Privacy e cookie policy

I – INFORMATION RELATING TO THE SITE PRIVACY POLICY

1. This section contains information relating to the processing of data of users of IG Operation and Maintenance S.p.A.
2. This notice is issued for the purposes of Article 13 of Regulation (EU) No. 2016/679 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data.

II – PRIVACY POLICY

1 – DATA CONTROLLER AND DATA PROTECTION OFFICER (DPO)

With regard to this website, the Data Controller is: IG Operation and Maintenance S.p.A., with registered office at Via Campobello, 1 – 00071, Pomezia (RM), represented by its legal representative pro tempore, reachable at the following e-mail address: legal@igomspa.it.

The Controller has appointed a Data Protection Officer (hereinafter also “DPO”), who may be contacted at the following address: privacy@igomspa.it.

2 – THE PROCESSING

The operation of the website requires the collection of users’ personal data.

This includes information that could allow users to be identified through processing and cross-referencing with data held by third parties (so-called browsing data, such as IP addresses and cookies). For details on the cookies collected through the site, please refer to the cookie policy at the bottom of this document.

The Controller also processes personal data provided by you through the contact tools indicated in the “Contatti” sections: first name, last name, e-mail address, telephone number, and any other data entered into the message.

The data processed in relation to the “Lavora con noi” section are governed by the specific privacy notice pursuant to Article 13 GDPR available within that section.

3 – PURPOSES AND LEGAL BASIS OF PROCESSING

So-called browsing data will be processed to enable the Controller to ensure the regular operation of the website. The legal basis legitimising the processing of user data for these purposes is Article 6(1)(f) GDPR.

Personal data collected through requests for information and contact requests will be processed solely for the purpose of responding to such requests. The legal basis for processing is therefore to be found in pre-contractual measures at the request of the data subject or in the performance of a contract (Art. 6(1)(b) GDPR), or in the legitimate interest of the Controller in following up on requests submitted (Art. 6(1)(f) GDPR).

Personal data provided through the completion of the “Lavora con noi” form and submission of a curriculum vitae are processed in order to evaluate and select potential candidates for the purpose of conducting selection interviews. The processing of data is therefore necessary for the management of pre-contractual activities at the request of the data subject; accordingly, the legal basis is to be found in Article 6(1)(b) GDPR. Please refer to the specific privacy notice in the “Lavora con noi” section for further details.

4 – NATURE OF PROCESSING

The collection of browsing data occurs in the course of the normal operation of computer systems and software procedures used to run this website, and is implicit in the use of Internet communication protocols.

The provision of personal data by users through forms or e-mail is optional. Failure to provide such data may result in the inability to obtain what has been requested or to carry out the indicated activity.

5 – METHODS OF PROCESSING

User data will be processed lawfully and fairly, adopting appropriate security measures to prevent unauthorised access, disclosure, unauthorised modification or destruction of data. Processing is carried out by electronic and/or IT means, using organisational methods and logic strictly related to the purposes indicated.

All processing is carried out in compliance with the methods set out in Article 32 GDPR and through the adoption of appropriate security measures.

6 – RETENTION PERIOD

Data collected by the website during its operation is used solely for the purposes indicated in point 3 above and are retained for the time strictly necessary to carry out the activities specified, and in any event no longer than 2 years from the date of data collection.

Data collected from the “Contatti” section will be retained for the time necessary to fulfil the above purposes and, in any event, for a period not exceeding 12 months from the sending and receipt of the communication.

7 – DISCLOSURE AND COMMUNICATION

The personal data processed by the Controller will not be disseminated, i.e. will not be made known to unidentified parties, in any possible form, including by making them available or allowing mere consultation.

They may, however, be communicated to parties to whom such communication is required by law. For example, data may be communicated to Judicial Authorities, such as IP addresses, for the purpose of blocking attempts to damage the website or harm other users, or to prevent any other harmful or criminal activity.

In some cases, access to the data may be granted to categories of personnel involved in the organisation of the website (administrative staff, legal advisors, system administrators), who are specifically authorised and trained, or to external parties (such as third-party technical service providers, hosting providers, IT companies) duly appointed as data processors.

