RENANTIS WEBSITE PRIVACY POLICY
1. INTRODUCTION
Renantis S.p.A. – a company previously known as Falck Renewables and with registered office at Corso Italia, 3 – 20122 Milan (hereinafter referred to as the “Company”) and with the following email address privacyexpert@renantis.com – in its capacity as data controller, informs you that the personal information of users accessing its website community.renantis.com (the “Site“) or the information of any other person referred to in these personal data (the “User”), will be processed in accordance with this privacy policy on the processing of personal data.
-
DATA CONTROLLER
The Company acts as data controller of processed personal data. An exhaustive list of those designated by the Company to supervise the processing of data is available by sending a request to the Company, using the address mentioned at paragraph 9 of this privacy policy.
-
TYPES OF PROCESSED PERSONAL DATA
The Company collects and processes personal data provided by the User (hereinafter referred to as “Personal Data”). These data include identification data and information about the nationality and surfing data about the use of the services offered via the Site. These data are collected using cookies, in accordance with the Company’s cookie notice, available here.
Information regarding the User’s occupation and phone numbers is also processed, if the User chooses to share this information.
Health data and – generally speaking – special categories of personal data, as per article 9 of the Regulation (EU) 2016/679 on personal data protection (the “Privacy Regulation”) are not processed.
The above-mentioned Personal Data are processed only in so far as is necessary in order to fulfil the purposes described in paragraph 4 of this privacy policy.
-
PURPOSES OF PROCESSING
The Company processes the User’s Personal Data using manual or electronic tools, for the following purposes
I. Use of the Site and its features, including the request for specific information in the “Contacts” section (community.renantis.com/contacts/) as well as the registration and participation of the User to the “Forum” section (community.renantis.com/forums/), an online space dedicated to local communities practices and experience sharing. The “Forum” will be organized by thematic areas and will be accessible only to representatives and members belonging to local communities based next to Renantis’ plants (hereinafter referred to as “Contractual Purposes”);
II. Compliance with obligations from laws and regulations (hereinafter referred to as “Legal Obligation Purposes”)
III. With the User’s prior consent, sending newsletters and communications via email, telephone, SMS or other messaging services within the context of the email alert service, regarding the potential publication of calls for projects, calls for participation, reports and communications intended for analysts, as well as the promotion and/or sale of products and/or services sold by the Company (“Marketing Purposes”)
IV. Carrying out activities about the sale of the company and branches of the business, acquisitions, mergers, de-mergers or other operations; to assert and defend these rights against the User and third parties (“Business Legitimate Interest Purposes”).
-
LEGAL BASIS OF THE PROCESSING
Data processing is compulsory in accordance with the Contractual Purposes and the Legal Obligation Purposes. Should the User object to the processing of their Personal Data in accordance with these purposes, they will not be able to use the Company’s services.
Processing Personal Data for Marketing Purposes is optional and subject to the User’s prior consent. If the latter deny their consent, the Company will not be able to keep the User updated regarding new products or services, special deals, personalised offers, or carry out market surveys and send communications or other materials containing information that could be in line with their interests.
Processing Personal Data for Business Legitimate Interest is not compulsory, but is based on the Company’s legitimate interest in carry out these operations. Users may object to the data processing of this purpose. In this case, their Personal Data will not be used for these purposes, unless the Company is able to identify an overriding legitimate interest.
-
DISCLOSURE OF PERSONAL DATA
The Company could disclose the User’s Personal Data with:
I. Company’s collaborators, subsidiaries and suppliers, in the context of their tasks and/or the contractual obligations they have vis-à-vis one another;
II. Legal, administrative and tax advisers who assist the Company in carrying out its activities;
III. Subcontractors engaged in activities related to the performance of the products and services offered by the Company, such as – for example – assistance agencies and/or resellers, acting as external data processors;
IV. Public and/or judicial and/or monitoring bodies, should they make the request, acting as independent data controllers; and
V. IT or cloud service providers.
-
TRANSFERS OF PERSONAL DATA
The transfer of the User’s Personal Data will be carried out to member States of the European Union. Any transfer of the User’s Personal Data to countries outside the European Union and in particular in all countries where Renantis has subsidiaries, shall take place where necessary for Contractual Purposes or Business Legitimate Interest Purposes, or for example, if the Data controller decides to set up its servers or company databases outside the European Union, or to outsource services to entities established abroad. In any event, such a transfer will take place in compliance with the guarantees provided by the applicable regulations and in compliance with the provisions of article 44 and subsequent articles of the Privacy Regulation.
The User has the right to obtain a copy of the guarantees on the basis of which the Data are transferred and to be made aware of the location where these Data were made available. He/she may do so by sending a request to the Data Controller at the address mentioned in paragraph 9 of this privacy policy.
-
DATA PROTECTION RIGHTS
With regard to their Personal Data, the Users may at any time exercise their right to (a) obtain the confirmation of the existence of Personal Data concerning them and receive copies of such data; (b) find out where the Personal Data come from, the purposes for which data were processed, and the methods used, as well as the logic behind processing carried out by electronic means; (c) request that the Personal Data are updated, accurate and – if they want – complete; (d) obtain the erasure, transformation into anonymous format or blocking of data processed in violation of the law, as well as object to the processing on legitimate grounds; (e) withdraw consent to the processing of their Personal Data, without prejudice to the lawfulness of the processing which occurred before consent was withdrawn; (f) request that the Company restrict the scope of the data processing; (g) object to the processing of their Personal Data; (h) request that their Personal Data are erased, without undue delay, and (i) obtain a portable version of their Personal Data. These rights are exercised by sending a letter to the address mentioned in paragraph 9.
The User will have the right to file a complaint with the Supervisory Authority, where permitted.
-
DATA CONTROLLER’S CONTACT DETAILS
Should the Users have doubts about this privacy policy, or should they want to exercise one of the data protection rights contained in this privacy policy, they may contact the Company at the following address [privacyexpert@renantis.com].
-
PERSONAL DATA STORAGE PERIOD
The Company will process the Personal Data for a period which is considered necessary in order to satisfy the purposes for which they were collected, as per paragraph 3 above. In any event, the following storage periods apply to the processing of Personal Data as follows, in accordance with the aims pursued:
I. Data collected for Contractual Purposes are kept for the whole duration of the contract entered into with the Company and/or whilst the Company’s services are being used, and for a further 10 years after the termination of the contract and/or the termination of the service for the purposes of the defence of a right and/or to exercise a right of the Company in court and/or out of court, in the event of disputes relating to the execution of the contract and/or the performance of the service;
II. Data collected for Legal Obligation Purposes are kept for a period that is equal to the duration prescribed by law for each type of data;
III. Data collected for Marketing Purposes are kept for a period equal to the entire duration of the service, as well as for the 2 years following the termination of the service;
IV. Data collected for Business Legitimate Interest Purposes are kept for 10 years from the time of collection.
- MODIFICATIONS AND UPDATES
This privacy policy enters into force on the date mentioned above. However, the Company may – with prior notice – make changes and/or additions to the privacy policy, also as a consequence of the entry into force of the Privacy Regulation and potential ulterior legal modifications and/or additions.
CONSENT TO THE PROCESSING OF PERSONAL DATA
I declare that I read and understood the information pertaining to the processing of my personal data and that I consent (such consent may, in any event, be withdrawn at a later date) to the Company, in its capacity as data controller, using my personal data to send newsletters and marketing communications regarding the Company’s products and/or services, via any means (including email, SMS, social network, mobile Apps and telephone)
[26/07/2018]