if they believe that their personal data has been processed in contravention of current legislation, or can refer to the judicial authority pursuant to Art. 78 GDPR.
Update date: 15/06/2023
AGN Energia SPA