Climate Standard S.r.l., in its capacity as data controller, hereby informs you, pursuant to Article 13 of EU Regulation No. 2016/679 (“GDPR”), that the data provided via the website 2050footprint.com and the web app app.2050footprint.com (the “Website”), regardless of the methods and tools used, will be processed as set out below.
This notice applies to the personal data that Climate Standard S.r.l. collects from you as a user of the Website (the “User”) or as a potential customer/customer or as a contact person of a potential customer/customer where you act on behalf of a legal entity (respectively, the “Potential Customer” and the “Customer”) or as a candidate for open positions at Climate Standard S.r.l., or where you submit a spontaneous application (the “Candidate”) (jointly and indistinctly, the “Data Subjects”).
This notice is provided for the Website as a whole and not for other websites, pages or online services that may be reached via any hyperlinks published on or present on the Website but referring to resources outside the Controller’s domain and possibly visited by the Data Subject.
The data controller is Climate Standard S.r.l., VAT No. 02649090467, with registered office in Via Ciabattini, 7, 55049, Viareggio (LU), Italy, in the person of its pro tempore legal representative (hereinafter, the “Data Controller”).
The Data Controller’s e-mail address is: [email protected]
The Data Controller may appoint one or more processors of Personal Data pursuant to Article 28 of the GDPR, which, on behalf of the Data Controller, provide specific processing services or related, instrumental or support activities, adopting all appropriate technical and organisational measures to protect the rights, freedoms and legitimate interests granted by law to Data Subjects.
The processing will concern individual operations, or a set of operations, on the following personal data provided by the Data Subject when using the services provided by the Data Controller via the Website, as described in the table below (the “Personal Data” or the “Data”).
| Type of data processed | Purpose of processing | Legal basis for processing | Retention period |
|---|---|---|---|
| a) Identification data of the Data Subject provided to schedule a demo call | · Contacting the User to schedule a call | Performance of a contract to which the Data Subject is a party or performance of pre-contractual measures adopted at the Data Subject’s request (Article 6(1)(b) GDPR). | For twelve (12) months from the provision of the identification Data. |
| · Sending communications connected to the activity in relation to which the Data Subject has provided his/her Data; · managing, improving and maintaining the Website. | Legitimate interest of the Data Controller (Article 6(1)(f) GDPR). | For twelve (12) months from the provision of the identification Data. | |
| b) Contact details: first name, surname, role, email, etc. | · Preparation and sending of carbon footprint reports. | Performance of a contract to which the Data Subject is a party and/or pre-contractual measures adopted at the Data Subject’s request (Article 6(1)(b) GDPR). | For the time necessary to fulfil the Data Subjects’ requests; such data may not be retained for longer than ten (10) years from completion of the requests submitted by the Data Subject. |
| · Providing the service of putting the User in contact with commercial partners operating in the greentech sector in order to receive commercial proposals, quotations or information from such partners. | |||
| c) Identification data of the Data Subject in the contact form available on the Website: first name, e-mail, telephone number, further data voluntarily provided by the Data Subject through the contact form. | · Responding to Data Subjects’ requests, who may be contacted again by e-mail or by other communication systems if provided by them. | Performance of pre-contractual measures adopted at the Data Subject’s request (Article 6(1)(b) GDPR). | For the time necessary to fulfil the Data Subjects’ requests; such data may not be retained for longer than ten (10) years from completion of the requests submitted by the Data Subject. In the event of a dispute, the Data may be retained until the expiry of the ordinary appeal periods. |
| · Exercising the rights of the Data Controller, for example to exercise a right in court. | Legitimate interest of the Data Controller (Article 6(1)(f) GDPR). | ||
| d) Data Subject’s e-mail address. | · Sending informational newsletters. | Explicit consent of the Data Subject (Article 6(1)(a) GDPR), expressed using the double opt-in method. | Until the consent is withdrawn by the Data Subject via the specific link at the bottom of each communication and/or by written communication. |
| e) Candidate’s data contained in spontaneous applications sent via the Website or for open positions on the Website. · Common data: name, email, attached Curriculum Vitae, any additional data voluntarily provided in the application submission form; · any special categories of data ex Article 9(1) GDPR, such as, by way of example, data relating to health, sexual orientation, religious beliefs, etc. | · Assessing new potential collaborators; · conducting interviews with candidates. | Performance of pre-contractual measures adopted at the Candidate’s request (Article 6(1)(b) GDPR and Article 111-bis of the Italian Privacy Code) and, with regard to any special categories of data that may be provided, the need to comply with obligations imposed on the Data Controller or to exercise rights recognised to the Candidate in the field of labour law and social security or social protection, pursuant to Article 9(2)(b) GDPR. | For twelve (12) months from receipt of the application. |
| f) Browsing data relating to the Data Subject, including: IP address, information on the browser used, information relating to pages visited, date, time and duration of each visit. | · Obtaining anonymous statistical information on use of the Website; · checking that it functions correctly, also with a view to improving the user experience. | Legitimate interest of the Data Controller (Article 6(1)(f) GDPR). | Browsing data will be retained for the time necessary to carry out comparative analysis and statistical processing activities and in any case for no longer than two (2) years. |
| g) Cookies and other technologies for reading/storing information on the Data Subject’s device. | Reference should be made to the “Cookie Policy” available on the Website at the following link: Cookie Policy |
The processing of Personal Data:
The methods of processing Personal Data may involve the use of IT systems and automatic tools capable of linking the Personal Data in question to Personal Data of other individuals, on the basis of qualitative, quantitative and time-related criteria, recurring or definable from time to time, as well as the use of artificial intelligence systems.
The management and storage of Data will primarily take place within the European Economic Area, on servers of third-party companies appointed and duly designated as processors.
The Data Controller may provide access to the Website and the services indicated therein also in other countries, in which case the transfer of Data to such countries will be strictly limited to the actual need to know such data.
Personal Data may be transferred to the systems used by the Data Controller and/or by third-party companies appointed and duly designated as processors also outside the European Economic Area.