PRIVACY POLICY

1. Information on the processing of personal data of customers

2. Origin, purpose, legal basis and nature of data processed

3. Communication

4. Transfer abroad

5. Rights of the Data Subject

6. Data Controller

1. Information on the processing of personal data of customers

   Pursuant to articles. 13 and 14 of Regulation 2016/679/EU (hereinafter referred to as "GDPR") RETE ERA - RETE ENERGETICA RISORSE AMBIENTALI (hereinafter referred to as "Data Controller") with headquarters in Via delle Tre Madonne, 20 00197 ROMA (RM) C/O ASSORISORSE, in its capacity as "Data Controller", informs you that your personal data collected for the conclusion of the contract with the customer and / or in the execution and / or the conclusion of the same will be treated in accordance with the regulations cited in order to ensure the rights, fundamental freedoms and dignity of individuals, with particular reference to confidentiality and personal identity. We inform you that if the activities provided to you involve the processing of personal data of third parties in its ownership will be your responsibility to ensure that you have complied with the provisions of the legislation with regard to the subjects concerned in order to make legitimate their treatment by us.

2. Origin, purpose, legal basis and nature of data processed

   The processing of your personal data, supplied directly by you, is carried out by RETE ERA - RETE ENERGETICA RISORSE AMBIENTALI for the purposes of concluding the contract with the customer and/or as part of the execution and/or stipulation of the same. It is also possible that personal data of third parties communicated by the customer to the company may be processed. With respect to this hypothesis, the Customer is the autonomous owner of the treatment and assumes the consequent legal obligations and responsibilities, holding the Company harmless with respect to any dispute, claim and / or request for compensation for damages from treatment that may be received by the Company from third parties.
   
   In compliance with current legislation on the protection of personal data and without the need for specific consent from the interested party, the data will be stored, collected and processed by the Company for the following purposes:
    
   - Fulfilment of contractual obligations, execution and/or stipulation of the contract with the Customer and/or management of any pre-contractual measures; 
   - Fulfilment of any regulatory obligations, fiscal and tax provisions arising from the conduct of business and obligations related to administrative and accounting activities; 
   - Sending, directly or through third party providers of marketing and communication services, newsletters and communications for direct marketing purposes through email, sms, mms, push notifications, fax, paper mail, telephone with operator, in relation to products provided by other companies pursuant to art. 130 c. 1 and 2 of D. lgs. 196/03 (hereinafter "Code"); 
   - Communication of Data to third party companies for sending newsletters and communications for marketing purposes through email, sms, mms, push notifications, fax, paper mail, telephone with operator pursuant to art. 130 c. 1 and 2 of the Code. 
   
   The legal bases of the treatment for the purposes a) and b) above are Articles. 6.1.b) and 6.1.c) of the Regulation.
    
   The provision of Data for the above purposes is optional, but failure to provide such Data and refusal to provide them would make it impossible for the Company to perform and/or enter into the contract and provide the services required by the same.
    
   The legal basis for the processing of personal data for the purposes c) and d) is art. 6.1.a) of the GDPR as the treatments are based on consent; it should be noted that the Owner may collect a single consent for the marketing purposes described herein, pursuant to the General Measure of the Guarantor for the protection of personal data "Guidelines on promotional activities and contrast to spam" of July 4, 2013. The provision of consent to the use of data for marketing purposes is optional and should the data subject wish to object to the processing of data for marketing purposes carried out by the means indicated herein, as well as withdraw the consent given, he/she may do so at any time without any consequences (except for the fact that he/she will no longer receive marketing communications) by following the instructions in the "Rights of the Data Subject" section of this Information Notice.
    
   Finally, please note that for the processing carried out for the purpose of sending advertising material or direct sales or for carrying out market research or commercial communications in relation to products or services similar to those used by the customer, the Company may use e-mail addresses or personal data within the meaning and within the limits allowed by art. 130, paragraph 4 of the Code and the provision of the Authority for the protection of personal data of June 19, 2008 even in the absence of explicit consent. The legal basis for the processing of data for this purpose is Art. 6, paragraph 1, lett. f) of the GDPR, without prejudice to the possibility to object to such processing at any time, following the instructions in the "Rights of the Data Subject" section of this Information Notice.

