4) Comunicazione, diffusione e trasferimento dei dati

I Suoi dati personali potranno essere comunicati a:

1. società del Gruppo Italgas, o società controllanti, controllate e collegate alla Società, per finalità amministrativo-contabili di gestione e controllo e per la fornitura di servizi informatici e la gestione della infrastruttura tecnologica della Società;
2. società di vendita del gas e al Sistema Informativo Integrato, al fine di assicurare i flussi di informazione tra i soggetti che partecipano al mercato del gas naturale, come stabilito dalla regolazione dell'Autorità di Regolazione per Energia, Reti e Ambiente (ARERA);
3. Enti pubblici per l'adempimento degli obblighi previsti dalla legge;
4. soggetti contrattualmente legati alla Società, quali istituti bancari e creditizi, compagnie e intermediari assicurativi, consulenti legali, consulenti fiscali e commercialisti, società di recupero crediti, società che rilevano rischi finanziari e che svolgono attività di prevenzione delle frodi; soggetti che svolgono per conto della Società compiti di natura tecnico/operativa o organizzativa; che effettuano servizi di acquisizione, data entry, archiviazione ed elaborazione dei dati necessari per la fruizione dei servizi offerti alla clientela; che forniscono servizi informatici; che svolgono attività di trasmissione, imbustamento, trasporto e smistamento delle comunicazioni al cliente; che svolgono attività di assistenza alla clientela; che svolgono adempimenti di controllo, revisione e certificazione delle attività eseguite dalla Società, anche nell'interesse dei propri clienti; istituti bancari e società emittenti carte di credito; altri operatori del settore per la gestione dei relativi rapporti; studi e società nell'ambito dei rapporti di assistenza e consulenza, anche legale;
5. autorità pubbliche e organi di vigilanza e controllo, quando ciò occorra per la concessione di sovvenzioni, contributi, sussidi e agevolazioni di qualsiasi genere connessi alla prestazione di servizi, ovvero quando sia richiesto da specifiche previsioni normative, regolamentari e autorizzative;
6. società esterne, anche estere, che operano nel settore della concessione dei finanziamenti, incluse dilazioni di pagamento, quando consentito dalla legislazione vigente, per finalità di prevenzione e controllo del rischio di insolvenza e di tutela del credito;
7. società esterne, anche estere, che operano nel settore dell'erogazione di servizi di analisi ed elaborazione dei dati di consumo e di servizi digitali di monitoraggio dei consumi.

I soggetti appartenenti alle categorie sopra riportate tratteranno i dati come autonomi Titolari del trattamento o in qualità di Responsabili o Persone Autorizzate al trattamento, appositamente designati dalla Società, a cui la Società impartirà adeguate istruzioni operative, finalizzate all'adozione delle misure di sicurezza adeguate, al fine di poter garantire la riservatezza, la sicurezza e l'integrità dei dati.

I dati forniti non verranno ceduti a terzi e non saranno oggetto di diffusione. I dati potranno essere incrociati, per finalità di aggiornamento e di analisi, con altri dati in legittimo possesso della Società.

I dati saranno trattati all'interno dell'Unione Europea e conservati su server ubicati all'interno dell'Unione Europea.

 5) Diritti dell'interessato

L'interessato potrà esercitare, in relazione al trattamento dei dati ivi descritto, i diritti previsti dal Regolamento (artt.15-22 e 77), ivi inclusi:

• ricevere conferma che sia o meno in corso un trattamento di dati personali che lo riguardano e in tal caso, di ottenerne copia, nonché ulteriori informazioni sui trattamenti in corso su di essi (diritto di accesso);
• aggiornare, modificare e/o correggere i propri dati personali (diritto di rettifica);
• chiedere la cancellazione o la limitazione del trattamento dei dati personali trattati in violazione di legge, compresi quelli non più necessari rispetto alle finalità per le quali sono stati raccolti o altrimenti trattati (diritto all'oblio e diritto alla limitazione);
• opporsi al trattamento di dati personali che lo riguardano (diritto di opposizione);
• revocare il consenso, ove prestato, senza pregiudizio per la liceità del trattamento basata sul consenso prestato prima della revoca;
• proporre reclamo all'Autorità di controllo in caso di violazione della disciplina in materia di protezione dei dati personali;
• ricevere copia dei dati personali che lo riguardano in formato strutturato, di uso comune e leggibile da dispositivo automatico e ottenere la trasmissione diretta dei dati personali da un titolare del trattamento all'altro, se tecnicamente fattibile (diritto alla portabilità dei dati).

Per esercitare tali diritti può rivolgersi al Responsabile della protezione dei dati (di seguito solo "Data Protection Officer" o, in breve, "DPO") inviando un'e-mail a dpo.gdpr@italgas.it.

 6) Identità e dati di contatto del Titolare del trattamento, dei Responsabili del trattamento e dati di contatto del Data Protection Officer

Titolare del Trattamento dei dati personali è Italgas Reti S.p.A., con sede legale in Largo Regio Parco 11, Torino.
L'elenco aggiornato degli eventuali responsabili del trattamento è disponibile presso la sede del Titolare.
Il Data Protection Officer può essere contattato all'indirizzo e-mail indicato al punto 5, oppure via posta ordinaria presso la sede della Società.

