Information regarding the processing of personal data aimed at the telephone assistance and emergency services for its Users in accordance with EU Regulation 2016/679

Dear User of Acque Bresciane S.r.l.,

in the light of the provisions of the EU Regulation 2016/679 on the protection of individuals with regard to the processing of personal data (the “Regulation”) with this notice (the “Notice”) we intend to inform you that Acque Bresciane S.r.l. (“Acque Bresciane” or the “Company”) processes your personal data in the context of the provision of telephone assistance services through Customer Service operators and contact details published on the institutional website of the Company.

The processing will be based on the principles of fairness, lawfulness and transparency. The data will be pertinent, complete and not excessive in relation to the purposes for which they will be processed and will be collected and recorded only for the purposes indicated in this Notice.

1.Who is the data controller?

Acque Bresciane S.r.l., with registered office in Via Cefalonia 70, Brescia, and administrative office in Via XXV Aprile 18, Rovato (BS), Tax Code 03832490985, VAT No. 03832490985, R.E.A. 566755, registered with the Reg. Imp. of Brescia.

2.What data is processed?

Your personal data that will be processed, are those that identify you as a user and those of the supply provided to you, such as but not limited to:

• Last name, first name and place of birth, tax code and/or VAT number, telephone number, e- mail address, address and house number of the supply point;
• data related to the supply contract (e.g., customer code, reading of your meter);
• date and time of your call;
• the subject of your request;
• any other data necessary to respond to Your requests.
  
  

3. For what purposes is your data processed?

Your personal data are processed for the following purposes:

1. to provide feedback regarding Your requests for information, complaints or emergency response related to the provision of water services by the Company;
2. to make recordings of telephone calls concerning requests for emergency intervention, as imposed by the relevant Arera Resolutions in force.

In case you decide not to provide your personal data, we will not be able to respond to your Request.

4. On what legal basis is your data processed?

The processing of your personal data, conferred by you for the purposes referred to in paragraph 3(a) is carried out on the basis of the existing supply contract with you as well as on the basis of the Company's legitimate interest in following up complaints or requests of data subjects against the Company.In contrast, the processing of your personal data, provided by you for the purpose of paragraph 3(b) is based on the fulfillment of a regulatory obligation.

5.How is your data processed?

Your personal data will be processed both with the use of paper media and with the help of electronic, computer and telematic tools, ensuring the use of appropriate measures for the security and confidentiality of such data.

6.To whom are your data communicated?

The subjects or categories of subjects who may become aware of the data or to whom the data may be communicated are the following:

• entities/companies controlling and/or controlled and/or connected to Acque Bresciane, as well as direct or indirect participants and/or investees of Acque Bresciane, as part of existing corporate contractual relationships;
• external service providers (e.g., call centers, IT services, consulting firms, law firms);
• any contractors/suppliers to whom Acque Bresciane entrusts activities on the water network under its responsibility;
• where necessary, public administrations, supervisory and control authorities, judicial authorities (where required by law or by orders of said entities).

Your personal data will not, however, be disclosed to unspecified subjects.

With reference to your personal data communicated to them, the subjects belonging to the above categories may operate, depending on the case, as data processors (and in this case they will receive appropriate instructions from the Company) or as separate data controllers. In the latter case, your personal data will be communicated only with your express consent, except in cases where the communication is by law obligatory or necessary or for the pursuit of purposes for which your consent is not required by law.

In any case, the Company does not transfer your data outside the European Economic Area.

7.How long is your data kept?

Your Personal Data will be kept, in accordance with the provisions of the relevant legislation in force, for a period of time not exceeding that necessary to achieve the purposes for which they are processed.

The criteria for determining the period of Data retention take into account the period of permitted processing and the laws, regulations or directions of the competent authorities in each case applicable, prescription of legitimate rights and interests (where these constitute the legal basis for processing).

Thereafter, such data will be deleted, aggregated or anonymized.

8.What are your rights?

The Regulations give you the exercise of specific rights, including those to request from the data controller:

• to obtain confirmation from the Company that its Personal Data is or is not being processed and, if so, to obtain access to the information referred to in Article 15 of the Regulations;
• obtain the rectification of inaccurate Data concerning him/her, or, taking into account the purposes of the processing, the integration of incomplete Personal Data;
• obtain the deletion of its Personal Data, in the presence of one of the reasons referred to in Article 17 of the Regulation, where applicable;
• where applicable, to revoke consent at any time in cases where the same has been previously provided. Revocation of consent does not affect the lawfulness of the processing based on the consent previously given;
• Obtain the restriction of the processing of your Data if any of the hypotheses set forth in Article 18 of the Regulations apply;
• object to the processing of your Personal Data, on grounds related to your particular position, where applicable;
• to receive in a structured, commonly used and machine-readable format the Personal Data provided by you concerning yourself as well as to transmit such Data to another data controller, in the cases and within the limits set forth in Article 20 of the Regulations.

To exercise your rights, you may send a request, by paper mail to Via XXV aprile 18, 25038 Rovato (BS), or by e-mail to privacy@acquebresciane.it, or by fax to 030/7714270.

The Data Protection Officer or Data Protection Officer (the “DPO”) lawyer Giudo Paratico may be contacted by email at dpo@acquebresciane.it for all matters relating to the processing of personal data and the exercise of rights under the Regulation.

Pursuant to the Regulation, Acque Bresciane is not authorized to charge fees for complying with any of the requests listed in this paragraph, unless they are manifestly unfounded or excessive, and in particular are repetitive in nature.

In cases where you request more than one copy of your personal data or in cases of excessive or unfounded requests, Acque Bresciane may (i) charge a reasonable fee, taking into account the administrative costs incurred to process the request or (ii) refuse to comply with the request. In these eventualities, Acque Bresciane will inform you of the costs before processing the request.

Acque Bresciane may request additional information before processing requests if it needs to verify the identity of the individual making the request.

Without prejudice to any other administrative or jurisdictional recourse, you will also have the right to lodge a complaint with a supervisory authority (the Data Protection Authority) if you believe that the processing concerning you is carried out in violation of the Regulations. Further information is available on the website http://www.garanteprivacy.it.

In any case, Acque Bresciane is interested in being informed of any grounds for complaint and invites you to use the contact channels indicated above before referring to the supervisory authority, so that any disputes can be prevented and resolved in an amicable and timely manner.