Privacy notice pursuant to Art. 13 EU Reg. 2016/679 (GDPR) – Information to be provided where personal data are collected from the data subject
- Data Controller (Articles 4 and 24 GDPR)
DUFERCO ENERGIA S.p.A., with registered office in Via Paolo Imperiale n. 4, 16126 Stradario 31820 Genova, in the person of its pro-tempore legal representative. You may contact the Data Controller at the following contacts: fax +39 010.275.60200, e-mail: firstname.lastname@example.org, phone number +39 010 275 601.
The Data Protection Officer (DPO), pursuant to articles 37 to 39 of GDPR, is identified within the company and the relevant contact details are phone no.: +39 010 275 601; e-mail email@example.com.
- Categories of personal data processed
Personal data: Any information relating to an identified or identifiable natural person (‘data subject’); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person (Art. 4, Para. 1 – C26, C27, C30 GDPR)
- Purposes of the processing, legal basis, data retention period, and nature of the consent
|Purposes of the processing||Legal Basis||Data retention period||Nature of the consent|
|A) Browsing the website and APP owned by the Data Controller||Art. 6 para. 1, let. f) GDPR Legitimate interest||Duration of browsing session||Required to enjoy the contents of the Duferco website/APP.|
|B) Processing any request for assistance or information via dedicated forms or online chat (e.g., online assistance form found in the FAQ area or interactive chat available on the website), or by calling one of the toll-free/contact numbers listed online and subsequent re-contact by a Duferco representative, at the contact information provided.||Art. 6 para. 1, let. f) GDPR Legitimate interest||For the time it takes to process the request you submitted||Required to handle your request. Failure to give consent will make it impossible for us to provide you with the requested assistance and/or information, but you may continue browsing the website/APP.|
|C) Direct marketing activities carried out by the Data Controller upon your consent, in the form of advertising/promotional materials, direct sales of products and services and/or satisfaction questionnaires, via automated tools, email, telefax, MMS, SMS or other type of text message, as well as via telephone calls made by an operator and traditional mail. In order to compare and possibly improve the results of its communications, the Data Controller uses systems to send newsletters and promotional communications with reports. Thanks to the reports, the Data Controller will be able to know, for example: the number of readers, opened communications, single “clickers” and clicks; the devices and operating systems used to read the communications, details on the activity of each user, the detail of sent emails, delivered, undelivered and forwarded emails. All this data is used for the purpose of comparing, and possibly improving, the results of our communications.||Art. 6 par. 1, lett. a) GDPR Data Subject Consent||Until such consent is revoked||Optional and free. Failure to provide it, will in no way affect the Duferco newsletter subscription, if selected.|
- Specific areas/sections
On this site, you will find some specific areas/sections that will be subjected to specific privacy policies, to which reference is made in its entirety.
- Categories of the Personal Data Recipients
Personal data provided by the Customer may be disclosed to recipients, who will process the data as Data Processors (Art. 28 GDPR) and/or as natural persons acting under the authority of the Data Controller and the Data Processor (Art. 29 GDPR) or acting independently as separate Data Controllers, in order to comply with contracts or related purposes. The list of designated Data Controllers is available by contacting the Data Controller at the contact details listed in the foreword to this notice.
Personal data may be communicated to the following categories of recipients: – Parent/subsidiary companies and/or associated companies of Duferco Energia S.p.A.; – Third parties that provide services relating to the Data Controller’s information system and communication network management (including email and hosting services) – Relevant authorities in charge of supervising compliance with legal obligations and/or public bodies’ provisions, upon request.
- Transferring data to a third Country
In the event of transfer of Personal Data outside the European Union, to countries considered inadequate by the European Commission, Duferco Energia will take all necessary security measures to protect the Personal Data and provide adequate safeguards for the Data Subjects, in accordance with the applicable legislation and, in particular, Articles 45 and 46 of EU Regulation 2016/679.
This is without prejudice to the Customer’s right to get information relating to the safeguards adopted, the means to obtain a copy of such Personal Data, and the place where it has been transferred.
- Rights of Data Subjects
You may assert your rights as defined in EU Regulation 2016/679 by contacting the Data Controller at the email address firstname.lastname@example.org. You have the right, at any time, to ask the Data Controller to access (Art. 15), rectify (Art. 16), or delete (Art. 17) your personal data or restrict its processing (Art. 18). In addition, you have the right to object at any time to the processing of your data based on legitimate interest.
Without prejudice to any other administrative and jurisdictional action, if you believe that the processing of your data violates EU Reg. 2016/679, pursuant to Art. 15, letter f), you have the right to lodge a complaint with the competent Italian Supervisory Authority for the personal data protection.
Update date: May 02,2023