REGULATORY FRAMEWORK
Regulations governing data protection, at national level, are provided for by Legislative Decree No. 196 of 30 June 2003 ("Data Protection Code") and by its Annex B on minimum security measures. Whereas, at European level, the regulations have been recently integrated by Directive (EU) 2016/680 and by Regulation (EU) 2016/679, whose provisions will become definitively directly applicable in all the Member States of the European Union as of 25 May 2018.
Informative notice provided pursuant to Article 13 of Lgs.D. No. 196/2003 on data protection
In compliance with what provided for by Article 13 of the “Data Protection Code," Gestore dei Servizi Energetici S.p.A. (hereafter: GSE) hereby provides information concerning the purposes and modalities with which personal data are processed (hereafter: "Data") and collected also with the aid of electronic /IT tools. Said data shall not be diffused or communicated to third parties, with the exception of the cases provided for by law and, however, pursuant to the modalities regulated by the same.
PROCESSING PURPOSES
Personal data are collected and processed pursuant to what provided for by laws, regulations or community provisions, so as to allow GSE to supply the services managed. In fact, in order to benefit from the services managed by GSE, it is mandatory to provide personal data. This is necessary for the correct management of contracts, administrative aspects, correspondence, and for purposes strictly connected to the fulfilment of obligations provided for by law as regards accounting and fiscal matters and what provided for by cognizant authorities. The refusal to give consent to the processing of the Data shall entail the impossibility for GSE to supply services.
PROCESSING MODALITIES
Personal data are processed in accordance with the principles of legality and fairness. Processing is implemented through IT/electronic tools and specially provided databanks. The Data are stored for a period of time not above what necessary for the purposes for which they are processed.
All processing is carried out in compliance with the obligations of law by GSE's formally assigned personnel specifically “Appointed for personal data processing," as well as by third parties appointed as “Persons in charge of personal data processing."
GSE observes security measures aimed at preventing the loss of data, illegal or unfair uses and unauthorized accesses.
DATA COMMUNICATION
The communication and diffusion of personal data are carried out exclusively pursuant to the cases provided for by the laws in force and in order to carry out specific activities. Personal data can be communicated, by way of example, to the following subjects:
• Ministries;
• Public Bodies
• Credit and Insurance Institutes;
• Subsidiary Companies;
It is understood that GSE has the obligation to communicate the data to the Judicial Authority, should specific request be submitted.
RECORDING OF TELEPHONE CALLS
Telephone calls made to the Call Centre may be recorded for security reasons and for the aim to improve the service.
Therefore, continuing the phone call after being informed on the possibility mentioned above implies the caller's consent to process all personal data that will be communicated to the operator.
Telephone calls will be recorded through an automated system that records incoming calls. The recordings will be filed and will be accessible and listened to only by expressly authorized subjects.
USERS' RIGHTS
Pursuant to Article 7 of Lgs.D. No. 196/2003, users have the right to obtain confirmation concerning the existence of their personal data, even if not yet recorded, and their communication in intelligible form. Users also have the right for their personal data to be updated, integrated, ratified or cancelled, transformed into anonymous form. The data processing can also be blocked when infringing the law, including data that do not need to be withheld for the purposes for which they were collected or subsequently processed.
Users have the right to oppose, totally or in part, for legitimate reasons, against processing of the personal data, even if pertinent to the purpose of the collection carried out.
The rights as mentioned under Article 7 can be exercised by submitting request without formality, even through an appointed party, to the holder or person in charge of the data.
The request must be addressed to the holder or the person in charge and sent through registered letter to the address Maresciallo Pilsudski, 92 – 00197, Rome or by means of e-mail to the address privacy@gse.it.
HOLDER AND PERSON IN CHARGE OF THE PROCESSING
The Holder of the data processing is Gestore dei Servizi Energetici S.p.A, with registered office at Viale Maresciallo Pilsudski, 92 – 00197 Rome, VAT and Fiscal Code 05754381001 in the person of the pro tempore Chairman and Chief Executive Officer who appoints one or more Persons in Charge of data processing among the subjects who on the basis of experience, skills and reliability provide the necessary guarantee of fully respecting the laws in force on the matter.
