Privacy Policy - Sistema Energetico Ibrido

Data controller

The personal data controller is: University of Calabria – DIMEG, Via Pietro Bucci – 87036 – Arcavacata di Rende (CS), VAT number  0419160783.

Owner contact details

The Data Controller can be reached by registered mail with return receipt at the address indicated above or at the following e-mail address: info@sei-sistemaenergeticoibrido.eu

Purpose and legal basis of the processing

Your personal data is collected and processed by the Owner for purposes strictly connected to the use of the Site and its information services. Your personal data may also be used in different processing operations (storage, archiving, processing, etc.) in terms compatible with these purposes. In particular, your personal data may be processed for the following scope: –   respond to requests aimed at obtaining information and receiving informative material (catalogues, brochures, price lists, etc.); –   respond to our job positions.

Data processed

The Site processes exclusively common data (name, surname, city, address, e-mail address, telephone number).

Treatment methods and storage times

The data collected will be processed using electronic or automated IT and telematic tools, or through manual processing with logic strictly related to the purposes for which the personal data were collected and, in any case, in such a way as to guarantee in any case the security of the same. Your personal data will be stored in a form that allows your identification for the time strictly necessary for the purpose for which the personal data were collected and subsequently processed and, in any case, within reasonable limits. To ensure that your personal data is always accurate and updated, please report any changes to: info@sei-sistemaenergeticoibrido.eu.

Summary table

PURPOSE OF THE TREATMENT	LEGAL BASIS	STORAGE TIMES FOR PERSONAL DATA
Browsing the site: 12 months	Overriding legitimate interest of the Owner to allow navigation on the Site	For the entire duration of navigation and use of the Site
Guarantee the security of the networks and information relevant to the Site by using, to a strictly necessary and proportionate extent, personal data relating to web traffic (IP addresses, emails, logs, etc.)	Prevailing legitimate interest of the Owner to guarantee the security of the networks and information relevant to the Site	12 months from data collection
Respond to your communications or inquiries made through the site	Prevailing legitimate interest of the Owner to be able to evaluate and respond to your requests	For as long as it takes to evaluate and respond to your requests
Compliance with laws, regulations and community legislation, including of fiscal character	Fulfill obligations deriving from applicable legislation	For the entire duration required by applicable laws
Statistical analysis and market research in anonymous and/or aggregate form	Overriding legitimate interest of the Owner to allow navigation on the Site	12 months from data collection
Carry out communications for promotional purposes exclusively via email regarding products or services also similar to those offered on the Site https://www.sei-sistemaenergeticoibrido.eu	Legitimate interest of the Owner considered prevalent to carry out soft-spam  communications	60 months from data collection from the last service used, unless there is opposition
Newsletter (informative emails on the activities offered by the Owner)	Consent of the interested party	60 months from data collection from the last service used, unless there is opposition
Commercial and promotional communications relating to products and/or services provided by the Owner (marketing)	Consent of the interested party	60 months from data collection from the last service used, unless there is opposition

Categories of recipients of personal data

Your personal data will not be communicated or transferred to third parties for purposes not permitted by law or for purposes not compliant with this information. Furthermore, your data may be communicated to the police force or judicial authority, in accordance with the law and following a formal request from such subjects, for example in the context of anti-fraud services. The Data Controller, in the event of reorganization, merger or sale, could transfer all personal data collected for the specific purposes for which you have given consent to third parties interested in such operations. In all these cases, your consent will not be necessary.

Fundamental rights of the data subject and how to exercise them

The data subject, pursuant to art. 15 of EU Regulation 679/2016, has the right to obtain confirmation from the data controller as to whether or not personal data concerning him/her being processed and, in this case, to obtain access to the personal data and the following information:

• pursuant to art. 16, to obtain from the Data Controller the rectification of inaccurate personal data concerning him, without unjustified delay;
• pursuant to art. 17, to obtain from the Data Controller the deletion of personal data concerning him without unjustified delay;
• pursuant to art. 18, to obtain from the Data Controller the limitation of processing when one of the following hypotheses occurs:
  • purposes of the processing;
  • categories of personal data;
  • categories of recipients to whom the data have been or will be communicated;
  • data retention period or criteria used to determine this period.

The data subject also has the right a) the data subject disputes the accuracy of the personal data, for the period necessary for the Data Controller to verify the accuracy of such personal data; b) the processing is illegal and the data subject opposes the deletion of the personal data and instead requests that their use be limited; c) although the Data Controller no longer needs them for the purposes of the processing, the personal data are necessary for the interested party to ascertain, exercise or defend a right in court; d) the data subject has objected to the processing pursuant to art. 21, paragraph 1, pending verification of the possible prevalence of the legitimate reasons of the Data Controller over those of the interested party;

• pursuant to art. 20, to receive personal data concerning him in a structured format, commonly used and readable by automatic device;
• pursuant to art. 21, to oppose at any time to the processing of personal data concerning him carried out for marketing purposes (commercial communications sent by the owner).

To exercise your rights, you can send a specific request to the following e-mail address: info@sei-sistemaenergeticoibrido.eu. We will notify you of receipt and follow up on your request within five working days. In more complex cases we will undertake to provide you with an initial response no later than fifteen days.

The right to complain to a supervisory authority

You also have the right to lodge a complaint with the competent supervisory authority.

Necessity and consequences of a possible refusal to communicate personal data

Failure to provide data for the purposes indicated above will prevent the Data Controller from sending you the requested information.