3. Communication

   The data may be communicated to third parties appointed as data processors pursuant to article 28 of the GDPR and in particular to banking institutions, companies operating in the insurance field, suppliers of services that are strictly necessary for the performance of the company's activities, or consultants of the company, where this proves necessary for fiscal, administrative or contractual reasons or for requirements protected by current regulations.
   
   Your personal data, or the personal data of third parties in your possession, may also be communicated to external companies, identified from time to time, to which RETE ERA - RETE ENERGETICA RISORSE AMBIENTALI entrusts the execution of obligations deriving from the assignment received, to which only the data necessary for the activities requested of them will be transmitted. All employees, consultants, temporary workers and/or any other "natural person" who carry out their activities on the basis of instructions received from RETE ERA - RETE ENERGETICA RISORSE AMBIENTALI, in accordance with art. 29 of the GDPR, are appointed "Data Trustees" (hereinafter also referred to as "Trustees"). RETE ERA - RETE ENERGETICA RISORSE AMBIENTALI will give the appointees or managers who may be designated adequate operative instructions, with particular reference to the adoption of and compliance with security measures, in order to guarantee the confidentiality and security of the data. With reference to aspects of personal data protection, pursuant to art. 33 of the GDPR, the customer is invited to inform RETE ERA - RETE ENERGETICA RISORSE AMBIENTALI of any circumstances or events that could give rise to a potential "personal data violation (data breach)", in order to allow for an immediate assessment and the adoption of any actions aimed at countering such an event, by sending a communication to RETE ERA - RETE ENERGETICA RISORSE AMBIENTALI at the addresses indicated below. Data will not be divulged.
    
   This is without prejudice to RETE ENERGETICA RISORSE AMBIENTALI's obligation to communicate the data to public authorities on specific request.

4. Transfer abroad

   The transfer abroad of your personal data may take place if it is necessary for the management of the assignment received. For the processing of information and data that may be communicated to these subjects will be required the equivalent levels of protection adopted for the processing of personal data of its employees. In any case, only the data necessary for the pursuit of the intended purposes will be communicated and the regulatory tools provided by Chapter V of the GDPR will be applied.
   Modalities, processing logics and storage times
   Your data are collected and recorded lawfully and correctly for the purposes indicated above in accordance with the principles and requirements of art. 5 c 1 of the GDPR.
    
   The processing of personal data is carried out by means of manual, computerised and telematic tools with logics that are strictly correlated to the purposes and, in any case, in such a way as to guarantee security and confidentiality.
    
   Personal data will be handled by RETE ERA - RETE ENERGETICA RISORSE AMBIENTALI for the entire duration of the assignment and also subsequently for the purpose of asserting or protecting one's own rights or for administrative purposes and/or to implement obligations deriving from the regulatory and normative framework applicable pro tempore and in compliance with specific legal obligations regarding data conservation.

5. Rights of the Data Subject

   In accordance with, and within the limits and under the conditions provided for by the legislation on the protection of personal data regarding the exercise of the rights of the interested parties with regard to the processing of personal data covered by this Information Notice, as the interested party, you have the right to request confirmation of whether or not personal data concerning you are being processed, to access the personal data concerning you and in relation to them you have the right to request their correction, cancellation, the notification of corrections and cancellations to those to whom the data have been transmitted by our Organization, the limitation of the treatment in the hypotheses foreseen by the rule, the portability of personal data - provided by you - in the cases indicated by the rule, to oppose the processing of your data and, specifically, you have the right to oppose decisions concerning you if they are based solely on automated processing of your data, including profiling. If you believe that the processing of your data violates the rules of the GDPR, you have the right to lodge a complaint with the Guarantor pursuant to art. 77 of the GDPR.
    
   If you wish to request further information on the processing of your personal data or for the possible exercise of your rights, you can contact us at the following email: (info@eranet.org).

6. Data Controller

   The Data Controller, pursuant to art. 4 of the GDPR, is RETE ERA - RETE ENERGETICA RISORSE AMBIENTALI, Via delle Tre Madonne, 20 00197 ROMA (RM) C/O ASSORISORSE, P.IVA: 16420761005
    
   Cordial greetings, The Holder of the treatment:
    ENERGY NETWORK ENVIRONMENTAL RESOURCES
    
   - ex Art.12 and Art. 15-22 of the Regulation 2016/679/EU -