Stai cercando il tuo fornitore di energia? Vai su dolomitienergia.it
Stai cercando il tuo fornitore di energia? Vai su dolomitienergia.it
Privacy Notice regarding the processing of personal data for the management of registrations for external events promoted by the companies of the Dolomiti Energia Group
Pursuant to Arts. 13 and 14 of Regulation (EU) 2016/679 ("GDPR" or "Regulation "), notice is hereby given that this Notice relates to the personal data collected from data subjects, directly or through third-party platforms or management systems used for the organisation of the event, used for registration and participation in external events promoted by the Companies of the Dolomiti Energia Group, in compliance with the purposes, terms and methods indicated below in points 4, 6 and 7.
1. DATA CONTROLLER
The Data Controller, namely the entity that determines the purposes and means of the processing of personal data, is the Company forming part of the Dolomiti Energia Group, among those listed below, which organises the event in which the data subject requests to participate:
• Dolomiti Energia S.p.a., with registered office in Rovereto (TN), Via Manzoni No. 24, Tax Code and VAT No. 01614640223, tel. 0464-456111, certified email (PEC): info.holding@cert.dolomitienergia.it;
• Dolomiti Energia Mercato S.p.a., with registered office in Trento, Via Fersina No. 23, Tax Code and VAT No. 01812630224, tel. 0461-362330, PEC: info.commerciale@cert.dolomitienergia.it;
• Dolomiti Energia Solutions S.r.l., with registered office in Trento, Via Fersina No. 23, Tax Code and VAT No. 01840970220 tel. 0461-362222, PEC: info@cert.dolomitienergiarinnovabili.it;
• Dolomiti Ambiente S.r.l. with registered office in Rovereto (TN), Via Manzoni No. 24, Tax Code and VAT No. 02352570226, tel. 0464-456111, certified email (PEC): info@cert.dolomitiambiente.it;
• Dolomiti Energia Trading S.p.a., with registered office in Trento, Via Fersina No. 23, Tax Code and VAT No. 03027910235, tel. 0461-362222, certified email (PEC): info.trading@cert.dolomitienergia.it;
• Dolomiti Edison Energy S.r.l., with registered office in Trento, Via Fersina No. 23, Tax Code and VAT No. 02051850226 tel. 0461-362222, certified email (PEC): info@cert.dee.tn.it;
• Hydro Dolomiti Energia S.r.l. with registered office in Trento, Viale Trieste No. 43, Tax Code and VAT No. 02075180220, tel. 0461-457111, certified email (PEC): hde.pec@hde.legalmail.it;
• EPQ S.r.l., with registered office in Trento, Via Fersina 23, Tax Code and VAT No. 09388440969, certified email (PEC): epq@legalmail.it;
• Dolomiti Energia Rinnovabili S.r.l., with registered office in Trento, Via Fersina 23, Tax Code and VAT No. 02725200220, certified email (PEC): info.der@cert.dolomitienergia.it;
• Dolomiti Energia Epico Hydro S.r.l., with registered office in Trento, Via Fersina 23, Tax Code and VAT No. 02285880228, certified email (PEC): dolomitienergiaepicohydro@cert.dolomitienergia.it;
For further information, please refer to the website www.gruppodolomitienergia.it.
2. CONTACT DETAILS OF THE DATA PROTECTION OFFICER
Please note that the Dolomiti Energia Group has designated, pursuant to Article 37, paragraph 2, of the Regulation, the Data Protection Officer ("DPO"), who may be contacted for any requirement relating to the protection of personal data, including the exercise of the rights referred to in point 9 below, at the email address: info.privacy@cert.dolomitienergia.it, or at the address at via Fersina 23, 38123 - Trento.
3. TYPE OF PERSONAL DATA PROCESSED
The personal data will be collected through this website, namely the data that the subjects will provide directly to the website for the request to participate in the events promoted by the Dolomiti Energia Group. The following categories of data may be processed:
- personal details: first name and surname;
- contact details: email address.
4. PURPOSES OF PROCESSING
The processing of personal data is necessary in order to ensure the proper registration of the data subject for events promoted by the Companies of the Dolomiti Energia Group, as well as in order to validate the actual attendance of the data subject at such events organised in the form of, by way of example and without limitation: guided tours, conferences, meetings with the community or laboratories/workshops. The data collected will not be stored or processed for further purposes and shall not be disseminated.
5. LEGAL BASIS OF PROCESSING AND MANDATORY NATURE OF PROVISION
The processing of personal data carried out by the Companies of the Dolomiti Energia Group is performed for the purpose of satisfying the data subject's request to participate in the event and, therefore, the legal basis that legitimises the processing is the necessity of performing the service requested by the data subject, in compliance with the provisions of Art. 6, paragraph 1, letter b), GDPR.
The provision of personal data is not mandatory; however, failure to provide the data, or inaccurate provision thereof, will make it impossible to perform Your request or to correctly manage your registration for the events promoted by the Companies of the Dolomiti Energia Group.
