Information on the processing of personal data pursuant to Article 13 of EU Regulation 2016/679 of 27 April 2016, addressed to the users of the institutional website of Acque Bresciane S.r.l. including the Cookie Policy

Dear User of the institutional website,

The following is an explanation of how the site is managed and provides information pursuant to Article 13 of EU Regulation 2016/679 of 27 April 2016 on the protection of individuals with regard to the processing and free movement of personal data (hereinafter the "Regulation"), with reference to the processing of personal data of Users who access the site www.acquebresciane.it (hereinafter, the "Site") and its subdomains. The information is not provided for any other sites consulted by the User via links.

1. Data Controller

Acque Bresciane S.r.l. (hereinafter, also the "Company" or the "Data Controller") with registered office in Via Cefalonia, 70 - 25124 Brescia and administrative office in Via XXV Aprile, 18 - 25038 Rovato (BS), Cap. Soc. € 28.520.874,00 i.v. - P.IVA 03832490985 - REA 566755 - Iscrizione Reg. Imprese di Brescia e C.F. 03832490985; PEC: acquebresciane@cert.acquebresciane.it

2. Data subject to processing

The personal data processed by the Data Controller include navigation data (e.g. IP addresses or domain names of the computers used by the Users who connect to the Site, the time of the request, the method used to submit the request to the server, the numerical code indicating the status of the response given by the server and other parameters relating to the operating system and the browser used by the User).

3. Purpose and legal basis of processing

Navigation data are collected for the sole purpose of obtaining anonymous statistical information on the use of the Site and to check its correct functioning and not to allow subsequent identification of the User.

The processing of personal data will be based on the principles of correctness, lawfulness and transparency. The data will be pertinent, complete and not excessive in relation to the purposes for which they are processed and will be collected and recorded only for the purposes indicated below:

• execution of pre-contractual measures taken at your request or contractual, fiscal, administrative, managerial and accounting obligations arising from the contractual relationship with you;
   
• pursuit of a legitimate interest of the Data Controller (e.g. communication of personal data within the Company for administrative purposes or to ensure network security, possible defence of a right in court)
   
• possible fulfilment of a legal obligation to which the Data Controller is subject (e.g. communications to the Authorities);
   
• consent given by you (e.g. to the use of cookies, not necessary for browsing the Site).

4. Origin of personal data and consequences of failure to provide them

The navigation data necessary for the computer management of the Site are acquired by the computer systems and software procedures that regulate its operation.

5. Processing methods and period of storage of personal data

The data will be processed by authorised personnel who need to be aware of it in order to carry out their activities, with the aid of electronic instruments, according to principles of lawfulness and correctness, so as to protect the confidentiality and rights of the person concerned at all times, in compliance with the provisions of current legislation.

Your data will be stored for a period of time not exceeding the time necessary to achieve the purposes for which they are processed.

The duration of the cookies used on the Site can be consulted in the relevant section of this Privacy Policy (see paragraph no. 10).

In the event of a dispute, the storage period may be extended up to 10 years from the settlement of the dispute.

6. Scope of communication and transfer of personal data

The personal data collected may be communicated to parties who will act as autonomous Data Controllers or Data Processors, as the case may be, for the purposes indicated above, in compliance with legal, regulatory and/or Community law obligations or because they have a legitimate interest.

In particular, your personal data may be made available to:

• subjects in charge of carrying out activities connected with and instrumental to the processing (such as filing service companies, IT service companies, insurance companies, banking institutions, professional firms);
   
• Controlling and/or subsidiary and/or associated and/or participating entities/companies, direct or indirect within the scope of existing corporate contractual relationships, research bodies, universities within the scope of cooperation activities;
   
• Public administrations, Authorities (e.g.: Arera, Ufficio d'Ambito di Brescia) and other entities in fulfilment of legal obligations.

Your data will not be disclosed or made available to unspecified parties.

7. Rights of the interested party

At any time, you have the right to:

• obtain confirmation from the Company as to whether or not your personal data is being processed and, if so, to obtain access to the information referred to in Article 15 of the Regulations;
• obtain the rectification of any inaccurate data concerning you or, taking into account the purposes of the processing, the integration of incomplete personal data
• obtain the deletion of your personal data, in the presence of one of the reasons referred to in Article 17 of the Regulation;
   
• obtain the limitation of the processing of your personal data, if one of the cases referred to in Article 18 of the Regulation applies;
   
• object to the processing of your personal data for reasons related to your particular position, where applicable;
   
• to receive in a structured, commonly used and machine-readable format the personal data concerning you that you have provided, as well as to transmit such data to another data controller without hindrance from the controller, if technically possible, in the cases and within the limits of Article 20 of the Regulation, where applicable.
• In addition, you have the right to withdraw your consent to the processing of your personal data (if given), at any time, without affecting the lawfulness of the processing based on the consent given before the withdrawal.

8. Data Protection Officer

The Data Protection Officer or Data Protection Officer (the "DPO") may be contacted by email at dpo@acquebresciane.it for all matters relating to the processing of your personal data and the exercise of your rights under the Regulation.

9. Automated decision-making processes

Data will not be subjected to decisions based solely on automated processing, including profiling, that produce legal effects or similarly significantly affect the Data Subject.

In addition, you have the right to revoke your consent to the processing of your personal data (where given), at any time, without affecting the lawfulness of the processing based on the consent given before revocation.