Privacy & Cookie Policy

With reference to art. 13 of the European Regulation 679/2016 concerning the protection of personal data, as well as the free movement of such data (the “Regulation” or “GDPR”), we inform you that the Controller of the data communicated by the user or otherwise obtained as a result of the use of the website with URL http://www.italgas.it and its sub-domains (the “website”) is Italgas S.p.A. (hereinafter “Company” or “Controller”), based at Via Carlo Bo 11, 20143 Milan, Italy.

The presence of a link to this statement in the footer of the page confirms that visitors are on the Company’s website.

• Browsing data

The computer systems and software procedures used to operate the website acquire, during their normal operation, some personal data whose transmission is implicit in the use of Internet communication protocols or is used to improve the quality of the service offered. This information is not collected in order to be associated with identified data subjects, but by its very nature could, through processing and associations, allow users to be identified.

This category of data includes IP addresses or domain names of computers used by users who connect to the website, URI (Uniform Resource Identifier) addresses of the requested resources, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response given by the server (successful, error, etc.) and other parameters related to the user’s operating system and IT environment.

These data are used to obtain anonymous statistical information on the use of the website and to check the correct functioning of IT systems. The data could also be used to ascertain responsibility in the event of hypothetical computer crimes or in case of damage to the Company or to third parties.

• Data provided voluntarily by the user

Users are not required to provide personal data to visit the website. However, contacts between users and the Company, through authentication to the website services and filling in contact forms, sending e-mails, messages or any type of communication to the addresses indicated on the website, involve the subsequent acquisition of common personal data, such as, for example, name, surname, address and telephone number, as well as any other personal data that will be provided by the user while spontaneously interacting with the Company through the website.

Specific information will be reported or displayed on the pages of the sites set up for particular services.

Personal data may be collected and processed for the following purposes:

• a) to allow navigation of the website, interaction with the contents therein, for registration and access to reserved areas of the website for the purpose of providing the online services offered by the Company;
• b) to manage user information requests;
• c) to comply with a legal obligation to which the Company is subject, including responding to any requests from the competent Authorities and bodies;
• d) to collect information relating to the use of the website (such as frequency of use, statistics, etc.) through the use of cookies (see the following “Cookie Policy” section);
• e) where appropriate, to send questionnaires to the contact details issued at the time of filling in the online registration form in order to scheduling, by the Company, an adequate offer of its services.

For these purposes, the legal basis of the processing is the performance of a contract or the intention to enter into a contract (letters a, b), compliance with a legal obligation to which the Company is subject (letter c), or consent (letters d, e).

In relation to the purposes referred to in points a), b) and c), any refusal to provide data may determine the impossibility for the Company to provide the requested service, to comply with legal obligations and to process and respond to requests from users. Providing personal data through the contact forms on the website is not a legal or contractual requirement; however, the fields marked with an asterisk are mandatory fields, as this information is necessary to fulfill your request.

The processing of personal data for the purposes referred to in points d) and e) is based on consent; the provision of such data is optional and any refusal will have no consequence.

Personal data processing will be carried out by persons authorized by the Company and / or by Processors which the Controller may engage to store, manage and transmit personal data by means of paper, IT and telematic tools according to the principles of law and protecting the confidentiality of the data subject and its rights through the adoption of appropriate technical and organizational measures to ensure a level of security appropriate to the risk.

Your data will be kept for the period necessary to fulfill contractual and legal obligations in compliance with the principles of proportionality and necessity. The data retention period depends on the purposes for which they are processed and therefore may not be the same for all data. The criteria used to determine the applicable retention period are as follows: the retention of personal data covered by this information will take place for the time necessary (i) to manage the contractual relationship with the user, (ii) to handle complaints or specific requests from the user, (iii) to assert rights in court as well as (iv) for the time required by applicable law.

The data collected through the use of cookies will be kept as indicated in the table at the end of this statement.

The data collected through the questionnaires for the purpose of developing the offer of services provided through the website will be deleted within 24 months.

The data relating to registration and access to restricted areas of the website will be automatically deleted after one year from the last access.

Personal data, in any case, will be kept for the time necessary to exercise the rights.

Personal data will not be disseminated and may be communicated to the other companies of the Italgas Group for administrative and accounting management and control purposes, and to the competent authorities or public or private bodies for the fulfilment of obligations under the law.

The personal data collected may be processed by third-party suppliers, as data processors in relation to the services provided on behalf of the Company on the basis of specific contractual agreements, possibly for occasional maintenance operations and as necessary to perform services under specific requirements.

The data will be processed within the European Union and stored on servers located within the European Union. The same data may be processed in countries outside the European Union, provided that an adequate level of protection is guaranteed, recognized by a specific adequacy decision of the European Commission. Any transfer of Personal Data to non-EU countries, in the absence of an adequacy decision of the European Commission, will be possible only if adequate guarantees of a contractual nature are provided by the Controllers and Processors involved, including binding corporate rules (“Binding Corporate Rules “) and standard contractual clauses of data protection. If one of the above guarantees is adopted for transfers of Personal Data to non-EU countries, pursuant to Chapter V of the GDPR, an indication will be provided on how to obtain a copy of the guarantees adopted or where they were made available.

Data subjects, including customers, can exercise the rights provided by Regulation (EU) 2016/679 – GDPR (art. 15-22 et 77), including:

• to withdraw their consent, if given, without prejudice to the lawfulness of the processing based on the consent given before the withdrawal (opt-in consent and opt-out option, where processing is based on consent)
• to request access to their personal data held by the company (right of access) · to obtain the correction or deletion of their personal data (right to rectification and right to erasure)
• to obtain the restriction of processing, as well as to object to processing of personal data concerning them (right to restriction of processing and right to object)
• to receive a copy of the data concerning them in a structured, commonly used and machine-readable format and to have the personal data transferred directly from one service provider to another, where technically feasible (right to data portability).

To exercise these rights, data subjects may contact the Data Protection Officer (DPO) by sending an e-mail todpo.gdpr@italgas.it. (for Italy) ordpo.gdpr@ena-on.gr(for Greece). The contact details of the DPO can be found in all privacy notices.

Moreover, data subjects have the right to lodge a complaint with the supervisory authority if they consider that the processing of personal data relating to them infringes Regulation (EU) 2016/679 – GDPR.

The Data Controller is Italgas S.p.A., with registered offices in Milan, via Carlo Bo 11.

The updated list of any data processors is available at the headquarters of the Data Controller.

The Italgas Group has appointed a Data Protection Officer who can be contacted at the following e-mail address: dpo.gdpr@italgas.it, or by ordinary mail at the headquarters of the Company.

Last update of this information notice: April 2023
It may be necessary in the future to make changes or additions to the information, as a result of regulatory or business developments. The updated information is available at any time on the website www.italgas.it.