Privacy Policy pursuant to Art. 13 GDPR EU 2016/679 Shareholders submitting questions to the Shareholders' Meeting
Data subjects
Shareholders who have the right to ask questions to the Shareholders' Meeting pursuant to Article 127-ter, Consolidated Law on Financial Intermediation (TUF) - Italian Legislative Decree No. 58 of 24 February 1998, as amended.
Data controller
Hera S.p.A., with registered office in viale Berti Pichat 2/4 - 40127 Bologna, Tel. 051.287111
Data Protection Officer
The DPO is the Head of the Privacy, Information Security Compliance and Regulatory QSA function of Hera S.p.A., who may be contacted at Hera S.p.A., Viale Carlo Berti Pichat no. 2/4, 40127 Bologna or by e-mail: dataprotectionofficer@gruppohera.it
Personal data processed
The subject of this privacy policy is the processing of personal data for the purpose of answering questions.
These data will be associated with the message that the data subject wishes to enter.
| Legal basis |
Purpose |
Nature of the personal data provision |
|
Fulfilment of a request.
Fulfilment of legal obligation to which the Controller is subject.
|
Answering questions in compliance with Article 127-ter of the Consolidated Law on Financial Intermediation (TUF), as amended.
|
The provision of data is necessary if the shareholder decides to ask the question.
|
Methods of processing
The personal data collected will be processed, using hard copies or electronic means, with the use of measures that ensure the security and confidentiality of your data.
Recipients
Your personal data will be processed exclusively by authorised personnel, formally appointed to complete such processing, duly identified, instructed and informed of the obligations set forth by law.
All or part of the processing may be carried out by third-party companies, belonging to the Hera Group or otherwise, which will act as external processors (e.g., companies specialising in website management or maintenance services).
Your personal data may be disclosed to companies in the Hera Group and/or third parties who have a contract with Companies of the Group.
The data may be disclosed to Public Bodies/Public Administrations/Authorities and supervisory and control bodies.
Disclosure
Your personal data will not be disclosed.
Transfer of data outside the European Union - European Economic Area
Your personal data will be processed in the European Union and stored on servers located in the European Union. Your personal data may be transferred to countries outside the EU/EEA, in accordance with the applicable legal provisions and in compliance with Articles 45, 46, 47 and 49 of the GDPR, if necessary by entering into agreements that guarantee an adequate level of protection and/or by adopting the standard contractual clauses provided by the European Commission.
Data retention period
The data will be stored for 5 years after contact.
Rights of the data subject
The data subject has the right to obtain, in the cases provided for, access to and rectification or erasure of personal data or restriction of processing concerning him or her, or to object to processing (Art. 15 et seq. of EU REG 2016/679) by contacting the Data Controller directly by email at protocolloheraspa@gruppohera.it
Right to lodge a complaint with the Supervisory Authority
The data subject shall have the right to lodge a complaint with the Data Protection Authority.