6. PROCESSING METHODS AND RETENTION PERIODS
The processing of personal data shall be carried out by means of the operations indicated in Art. 4, No. 2) of the GDPR and may take place using both paper-based and IT and telematic tools, with logic strictly related to the purposes indicated and, in any event, using methods suitable to guarantee the security and confidentiality thereof in accordance with the provisions set out in Article 32 GDPR, by persons authorised to perform the relevant tasks, with the use of appropriate measures to guarantee the confidentiality of the data and prevent access thereto by unauthorised third parties. In order to protect personal data, the Controller adopts appropriate technical, physical, legal and organisational security measures in order to ensure full compliance with the security rules provided for by the legislation in force. There are no automated decision-making processes.
The personal data of the data subject received shall be retained for the time necessary to complete the activities connected with and consequent upon the specific processing activity and, in any event, for no longer than 60 days from the date of the event. In any case, the possibility remains to retain the data for a longer period where necessary to guarantee the exercise and defence, including before the courts, of the rights of the Controller, and the possibility for the Data Subject to exercise the rights recognised by the GDPR remains unaffected, as more specifically set out in point 9 (including, for example, the right to erasure, within the possible limits by reason of the legislation in force).
7. COMMUNICATION OF DATA
The data collected and processed may be made accessible and/or communicated for the purposes referred to in point 4:
- to employees and collaborators of the Controller, in their capacity as authorised persons and/or System Administrators, within the scope of their respective duties and/or contractual obligations relating to the performance of the contractual relationship with the data subjects;
- to third-party companies that carry out activities on behalf of the Controller, in their capacity as persons appointed as Processors in compliance with the provisions of Art. 28 of the GDPR (for example, other companies of the Dolomiti Energia Group that carry out activities under Intercompany service agreements - in compliance with functional unbundling legislation - and/or companies appointed to provide services necessary for the management and organisation of the event);
- to the entities to which they must be disclosed in fulfilment of an obligation provided for by law, by a Regulation or by EU legislation, or in order to comply with an order or measure of the Judicial Authority or other public Authorities, Public Administrations, supervisory and control Authorities, in their capacity as independent Data Controllers;
The data provided shall not be disseminated.
8. PLACE OF DATA PROCESSING
The processing of Your personal data takes place mainly within the territory of the European Union. Any transfers of personal data to countries located outside the European Economic Area take place and may take place only in compliance with Article 45 GDPR, therefore on the basis of an adequacy decision for the country by the European Commission, or on the basis of the Controller's accession to specific agreements including appropriate safeguards in compliance with the provisions of Article 46 GDPR, or, furthermore, in the presence of one of the derogations specifically provided for by Article 49 GDPR.
9. RIGHTS OF THE DATA SUBJECT
In relation to the processing operations described in this Notice, the Data Subject may exercise, free of charge, the rights provided for by Articles 15 et seq. of the GDPR and, among these, the following are relevant for the processing in question (the description set out below is an indicative summary; for the complete statement of the rights, including the limitations thereof, reference is made to Articles 15 et seq. of the GDPR):
- Right of access to personal data (the right to obtain, free of charge, information regarding the personal data held by the Controller and the related processing);
- Right to rectification of data (the right to obtain the correction or completion of his/her data);
- Right to erasure of data (right to be forgotten) (the right to obtain, without undue delay, the erasure of personal data);
- Right to restriction of processing (where the conditions referred to in Article 18 of the GDPR are met);
- Right to object to processing on legitimate grounds (the right to object, at any time, to the processing of personal data concerning You based on the condition of legitimate interest, unless legitimate grounds exist for the Controller to continue the processing which override the interests, rights and freedoms of the data subject or for the establishment, exercise or defence of a right before the courts);
- Right to data portability (in the cases and according to the procedures indicated in Article 20 of the GDPR);
- Right to lodge a complaint with the Data Protection Authority using the forms available on its website, if you consider that the processing of your personal data has taken place in breach of the GDPR.
10. EXERCISE OF RIGHTS
For any request concerning this notice or the operations described herein, including the methods of data processing, as well as to exercise the rights recognised to You by the GDPR, a communication may be sent by letter or by email to the Data Protection Officer, using the contact details indicated above.
The Controller shall take charge of your request and provide, without undue delay and, in any event, at the latest within one month of receipt thereof, the requested information. This time limit may be extended by two months, if necessary, taking into account the complexity and number of the requests.
The exercise of rights as a Data Subject is free of charge pursuant to Article 12 GDPR; however, in the case of manifestly unfounded or excessive requests, including due to their repetitive nature, the Controller may charge you a reasonable expense contribution, in light of the administrative costs incurred to handle your request, or refuse to satisfy your request.
All information relating to the protection of personal data, including an updated copy of this notice, is available on the website gruppodolomitienergia.it, in the item at the bottom of the page dedicated to the "Privacy Notices" section - External Events Privacy Notice.