Skip to main content

Who is the data controller?[1]
ECOENERGY S.R.L., represented by its legal representative pro tempore, with registered office at Via Bagutta 13, 20121 Milan (MI), Italy, VAT no. IT02706450802, email info@ecoenergy.it, certified email (PEC) amministrazione@pec.ecoenergy.it, telephone +39 02 36102492

 

How can I contact the controller?

The company’s contact details are:
Telephone +39 02 36102492
Certified email (PEC): amministrazione@pec.ecoenergy.it
Email info@ecoenergy.it
Address: Via Bagutta 13, 20121 Milan (MI), Italy

 

  1. Introduction

Under the European General Data Protection Regulation (GDPR), legal entities are not considered data subjects and the Regulation therefore does not apply to them. However, where personal data relating to a natural person are entered when company data are collected, that person is a data subject within the meaning of the Regulation and the relevant legislation applies accordingly.

 

  1. What processing is carried out through the website? What are the legal bases, purposes and retention periods?

NEWSLETTER: If you subscribe to the newsletter, you will provide us with your first name, last name and email address.
CONTACT FORM: If you fill in the contact form, we will collect your first and last name, email address and telephone number.
In all cases your IP address and browsing logs will be stored.

 

Legal basis and purposes of processing
Data are processed to carry out the activities related to setting up and managing the service requested from the controller. Data will be processed lawfully, fairly and with the utmost confidentiality, in compliance with appropriate security measures as required by the Italian Privacy Code and the Regulation. Processing is carried out by analogue and digital means. Data will in no case be publicly disclosed.

In particular:
NEWSLETTER: the purpose is to keep you informed about news and promotions, and the legal basis is consent.
CONTACT FORM: the legal basis is consent, and your data will be processed so that we can reply to your requests.
In all cases: the IP address associated with the browsing log is collected for security purposes relating to system access, and the legal basis is the controller’s legitimate interest.

 

  1. Processing methods

The Controller will process personal data for the time necessary to fulfil the above purposes, after which they will be deleted. We will delete your data once we have replied to your requests. For newsletter activities, data will be deleted 5 years after the last communication sent or the last use of the website for profiling purposes. Data relating to open tickets will be kept for 10 years for reasons connected with possible legal defence. Browsing logs will be kept for a maximum of 24 months.

 

  1. To whom will my data be disclosed?

The Controller may disclose data to all parties to whom disclosure is mandatory by law in order to fulfil the purposes provided for by law.

The Controller also relies on certain companies and IT tools that process data subjects’ personal data solely in the interest of the Controller, all duly appointed as data processors pursuant to Art. 28 GDPR. The list of data processors is available at the Controller’s offices and may be requested by email at info@ecoenergy.it. Data will also be disclosed to payment gateways acting as independent controllers.

 

Data storage and transfer
Personal data will be managed and stored on servers located in Italy at the Controller’s operating premises and in any other place where the parties involved in the processing are located, including countries outside the EU. The Controller hereby ensures that any data transfer takes place in compliance with the GDPR through the adoption of standard contractual clauses. For further information, please contact the Controller at info@ecoenergy.it.

 

Cookies
With regard to the cookies installed on your device, please note that providing your data is optional. However, some cookies are necessary for the website to be browsed correctly; therefore, without consent, the website may not work properly. The website also uses a necessary technical cookie to remember your previous cookie choice. Please also note that this website uses third-party cookies.

What are cookies?
Cookies are small text strings that the websites visited by users (so-called publishers, or “first parties”), or other websites or web servers (so-called “third parties”), place and store on the user’s terminal device so that they can be sent back to the same websites on the next visit. *

 

What are they used for?
Cookies are used for a variety of purposes: performing IT authentication, monitoring sessions, storing information on specific configurations of users accessing the server, storing preferences, or facilitating the use of online content, for example to keep track of items in a shopping cart or of the information entered in an online form. However, they may also be used to profile users, that is to “observe” their behaviour, for example in order to send targeted advertising, measure the effectiveness of advertising messages and adopt consequent commercial strategies. In this case they are referred to as profiling cookies. *

 

What are technical cookies?
Technical cookies are those required to browse a website or to provide a service requested by the user. They are not used for any other purpose and are normally installed directly by the website owner.

