The Data Controller of the personal data is A2A S.p.A with registered office in Via Lamarmora, 230 – 25124 Brescia and with management and administrative offices in Corso di Porta Vittoria, 4 – 20122 Milan
For all matters regarding the processing of your personal data and the exercising of your rights, you may contact the Data Protection Officer (DPO), at email@example.com
|Purposes of data processing
|Legal basis for processing
|Navigation data is used for the sole purpose of obtaining information on the use of the website, to check its correct functioning and to optmize its service.
|The legitimate interest of the Controller in ensuring the proper functioning and optimal use of the website for users.
|The data you provide through the contact form is processed for the sole purpose of providing the services that are requested (for example: request for information, sending a CV, sending an investor information request, subscribing to the Press Alert service, receiving newsletters, etc...).
|To carry out your request (falling under, more in general, the performance of a contract or to take steps prior to a contract the request of the party concerned, in accordance with Article 6 c. 1 lett. b of the Privacy Regulation).
|The Controller analyzes the naviagtion data of the person concerned to improve user experience and implement solutions to make the website more user-friendly.
Consent freely given by the person concerned.
|Processing may be aimed at responding to requests from competent authorities and bodies, etc..
|Compliance with a legal obligation.
The following personal data is processed:
Processing is carried out by authorized personal as part of their work, with or without the use of electronic means, according to the principles of lawfulness and fairness so as to protect the confidentiality and rights of the person concerned at all times.
Navigation data can be analyzed to improve the website only when prior specific consent has been given.
Your personal data may be made available to:
Your data will not de disseminated (made available to unspecified parties).
Your data will be processed within the European Economic Area (“EEA”). Notwithstanding this and by way of exception, should a transfer outside the EEA be necessary, such transfer will take place on the basis of an adequacy decision by the European Commission, if applicable, or with the appropriate guarantees required under the Privacy Regulation.
Your data will be stored for as long as is necessary to achieve the purposes for which it will be processed or to comply with legal obligations, and in particular:
with information request forms (e.g. requests for joint conciliation or privacy issues, etc.), the data collected will be retained for the time necessary to respond to the request, unless there is a further contact with the user or for the completion of any administrative obligations (e.g. a request regarding a complaint or report must be retained beyond the period of its handling for up to a maximum of 10 years from its resolution).
The duration of cookies used on the site can be found in the relevant section of this information notice.
In the event of litigation, the aforesaid storage period may be extended by up to 10 years from the date of settlement of the litigation.
You have the right to ask the Data Controller to:
Right to object. When processing is carried out to pursue a legitimate interest of the Controller, we hereby inform you that you may object to such processing at any time. In this case, the Controller will refrain from further processing your personal data, unless there are compelling legitimate grounds for processing, or for the establishment, exercise or defense of rights in legal proceedings.
You can exercise you rights by sending an email to the DPO (firstname.lastname@example.org) with the company name of the Data Controller, or by writing to the Data Controller.
Without prejudice to any other administrative or jurisdictional recourse, you may lodge a complaint with the Data Protection Authority, if you consider that the processing that concerns you violates the Privacy Regulation.
The navigation data necessary for the functioning of the website is generated by the user during navigation and is acquired by the computer systems and software procedures that are used to operate it.
The personal data collected through the contact form is provided by you and any refusal to provide it prevents us from processing your requests.
The data will not be subject to decisions based solely on automated processing, including profiling, that produce legal effects on your person or significantly affect your person.
These are usually short strings of text that are placed and stored by the website manager (or by the manger of a third party website, the so-called “third parties”) inside the user’s device (e.g. a computer, tablet, smartphone, etc.).
The following tools are used in the website.
Further information is available on the website page of the Garante per la Protezione dei Dati Personali
(1) Regolamento generale sulla protezione dei dati (GDPR).
(2) Trattamento: qualsiasi operazione o insieme di operazioni, compiute con, o senza, l’ausilio di processi automatizzati e applicate a dati personali, o a insiemi di dati personali, come la raccolta, la registrazione, l’organizzazione, la strutturazione, la conservazione, l’adattamento o la modifica, l’estrazione, la consultazione, l’uso, la comunicazione mediante trasmissione, diffusione o qualsiasi altra forma di messa a disposizione, il raffronto o l’interconnessione, la limitazione, la cancellazione o la distruzione.
(3) Titolare del trattamento: la persona fisica o giuridica, l'autorità pubblica, che determina le finalità e i mezzi del trattamento di dati personali.