PRIVACY POLICY
Privacy notice pursuant to Art. 13 EU Reg. 2016/679 (GDPR) – Information to be provided where personal data are collected from the data subject
- Data Controller (Articles 4 and 24 GDPR)
DUFERCO ENERGIA S.p.A., with registered office in Via Paolo Imperiale n. 4, 16126 Stradario 31820 Genova, in the person of its pro-tempore legal representative. You may contact the Data Controller at the following contacts: fax +39 010.275.60200, e-mail: privacy@dufercoenergia.com, phone number +39 010 275 601.
The Data Protection Officer (DPO), pursuant to articles 37 to 39 of GDPR, is identified within the company and the relevant contact details are phone no.: +39 010 275 601; e-mail dpo@dufercoenergia.com. - Categories of personal data processed
Personal data: Any information relating to an identified or identifiable natural person (‘data subject’); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person (Art. 4, Para. 1 – C26, C27, C30 GDPR) - Purposes of the processing, legal basis, data retention period, and nature of the consent
| Purposes of the processing | Legal Basis | Data retention period | Nature of the consent |
|---|---|---|---|
| A) Browsing the website and APP owned by the Data Controller | Art. 6 para. 1, let. f) GDPR Legitimate interest | Duration of browsing session | Required to enjoy the contents of the Duferco website/APP. |
| B) Processing any request for assistance or information via dedicated forms or online chat (e.g., online assistance form found in the FAQ area or interactive chat available on the website), or by calling one of the toll-free/contact numbers listed online and subsequent re-contact by a Duferco representative, at the contact information provided. | Art. 6 para. 1, let. f) GDPR Legitimate interest | For the time it takes to process the request you submitted | Required to handle your request. Failure to give consent will make it impossible for us to provide you with the requested assistance and/or information, but you may continue browsing the website/APP. |
| C) Direct marketing activities carried out by the Data Controller upon your consent, in the form of advertising/promotional materials, direct sales of products and services and/or satisfaction questionnaires, via automated tools, email, telefax, MMS, SMS or other type of text message, as well as via telephone calls made by an operator and traditional mail. In order to compare and possibly improve the results of its communications, the Data Controller uses systems to send newsletters and promotional communications with reports. Thanks to the reports, the Data Controller will be able to know, for example: the number of readers, opened communications, single “clickers” and clicks; the devices and operating systems used to read the communications, details on the activity of each user, the detail of sent emails, delivered, undelivered and forwarded emails. All this data is used for the purpose of comparing, and possibly improving, the results of our communications. | Art. 6 par. 1, lett. a) GDPR Data Subject Consent | Until such consent is revoked | Optional and free. Failure to provide it, will in no way affect the Duferco newsletter subscription, if selected. |
| D) Communication/Transfer of data to third parties (other Group companies and commercial partners, based in EEA countries), for their direct marketing purposes. For a complete list of group companies and partners, write to privacy@dufercoenergia.com | Art. 6 par. 1, lett. a) GDPR Data Subject Consent | Until such consent is revoked. Please also refer to the information on the processing of personal data of third party independent data controllers. | The provision is optional. Failure to provide the necessary data will make it impossible to communicate/transfer the data to third parties for their purposes. |
- Specific areas/sections
On this site, you will find some specific areas/sections that will be subjected to specific privacy policies, to which reference is made in its entirety. - Cookies
For more information about the cookies used by this website please see our cookie policy. - Categories of the Personal Data Recipients
The personal data provided by the Customer may be communicated to recipients, who will process the data as Managers (art. 28 GDPR) and/or as natural persons acting under the authority of the Owner and Manager (art. 29 GDPR) or who operate in total autonomy as separate data controllers, in order to comply with contracts or related purposes. The list of designated data processors is available by contacting the data controller at the contact details indicated in the introduction.
The data may be communicated to recipients belonging to the following categories: – Parent companies/subsidiaries and/or affiliates of Duferco Energia S.p.A.; – Subjects who provide services for the management of the information system and communication networks of the Data Controller (including e-mail and hosting service); – Competent authorities for the fulfillment of legal obligations and/or provisions of public bodies, upon request. - Transferring data to a third Country
In the event of transfer of Personal Data outside the European Union to countries considered inappropriate by the European Commission, Duferco Energia will adopt all the necessary security measures to protect the Personal Data and provide adequate guarantees for the interested parties in accordance with the applicable legislation and , in particular, of articles 45 and 46 of EU Regulation 2016/679. The Customer has the right to know the guarantees adopted, the means to obtain a copy of such Personal Data and the place where they have been transferred.
- Rights of Data Subjects
You may assert your rights as defined in EU Regulation 2016/679 by contacting the Data Controller at the email address privacy@dufercoenergia.com. You have the right, at any time, to ask the Data Controller for access to your personal data (art. 15), rectification (art. 16) or cancellation (art. 17) of the same, limitation of processing (art. 18) . Furthermore, you have the right to object at any time to the processing of your data based on legitimate interest. Specifically, to revoke the consent given you can write an email to the address at any time to privacy@dufercoenergia.com.
Alternatively, you can also use our automatic deletion/modification systems present on the applications.
Without prejudice to any other administrative and jurisdictional appeal, if you believe that the processing of data concerning you violates EU Reg. 2016/679, pursuant to art. 15 letter f), you have the right to lodge a complaint with the competent Supervisory Authority, i.e. the Italian Guarantor for the protection of personal data Italian Supervisory Authority.
Update date: March 19,2024