Information on the processing of personal data
Pursuant to Regulation 2016/679 (“GDPR”), Terna Energy Solutions S.r.l., headquartered in Rome, Viale E. Galbani, 70, as the Data Controller (“Data Controller”), contactable by e-mail at privacy@terna.it, informs you that it will process the personal data (“Data”) you provide when submitting a request on a form (“Form”) on the website https://energysolutions.terna.it. The Data Controller has appointed a Data Protection Officer (“DPO”), who is available should you have any queries about the processing of your Data and can be contacted by e-mail at dpo@terna.it.
The Data Controller will process the following categories of your personal data: details such as forename, surname, contact information including e-mail address, telephone number, information about the type of request you have submitted on the Form, and the information included in the request.
The Data provided will be processed for the purposes indicated below:
a) to follow up on the content of the request submitted on the Form. The legal basis for this processing is the fulfilment of requirements and/or obligations connected with the execution of a contract, pursuant to Art. 6 paragraph 1 b) of the GDPR;
b) fulfilment of the obligations required by Italian, EU, and international laws and/or regulations. The legal basis of the data processing is Article 6, paragraph 1 c) of the GDPR;
c) protection of the interests or rights of the Data Controller, in or out of court. The legal basis for the processing is the legitimate interest of the Data Controller in the protection of its own legal claims, pursuant to Art. 6, para. 1, lett. f) of the GDPR);
d) where requested by you, to conduct marketing and sales campaigns in the form of newsletters and promotional communications (including market research and analysis) using automated means (e-mail, text, push notifications, non-operator call systems and instant messaging) and traditional means (ordinary post and telephone call with operator). The legal basis of the data processing connected to this purpose is your express consent as defined in Art. 6, paragraph 1 a) of the GDPR.
Providing data for the purposes indicated in points a), b) and c) is optional; however, without them, it will not be possible to follow up on the request you submitted on the Form.
Providing data for the purposes indicated in point d) is optional; if no data is provided, this will not affect the possibility of following up on the request you submitted on the Form.
The Data will only be kept for the time necessary to follow up on your request and in any case for a maximum of ten years from the date of collection and/or until revocation of your consent. With reference to consent given for marketing purposes, the Data will be stored for a period of twenty-four months from the date of collection, subject to your right to revoke the consent already given.
In any event, the Data Controller may store the Data for any further period as necessary in order to comply with legal obligations and/or to defend its legal position.
Data may be shared with:
- personnel authorised for data processing pursuant to Art. 29 of the GDPR and Art. 2-quaterdecies of the Privacy Code (Italian Legislative Decree 196/2003);
- third parties that typically act as data processors under the terms of Art. 28 of the GDPR; The Controller keeps an up-to-date list of the appointed data processors and guarantees that the data subject will be able to view it at the offices indicated above or upon request at the addresses indicated above;
- other companies in the Group of the Data Controller, who act as independent Data Controllers;
- parties, Entities or Authorities that are independent Data Controllers with whom it is mandatory to share personal data as part of legal or regulatory provisions or orders from the Authorities.
If your Data is transferred outside the European Economic Area, it will be done so only with the requisite legal orders and guarantees pursuant to Arts. 44-49 of the GDPR. Further information on this point may be requested from the Data Controller and/or the data protection officer at the addresses indicated in this notice.
You, as the data subject, may exercise the following rights at any time:
- Right to revoke consent to the data processing (Art. 7 GDPR). You may revoke your consent to the data processing at any time, but this will not affect the legality of the data processing performed until the time of revocation.
- Right of access (Art. 15 of the GDPR). You have the right to obtain confirmation as to whether or not Data concerning you is being processed and the right to receive any information relating to such processing.
- Right to rectification (Art. 16 of the GDPR). You have the right to rectification of your Data if it is incomplete or inaccurate.
- Right to erasure (Art. 17 of the GDPR). In certain circumstances, you have the right to have your Data erased from our archives.
- Right to restriction of processing (Art. 18 of the GDPR). In certain conditions, you have the right to restrict the processing of your Data.
- Right to object (Art. 21 GDPR). You have the right to formulate a request to object to the processing of your Data, in which the reasons that justify the objection must be made clear; the Data Controller reserves the right to review such a request, which may be rejected if there are legitimate reasons to proceed with the processing which prevail over your interests, rights and freedoms.
You may exercise these rights by contacting the Data Controller or DPO at the addresses indicated above.
You also have the right to make a complaint to the regulatory authority (Art. 77 GDPR) and the right to apply to the appropriate courts (Art. 79 GDPR).
Kind regards
Terna Energy Solutions S.r.l.