Privacy Policy

Data Controller and

Data Protection Officer (DPO)

Atlante, as identified at the beginning of the Policy, is the data controller (“Data Controller“) with regard to the Personal Data processed during the use of the Site. You can contact Atlante by writing:

• by ordinary mail, to the address of the registered office indicated above;
• by e-mail, to the address: privacy@atlante.energy.

Atlante, as Data Controller, has designated the Personal Data Protection Officer (hereinafter “DPO”), who is at your disposal for any information on issues relating to the processing of your personal data and the exercise of the rights you are entitled to as a data subject. The DPO can be contacted at the following e-mail address: dpo@atlante.energy.

Personal Data subject to processing and nature of provision

As part of your use of the Site, Atlante will process your Personal Data (hereinafter, also “Processing“) which may consist – also depending on your decisions on how to use the Services – of an identifier such as your name and/or any personal or contact data you may enter.

Your Personal Data may be collected both because you voluntarily provide it (e.g. by subscribing to the newsletter, sending a request, etc.), and automatically collected when you use the Site.

The Personal Data processed through the Website are as follows:

a. Browsing data

The computer systems and software procedures used to operate the Site acquire some Personal Data whose transmission is implicit in the use of Internet communication protocols. This is information that by its very nature could, through processing and association with data held by third parties, allow users to be identified. This category of data includes the IP addresses or domain names of the computers used by users who connect to the Site, the URI (Uniform Resource Identifier) addresses of the resources requested, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response given by the server (successful,  error, etc.) and other parameters related to the user’s operating system and computer environment. These data are used for the sole purpose of obtaining statistical information on the use of the Site, to check its correct functioning and to identify anomalies and/or abuses, and are deleted immediately after processing.

These data, in addition to allowing us to independently verify any suspicious access to the Site, could be used by Atlante to ascertain responsibility in the event of hypothetical computer crimes against the Site or third parties: except for this eventuality, the data do not persist for longer than is strictly necessary for this purpose and are periodically deleted at the end of this period.

b. Data provided voluntarily by the data subject and data of third parties
Except for the reference to specific information on the processing of personal data and/or any requests for consent (where required by law) that will be progressively reported or displayed on the pages of the Site prepared for particular Services, this Privacy Policy is also intended to provide for the processing of data voluntarily entered by you in the forms contained within the Site,  such as, for example, the  information request form in the “Become Partner” section, through which you will be asked, by way of example but not limited to, to enter information such as name, company, e-mail address, telephone number, city, country, as well as to formulate a specific request, which may contain additional Personal Data. With regard to the content of this request, we invite you to enter in the form only the Personal Data strictly necessary for the purpose of managing your request, thus excluding information that is not relevant and/or that may fall within the category of special categories of personal data referred to in Article 9 of the GDPR (“personal data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, or trade union membership, genetic data, biometric data for the purpose of uniquely identifying a natural person, data relating to health or a person’s sex life or sexual orientation”). In addition, in order to subscribe and receive the newsletter, on the Homepage, Partners, Drivers and About Section of the Site it is necessary to provide, as a mandatory field, the name, surname, and e-mail address to which you intend to receive communications. Finally, with regard to the “Become Partner” section of the Site, it is necessary to indicate, as a mandatory field, the name, surname, the e-mail address to which you intend to receive communications, the city, the country of reference and the number of sites of interest to you.

c. Cookies

Definitions, characteristics and application of the legislation

Cookies are text files that the sites visited by the user send and record on their computer or mobile device, to be then retransmitted to the same sites on the next visit. Thanks to cookies, a site remembers the user’s actions and preferences (such as, for example, login data, chosen language, font size, other display settings, etc.) so that they do not have to be indicated again when the user returns to visit said site or navigates from one page to another of it. Cookies, therefore, are used to perform computer authentication, session monitoring and storage of information regarding the activities of users who access a site and may also contain a unique identification code that allows you to keep track of the user’s navigation within the Site itself for statistical purposes.

Some operations could not be carried out without the use of cookies, which in some cases are therefore technically necessary for the very functioning of the Site. For more information on the types of cookies used on the Site, please read the Cookie Policy.

d. Personal data collected through the social media pages used by Atlante

Atlante may also collect some of your personal data when you interact with social media pages. Some information is communicated to Atlante directly by you, when you decide to share – through your profile – images published on our social pages, comment on our posts and/or express your satisfaction with one of our services, our initiatives or even one of our events through the selection of the appropriate buttons, as well as when you decide to write us an email message using the private chat or other channels made available on the various social media.

We may also become aware of certain information indirectly collected as a result of your interaction with our social media pages. For example, we may know the time and day you like one of our posts or send a request through an e-mail.

Knowing a lot of your personal information may depend on the social media settings you choose and the content you choose to make public. This information may also include your name, surname, some contact details, the image associated with your social profile. Therefore, we remind you that some of your information is visible to Atlante once you decide to follow our social pages. For this reason, we invite you to read the privacy policies of the various social media and to check the privacy settings. The provision of data marked with an asterisk in forms available on the Site is mandatory for the purpose of providing the requested services and failure to provide it, incomplete or untruthful communication will make it impossible to provide the requested service. The provision of personal data other than those indicated above is optional and any refusal does not in any way affect the user’s ability to use the Site, but will result in the impossibility, even partial, of pursuing some of the purposes indicated below.

Purposes of processing

Atlante will use your Personal Data, as collected through the Site, for the following purposes:

• to allow navigation of the Site, interaction with the contents contained therein, the provision of all other services made available by Atlante, including the management of the security of the Site (“Provision of Services“).
• manage and respond to specific requests addressed to Atlante, such as requests submitted by filling in the form in the “Become Partner” section of the Website (“Request Management“);
• conduct marketing activities through the sending of newsletters and promotional communications (including market research and analysis) through automated tools (e-mail, SMS, push notifications, unattended call systems, instant messaging) and traditional tools (paper mail, telephone with operator) (“Marketing“).
• to fulfil any obligations incumbent on the Data Controller under applicable laws, regulations or EU legislation, or to comply with requests from the authorities (“Compliance“);
• to meet any defensive needs, possibly related to the detection, prevention, mitigation and assessment of fraudulent or illegal activities in relation to the services provided on the Site, as well as to protect Atlante’s interests out of court and/or in court (“Abuse/Fraud“).

Specific security measures are implemented to prevent the loss of data, illicit or incorrect use and unauthorized access.

Legal basis of the processing

The legal basis used by Atlante to process your Data, according to the purposes indicated in the previous paragraph, are as follows:

Provision of the Service: the legal basis for the processing of Personal Data for this purpose is the performance of a contract to which the data subject is a party or the execution of pre-contractual measures adopted at the request of the same pursuant to Article 6, paragraph 1, letter b) of the GDPR, as the processing is necessary for the provision of the services requested by you. The collection and provision of Personal Data for these purposes is optional, but failure to provide it would make it impossible to activate the services requested.

Management of Requests: the legal basis for the processing of Personal Data for this purpose is the execution of a contract to which the data subject is a party or the execution of pre-contractual measures adopted at the request of the same pursuant to Article 6, par. 1, letter b) of the GDPR, as the processing is necessary for the provision of the services requested by you. The collection and provision of Personal Data for these purposes is optional, but failure to provide it would make it impossible to manage the requests you submit.

Marketing: the legal basis for the processing of Personal Data for this purpose is the consent expressed by the data subject, pursuant to Article 6, paragraph 1, letter a) of the GDPR. The collection and provision of Personal Data for this purpose is optional, however if you decide not to give consent to the processing, this would prevent us from involving you in our promotional initiatives, such as periodic updating through the newsletter service.

Compliance: the processing for this purpose is necessary for Atlante in order to comply with any legal obligations pursuant to Article 6, par. 1, letter c) of the GDPR. When you provide Personal Data to Atlante, they must be processed in accordance with the applicable legislation, which may entail their storage and communication to the Authorities for accounting, tax or other obligations.

