This notice is provided under Article 13 of Regulation (EU) 2016/679 (“GDPR”) and describes the processing connected with use of this website. Specific services or business relationships may be accompanied by separate notices.
01
Data controller
The data controller is Elettrica System S.r.l., with registered office at Via delle Gerole 30, 20867 Caponago (MB), Italy, VAT No. 04945750158, REA MB-1903469.
02
Scope of this notice
This notice covers people who browse the website, download documents, submit enquiries through the contact form or use the whistleblowing channel. External websites reached through links, such as LinkedIn or ANAC, act as independent controllers and apply their own privacy notices.
03
Data processed, purposes and legal bases
| Activity |
Data |
Purpose |
Legal basis |
| Browsing and security |
IP address and technical data normally transmitted by the browser; date, time, requested resource, request outcome and any security events recorded in server logs. |
Provide the website, keep it secure, prevent abuse and diagnose technical problems. |
The Controller’s legitimate interest in operating and protecting its systems, Article 6(1)(f) GDPR; compliance with legal obligations where applicable. |
| Contact form |
First name, surname, email, message and reason for the enquiry; telephone number and company if provided voluntarily. |
Respond to the enquiry, take requested pre-contractual steps or manage the requested relationship. |
Taking pre-contractual steps or performing a contract at the data subject’s request, Article 6(1)(b) GDPR; legitimate interest in managing communications and protecting legal rights, Article 6(1)(f) GDPR. |
| Job applications and CVs |
First name, surname, email, selected position, curriculum vitae and its contents; telephone number and message if provided voluntarily. |
Assess the application, contact the candidate and manage recruitment and selection activities for employees or collaborators. |
Taking pre-contractual steps at the data subject’s request, Article 6(1)(b) GDPR. Any special categories of data are processed only where strictly necessary and within the limits of Article 9 GDPR and applicable law. |
| Whistleblowing |
Report content and any data provided by the reporting person, including identity and contact details where chosen. |
Receive, assess and manage reports of breaches in a work-related context. |
Compliance with a legal obligation, Article 6(1)(c) GDPR and Italian Legislative Decree No. 24/2023. Special categories of data are processed only where the conditions under Article 9 GDPR and applicable law are met. |
No profiling. The website does not use automated decision-making or process collected data to profile users.
04
Whether you must provide data
Fields marked as required in the contact form are needed to identify and handle the enquiry; the form cannot be submitted without them. Telephone number and company are optional. The application form requires first name, surname, email, selected position and a PDF curriculum vitae; telephone number and message are optional. In the whistleblowing channel, name and email are optional: a report can be submitted without providing them, subject to the explanations in the dedicated notice.
05
Processing methods and security
Data is processed electronically and, where necessary, on paper in accordance with the principles of lawfulness, fairness, transparency, data minimisation and confidentiality. Technical and organisational measures proportionate to the risk are applied, and access is restricted to people who need the data for their duties.
06
Recipients of personal data
Where necessary, data may be disclosed to:
- authorised Elettrica System personnel and collaborators;
- hosting, email, maintenance and IT support providers, appointed as processors where required;
- professional advisers, public authorities or other parties where disclosure is required by law or necessary to protect a right;
- the Supervisory Body and specifically authorised persons, solely for whistleblowing reports.
Personal data is not made public.
07
Transfers outside the European Economic Area
If a provider involves a transfer of data to a country outside the European Economic Area, that transfer will be carried out in accordance with Chapter V GDPR, on the basis of an adequacy decision or appropriate safeguards, such as standard contractual clauses, together with any necessary supplementary measures.
08
Retention periods
- Technical and security data: for no longer than is strictly necessary to operate and secure the website and investigate incidents, unless further verification or legal obligations require otherwise.
- Contact enquiries: for as long as needed to respond and handle the enquiry; where a relationship follows, for the duration of that relationship and the subsequent periods required by law or needed to protect legal rights.
- Job applications and CVs: for the time required to complete the selection process and in any event for no longer than 12 months after receipt, unless a working relationship is established or further legal obligations apply.
- Whistleblowing: for the time required to manage the report and in any event for no longer than five years after the final outcome is communicated, subject to any further legal obligations.
09
Cookies and similar technologies
In its current version, this website does not use analytics, profiling or advertising cookies: no statistics tools or marketing pixels are installed. Only technical storage necessary to provide and secure the service is used.
The site is nevertheless equipped with a consent management system, allowing visitors to allow or refuse, by category, the possible future activation of non-technical tools. Tools belonging to categories that have not been authorised remain blocked and are not executed by the browser.
Categories
- Strictly necessary (always active)
- These allow the site to work. This category includes the technical storage that keeps the choice made about cookies, so the request is not shown again on every page, and measures supporting security. They do not allow the user to be identified or their browsing to be reconstructed, and do not require consent.
- Statistics
- These measure how the site is used, in aggregate form. No tool of this kind is currently installed. Should any be introduced in future, they will operate only with prior consent.
- Marketing
- These measure advertising campaigns and help show relevant content. No tool of this kind is currently installed. Should any be introduced in future, they will operate only with prior consent.
How to change your choice
Your choice can be changed or withdrawn at any time through the Cookie preferences link in the footer of every page. The preference is stored for six months, after which the request is shown again. Cookies can also be managed and deleted from your browser settings.
External links do not load third-party content within these pages: the browser contacts the relevant service only after the user clicks the link. If non-technical tools are introduced in the future, this notice and any consent mechanisms will be updated before they are enabled.
10
Your data protection rights
Where Articles 15-22 GDPR apply, you may request access, rectification, erasure, restriction of processing and data portability, and you may object to processing. Where processing is based on consent, consent may be withdrawn at any time without affecting the lawfulness of processing carried out beforehand.
You may also lodge a complaint with the Italian Data Protection Authority or bring proceedings before the competent courts.
To protect the confidentiality of the reporting person and the individuals concerned, the exercise of certain rights may be subject to the limitations provided by the laws applicable to whistleblowing reports.
11
How to exercise your rights
Requests may be sent to info@elettricasystem.it or by post to Elettrica System S.r.l., Via delle Gerole 30, 20867 Caponago (MB), Italy. To protect personal data, the Controller may request information needed to verify the identity of the person making the request.
12
Updates to this notice
This notice may be updated to reflect legal, organisational or technical changes. The current version is the one published on this page, with the update date shown at the top.