Without these cookies, some operations could not be performed or would be more complex and/or less secure. *

 

Are analytics cookies technical cookies?
Analytics cookies can be treated as technical cookies when they are used directly by the website owner to optimise the website, collecting aggregated statistical information on the number of users and on how they browse the website.

If, on the other hand, such statistical analyses are entrusted to third parties, user data must first be minimised and may not be combined with other processing operations or passed on to further third parties. Under these conditions, analytics cookies are subject to the same information and consent rules that apply to technical cookies. *

 

Which cookies does this website use?
In particular, this website uses the following cookies:

CookieDescription

 

How to disable cookies
Instructions for disabling cookies are available at the following links:
– Internet Explorer: http://windows.microsoft.com/it-it/windows7/block-enable-or-allow-cookies
– Chrome: https://support.google.com/accounts/answer/61416?hl=it
– Firefox: https://support.mozilla.org/it/kb/Attivare%20e%20disattivare%20i%20cookie
– Safari on iPad, iPhone and iPod: https://support.apple.com/it-it/HT201265
– Other browsers: http://it.wikihow.com/Disattivare-i-Cookies

 

Private browsing
To find out how to enable private browsing in the main browsers, click on the browser you use:

Internet Explorer (http://windows.microsoft.com/it-IT/windows7/Block-enable-or-allow-cookies),
Google Chrome (https://support.google.com/chrome/answer/95464?hl=it),
Mozilla Firefox (https://support.mozilla.org/it/kb/Navigazione anonima),
Opera Browser (http://help.opera.com/opera/Windows/1781/it/private.html#privateWindow)),
Apple Safari (https://support.apple.com/it-it/HT6074).

Privacy

This website uses cookies to improve your experience while you browse it. Cookies classified as necessary are stored in your browser because they are essential for the basic functions of the website to work. We also use third-party cookies that help us analyse and understand how you use this website. These cookies are stored in your browser only with your consent. You can also choose to disable these cookies, but disabling some of them may affect your browsing experience.

 

  1. a) What are my rights and how can I exercise them?

As a data subject, users have the rights set out in Article 15 et seq. of the Regulation, namely:

1. RIGHT OF ACCESS (Art. 15 GDPR)
Data subjects have the right to obtain confirmation as to whether or not personal data concerning them exist, even if not yet recorded, and to have such data communicated to them in an intelligible form.

2. RIGHT TO RECTIFICATION (Art. 16 GDPR)
Data subjects have the right to obtain the rectification of inaccurate personal data concerning them and the completion of incomplete data.

3. RIGHT TO ERASURE (Art. 17 GDPR)
Data subjects have the right to obtain the erasure of their personal data on specific grounds, such as the withdrawal of consent, an objection to processing, where the data are no longer necessary in relation to the purposes for which they were collected and processed, or in the event of unlawful processing. Erasure may not always be possible, but the controller will in any case be required to provide adequate justification.

4. RIGHT TO RESTRICTION OF PROCESSING (Art. 18 GDPR)
Data subjects have the right to obtain restriction of processing in specific circumstances, for example while a request for rectification or an objection is being assessed.

5. RIGHT TO DATA PORTABILITY (Art. 20 GDPR)
Where processing is based on consent or on a contract and is carried out by automated means, data subjects may receive their data in a structured, commonly used and machine-readable format, or ask for them to be transmitted to another controller.

6. RIGHT TO OBJECT (Art. 21 GDPR)
Data subjects have the right to object, in whole or in part:
a) on legitimate grounds, to the processing of personal data concerning them, even where relevant to the purpose of collection;
b) to the processing of personal data concerning them for purposes not covered by Art. 2.

Users may submit a request objecting to the processing of their personal data under Article 21 GDPR, stating the reasons for the objection. The Controller reserves the right to assess the request, which will not be accepted where there are compelling legitimate grounds for the processing that override the interests, rights and freedoms of the user.

7. RIGHT TO LODGE A COMPLAINT
Data subjects have the right to lodge a complaint with the competent supervisory authority under Article 77 GDPR if they consider that the processing of their data infringes the applicable legislation.

 

  1. b) How to exercise your rights

Data subjects may exercise the rights set out above at any time by contacting the data controller at the addresses given above.

 

[1] Pursuant to Art. 4(7) GDPR, the data controller is the party that determines the purposes and means of the processing of personal data; its responsibilities are set out in Art. 24 GDPR.

(* source: Italian Data Protection Authority – cookie FAQ)