Privacy Notice for Website Visitors
pursuant to Article 13 of Regulation (EU) 2016/679
Introduction
This notice - provided in accordance with the applicable personal data protection legislation, with specific reference to Article 13 of Regulation (EU) 2016/679 (hereinafter also referred to as the “Regulation”) - aims to inform Users of the website www.bragamoro.com (hereinafter also referred to as the “Site”) about the processing of personal data resulting from browsing the Site or from filling in specific contact forms.
Data Controller
Braga Moro Sistemi di Energia S.p.A., hereinafter also referred to as “Braga Moro”, with registered office at Via Giovanni Marcora 36, Tax Code and VAT No. 07620910153, owner of the Site, acts as Data Controller of the personal data of Users browsing the Site.
Users may contact the Data Controller by registered letter with return receipt sent to the Data Controller’s registered office, or by e-mail at privacy@bragamoro.com.
Source and nature of the personal data processed
The Site displays informative content about Braga Moro’s activities.
Browsing the Site, or the User’s interaction through the contact form, results in the Data Controller acquiring the following information:
Browsing data
This category of data includes: IP addresses, the browser used, the domain name and addresses of the websites from which the Site was accessed, the URI (Uniform Resource Identifier) addresses of the resources requested (typically the web pages of this Site), the method used to query the server, the characteristics of the file obtained in response, as well as other parameters relating to the User’s operating system and IT environment, the time of access and the time spent on each page visited.
This data is acquired for the sole purpose of ensuring the technical operation of the Site. Its acquisition, through the IT systems responsible for the operation of the Site, and its transmission are implicit in the use of Internet communication protocols (for further information, please refer to the cookie policy available in the dedicated section of this Site).
Contact data
If the User, by accessing the “Contact” section, sends requests for information to the Data Controller, the latter will acquire the contact data voluntarily provided by the User (e.g. first name, last name, e-mail address) as well as the specific content entered in the body of the message. This data will be processed exclusively in order to handle the request and only for as long as strictly necessary for that purpose. Without prejudice to the provisions set out below (see the section “Scope of communication of personal data”), under no circumstances will the Data Controller make the User’s personal data accessible to third parties, except for the parties responsible for the technical management of the Site.
Purposes and legal basis of the processing
The Data Controller processes the personal data resulting from browsing the Site and the data that the User voluntarily provides in connection with its use.
In particular, the User’s personal data is processed for the purposes listed below and in accordance with the legal bases described here:
- Provision of the Site’s services and features, verification of their correct operation and improvement of the browsing experience. The legal basis for the processing of so-called browsing data is the Data Controller’s legitimate interest in enabling the correct use of the Site’s content.
- Receipt of the requests sent by the User when filling in the contact form (the personal data acquired are: first and last name and e-mail address, as well as any specific content entered in the body of the message). The legal basis for the processing of the data voluntarily provided by the User is the consent freely given by the User when filling in the contact form. With regard to this data, please note that it is used for the sole purpose of responding to the requests received and is not communicated to third parties. The User is, in fact, the sole owner of their data and may request its modification or deletion at any time: see the “Rights of Data Subjects” section below. Furthermore, the Data Controller will not use the data provided for purposes other than those listed above, to which the User has agreed.
- Compliance with legal obligations, or obligations set out by the applicable data protection legislation, and for the ascertainment of liability by the competent Authorities in the event of possible cybercrimes against the Site.
Processing methods
The User’s personal data, as identified above, is processed with automated tools by the Data Controller and by persons authorized to carry out the processing under its authority, in accordance with the principles of fairness, lawfulness and transparency set out by the applicable legislation. Specific security measures are applied to prevent data loss, unlawful or incorrect use, and unauthorized access.
Scope of communication and dissemination of data
For the correct and effective management of the processing activities, and in full compliance with the principles of limitation and necessity of the processing, Braga Moro does not communicate or disseminate the User’s personal data to third parties.
The User’s data may be accessed by:
- internal staff, duly authorized and instructed by the Data Controller;
- parties appointed and/or engaged to carry out technical maintenance of the website;
- parties, whether natural or legal persons, that provide support services or carry out instrumental and/or related activities.
The external professionals/companies that process the above data on behalf of Braga Moro have been authorized by Braga Moro or appointed as Data Processors, or identified as independent Data Controllers of the personal data.
To request information about any Data Processors involved, the User may send an e-mail to the following address: privacy@bragamoro.com
The DPO can also be contacted at dpo@bragamoro.com.
Please also note that the User’s data is not transferred outside the EU.
Data retention
So-called browsing data is kept for the time strictly necessary to achieve the purposes set out in this notice and will be deleted at the end of that period, unless the same data must be retained to comply with legal obligations or to establish, exercise or defend a legal claim.
The data voluntarily provided by the User is kept for the time strictly necessary to handle the requests sent by the User to the Data Controller, unless it is necessary to retain it further to establish, exercise or defend a legal claim or to comply with any further legal obligations or orders of the Authorities.
Rights of Data Subjects
Data subjects have the right to obtain from the Data Controller, where applicable, the rights set out in Articles 16-21 of the GDPR (right to rectification, right to be forgotten, right to restriction of processing, right to data portability, right to object). Requests may be submitted by contacting the Data Controller at the contact details provided above.
Data subjects who believe that the processing of their personal data infringes the Regulation have the right to lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali - www.gpdp.it - www.garanteprivacy.it), as provided for by Article 77 of the Regulation, or to take legal action before the competent courts (Article 79 of the Regulation).
Cookie Notice for Website Visitors
What are cookies?
A cookie is a file that is downloaded to your PC, tablet, smartphone or other device (hereinafter, the “Device”) when you access the Braga Moro website.
Cookies allow us to store and retrieve information about your browsing habits or about the Device from which you access the Site, generally in anonymous form, and, depending on the information they contain and if you have previously registered, to recognize you as a user or customer.
The information we obtain relates to the number of pages you visit, the language, the location from which you access the Site, the number of new users, the frequency and recurrence of visits, the length of the visit, and the browser or Device you use to connect or run the application.
Which cookies does this site use?
Technical cookies: Cookies of this type are strictly necessary for the correct operation of certain areas of the Site. Cookies in this category include both persistent cookies and session cookies:
- persistent: they are not deleted when the browser is closed, but remain until a preset expiry date
- session: they are deleted every time the browser is closed
Cookies do not need to be enabled for the Site to work, but enabling them improves browsing. You can delete or block cookies, but in this case some features of the Site may not work properly.
Private browsing
Browsing without cookies is possible through private (incognito) browsing, which is available in all major browsers. Details at the following links: