Form legal entity shareholder questions

INFORMATION FOR SHAREHOLDERS ON THE PROCESSING OF PERSONAL DATA

Dear Shareholder,
Italgas SpA (hereinafter, for the sake of brevity, the “Company “), as Data Controller wants to inform you, pursuant to art. 13 and 14 of European Regulation no. 679/2016 on the protection of personal data (the “Regulation”) and of applicable national law, including decisions of the Public Authority for the protection of personal data, as applicable, that the personal data provided by you by completing the form on the Company website for the purpose of sending the questions to the Company will be treated in compliance with the legislative and contractual provisions in force for the purposes and with the methods indicated below.

1) Type of personal data, purposes and legal basis of the processing
Type of personal data
The Company mainly deals with the following categories of personal data:

• identification and contact data (such as, for example, name, surname, date of birth, social security number, address, telephone contacts, residence, marital status, family status, etc.).

Purpose of, and legal basis for, the processing.
The common personal data are processed for the following purposes:
• Purposes for which consent is not required as the processing is necessary to fulfill the obligations established by law:
a) fulfillment of legal and contractual obligations related to the completion of the online form on the Company’s website for the purpose of sending the applications.

2) Methods of processing and nature of the provision
The personal data will be processed by the Company and the persons authorized by computer systems (and manual) according to the principles of law and protecting the shareholder privacy and rights through the adoption of appropriate technical and organizational measures to ensure a level of security appropriate to risk
The provision of the aforesaid personal data is optional, but necessary for the execution of the legal and contractual obligations connected to the aforementioned obligations. Failure to provide your personal data will make it impossible to send any questions to the Company.

3) Data retention
Your personal data will be kept in compliance with civil law obligations (for example, a civil law obligation to keep the accounting records and further business correspondence for 10 years), at the Company’s facilities.

4) Communication, dissemination and transfer of data
Your data may be shared with specific categories of recipients, such as:
- employees and collaborators authorized by the Data Controller
- subjects who can access the data in compliance with an obligation established by laws, regulations or other national or European provisions or as a result of instructions given by legitimated Authorities and/or in compliance with requests by the Supervisory and Control Authorities;
- to subsidiaries and associates pursuant to art. 2359 of the civil code for treatment connected to the conferment of the office within the same company;
- to public and supervisory authorities (Chamber of Commerce, Consob, the Italian Stock Exchange.);
- third-party companies or other subjects (indicative, professional firms, consultants, insurance companies for the provision of insurance services, etc.) that perform activities on behalf of the Data Controller.

5) Rights of the data subject
The data subject may exercise, in relation to the processing of the data described therein, the rights provided for by the Regulation (Articles 15-21), including:
- receive confirmation of the existence of your personal data and access their content (access rights);
- update, modify and / or correct your personal data (right of rectification);
- request the cancellation or limitation of the processing of data processed in violation of the law including those that do not need to be kept for the purposes for which the data were collected or otherwise processed (right to be forgotten and the right to limitation);
- oppose the treatment (right of opposition);
- revoke the consent, where provided, without prejudice to the lawfulness of the treatment based on the consent given prior to the revocation;
- to propose a complaint to the Supervisory Authority in case of violation of the regulations regarding the protection of personal data;
- receive a copy of the data in electronic format that relates to it made in the context of the employment contract and request that such data be transmitted to another data controller (right to data portability).
To exercise the abovementioned rights you can contact the Data Protection Officer (hereinafter only “Data Protection Officer “or, in short, “DPO”) by sending an e-mail to dpo.gdpr@italgas.it

6) Identity and contact details of the Data Controller, the Data Processors and Data Protection contact data Officer
The Data Controller of personal data is Italgas SpA, with registered office in Via Carlo Bo 11, 20143 Milan, in the person of the Legal Representative pro-tempore.
The updated list of any data controllers is available at the headquarters of the Data Controller.
The Italgas Group has designated a Data Protection Officer who can be contacted at the following e-mail address indicated in paragraph 5, or via ordinary mail at the registered office of the Company