Veolia Water Technologies Italia S.p.a. with registered office in Via Lampedusa, 13 – 20141 Milan (MI), as data controller (hereinafter “Controller” or “Veolia WTI”), is providing the data subject with this information in compliance with European and Italian personal data protection regulations.
Processing purpose and legal basis
The Controller processes data for several purposes:
- to respond to requests sent through this form, for example, to obtain information on its products or services (including sending the brochure, catalogue and/or other company information), to receive an estimate and, in general, to check whether it is feasible to establish a commercial relationship. If the response to requests received can be managed in-house, the legal basis applied is the need to respond to those requests. If the requests are managed by commercial partners (different Business Units of the Group or resellers) the company will apply the legal basis of legitimate interest in order to be able to send the contact data of the Data Subject to the third parties providing assistance and performing the requests;
- use the e-mail address to send commercial communications containing information on its products or services, as well as promotions or invitations to events the Controller will be taking part in: for that purpose the consent of the Data Subject is needed.
Data storage period
The Controller will process the data applying the following time criteria:
- if the request is for information, the data will be processed for the time needed to respond; if it is for an estimate, the data will be processed for a maximum of 36 months, without prejudice to further storage for the time needed to settle (in any way) any disputes that could have arisen;
- for the purposes in point 2), the data will be processed for twenty-four months from when consent is provided: the data subject may revoke consent or object to processing at any time.
Providing data and consequences if there should be a refusal
Providing data for the purposes indicated in point 1) is necessary so any refusal to do so in full or partially could make it impossible for the Controller to pursue the aforementioned purposes. Providing data for further purposes is optional: if they are not provided, the Controller cannot perform the corresponding activities but will, in any case, be legitimised to pursue the purposes indicated in point 1).
The Controller will not circulate the data, but intends to communicate them to internal parties authorised to process them for their respect jobs, and to professionals or service companies, as well as to Public and private Bodies following inspections and audits. Only if specifically needed in order to provide the responses pursuant to point 1), the data may be sent to other business units, Veolia group companies or distributors.
If they should process the data on behalf of the Controller, those recipients will be appointed as processors in a specific contract or other legal deed.
Transferring data to a third Country and/or international organisation
To respond to your request, the Data Controller may transfer your personal data to Third Countries (also not members of the European Union) if the response is through a commercial partner located there (for example with an estimate or assistance by our local partner). The transfer of personal data to subjects located in a third Country will only take place with the controller and the non-EU recipient signing contractual clauses of the type adopted or approved by the Commission of the European Union (art. 46, paragraph II, letters c and d of the GDPR) or with binding corporate rules (art. 47 of the GDPR).
Rights of the data subjects
The data subject has the right to ask the Controller for access to their personal data and to rectify them if incorrect, erase data or limit processing if applicable, object to processing for the legitimate interests pursued by the Controller, and to obtain the portability of data provided personally solely if processed automatically based on consent or contract. The data subject also has the right to revoke consent provided for the processing requiring it, without prejudice to the legality of processing performed up to when consent is revoked.
To exercise its rights, the data subject may use the form available here and send it to the Controller at the following address: firstname.lastname@example.org. The data subject also has the right to lodge a complaint with the control authority responsible, the personal data protection Authority (www.garanteprivacy.it).