Pursuant to Articles 13 and 14 of Regulation (EU) 2016/679 (hereinafter referred to as the “GDPR”), PEIMAR S.R.L. (hereinafter referred to as the “Data Controller”), with registered office in Brescia (BS), Via Cefalonia 70 – 25124, in its capacity as “Data Controller”, hereby informs you that your personal data collected for the purposes of entering into the contract with the Customer and/or in connection with the performance and/or execution thereof will be processed in compliance with the aforementioned legislation, in order to safeguard the rights, fundamental freedoms and dignity of natural persons, with particular regard to confidentiality and personal identity.We inform you that, should the activities provided to you involve the processing of personal data of third parties under your responsibility, it will be your responsibility to ensure that you have complied with the requirements of the applicable legislation with regard to the Data Subjects, in order to make our processing of such data lawful.
Origin, purposes, legal basis and nature of the data processed
The processing of your personal data, provided directly by you, is carried out by PEIMAR S.R.L. for the purposes of entering into the contract with the Customer and/or in connection with the performance and/or execution thereof. Furthermore, personal data relating to third parties communicated by the Customer to the Company may also be processed. In such cases, the Customer acts as an independent Data Controller and assumes the resulting legal obligations and responsibilities, indemnifying the Company against any dispute, claim and/or request for compensation for damages arising from processing that may be submitted to the Company by third-party Data Subjects. In compliance with the applicable legislation on the protection of personal data and without the need for specific consent from the Data Subject, the Data will be stored, collected and processed by the Company for the following purposes:
The legal bases for the processing for the purposes referred to in points a) and b) above are Articles 6(1)(b) and 6(1)(c) of the Regulation. The provision of the Data for the aforementioned purposes is optional; however, failure to provide the Data or refusal to provide it would make it impossible for the Company to perform and/or enter into the contract and provide the services required thereunder. The processing of your personal data also concerns the following data, which are necessary for the registration of the user, the system and the company on the Company's app:
The aforementioned data are collected in order to allow the customer to register on the Peimar S.r.l. app for the purpose of analysing the energy production of the installation and optimising the technical support service. The legal basis for processing for the aforementioned purposes is set out in Article 6(1)(a) of the GDPR, as the processing is based on consent. Providing consent to the use of such data is optional and, should the Data Subject wish to object to the processing of the Data for registration on the Peimar S.r.l. app or withdraw the consent previously given, they may do so at any time without any consequences (except that they will no longer be able to use the app) by following the instructions provided in the “Rights of the Data Subject” section of this Privacy Policy.
Finally, it should be noted that, for processing carried out for the purposes of directly sending its own advertising material, conducting direct sales, carrying out its own market research or sending commercial communications relating to products or services similar to those used by the Customer, the Company may use email or postal addresses pursuant to and within the limits permitted by Article 130(4) of the Code and by the provision of the Italian Data Protection Authority dated June 19, 2008, even in the absence of explicit consent. The legal basis for processing data for this purpose is Article 6(1)(f) of the GDPR, without prejudice to the right to object to such processing at any time by following the instructions provided in the “Rights of the Data Subject” section of this Privacy Policy.
Disclosure
Data may be disclosed to third parties appointed as Data Processors pursuant to Article 28 of the GDPR and, in particular, to banking institutions, companies operating in the insurance sector, providers of services strictly necessary for carrying out the Company's business activities, or to the Company's consultants, where this is necessary for tax, administrative or contractual reasons or to meet requirements protected by applicable legislation.
Your personal data, or the personal data of third parties under your responsibility, may also be disclosed to external companies, identified on a case-by-case basis, to which PEIMAR S.R.L. entrusts the performance of obligations arising from the assignment received. Only the data necessary to carry out the activities entrusted to them will be transmitted to such companies. All employees, consultants, temporary workers and/or any other “natural person” carrying out their activities on the basis of instructions received from PEIMAR S.R.L., pursuant to Article 29 of the GDPR, are appointed as “Persons authorised to process data” (hereinafter also “Authorised Persons”). PEIMAR S.R.L. provides the Authorised Persons or any appointed Data Processors with appropriate operating instructions, particularly with regard to the adoption of and compliance with security measures, in order to ensure the confidentiality and security of the data. With specific regard to personal data protection, pursuant to Article 33 of the GDPR, the Customer is requested to report to PEIMAR S.R.L. any circumstances or events that could result in a potential “personal data breach (data breach)”, in order to enable an immediate assessment and the adoption of any measures necessary to address such an event, by sending a communication to PEIMAR S.R.L. using the contact details provided below.
The Data will not be disseminated.
PEIMAR S.R.L.'s obligation to disclose data to Public Authorities upon specific request remains unaffected.
Transfer abroad
The data collected are not transferred to servers located in non-European countries.
Methods and logic of processing and data retention periods
Your data are collected and recorded lawfully and fairly for the purposes indicated above, in compliance with the principles and requirements set out in Article 5(1) of the GDPR.
Personal data are processed using manual, IT and electronic tools according to methods strictly related to the purposes of the processing and, in all cases, in such a way as to ensure their security and confidentiality.
Personal Data will be processed by PEIMAR S.R.L. for the entire duration of the engagement and thereafter for the purpose of asserting or protecting its rights, for administrative purposes and/or to fulfil obligations arising from the regulatory and legislative framework applicable from time to time, in compliance with the specific legal requirements concerning data retention.
Rights of the Data Subject
In accordance with, within the limits and under the conditions provided for by the data protection legislation regarding the exercise of the rights of the Data Subjects [1] with regard to the processing operations covered by this Information Notice, as a Data Subject you have the right to request confirmation that a processing of your personal data is or is not taking place, access to the personal data concerning you and in relation to them you have the right to request their rectification, cancellation the notification of the rectification and cancellation to those to whom the data may have been transmitted by our Organization, the limitation of the processing in the cases provided for by the norm, the portability of the personal data - provided by you - in the cases indicated by the norm, to object to the processing of your data and, specifically, you have the right to object to decisions concerning you if they are based solely on automated processing of your data, including profiling. If you believe that the processing operations concerning you violate the rules of the GDPR, you have the right to lodge a complaint with the Guarantor pursuant to Article 77 of the GDPR. If you wish to request further information about the processing of your personal data or for the possible exercise of your rights, you may contact Marco Casale in writing (info@peimar.com).
Data Controller
The Data Controller, pursuant to Article 4 of the GDPR, is PEIMAR S.R.L., Via Cefalonia 70 – 25124 Brescia (BS), VAT No.: 03416340986 – Tax Code: 03416340986
Data Protection Officer
The DPO (Data Protection Officer) appointed by the Data Controller pursuant to Articles 37 et seq. GDPR can be contacted at the email address privacy@peimar.com
The Data Controller
PEIMAR S.R.L.
30/10/2020
[1] pursuant to Article 12 and Articles 15–22 of Regulation (EU) 2016/679