Data information for Customers/Suppliers

Data information for Customers/Suppliers



ENERGY s.r.l., as data controller, inform the Clients and the Suppliers that personal data shall be processed according to Regulation EU 2016/679 “General Data Protection Regulation” (hereinafter “GDPR”).

According to article 13 of the GDPR, we provide the following information.


1. Data Controller

1.1 The Data Controller is ENERGY s.r.l., represented by its legal representative pro tempore, with registered office in via Manifattura no. 1, 38068 Rovereto (TN) and operating office in via Seconda Strada no. 26, 30030 Z.I. Galta di Vigonovo (VE) VAT number 02284640220, e-mail, Phone 049.2701296 - PEC (hereinafter also “Energy” or the “Controller”).


2. Purposes and legal basis for the processing

2.1 ENERGY shall process the personal data exclusively for the following purposes:

  1. performance of pre-contractual negotiations and fulfilment of all activities connected with the management and fulfillment of the contractual relationship (e.g. fulfillment of the contract, administrative and accounting management, invoicing). The legal basis of the processing is the performance of a contract to which the data subject is party or the steps made at the request of the data subject prior to entering into a contract (art. 6, par. 1, letter b) of the GDPR);
  2. fulfillment of fiscal and regulatory obligations of the Controller (art. 6, par. 1 letter c) of the GDPR);
  3. protection of ENERGY rights arising from the contract. The legal basis of the processing is the pursuit of the legitimate interests of the Controller (art. 6, par. 1, letter f) of the GDPR);


3. Modalities of personal data processing

3.1 The processing operations shall be carried out using computer and telematic tools as well as paper, in accordance with the principles of lawfulness, fairness, transparency, relevance, accuracy, with logical organization and processing related to the purposes pursued. Personal data shall be protected against destruction, alteration, deletion and unauthorized access by means of appropriate physical, logical and organizational security measures. Personal data shall be processed, for the purposes referred to in paragraph 2, by persons working within the internal organizational structure of the Controller, specially authorized and trained according to their duties, and by external persons appointed as data processors pursuant to article 28 of the GDPR.

3.2 There are no automated decision-making nor profiling processes.


4. Nature of the provision of data and consequences of failure to provide data 

4.1 The provision of personal data is necessary for pre-contractual negotiations, to enter into the contract, to fulfill the contract and to comply with legal obligations. Any refusal to provide data, in whole or in part, may make it impossible to pursue the above purposes.


5. Personal data retention period

5.1 Personal data relating to the contract shall be stored for the entire duration of the contractual relationship and, subsequently, for the duration foreseen by the applicable civil and fiscal regulations, and in any case no later than 10 years from the end of the contractual relationship. Further periods of storage are allowed, also related to the protection of the rights of the Controller, where required by law; subsequently, the data shall be deleted or made anonymous.

6. Recipients of the personal data

6.1 Personal data may be disclosed, for the purposes referred to in paragraph 2, to the persons authorized to process operating within the internal organizational structure of the Controller who are committed to confidentiality or have an adequate legal obligation of confidentiality.

6.2 Personal data may be disclosed to all those public and private subjects whose disclosure is necessary to pursue the purposes referred to in paragraph 2 (e.g. ENERGY’s legal and tax consultants, trusted external companies for the provision of services, including computer services) or is required by law or regulation, as well as in the event of requests from the Public Authorities.

6.3 Personal data shall not be disseminated nor transferred to a third Country or international organizations.


7. Data subject rights

7.1 In accordance with article 15-21 of the GDPR, the data subject has the right to:

  • obtain from the Controller confirmation as to whether or not personal data concerning him or her are being processed, and, where that is the case, access to the personal data and the information of article 15 of the GDPR (right of access);
  • obtain from the Controller without undue delay the rectification of inaccurate personal data concerning him or her or the completion of incomplete personal data (right to rectification – art. 16 of the GDPR);
  • obtain from the Controller the erasure of personal data concerning him or her without undue delay, if applicable (right to erasure - art. 17 of the GDPR);
  • obtain from the controller restriction of processing (Right to restriction of processing - art. 18 of the GDPR);
  • object, on grounds relating to his or her particular situation, at any time to processing of personal data concerning him or her (right to object - art. 21 of the GDPR);
  • lodge a complaint with the Italian Data Protection Authority pursuant to article 77 of the GDPR.

7.2 The rights shall be exercised by contacting ENERGY s.r.l., sending an e-mail to the following addresses: - PEC or by submitting a written request or registered letter with return receipt to the operating office in via Seconda Strada no. 26, 30030 Z.I. Galta di Vigonovo (VE).














Energy Srl
Registered Office: Piazza Manifattura, 1
38068 Rovereto TN – Italy
Tel. +39 0464 350812 - Fax. +39 0464 350512
Operations/Warehouse: Via Seconda Strada, 26
30030 - Z.I. Galta di Vigonovo VE - Italy
Tel. +39 049 2701296 - Fax +39 049 8599098