Ener2Crowd S.r.l. (hereinafter E2C) releases the following information pursuant to art. of the art. 13 EU Regulation no. 2016/679 of 27 April 2016 (hereinafter GDPR), to describe the characteristics of the treatments carried out in relation to your personal data and the measures adopted in order to protect their rights.
Data subject to processing
E2C collects the following personal data:
- Name, surname
- E-mail
- Telephone (optional)
- Profession carried out (optional)
Purpose of the processing and storage time
Personal data will be processed for the following purposes:
a) Direct marketing: with express consent, sending commercial communications, invitations to events, market research. Communications will be made by e-mail or telephone. The data collected for this purpose will be processed until the consent is revoked and in any case for a period not exceeding 24 months.
b) Profiled marketing: with your express consent, E2C will process your personal data, investment propensity, preferences, behavior in a fully or partially automated manner, in order to identify and propose the most suitable investments for your profile. Communications will be made by e-mail or telephone. The data collected for this purpose will be processed until the consent is revoked and in any case for a period not exceeding 24 months.
c) Data transfer to third parties for marketing purposes: with your express consent, E2C may transfer your personal data to companies or companies (e.g. market research, consultancy) that will carry out autonomous treatments, which will process your personal data as independent owners, providing you with the appropriate information on the respective processing within a reasonable time, at the latest within one month from the transfer of your personal data. The data collected for this purpose will in any case be processed until the consent is revoked.
Because the treatment we carry out is legitimate
The treatment is based on the consent given by the interested party.
Methods of treatment and refusal to provide
Personal data are processed for the pursuit of the purposes indicated in this information, both electronically and on paper, also with automated methods.
The processing of your personal data for profiling purposes will take place, in the event of consent, with data processing tools which, following cross-referencing, will create your commercial and behavioral profile. This data processing tool links the data with the investment opportunities offered by E2C. The provision of your data for the purposes set out in letter (a) isoptional
and your refusal to provide them, will make it impossible for E2C to send you commercial communications, invitations to events, or carry out market research.
The provision of your data for the purpose; provided for in letter (b) is optional and your refusal to provide them, will make it impossible for E2C to create a personal profile and send you targeted commercial communications.
The provision of your data for the purposes set out in letter (c) is optional and your refusal to provide them, will make it impossible for E2C to transfer your personal data to third parties for the indicated marketing purposes.
Categories of subjects to whom personal data may be disclosed
The processing of the personal data provided to us may be carried out, in compliance with the principle of the strict indispensability of the treatments:
- by the employees of E2C, who act and process the data under the authority and instructions of the Data Controller, pursuant to art. 29 of the GDPR or of the employees designated by the Data Controller, pursuant to art. 2 quaterdecies of Legislative Decree no. 101/2018.
- By natural or legal persons whose right to access your personal data is recognized by legal provisions provided for by European Union law or by Italian law, such as, by way of example, competent authorities and / or supervisory bodies for the execution of legal obligations, and public administrations for their institutional purposes.
- By natural or legal persons that the Data Controller uses to carry out the activities instrumental to the achievement of the Purposes (such as, for example, software suppliers, cloud partners, datacenters, IT consultants).
Diffusione dei dati
The processed data will not be sold or exchanged with third parties.
Rights of the interested party
The GDPR guarantees you, as data subject, specific rights. For each treatment, you can exercise the following rights:
- Right of access: you have the right to obtain a copy of the personal data we hold and which are being processed.
- Right to rectification: you have the right to rectify your personal data stored by E2C if they are not updated or correct.
- Right to object to the processing of personal data for commercial purposes:may request that E2C stop sending commercial communications at any time.
- Right to object to decisions based on exclusively automated processes: may request not to be the recipient of decisions made on the basis of exclusively automated processes, including profiling activity.
- Right to withdraw consent given:has the right to withdraw the consent given for a given treatment at any time.
- Right to contact the Guarantor for the protection of personal data: has the right to contact the Authority for the protection of personal data if he has doubts about the processing of personal data carried out by E2C.
You can also exercise the following rights under certain circumstances:
- Right to erasure: may request that E2C delete your personal data if the purposes of the processing have ceased and there are no legitimate interests or laws that require its continuation.
- Right to object to processing: may request that E2C cease to carry out a specific processing on your personal data.
- Right to limit processing: you have the right to request that E2C limit the processing operations on your personal data.
- Right to data portability: has the right to obtain a copy of the data in a structured format of common use and readable by an automatic device by another Data Controller.
If you wish to exercise your rights, please send an e-mail or write to the following address specifying your request and providing us with the information necessary to identify it (also attaching a copy of your identity document): it is Ener2Crowd Srl, based in Corso Independence n. 1, 20129 Milan -info@ener2crowd.com.
E2C will reply to you within one month. If for some reason we are unable to answer you, E2C will provide you with a detailed explanation as to why they cannot fulfill your request.
Holder of the treatment
The data controller is Ener2Crowd S.r.l., with registered office in Corso Indipendenza n. 1, 20129 Milan - VAT number 10585050965 - e-mail of the owner: info@ener2crowd.com