Data ultimo aggiornamento della presente informativa: marzo 2024
Potrebbe rendersi necessario in futuro apportare modifiche o integrazioni all'informativa, a seguito di evoluzioni normative o aziendali. L'informativa aggiornata è disponibile in ogni momento sul portale MyItalgas (https://clienti.italgas.it/clienti/privacyGdpr).

INFORMATION FOR THE END CUSTOMER ON THE PROCESSING OF PERSONAL DATA

Dear Sir / Madam,

Italgas Reti S.p.A. (hereinafter, for the sake of brevity, the "Data Controller" or "Company"), as the data controller, wishes to inform you, pursuant to art. 13 and 14 of the European Regulation 679/2016 concerning the protection of personal data ("Regulation") and national legislation, including the individual provisions of the Supervisory Authority (Garante per la protezione dei dati personali), where applicable, that your personal data will be processed in compliance with the legislative and contractual provisions in force for the purposes and in the manner indicated below.

Your personal data are collected by the Company when they are directly conferred by you, e.g. when requesting services or registering on the web customer portal.
Your personal data may also be collected from third parties, in particular from the Sales Company with which you intend to establish or have entered into a contract for the supply of gas and/or through the Integrated Information System established with the "Acquirente Unico".

 1) Type of personal data, purpose and legal basis for the processing

A) Type of personal data
The Company mainly processes basic personal data, and in particular:

• identification and contact data (such as, name, surname, date of birth, tax code, postal address, e-mail address, telephone contacts, residence, domicile, cadastral data, delivery point reference number);
• additional data contained in copies of identity documents (such as, but not limited to, residence, height, profession, hair and eye colour, if applicable);
• banking data;
• meter reading data (collected and processed to determine gas consumption).

B) Purpose of the processing and legal basis of the processing
The above mentioned personal data are collected and processed for the purposes of the correct performance of the natural gas distribution and metering service, as governed by current legislation and by the Regulatory Authority for Energy, Networks and the Environment (ARERA) and in particular for the following purpose:

1. for the adoption of pre-contractual measures, the conclusion and execution of the supply contract and the related preliminary and connected activities, as well as for the fulfillment of legal obligations deriving from the contract itself, including all administrative and accounting formalities, including, by way of example, the activities on the meter, meter reading, remote meter reading and document verification;
2. for the management of all activities related and/or consequent to the request for quotation, in particular for the purposes of planning the on-site inspection for the collection of field data and verification of feasibility, the preparation of a quote, the connection activities, activation and termination of supply;
3. to manage requests for information, reports and complaints related to the gas service;
4. to comply with the legal obligations to which the Company is subject, including laws, regulations pro tempore in force and provisions also issued by Authorities legitimated to this effect, as well as for purposes related to the detection and prosecution of crimes;
5. the pursuit of the legitimate interest by the Data Controller, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject which require protection of personal data, including, by way of example, audit activities and data analysis for the improvement of processes and services;
6. for control activities aimed at protecting against credit risk and fraud related to the services provided, including activities aimed at identifying economic reliability and your solvency, before or during the contractual relationship. To activate and keep the services active, some personal data from public archives or registers are used relating to any protests, registrations or transcripts (such as foreclosures, insolvency procedures, seizures, mortgages, judicial claims), as well as data from title search and balance sheet;
7. for the protection of credit reasons, the Company may use information relating to the status and punctuality in payments relating to products or services provided in the past;
8. to establish, exercise or defend a right in judicial or administrative proceedings or in arbitration or conciliation proceedings;
9. to send SMS (Short Message Service) for appointment confirmation or to access digitally delivered services (i.e. digital estimate: choice between self inspection or virtual inspection). SMS are strictly functional to ensure the provision of services, notifications are not promotional and no SMS will be sent for commercial purpose.

For these purposes, the legal basis of the processing is the performance of the contract or precontractual measures adopted at your request (letters a, b, c, i), the compliance with the legal obligations to which the Company is subject (letter d), or the pursuit of the legitimate interest of the Data Controller (letters e, f, g, h).

Furthermore, subject to your choice of participation, the Company may submit any surveys concerning your degree of satisfaction in relation to the services offered. These surveys will be carried out in a totally anonymous manner, therefore the Company ensures that - for these purposes - your personal data will not be processed.

 2) Methods of processing and nature of the provision

Personal data will be processed by authorized persons of the Company and / or by Processors which the Data Controller may use to store, manage and transmit the data by means of paper, IT and telematic tools according to the principles of law and protecting the privacy of the data subject and his/her rights through the implementation of appropriate technical and organizational measures to ensure a level of security appropriate to the risk. The provision of your personal data is mandatory for the purposes referred to in point B) letters from a) to i), for the establishment and execution of the contractual relationship, as well as for the related administrative, accounting and tax obligations and for the management of any complaints, and any failure to provide it may affect the provision of the requested services. The provision of your personal data is optional for the purposes referred to in point B) lett. j) and failure to provide the data will make it impossible to use the services provided through the company's internet portal.

