Privacy Policy
INFORMATION NOTICE PURSUANT TO ARTICLES 13 AND 14 OF EU REGULATION 2016/679 AND ARTICLE 13 OF LEGISLATIVE DECREE NO. 196/2003
Pursuant to the aforementioned legislation (Arts. 13 and 14 of EU Regulation 2016/679, hereinafter also “GDPR”; Art. 13 of Legislative Decree No. 196/2003, hereinafter also “Privacy Code”), we inform you that the personal data provided will be processed in compliance with the aforementioned regulations and the confidentiality obligations to which the company Eco Sinergie soc. cons. a r.l. is bound. Therefore, we invite you to review this information notice.
Data Controller
The Data Controller is Eco Sinergie soc. cons. a r.l., with registered office in San Vito al Tagliamento – Via Clauzetto 42.
Data Protection Officer
The Data Protection Officer (DPO) is Mr. Dimitri Girotto, dimitri.girotto@uniud.it.
Purposes of Processing
The personal data provided are necessary for compliance with contractual obligations regarding the execution of the service entrusted to the company Eco Sinergie soc. cons. a r.l., as well as for the management of commercial relations. The data are also necessary for the fulfillment of obligations deriving from national or regional laws and regulations, or for the fulfillment of obligations deriving from European Union law. Data processing may also be required to execute orders from judicial authorities, supervisory and/or control authorities, or other public bodies. Finally, the Data Controller is always permitted to process data for the purpose of exercising the right of defense in court, and to protect its subjective rights and legitimate interests.
Methods of Processing and Retention. Retention Period
Processing will be carried out in automated and/or manual form, in compliance with the provisions of Art. 32 of GDPR 2016/679 regarding security measures, by specifically appointed subjects. We point out that, in compliance with the principles of lawfulness, purpose limitation, and data minimization, pursuant to Art. 5 of GDPR 2016/679, subject to free and explicit consent – where necessary under current regulations – expressed at the bottom of this information notice, personal data will be kept for the period of time necessary to achieve the purposes for which they are collected and processed, or as provided by law, and in any case for the duration of any contractual relationship established with the Data Controller, extending until the expiry of the statutory limitation periods provided by law. Personal data acquired and processed, subject to consent, for commercial purposes will be kept for the time necessary to fulfill these purposes, and in any case for no longer than 5 years from the expression of your consent.
Scope of Communication and Dissemination
1. We also inform you that the data collected may be disclosed and made accessible to
– to public bodies, judicial, supervisory, and/or control authorities, in fulfillment of obligations deriving from European Union law, or due to the need to execute orders from judicial authorities, supervisory, and/or control authorities;
– to internal employees, including those of subsidiaries, as persons in charge of data processing; to external professionals and consultants, and service companies for electronic processing, acting as data processors;
– to credit institutions or debt collection companies, for the purpose of exercising the right of defense in court, and to protect its subjective rights and legitimate interests.
2. Furthermore, data may be sent, in this case subject to consent, to public bodies or private companies and used by them to send newsletters, commercial communications, and/or advertising material regarding products or services offered or initiatives organized by the Data Controller, as well as for measuring satisfaction levels regarding the quality of services, via email, mail, and/or SMS and/or telephone contacts.disfazione sulla qualità dei servizi;
Transfer of Personal Data
Data will not be transferred to European Union Member States or to third countries outside the European Union.
Special Categories of Personal Data
Pursuant to Articles 26 and 27 of Legislative Decree 196/2003 and Articles 9 and 10 of EU Regulation No. 2016/679, should you provide Eco Sinergie soc. cons. a r.l. with data classifiable as “special categories of personal data” – namely data revealing “racial or ethnic origin, political opinions, religious or philosophical beliefs, or trade union membership, as well as genetic data, biometric data intended to uniquely identify a natural person, data concerning health or a person’s sex life or sexual orientation” – such categories of data may only be processed subject to free and explicit consent, expressed in writing at the bottom of this information notice.
Existence of Automated Decision-Making, Including Profiling
Eco Sinergie soc. cons. a r.l. does not adopt any automated decision-making process, including profiling, as referred to in Article 22, paragraphs 1 and 4, of EU Regulation No. 679/2016.
Rights of the Data Subject
At any time, pursuant to Art. 7 of Legislative Decree 196/2003 and Articles 15 to 22 of EU Regulation No. 2016/679, the right may be exercised to:
a) request confirmation as to whether or not your personal data exist;
b) obtain information regarding the purposes of the processing, the categories of personal data, the recipients or categories of recipients to whom the personal data have been or will be disclosed and, where possible, the retention period;
c) obtain the rectification and erasure of data;
d) obtain restriction of processing;
e) obtain data portability, i.e., receive them from a data controller in a structured, commonly used, and machine-readable format, and transmit them to another data controller without hindrance;
f) object to processing at any time, including processing for direct marketing purposes, unless there are compelling legitimate grounds to proceed with the processing which override the interests, rights, and freedoms of the data subject, or for the establishment, exercise, or defense of legal claims;
g) object to an automated decision-making process concerning natural persons, including profiling;
h) request from the data controller access to and rectification or erasure of personal data or restriction of processing concerning the data subject, or to object to processing, in addition to the right to data portability;
i) withdraw consent at any time without affecting the lawfulness of processing based on consent before its withdrawal;
j) lodge a complaint with a supervisory authority.
You may exercise your rights by sending a request via email to info@ecosinergie.it.