8 – RIGHTS OF THE DATA SUBJECT

As a data subject, you are entitled to the rights set out in Articles 15 et seq. of the GDPR, namely:

• the right to request from the Controller access to your personal data, i.e. confirmation as to whether or not personal data concerning you are being processed and, where that is the case, access to such data (Art. 15);
• the right to request from the Controller the rectification and/or completion of inaccurate personal data concerning you (Art. 16);
• the right to request from the Controller the erasure of such data without undue delay (Art. 17);
• the right to request from the Controller the restriction of processing concerning you (Art. 18);
• the right to data portability, i.e. to receive your personal data in a structured, commonly used and machine-readable format (Art. 20);
• the right to object to their processing (Art. 21), i.e. to object at any time, on grounds relating to your particular situation, to the processing of data concerning you;
• the right with regard to automated decision-making processes, i.e. the right not to be subject to a decision based solely on automated processing of your data (Art. 22).

The data subject is entitled to lodge a complaint with the supervisory authority (Art. 77), i.e. to apply to the Authority where they consider that the processing concerning them infringes the Regulation.

The aforementioned rights may be exercised by sending a registered letter with acknowledgement of receipt to Via Campobello, 1 – 00071 – Pomezia (Roma), or by writing to the following e-mail address: privacy@igomspa.it.

9 – TRANSFER OF DATA TO NON-EEA COUNTRIES

The data provided and collected are not subject to transfer to countries outside the European Economic Area, as the management and storage of personal data takes place on servers located within the European Union.

It is in any case understood that the Controller, where a transfer becomes necessary, hereby ensures that it will take place in compliance with the conditions set out in Chapter V of the GDPR.

III – COOKIE POLICY

The IG Operation and Maintenance S.p.A. website uses cookies to make the user’s browsing experience easier and more intuitive. Cookies are small strings of text used to store information that may relate to the user, their preferences or the Internet access device (computer, tablet or mobile phone). They are used primarily to adapt the operation of the site to the user’s expectations, providing a more personalised browsing experience and retaining previously selected choices.

A cookie consists of a small set of data transferred to the user’s browser by a web server and can only be read by the server that carried out the transfer. It does not transmit viruses.

The cookies used on this Site may be distinguished according to the following criteria:

Based on the party managing the cookies:

First-party cookies: these cookies are installed directly by the Company through the Site.

Third-party cookies: these cookies are installed through the Site by third parties other than the Company.

Based on the purposes pursued: some cookies are necessary to enable the use of the Site’s features or to protect user data, session integrity and site reliability (so-called technical cookies). Other cookies are used to profile Users in order to display advertisements that may be aligned with their interests, consistent with their tastes and consumption habits (so-called profiling or marketing cookies).

The IG O&M S.p.A. website uses only technical cookies or analytical cookies that are equivalent to technical cookies, as indicated in the Cookie and Other Tracking Tools Guidelines of 10 June 2021 issued by the Italian Data Protection Authority (Garante per la protezione dei dati personali).

What types of cookies are used on the IG Operation & Maintenance website?

The cookies used on the IG O&M website are technical, i.e. necessary for the proper functioning of the site, and analytical but anonymised and therefore equivalent to technical cookies. It is therefore not possible to disable them; for this reason, you will not be asked to give your consent to their operation. Cookies may be session-based or persistent: the former are automatically deleted at the end of the browsing session, while the latter remain stored on the device used for browsing until their expiry date. For details on the retention of cookies installed on the IG O&M site, please refer to the table below.

Name of cookie / other tracking tool	Type	Purpose of installation and description of functionalities	Retention period	First or third party
_ga	Analytical, equivalent to technical cookie	The _ga cookie calculates data on visitors, sessions and campaigns and tracks site usage for the site’s analytical report. The cookie stores information anonymously and assigns a randomly generated number to recognise unique visitors.	1 year and 1 month	First party
_ga_*	Analytical, equivalent to technical cookie	The purpose of this cookie is to store and count page views.	1 year and 1 month	First party
cb-enabled	Technical	This cookie is used to record when the user has closed the banner, so as to prevent it from being displayed again on subsequent visits.	1 year	First party
Pll_language	Technical	This cookie is used to retain the stored language preference.	1 year	First party

The processing of personal data that may result from the use of cookies installed on the site takes place on the basis of the legitimate interest of the Controller (IG O&M S.p.A.) in ensuring the proper operation of the site and in anonymously analysing page views (Art. 6(1)(f) GDPR).

The rights under Articles 15 et seq. of the GDPR in relation to the processing of cookies may be exercised as indicated in the privacy policy at point 8 – Rights of the Data Subject.