CITY GREEN LIGHT SRL PRIVACY AND COOKIE POLICY (EU Reg. 2016/679)

This notice explains the methods and characteristics of personal data processing activities within City Green Light S.r.l.’s web applications.

1. DATA CONTROLLER

City Green Light S.r.l., via G. Zampieri 15 – 36100 Vicenza (VI), Tax Code and VAT No. 03785880240. E-mail: privacy@citygreenlight.com

2. TYPES OF DATA COLLECTED

WEBSITE: www.citygreelight.com

City Green Light S.r.l.’s website independently or through third parties collects the following categories of personal data: Contact personal data, Cookies, and usage data.
Personal Data may be freely provided by the User or automatically collected during the use of this website.
The User assumes responsibility for the Personal Data of third parties published or shared through this Application and warrants that they have the right to communicate or disseminate them, releasing the Data Controller from any responsibility towards third parties.

A) Contact Personal Data

City Green Light S.r.l.’s website collects the following Personal Data from the user:

B) Cookies and Usage Data

The use of Cookies – or other tracking tools – by this website or by the owners of third-party services used by this website, unless otherwise specified, aims to identify the User and record their preferences for purposes strictly related to the provision of the service requested by the User. Failure by the User to provide certain Personal Data may prevent the website application from providing its services. In particular, City Green Light S.r.l.’s website provides for user interaction with the following Cookies:

(*) Google Analytics is a web analysis service provided by Google Inc. (“Google”). Google uses the Personal Data collected to track and examine the use of this Application, compile reports and share them with other services developed by Google. Google may use the Personal Data to contextualize and personalize the ads of its advertising network. – For further information, please refer to the relevant Privacy Policy.

CITYGREENAPP

The CITYGREENAPP software application independently or through third parties collects the following categories of personal data: Contact personal data and user registration data.
Personal Data may be freely entered by the User during registration or profile modification.
The User assumes responsibility for the Personal Data of third parties published or shared through this Application and warrants that they have the right to communicate or disseminate them, releasing the Data Controller from any responsibility towards third parties.

A) Contact Personal Data

City Green Light S.r.l.’s website collects the following Personal Data from the user:

3. METHODS AND PLACE OF PROCESSING OF COLLECTED DATA

Data processing is carried out by delegated subjects of the processing, in particular by Appointees and External Data Processors, IT System Administrator who operate on specific appointment determined by written act by the Data Controller, with a commitment to maximum confidentiality and not to disclose data to third parties without specific authorization. The list of relevant names is provided upon request of the interested party.

4. RIGHTS OF THE DATA SUBJECT

Right of access and copy (Art. 15 EU Reg. 2016/679): to know at any time the actual implementation of data processing and in particular the purposes of the processing, the categories of data, the recipients to whom they have been or will be communicated, the retention period, the available information about their origin and acquisition if the data are not collected or provided directly by the data subject, the existence of any automated processing and profiling process, the guarantees and methods of any transfer of data to a third country or an international organization in accordance with Art. 46 EU Reg. 2016/679. Obtain a copy of the data itself, possibly with charges for additional requests.

Right of rectification and erasure (Arts. 16 and 17 EU Reg. 2016/679): obtain the rectification or integration of inaccurate personal data, as well as the erasure of data without undue delay, with limitation of processing pending investigation.

Right to data portability (Art. 20 EU Reg. 2016/679): obtain personal data in an intelligible format, including electronically, or the transmission to another data controller without hindrance except for reasons of technical and objective impossibility.

Right of opposition and withdrawal of consent (Articles 7 and 21 EU Regulation 2016/679): to oppose and withdraw consent at any time to data processing, except where there are compelling legitimate grounds that override the interests, rights and freedoms of the data subject, such as for the establishment, exercise or defense in legal proceedings.

Right to lodge a complaint with the supervisory authority (Article 77 EU Regulation 2016/679): to lodge a complaint with the competent supervisory authority in case of violation of the relevant provisions.

Right to compensation for damages (Article 82 EU Regulation 2016/679): to obtain compensation for damages in accordance with Article 82 EU Regulation 2016/679.

Right to notification of data breaches (Article 34 EU Regulation 2016/679): where a personal data breach is likely to result in a high risk to the rights and freedoms of natural persons, without undue delay.
Any requests for the exercise of the rights listed above must be addressed personally or by registered letter with return receipt to the registered office or by email communication to: privacy@citygreenlight.com.

5. CHANGES TO THE PRIVACY POLICY CONDITIONS

The Data Controller reserves the right to make changes to this privacy policy at any time by giving notice to Users on this page. Please therefore consult this page frequently, taking as reference the date of last modification indicated at the bottom. In case of non-acceptance of the changes made to this privacy policy, the User is required to cease using this Application and may request the Data Controller to remove their Personal Data. Unless otherwise specified, the previous privacy policy will continue to apply to Personal Data collected up to that point.

6. DEFINITIONS AND LEGAL REFERENCES

Personal Data (or Data)

Personal data constitutes any information relating to a natural person, identified or identifiable, even indirectly, by reference to any other information, including a personal identification number.

Usage Data

This is information collected automatically by this Application (or by third-party applications that this Application uses), including: IP addresses or domain names of computers used by the User connecting to this Application, addresses in URI (Uniform Resource Identifier) notation, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response from the server (successful, error, etc.), the country of origin, the characteristics of the browser and operating system used by the visitor, the various temporal aspects of the visit (for example, the time spent on each page) and details relating to the itinerary followed within the Application, with particular reference to the sequence of pages consulted, parameters relating to the operating system and the User’s IT environment.

User

The individual who uses this website, who must coincide with the Data Subject or be authorized by them and whose Personal Data are the subject of processing.

Data Subject

The natural or legal person to whom the Personal Data refer.

Data Processor (or Processor)

The natural person, legal entity, public administration and any other body, association or organization appointed by the Controller to process Personal Data, according to what is established by this privacy policy.

Data Controller (or Controller)

The natural person, legal entity, public administration and any other body, association or organization responsible, even jointly with another controller, for decisions regarding the purposes, methods of personal data processing and the tools used, including the security profile, in relation to the operation and use of this Application. The Data Controller, unless otherwise specified, is the owner of this Application.

Application

The hardware or software tool through which Users’ Personal Data are collected.

Cookie

Information files that websites store on the internet user’s computer during browsing, especially for the purpose of identifying those who have previously visited the site.

Legal References

Notice to European Users: this privacy notice is drafted in compliance with the obligations already provided for by Article 10 of Directive No. 95/46/EC, as well as by Directive 2002/58/EC, as updated by Directive 2009/136/EC, regarding Cookies. The notice also complies with the requirements of EU Regulation 2016/679 (Global Data Protection Regulation).

Last modified: 15.10.2020.

7. ENERGY COMMUNITY MEMBERSHIP FORM

The form provides for the collection of the user’s personal data where they express interest in joining an energy community, for carrying out the related verifications.
The data requested is limited to what is strictly necessary for achieving the aforementioned purposes.
The user assumes responsibility for the accuracy and completeness of the personal data communicated.

8. FORTHINK PORTAL

Through the portal, City Green Light processes the following personal identification data, as the Data Controller: