Privacy Policy

Privacy Notice provided pursuant to Articles 13–14 of the GDPR (General Data Protection Regulation) No. 2016/679 (hereinafter the “Regulation”)

0. INTRODUCTION

The purpose of this page is to inform users about the policies followed by Enernautica S.r.l., with headquarters at Via Ameglia 81, Arcola 19021 (SP), regarding the collection, storage, use, and possible disclosure of any personal information collected from users in connection with their use of the services offered on the enernautica.it website. This Privacy Policy is subject to updates and changes. Any such updates or changes will be communicated via newsletter or highlighted in the relevant sections of the website. We recommend that you review this Privacy Policy periodically. Enernautica S.r.l. guarantees compliance with the regulations mentioned above and urges users to carefully read this Privacy Policy before submitting any personal information, noting that this policy applies solely to this website. The management and ownership of the website www.enernautica.it belong exclusively to Enernautica S.r.l.

1. DATA CONTROLLER AND DATA PROTECTION OFFICER

The data controller is Enernautica S.r.l., VAT No. 01386590119, with its registered office at Via Ameglia 81, Arcola 19021 (SP) – Italy. Enernautica S.r.l. has appointed a Data Protection Officer (DPO) whom you can contact at info@enernautica.it for any information regarding the processing of personal data by Enernautica S.r.l., including the list of data processors.

2. TYPES OF DATA COLLECTED

The Data Controller hereby informs you that, for the normal operation of the website, it will process data that, by its nature, may be defined as personal data. Personal data refers to any information relating to an identified or identifiable natural person, even indirectly, by reference to any other information, including a personal identification number.

The personal data processed through the website are as follows:

a) Browsing Data
During the normal operation of the website, the IT systems and software procedures collect certain personal data whose transmission is implicit in the use of Internet communication protocols. This information is not collected to be associated with identified data subjects, but by its very nature could, through processing and association with data held by third parties, allow users to be identified. This category of data includes the IP addresses or domain names of the computers used by users connecting to the website, the URI (Uniform Resource Identifier) addresses of the requested resources, the time of the request, the method used to submit the request to the server, the size of the file received in response, the numerical code indicating the status of the response provided by the server (successful, error, etc.) and other parameters related to the user’s operating system and computing environment.

b) General Personal Information
To access certain services on the website, you may be required to provide general personal information. Such personal information may include, but is not limited to: first name, last name, email address, phone number, etc.

c) Special Categories of Personal Data
When using the form in the “Contact Us” section to submit applications, you may provide personal data falling within the categories listed in Article 9 of the Regulation, known as “special categories of personal data”: “[…] data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, or trade union membership, as well as […] genetic data, biometric data intended to uniquely identify a natural person, and data concerning a person’s health, sex life, or sexual orientation.” These categories of data will be processed subject to the data subject’s consent.

We also wish to inform you that, for the purpose of reviewing applications, Enernautica S.r.l. may review your professional social media profiles that you have freely made available on the Internet (e.g., LinkedIn).

d) Cookies
Please see the cookie policy at the following link.

3. PURPOSE OF THE PROCESSING

The data you provide, including personal data and, where applicable, sensitive personal data, will be processed for the following purposes:
a. to respond to any contact requests received via email or by filling out the form on the Contact page;
b. to establish an immediate question-and-answer channel via a real-time chat accessible from every page of the website;
c. to publish comments related to blog posts;
d. to collect applications, evaluate resumes, and contact candidates as needed;
e. to send newsletters or commercial and marketing communications;
f. to carry out general administrative and accounting activities. For the purposes of applying the provisions regarding the protection of personal data, processing carried out for administrative and accounting purposes refers to activities related to organizational, administrative, financial, and accounting functions, regardless of the nature of the data processed. In particular, these purposes include internal organizational activities, activities necessary to fulfill contractual and pre-contractual obligations, and informational activities.

4. METHODS OF PROCESSING

The processing will be carried out in paper and/or electronic form, but in any case with appropriate measures to ensure maximum security, by specially trained and authorized personnel. Data collected for the purposes set forth in Section 3(a, b, c, f) will be retained for the time strictly necessary to fulfill those purposes. With regard to data retention for the purpose of collecting job applications as set forth in Section 3(d), the retention period is 12 months from the date of receipt of the application. In the case of data processing for commercial and marketing purposes as described in Section 3(e), the retention period has been set at 24 months. Further information regarding the data retention period and the criteria used to determine this period may be requested by writing to Enernautica S.r.l. at the following address: info@enernautica.it

5. LEGAL BASIS AND WHETHER THE PROCESSING IS MANDATORY OR OPTIONAL

The legal basis for the processing of personal data for the purposes set forth in Section 3 (d, e) is Article 6(1)(a) of the Regulation, as such processing is subject to the obtaining of explicit consent. The legal basis for the processing of personal data for the purposes set forth in Section 3 (a, b, c, f) is Article 6(1)(b) of the Regulation, as such processing is necessary for the provision of services or to respond to requests from the data subject. The provision of personal data for these purposes is optional; however, failure to provide such data would make it impossible to activate the services provided by the website, respond to requests, or evaluate resumes. With specific reference to the purpose set forth in Section 3(d) and the related analysis of professional social media profiles freely available on the Internet as described in Section 2, the legal basis for the processing is Article 6(1)(f) of the Regulation, namely the legitimate interest of Enernautica S.r.l. in assessing any risks regarding the candidate’s suitability for specific positions.

