Under the terms of articles 13 and 14 of EU General Data Protection Regulation 2016/679 of 26 April 2016 (hereafter referred to as the ‘GDPR’), we provide the following information relative to the processing of the personal data of users who access the website www.a2acaloreservizi.it and its sub-domains. The information is not applicable to other sites consulted by the user through links.
The personal data is processed by A2A Heat and Services, with registered office in Via Lamarmora, 230 - 25124, Brescia.
The Data Processor has nominated a Data Protection Officer (DPO) who can be contacted at the following e-mail address: dpo.privacy@a2a.it.
The data processed relates to those who access and utilize the website of the Data Processor. These users will hereafter be referred to as “website users”.
| Purpose of processing | Legal grounds for processing |
|---|---|
| To allow the correct and optimal use of the website. | The legitimate interest of the processor to ensure for the user the correct functioning of the website and its ease of use. |
| To carry out maintenance on IT systems. | |
| To provide the service or services requested – including the filling in of forms – such as in response to requests for contact or other information, in order to handle requests for estimates or the issue of energy certification, in order to answer enquiries concerning ongoing contracts, subscriptions to the newsletter, registration to the personal area, the checking of district heating coverage, making appointments, consulting maps, etc. | Compliance with a contract of which involves or will involve the website user or compliance with pre-contractual measures. |
| To defend a right in a judicial context and to prevent fraud. | The legitimate interest of the data processor in defence of a right and the prevention of fraud. |
| To respond to requests from public authorities and other official agencies. | Compliance with a legal obligation. |
The processing is carried out by personnel authorized to do so in the performance of their dutires, with or without the use of electronic devices, in accordance with the principles of lawfulness and correctness so as to ensure at all times the confidentiality and rights of the website user.
The use of maps present on the website does not involve identification of the geographical location of the user.
Your personal data can be made available to:
These parties will act, as each case requires, with responsibility as processor of the data.
Moreover, your data can be made available to:
Your data will not be divulged (made available to undetermined parties).
The processing may involve the transfer of data outside the EEA, in particular the United States of America. In this case, the transfer is covered by the EU-USA DPF (Data Privacy Framework) based on the European Commission adequacy decision of 10 July 2023.
The following data storage times will be applied:
| Data processed | Storage time |
|---|---|
| Data required for registration to the Personal Area. | 10 years from the termination/last operation related to the contract or from the time of interruption of the prescription period. |
| Data required for the administration of services and requests made by users who have a contractual relationship with the data processor. | 10 years from the termination/last operation related to the contract or from the time of interruption of the prescription period. |
| Data required for the administration of services and requests made by users who do not have a contractual relationship with the data processor. | 5 years from the formulation of the request for any requests by official agencies and/or the website users. |
| Data processed in order to respond to any requests made by authorities and other official agencies, etc. | 5 years from response to the request by authorities and other official agencies and/or the website users. |
| Data processed in the sphere of the defence of a right in a judicial context or in order to prevent fraud. | 10 years from the definitive judicial sentence. |
The duration of cookies used can be consulted in the relative section of this information.
In the event of disputes and/or extrajudicial requests, the storage times indicated above can be extended by up to 10 years from their resolution.
You have the right to ask the Data Controller, in those cases foreseen by law:
Right to object. At any time, you can object to the processing of your data for purposes related to a legitimate interest on the part of the Data Controller. In this case, the Controller will abstain from processing your personal data unless there are legitimate or mandatory reasons to proceed with the processing or to carry out the verification, the exercise or defence of a right in legal proceedings.
To exercise your rights, you can send an e-mail message to compliance.privacy@a2a.it or make a written request addressed to the company acting as data processor. Where it is not possible to directly reply to your request using the channel that you have used to contact us (as in the event of your e-mail address being indicated as deactivated or not reachable), we reserve the right to utilise other contact channels referable to you which may already be present in our systems.
It is possible to obtain further information relating to the processing of data based on legitimate interest (specifically on assessment carried out for the balancing of interests of the Data Processor and the rights and liberties of the website user) Or relating to the transfer of data outside the EEA by writing to the e-mail address compliance.privacy@a2a.it.
You have the right, in all cases, to contact the privacy authority and or to initiate legal proceedings in defence of your rights pursuant to articles 77 and 79 of the Regulation. For further information: https://www.garanteprivacy.it/home/diritti/come-agire-per-tutelare-i-tuoi-dati-personali.
Providing the data necessary to allow access to services requested or for compliance with legal requirements is obligatory. Failure to provide such data makes provision of the service impossible. However, the provision of data for processing based on the legitimate interest of the Data Processor is not obligatory.
Cookies and other tracking tools are used in the website to enable the gathering of data on the user’s internet activity comma such as the IP address.
These tools are usually strings of text placed and stored by the website administrator (or by the administrator of third-party sites in the event of third parties) in devices at the disposal of the user (e.g. a computer, a tablet, a smartphone, etc.).
In the context of a website, the following tools are used:
For further information on individual cookies and tracking tools used in the website, you can consult the cookie policy at the following link.