Identity and contact details of the data controller

The data controller of the Data processed in the context of the use of the Services (the “Processing“) is Atlante, reachable:

• by ordinary mail, to the above-mentioned registered office address;
• by e-mail, at the following address: privacy@atlante.energy.

Categories and source of Data processed

The Processing will concern the following categories of Data:

• Identifying information (e.g., first name, surname, etc.).
• Contact information (e.g., telephone number and e-mail address).
• Payment information (e.g., transactions made with electronic payment instruments).
• economic and contractual data (e.g., information on the use of Services).

Data are collected from you, as well as from service providers who handled electronic payments.

Purposes and legal basis of the Processing and nature of Data communication

Processing is carried out in order to:

• Allow you to use the Services. The legal basis for this is the need to perform a contract to which you are a party and/or pre-contractual measures taken at your request.
• To comply with applicable legal obligations. The relevant legal basis is the need to comply with legal obligations to which Atlante is subject.
• Managing and maintaining the internal control and risk management system of Atlante, including IT security. The legal basis for this processing is the legitimate interest of Atlante in the protection of the company.
• Carrying out business intelligence activities aimed at the continuous improvement of business processes. The relevant legal basis is the legitimate interest of Atlante in improving its processes.
• Exercise and/or defend the rights and the legitimate interests of Atlante in judicial and/or extrajudicial proceedings. The relevant legal basis is the legitimate interest of Atlante in the protection of its own rights.

Disclosure of the Data for these purposes is necessary to enable you to use the Services, as well as to comply with legal obligations. Therefore, in the absence thereof, it will not be possible for you to use the Services.

Categories of data recipients

Data may be disclosed to:

• Service providers involved in the pursuit of the above-mentioned purposes, including IT and telematics service providers, tax and legal advisors, and payment management service providers.
• Other companies of the corporate group to which Atlante belongs, for administrative and/or accounting purposes.
• Persons authorised by Atlante to process the Data necessary to carry out activities strictly related to the provision of the Services, who have committed themselves to confidentiality or have an appropriate legal obligation relating to confidentiality (e.g., employees of Atlante).
• Authorities and/or public entities, to which the Data must be disclosed pursuant to mandatory rules and/or for the exercise and/or protection of rights and/or legitimate interests.

Data Transfer

Atlante does not have any intentions to transfer Data to recipients located in countries that are outside the European Economic Area or to international organisations. Should such a transfer occur, Atlante shall ensure that such transfer complies with data protection legislation, as interpreted by the Court of Justice of the European Union and taking into account the recommendations of the European Data Protection Board.

Data retention period

Data will be stored for the execution of all activities related to the Services.

Notwithstanding this, Atlante may retain the Data for a further period if this is necessary to comply with legal obligations and/or to exercise and/or defend rights and/or legitimate interests in judicial and/or extrajudicial proceedings.

Your rights

You have the right to request to Atlante access to Data and to rectify or erase them or to object to their processing, as well as to exercise your right to restriction of processing and the right to Data portability.

You may exercise these rights by contacting Atlante at the above-mentioned addresses.

You are also entitled to lodge a complaint with the competent supervisory authority (the Garante per la Protezione dei Dati Personali for Italy).