6. RECIPIENTS OF PERSONAL DATA

Your personal data may be shared, for the purposes set forth in Section 3, with:
a. parties acting as data processors, namely: parties with whom it is necessary to interact for the provision of services (such as hosting providers), or parties delegated to perform technical maintenance activities;
b. entities, organizations, or authorities to whom we are required to disclose your personal data pursuant to legal provisions or orders from authorities;
c. persons authorized by Enernautica S.r.l. to process personal data necessary to perform activities strictly related to the provision of services, who have committed to maintaining confidentiality (e.g., employees of Enernautica S.r.l.).

7. TRANSFERS OF PERSONAL DATA

To enable the purposes set forth in Section 3(e), the collected data may be transferred abroad, including outside the European Union, in the forms and manners provided for by applicable law, ensuring an adequate level of protection in all cases. In fact, for sending commercial and marketing communications, Enernautica S.r.l. uses MailUp, an Independent Data Controller, a proprietary mailing platform that, through statistical tracking systems, allows for the detection of when a message is opened, clicks made on hyperlinks contained within the email, the IP address or browser type used to open the email, and other similar details. The collection of this data is necessary for the use of the platform and is an integral part of the message-sending system’s functionality.

8. RIGHTS OF DATA SUBJECTS

The data subject is granted specific rights:

1. The data subject has the right to obtain confirmation as to whether or not personal data concerning him or her exist, even if not yet recorded, and to have such data communicated to him or her in an intelligible form;

2. The data subject also has the right to obtain information regarding: the origin of the personal data; the purposes and methods of processing; the logic applied in cases where processing is carried out with the aid of electronic tools; the identifying details of the data controller, data processors, and designated representative, along with their contact information; the individuals or categories of individuals to whom the personal data may be disclosed or who may become aware of it in their capacity as designated representative within the territory of the State, data processors, or persons authorized to process the data.

3. The data subject also has the right to obtain: the legitimate interests pursued by the data controller or by third parties; any recipients or categories of recipients of the personal data; the data controller’s intention to transfer personal data to a third country or to an international organization, and the existence or absence of an adequacy decision by the Commission; the data retention period or, if this is not possible, the criteria used to determine that period; the existence of automated decision-making; the right to lodge a complaint with the supervisory authority; the right to be informed whether the provision of data is a legal or contractual obligation or a requirement necessary for the conclusion of the contract.

4. The data subject also has the right to obtain: a) the updating, rectification, or, where the data subject has an interest, the supplementation of the data; b) the erasure, anonymization, or blocking of data processed in violation of the law, including data that no longer needs to be retained for the purposes for which it was collected or subsequently processed; c) confirmation that the actions referred to in subparagraphs (a) and (b) of this paragraph have been brought to the attention of the relevant parties, including with regard to their content; the names of those to whom the data have been disclosed or disseminated, except where such compliance proves impossible or involves an effort that is manifestly disproportionate to the right being protected.

5. Finally, the data subject has the right to object, in whole or in part: a) on legitimate grounds, to the processing of personal data concerning him or her, even if such data is relevant to the purpose of collection; b) to the processing of personal data concerning him or her for the purpose of sending advertising or direct sales materials, or for conducting market research or commercial communications.

The data subject may exercise the rights listed above by contacting the Data Protection Officer at the following address: info@enernautica.it

Enernautica S.r.l. will respond without delay, and in any case within a period not exceeding 1 month. In particularly complex cases, the response period, in accordance with the Regulation, may be 3 months. In any case, the data controller will inform the data subject within 1 month of the request, including to notify the data subject of a denial in the cases specifically provided for in the applicable provisions.

9. RIGHT TO FILE A COMPLAINT WITH THE SUPERVISORY AUTHORITY

Please also be advised that, pursuant to Articles 77 et seq. of EU Regulation 2016/679, if the data subject believes that his or her rights have been infringed, he or she may contact the Data Protection Authority as well as the ordinary courts.

10. LANGUAGE

Any translation of this document into a language other than Italian is provided for informational purposes only. In the event of any discrepancies, the Italian version of this document is the only legally valid and binding version.