In compliance with EU Regulation 2016/679 (General Data Protection Regulation, hereinafter referred to as “GDPR”) and with applicable national legislation on the protection of personal data, we wish to provide users with some information on the processing of personal data, carried out in relation to the navigation of website of AB Energy S.p.A. (hereinafter also only referred to as “AB”), www.gruppoab.com (hereinafter referred to as the “Website”), in a capacity of Website Owner and Data Controller.
The processing of personal data is and shall be based on the principles of lawfulness, fairness, transparency and protection of the user’s rights.
Purposes of the data processing
Users’ personal data can be requested and obtained by filling out the appropriate form, for the purposes specified in each specific section where they are collected. In particular, data may be requested, with prior consent, for the selection of personnel by AB or by its subsidiaries and/or affiliates.
The optional and voluntary sending of emails to the email address listed in the “Contact” section or to any other email address managed by AB or by its subsidiaries and/or affiliates, entails the subsequent acquisition of the sender’s email address, necessary in order to reply to the requests, as well as any other personal data included in the message.
Data processing methods
The processing of users’ personal data may include any type of operation, including the collection, recording, organisation, storage, consultation, processing, modification, selection, extraction, comparison, use, interconnection, blocking, communication, deletion and destruction thereof. Users’ personal data shall be processed using tools and procedures designed to ensure the security and confidentiality of such data, through IT and electronic tools, as well as through paper-based media and archives.
Mandatory or optional provision of personal data
There is no obligation on the part of the user to provide the personal data requested. However, the failure to provide such data may result in a lack of access to the information contained in dedicated sections of the Website and/or to the services requested. Failure to provide such data may determine, where dependent on a legal obligation, an incorrect performance of our services.
The retention period for personal data shall be limited to the necessary use for navigating the Website or for the time strictly necessary for managing eventual requests, unless otherwise indicated in the specific sections of the Website and with the exception of legal and/or administrative obligations, in which case the retention period shall be longer.
Disclosure, dissemination and transfer of personal data
Notwithstanding the disclosure of personal data carried out in order to fulfil legal obligations, personal data collected and subsequently processed may be shared with: (a) adequately trained resources within AB offices, operating as authorised personnel for the processing of personal data and/or (b) other AB subsidiaries and/or affiliates (c) third parties operating in collaboration with AB in the provision of services, duly appointed as data controllers or data processors (e.g. companies that perform IT system management and maintenance services).
Users’ personal data shall not in any way be transferred to third parties or disseminated.
Rights of the Data Subject
The Data Subject may exercise, with regard to the processing of the personal data described here, the rights provided for by Articles 15-21 of the GDPR and in particular:
(a) right of access: the right to be informed and to request access to personal data processed;
(b) right to rectification: the right to request the modification or updating of personal data in case of inaccuracy or incompleteness thereof;
(c) right to erasure (“right to be forgotten”): the right to request the deletion of personal data where provided for by the GDPR;
(d) right to restriction of processing: the right to temporarily or permanently discontinue the processing of all or some of the user’s personal data where provided for by the GDPR;
(e) right to object: the right to object, at any time, to the processing of personal data where provided for by the GDPR (i.e. for reasons connected with the Data Subject’s specific situation);
(f) right to data portability: the right to request a copy of the user’s personal data in electronic format and that such data is transmitted to another Data Controller;
(g) right to withdraw consent (where the processing of the data is based on consent), at any time, without prejudice to the lawfulness of the data processing based on consent provided prior to the withdrawal thereof;
(h) right to lodge a complaint with the supervisory authority in case of violation of the GDPR and of applicable national legislation on the processing of personal data.
The Data Controller is AB Energy S.p.A., with registered office in Orzinuovi (BS), Italy, in Via Caduti del Lavoro 13 – email: firstname.lastname@example.org in the person of its Legal Representative.