Falck Renewables S.p.A. – a company with registered office at Corso Venezia, 16, 20121 Milan (hereinafter referred to as the “Company”) and with the following email address privacyexpert@falckrenewables.com – in its capacity as data controller, informs you that the personal information of users accessing its website www.falckrenewables.eu (the “Site”) or the information of any other person referred to in these personal data (the “User”) will be processed in accordance with this privacy policy on the processing of personal data.

The Company acts as data controller of processed personal data. An exhaustive list of those designated by the Company to supervise the processing of data is available by sending a request to the Company, using the address mentioned at paragraph 9 of this privacy policy.

The Company collects and processes personal data provided by the User (hereinafter referred to as “Personal Data”). These data include identification data and information about the nationality and surfing data about the use of the services offered via the Site. These data are collected using cookies, in accordance with the Company’s cookie notice, available at the followinglink.

Information regarding the User’s occupation and phone numbers is also processed, if the User chooses to share this information.

Health data and – generally speaking – special categories of personal data, as per article 9 of the Regulation (EU) 2016/679 on personal data protection (the “Privacy Regulation”) are not processed.

The above-mentioned Personal Data are processed only in so far as is necessary in order to fulfil the purposes described in paragraph 4 of this privacy policy.

The Company processes the User’s Personal Data using manual or electronic tools, for the following purposes:

– to allow the User to use the Site, its services and its features, including processing User’s requests, answering User’s questions, providing the User with the requested services, as well as managing User’s application and processing User’s personal data included in the CV to pursue recruiting and staff selection activities (the “Contractual Purposes”);

– compliance with obligations from laws and regulations (hereinafter referred to as “Legal Obligation Purposes”);

– with the User’s prior consent, sending newsletters and communications via email regarding the potential publication of press releases, balance sheets, reports and communications intended for analysts, as well as the promotion and/or sale of products and/or services sold by the Company (“Marketing Purposes”)

– carrying out activities about the sale of the company and branches of the business, acquisitions, mergers, de-mergers or other operations; to assert and defend these rights against the User and third parties (“Business Legitimate Interest Purposes”).

– the consent of the Interested Party, sending newsletters and communications by e-mail and/or on paper regarding the possible publication of press releases, financial statements, reports and communications to analysts, as well as the promotion and/or sale of products and/or services marketed by the Company (“Marketing Purposes”).

– subject to the consent of the interested party, to communicate the Personal Data of the interested party to the other companies of the (operating in the following renewable energy sector to send newsletters, commercial communications and invitations to events, by e-mail in relation to their products and services, through the means of communication referred to in the previous point (“Third Party Marketing Purposes”);

– to pursue the legitimate interests of protecting the Company’s rights, to enforce or defend such rights in the competent courts (judicial, arbitration, administrative, etc.), to protect the Company’s assets and prevent fraud (for example: the Company processes Personal Data to ensure that the Site is updated and meets the needs of users, to analyze, review and improve the services and/or products offered on the Site) (“Purposes of Protecting Rights)

– to carry out activities functional to business and branch transfers, acquisitions, mergers, demergers or other transformations and to carry out such operations and to enforce and defend rights against the interested party and third parties (“Purpose of Legitimate Interest in Corporate Transactions”).

Data processing is compulsory in accordance with the Contractual Purposes and the Legal Obligation Purposes. Should the User object to the processing of their Personal Data in accordance with these purposes, they will not be able to use the Company’s services.

Processing Personal Data for Marketing Purposes is optional and subject to the User’s prior consent. If the latter deny their consent, the Company will not be able to keep the User updated regarding new products or services, special deals, personalised offers, or carry out market surveys and send communications or other materials containing information that could be in line with their interests.

Processing Personal Data for Business Legitimate Interest is not compulsory, but is based on the Company’s legitimate interest in carry out these operations. Users may object to the data processing of this purpose. In this case, their Personal Data will not be used for these purposes, unless the Company is able to identify an overriding legitimate interest.

The Company could disclose the User’s Personal Data with:

– Company’s collaborators, subsidiaries and suppliers, in the context of their tasks and/or the contractual obligations they have vis-à-vis one another;

– legal, administrative and tax advisers who assist the Company in carrying out its activities;

– subcontractors engaged in activities related to the performance of the products and services offered by the Company, such as – for example – assistance agencies and/or resellers, acting as external data processors;

– public and/or judicial and/or monitoring bodies, should they make the request, acting as independent data controllers; and

– IT or cloud service providers.

The transfer of the User’s Personal Data will be carried out to member States of the European Union. Any transfer of the User’s Personal Data to countries outside the European Union, and, specifically, to countries in which subsidiary companies of Falck Renewables operate, may take place where necessary for Contractual Purposes or Business Legitimate Interest Purposes, or for example, if the Data controller decides to set up its servers or company databases outside the European Union, or to outsource services to entities established abroad. In any event, such a transfer will take place in compliance with the guarantees provided by the applicable regulations and in compliance with the provisions of article 44 and subsequent articles of the Privacy Regulation.

The User has the right to obtain a copy of the guarantees on the basis of which the Data are transferred and to be made aware of the location where these Data were made available. He/she may do so by sending a request to the Data Controller at the address mentioned in paragraph 9 of this privacy policy.

With regard to their Personal Data, the Users may at any time exercise their right to (a) obtain the confirmation of the existence of Personal Data concerning them and receive copies of such data; (b) find out where the Personal Data come from, the purposes for which data were processed, and the methods used, as well as the logic behind processing carried out by electronic means; (c) request that the Personal Data are updated, accurate and – if they want – complete; (d) obtain the erasure, transformation into anonymous format or blocking of data processed in violation of the law, as well as object to the processing on legitimate grounds; (e) withdraw consent to the processing of their Personal Data, without prejudice to the lawfulness of the processing which occurred before consent was withdrawn; (f) request that the Company restrict the scope of the data processing; (g) object to the processing of their Personal Data; (h) request that their Personal Data are erased, without undue delay, and (i) obtain a portable version of their Personal Data. These rights are exercised by sending a letter to the address mentioned in paragraph 9.

The User will have the right to file a complaint with the Supervisory Authority, where permitted.

Should the Users have doubts about this privacy policy, or should they want to exercise one of the data protection rights contained in this privacy policy, they may contact the Company at the following address privacyexpert@falckgroup.eu.

The Company will process the Personal Data for a period which is considered necessary in order to satisfy the purposes for which they were collected, as per paragraph 3 above. In any event, the following storage periods apply to the processing of Personal Data as follows, in accordance with the aims pursued:

data collected for Contractual Purposes are kept for the whole duration of the contract entered into with the Company and/or whilst the Company’s services are being used, and for a further 10 years after the termination of the contract and/or the termination of the service for the purposes of the defence of a right and/or to exercise a right of the Company in court and/or out of court, in the event of disputes relating to the execution of the contract and/or the performance of the service;

data collected for Legal Obligation Purposes are kept for a period that is equal to the duration prescribed by law for each type of data;

data collected for Marketing Purposes are kept for a period equal to the entire duration of the service, as well as for the 2 years following the termination of the service;

data collected for Business Legitimate Interest Purposes are kept for 10 years from the time of collection.

data collected for recruiting and staff selection purposes will be processed for the time necessary to handle User’s application and stored up to a maximum of 12 months.

The Site should not be used by minors. If the User is a minor, they are not allowed to continue browsing and using the Site.

This privacy policy enters into force on the date mentioned above. However, the Company may – with prior notice – make changes and/or additions to the privacy policy, also as a consequence of the potential ulterior legal modifications and/or additions.