Abuse/Fraud: the information collected for this purpose will be used exclusively to prevent and/or detect any fraudulent activities or abuses in the use of the Site, as well as to allow Atlante to protect its interests and rights out of court and/or in court. The legal basis for this processing is therefore the pursuit of Atlante’s legitimate interests pursuant to  Article 6, paragraph 1, letter f) of the GDPR.

Categories

recipients of Personal Data

Your Personal Data may be shared with the following parties (the “Recipients“):

• Subjects who typically act as data processors, such as: i) persons, companies or professional firms that provide assistance and consultancy to Atlante in accounting, administrative, legal, tax, financial and debt collection matters relating to the provision of services, ii) hosting providers, or iii) subjects delegated to carry out technical maintenance activities (including the maintenance of network equipment and electronic communication networks);
• Persons authorised by Atlante to process Personal Data who have committed themselves to confidentiality or have an appropriate legal obligation of confidentiality (e.g. personnel responsible for managing the Website or managing information systems);
• Companies of the NHOA Group, as independent data controllers, for administrative and accounting purposes on the basis of legitimate interest pursuant to art. 6.1.f) and Recitals 47 and 48 of the GDPR;
• Subjects, bodies or authorities to whom it is mandatory to communicate your Personal Data for Compliance, Abuse or Fraud purposes, or by orders of the authorities.
• Digital platforms (including Meta) as independent data controllers or joint data controllers (with Atlante), as part of marketing campaigns based on tracking user activities (e.g., retargeting and prospecting).

Transfers of Personal Data

Some of your Personal Data is shared with Recipients, both internal and external to the NHOA Group, who may be located outside the European Economic Area (“EEA”). Atlante ensures that the processing of your Personal Data by these Recipients is carried out in compliance with the applicable legislation. Indeed, transfers are carried out through appropriate safeguards, such as adequacy decisions, Standard Contractual Clauses approved by the European Commission or other safeguards considered adequate. More information is available by writing to the Data Controller at the following e-mail address: privacy@atlante.energy.

Data retention period

The Personal Data processed for the purpose of Provision of the Service and Managing Requests shall be stored by Atlante for as long as is strictly necessary to achieve the aforesaid purposes. However, since these Personal Data are processed in order to provide you with the Services, Atlante may store such Personal Data for a longer period, in particular as may be necessary to protect Atlante’s interests against possible claims related to the Services.

Personal Data collected for Marketing purposes will be processed by Atlante for 24 (twenty-four) months.

Personal Data processed for Compliance purposes will be retained by Atlante for the period required by specific legal obligations or applicable legislation.

Personal Data processed for the purpose of preventing Abuse/Fraud shall be stored by Atlante for as long as it is strictly necessary for such purpose and therefore until the moment when Atlante is obliged to store them for the purposes of extrajudicial and/or judicial protection or to communicate such data to the competent Authorities. 

Your rights

You have the right to ask Atlante, at any time and in accordance with the relevant legal prerequisites:

• Access to your Personal Data (and/or a copy of such Personal Data), as well as further information about the processing taking place on them;
• Rectification or updating of your Personal Data processed by Atlante, where they are incomplete or outdated;
• The deletion of your Personal Data from Atlante’s databases, where you consider the processing unnecessary or unlawful;
• The restriction of Atlante’s processing of your Personal Data, where you believe that your Personal Data is incorrect, no longer necessary or is unlawfully processed, or where you have objected to its processing;
• To exercise your right to data portability, i.e. to obtain a copy of the Personal Data provided to Atlante concerning you in a structured, commonly used and machine-readable format, or to request its transmission to another Data Controller;
• To object to the processing of your Personal Data, using a legal basis relating to your particular situation, which you believe should prevent Atlante from processing your Personal Data.
• To withdraw consent to the processing of your Personal Data for any of the purposes for which it was provided.

You can exercise these rights by writing to Atlante at the following address: privacy@atlante.energy.

In any case, you always have the right to lodge a complaint with the competent Supervisory Authority or appeal before the Judicial Authority if you believe that the processing of your Personal Data is contrary to the legislation in force.