Data Subjects

Web Users who make a contact request receive this policy.

Data Controller

The Data Controller is Herambiente S.p.A. with registered office in Viale Berti Pichat 2/4 – 40127 Bologna, Tel. 051.287111.

Data Protection Officer

The DPO is the Head of the Privacy, Information, Security, Compliance and QSA Regulations department of Hera S.p.A. who can be contacted at Hera S.p.A., Viale Carlo Berti Pichat 2/4, 40127 Bologna or by sending an email to: dataprotectionofficer@gruppohera.it

Personal data processed

This policy governs the processing of the following personal data, indicatively but not exhaustively:
- Name and surname
- company name
- address
- Prefix and VAT number
- phone number
- email address
and any other personal data necessary to fulfil the request.
The data will be associated with the message that the User will enter.

Legal basis

Purpose

Provision of personal data

Pre-contractual / Contractual

Allow the request for contact and the fulfilment of the User requests. In particular, allow Herambiente S.p.A. and the Group Companies to receive messages/requests, to respond to questions and to process requests by directing them to the competent offices.

The provision of data is voluntary but necessary to allow the Data Controller to proceed with the requested service.

Consent

a) Sending advertising material or direct sales of products or services other than those subject to "soft spam", carrying out market research or sales communication or, in any case, for promotional purposes.
b) Profiling activities, carrying out activities aimed at analysing the preferences, habits and/or consumption choices of the interested party in order to offer products or services that align with their interests.
c) Subscribing to the email newsletter related to initiatives/information reports/information services.

The provision of data is optional.

Consent Withdrawal

The User shall have the right to withdraw his or her consent at any time by sending an email to privacy.herambiente@gruppohera.it. The withdrawal of consent shall not affect the lawfulness of processing based on consent before its withdrawal.
Upon receiving a newsletter, the User shall have the right to unsubscribe clicking on the specific link in the text of the newsletter itself.

Processing methods

The personal data collected will be processed electronically and in paper form, with the implementation of appropriate measures for the security and confidentiality of the data.
The personal data will also be processed through:
• the use of automated call or call communication systems;
• electronic communications by email, fax, MMS (Multimedia Messaging Service) or SMS (Short Message Service) or other means;
• the use of telephone and paper mail.

Recipients

The data will be processed exclusively by authorised personnel, formally appointed to complete such processing, duly identified, instructed and informed of the obligations set forth by law.
The entire processing or any phase thereof may be carried out by third-party companies, belonging or not to the Hera Group, which will act as external data processors.
The personal data may be communicated to companies of the Hera Group and/or third parties contractually linked to the Group Companies.
Your data may be communicated to Public Bodies/Public Administrations/Authorities and supervisory and control bodies.

Disclosure

The data will not be disclosed.

Transfer of personal data outside the European Union - European Economic Area

The data will be processed within the European Union and stored on servers located within the European Union. Your personal data may be transferred to non-EU/EEA countries, in accordance with the applicable legal provisions, entering into, if necessary, agreements that guarantee an adequate level of protection and/or adopting the standard contractual clauses provided by the European Commission, in compliance with Articles 45, 46, 47 and 49 of the GDPR.

Data retention

The data will be kept for 5 years from the request for contact, without prejudice to the storage necessary to comply with legal obligations or to the possible extinction of the contractual obligations and the fulfilment of the consequent legal obligations.
If the processing is based on consent, the data will be kept until there is a cancellation request.

Rights of the Data Subject

Data subjects have the right to obtain, in certain cases, access to personal data and rectification or erasure thereof or restriction of processing or to object to processing and be entitled to data portability (articles 15 et seq. of REGULATION (EU) 2016/679) by contacting the Data Controller directly, by sending an email to: privacy.herambiente@gruppohera.it or by sending a certified email to herambiente@pec.gruppohera.it

Right to lodge a complaint with the Supervisory Authority

The data subject also has the right to lodge a complaint with the competent Supervisory Authority.