2. DATA CONTROLLER
3. TYPES OF PROCESSED PERSONAL DATA
The Company collects and processes personal data provided by the User (hereinafter referred to as “Personal Data”). These data include identification data and information about the nationality and surfing data about the use of the services offered via the Site.
Health data and – generally speaking – special categories of personal data, as per article 9 of the Regulation (EU) 2016/679 on personal data protection (the “Privacy Regulation”) are not processed.
4. PURPOSES OF PROCESSING
The Company processes the User’s Personal Data using manual or electronic tools, for the following purposes:
– to allow the User to use the Site, its services and its features, including processing User’s requests, answering User’s questions, providing the User with the requested services, as well as managing User’s application and processing User’s personal data included in the CV to pursue recruiting and staff selection activities (the “Contractual Purposes”);
– compliance with obligations from laws and regulations (hereinafter referred to as “Legal Obligation Purposes”);
– with the User’s prior consent, sending newsletters and communications via email regarding the potential publication of press releases, balance sheets, reports and communications intended for analysts, as well as the promotion and/or sale of products and/or services sold by the Company (“Marketing Purposes”)
– carrying out activities about the sale of the company and branches of the business, acquisitions, mergers, de-mergers or other operations; to assert and defend these rights against the User and third parties (“Business Legitimate Interest Purposes”).
– the consent of the Interested Party, sending newsletters and communications by e-mail and/or on paper regarding the possible publication of press releases, financial statements, reports and communications to analysts, as well as the promotion and/or sale of products and/or services marketed by the Company (“Marketing Purposes”).
– subject to the consent of the interested party, to communicate the Personal Data of the interested party to the other companies of the (operating in the following renewable energy sector to send newsletters, commercial communications and invitations to events, by e-mail in relation to their products and services, through the means of communication referred to in the previous point (“Third Party Marketing Purposes”);
– to pursue the legitimate interests of protecting the Company’s rights, to enforce or defend such rights in the competent courts (judicial, arbitration, administrative, etc.), to protect the Company’s assets and prevent fraud (for example: the Company processes Personal Data to ensure that the Site is updated and meets the needs of users, to analyze, review and improve the services and/or products offered on the Site) (“Purposes of Protecting Rights)
– to carry out activities functional to business and branch transfers, acquisitions, mergers, demergers or other transformations and to carry out such operations and to enforce and defend rights against the interested party and third parties (“Purpose of Legitimate Interest in Corporate Transactions”).
5. LEGAL BASIS OF THE PROCESSING
Data processing is compulsory in accordance with the Contractual Purposes and the Legal Obligation Purposes. Should the User object to the processing of their Personal Data in accordance with these purposes, they will not be able to use the Company’s services.
Processing Personal Data for Marketing Purposes is optional and subject to the User’s prior consent. If the latter deny their consent, the Company will not be able to keep the User updated regarding new products or services, special deals, personalised offers, or carry out market surveys and send communications or other materials containing information that could be in line with their interests.
Processing Personal Data for Business Legitimate Interest is not compulsory, but is based on the Company’s legitimate interest in carry out these operations. Users may object to the data processing of this purpose. In this case, their Personal Data will not be used for these purposes, unless the Company is able to identify an overriding legitimate interest.
6. DISCLOSURE OF PERSONAL DATA
The Company could disclose the User’s Personal Data with:
– legal, administrative and tax advisers who assist the Company in carrying out its activities;
– subcontractors engaged in activities related to the performance of the products and services offered by the Company, such as – for example – assistance agencies and/or resellers, acting as external data processors;
– public and/or judicial and/or monitoring bodies, should they make the request, acting as independent data controllers; and
– IT or cloud service providers.
7. TRANSFERS OF PERSONAL DATA
The transfer of the User’s Personal Data will be carried out to member States of the European Union. Any transfer of the User’s Personal Data to countries outside the European Union, and, specifically, to countries in which subsidiary companies of Falck Renewables operate, may take place where necessary for Contractual Purposes or Business Legitimate Interest Purposes, or for example, if the Data controller decides to set up its servers or company databases outside the European Union, or to outsource services to entities established abroad. In any event, such a transfer will take place in compliance with the guarantees provided by the applicable regulations and in compliance with the provisions of article 44 and subsequent articles of the Privacy Regulation.
8. DATA PROTECTION RIGHTS
With regard to their Personal Data, the Users may at any time exercise their right to (a) obtain the confirmation of the existence of Personal Data concerning them and receive copies of such data; (b) find out where the Personal Data come from, the purposes for which data were processed, and the methods used, as well as the logic behind processing carried out by electronic means; (c) request that the Personal Data are updated, accurate and – if they want – complete; (d) obtain the erasure, transformation into anonymous format or blocking of data processed in violation of the law, as well as object to the processing on legitimate grounds; (e) withdraw consent to the processing of their Personal Data, without prejudice to the lawfulness of the processing which occurred before consent was withdrawn; (f) request that the Company restrict the scope of the data processing; (g) object to the processing of their Personal Data; (h) request that their Personal Data are erased, without undue delay, and (i) obtain a portable version of their Personal Data. These rights are exercised by sending a letter to the address mentioned in paragraph 9.
The User will have the right to file a complaint with the Supervisory Authority, where permitted.
9. DATA CONTROLLER’S CONTACT DETAILS
10. PERSONAL DATA STORAGE PERIOD
The Company will process the Personal Data for a period which is considered necessary in order to satisfy the purposes for which they were collected, as per paragraph 3 above. In any event, the following storage periods apply to the processing of Personal Data as follows, in accordance with the aims