 3) Data retention

Your data will be kept for the period necessary to comply with contractual and legal obligations in compliance with the principles of proportionality and necessity. The retention period of the data depends on the purposes for which they are processed and therefore may vary. The retention of personal data is determined with reference to (i) the management of your contractual relationship, (ii) the management of complaints or specific requests, (iii) asserting rights in court and (iv) the time provided by applicable law. Personal data will be kept for no more than 10 years after the termination of the contractual relationship, within the terms of exercise of the contractual actions referred to in the Civil Code, and in any case for the time necessary for the exercise of the rights. With regard to the processing of personal data contained in the documentation produced for the purpose of documentary assessment (ARERA resolution 40/2014), the data will be kept for 12 years after the execution of the assessment and in any case for the time necessary to exercise the rights.

 4) Communication, dissemination and transfer of data

Your personal data may be disclosed to:

1. companies of the Italgas Group, or parent companies, subsidiaries and associates of the Company, for administrative-accounting management and control purposes and for the supply of IT services and the management of the Company's technological infrastructure;
2. gas sales company and the "Sistema Informativo Integrato" (Integrated Information System), in order to ensure information flows between the parties participating in the natural gas market, as established by the regulation of the Italian Regulatory Authority for Energy, Networks and the Environment (ARERA);
3. Public entities for the fulfillment of legal obligations;
4. subjects contractually linked to the Company, such as banking and credit institutions, insurance companies and intermediaries, legal advisors, tax advisors and accountants, debt collection companies, companies that detect financial risks and that carry out fraud prevention activities; entities that carry out on behalf of the Company technical/operational or organizational tasks; that carry out acquisition services, data entry, storage and processing of data necessary for the use of the services offered to customers; who provide IT services; who carry out activities of transmission, packaging, transport and sorting of communications to the customer; who carry out customer service activities; who carry out checks, audits and certification of the activities carried out by the Company, also in the interest of its customers; banks and credit card issuers; other operators of the gas sector for the management of related relationships; assistance and consultancy firms, including legal ones;
5. public authorities and supervisory and control bodies, when this is necessary for the granting of grants, contributions, subsidies and facilities of any kind related to the provision of services, or when required by specific legislative, regulatory and authorization provisions;
6. external companies, including foreign companies, which operate in the sector of granting loans, including payment extensions, when permitted by current legislation, for the purpose of preventing and controlling the risk of insolvency and credit protection;
7. external companies, including foreign companies, operating in the sector of the provision of analysis and processing of consumption data and digital services for monitoring consumption.

The subjects belonging to the above categories will process the data as autonomous Data Controllers or as Data Processors or Authorized Persons for the processing, specifically designated by the Company, to whom the Company will issue adequate operating instructions, aimed at adopting adequate security measures, in order to guarantee the confidentiality, security and integrity of the data.

The data provided will not be disclosed to third parties and will not be disseminated. The data may be crossed, for updating and analysis purposes, with other data in legitimate possession of the Company, provided by you in other circumstances.

The data will be processed within the European Union and stored on servers located within the European Union.

 5) Rights of the data subjects

The data subjects may exercise, in relation to the data processing described therein, the rights provided for by the Regulation (articles15-22), including:

• to obtain confirmation as to whether or not personal data concerning them are being processed, and, where that is the case, access to their personal data, as well as further information on the processing in progress on them (right of access);
• rectificate, modify and/or have incomplete personal data completed (right to rectification);
• request the erasure or the restriction of processing of personal data processed in violation of the law, including those that are no longer necessary in relation to the purposes for which they were collected or otherwise processed (right to be forgotten and right to restriction);
• to object to processing of personal data concerning them (right to object);
• to withdraw their consent, if given, without prejudice to the lawfulness of the processing based on the consent given before the withdrawal;
• to lodge a complaint with the supervisory authority in the event of a violation of data protection law;
• to receive a copy of the personal data concerning them in a structured, commonly used and machine-readable format and to have such data transmitted directly from one controller to another, where technically feasible (right to data portability).

To exercise these rights, you can contact the Data Protection Officer (hereinafter, in short, "DPO") by sending an email to dpo.gdpr@italgas.it

 6) Identity and contact details of the Data Controller, of the Data Processors and contact details of the Data Protection Officer

The Data Controller of personal data is Italgas Reti S.p.A., with registered office in Largo Regio Parco 11, Torino.
The updated list of data processors is available at the headquarters of the Data Controller.
The Data Protection Officer can be contacted at the e-mail address indicated in point 5, or by ordinary mail at the Company's headquarters.

Last update of this information: March 2024
It may be necessary in the future to make changes or additions to the information, as a result of regulatory or business changes. The updated information is available at any time on the portal MyItalgas (https://clienti.italgas.it/clienti/privacyGdpr).