Disclosure form

Data protection declaration

In compliance with the provisions of EU Reg. 2016/679 (European Regulation for the Protection of Personal Data) we provide you with the necessary information regarding the processing of the personal data provided. The information is not to be considered valid for other websites that may be consulted through links on the domain websites of the owner, who is not to be considered in any way responsible for the websites of third parties.

This is a statement that is made pursuant to Art. 13 of EU Reg. 2016/679 (European Regulation for the Protection of Personal Data).

1. The DATA CONTROLLER, pursuant to Articles 4 and 24 of EU Reg. 2016/679, is NRG Island S.r.l. with registered office at Via Ugo la Malfa 10, 40026, Imola (BO) contactable for privacy purposes at: info@nrgisland.com
2. PURPOSE AND LEGAL BASIS OF THE PROCESSING
   The data of a personal nature provided will be processed, in accordance with the conditions of lawfulness ex art. 6 lett. f) (legitimate interest) EU Reg. 2016/679, for the following purposes:

• filling out data collection form for contact request with sending the requested information.

Data processing is based on the need to respond to a request from the data subject taking into account his or her reasonable expectations at the time and within the scope of the collection of personal data provided by filling out the form.

3. RECIPIENTS OR CATEGORIES OF DATA RECIPIENTS
   The data of a personal nature provided will be communicated to recipients, who will process the data as data controllers (Art. 28 of EU Reg. 2016/679) and/or as natural persons acting under the authority of the Data Controller and the Data Processor (Art. 29 of EU Reg. 2016/679), for the purposes listed above in point 2. Precisely, the data will be communicated to:

• Individuals who provide services for the management of the information system used by and telecommunications networks, including electronic mail;
• Competent authorities for fulfillment of obligations of laws and/or provisions of public bodies, upon request.

Individuals in the above categories act as Data Controllers, or operate completely independently as separate Data Controllers.

4. DATA TRANSFER TO A THIRD COUNTRY AND/OR AN INTERNATIONAL ORGANIZATION AND GUARANTEES

Personal data are stored within the European Union for the purpose of fulfilling related purposes stated above. Data will be transferred in accordance with Article 44 – General principle for transfer; Article 45 – Transfer on the basis of an adequacy decision; Article 46 – Transfer subject to adequate safeguards.

5. DATA RETENTION PERIOD OR CRITERIA FOR DETERMINING THE PERIOD
   The processing will be carried out in automated and manual form, using methods and tools designed to ensure maximum security and confidentiality, by individuals specifically appointed for this purpose.

In compliance with the provisions of Art. 5 paragraph 1 letter e) of EU Reg. 2016/679, the personal data collected will be stored in a form that allows the identification of data subjects for a period of time not exceeding the achievement of the purposes for which the personal data are processed. The retention of data of a personal nature provided depends on the purpose of the processing:

• For contact request (maximum six months).

6. RIGHTS OF DATA SUBJECTS
   You may assert your rights as expressed in EU Regulation 2016/679 by contacting the Controller by sending an email to info@nrgisland.com or by writing to the Controller’s office listed above.
   You have the right, at any time, to ask the Data Controller for access to your personal data (Art. 15), rectification (Art. 16) or deletion (Art. 17) of the same, or restriction of processing (Art. 18) or to object to their processing based on legitimate interest (Art. 21).
   The data subject’s rights also include the revocation of consent. In the specific case in relation to the purpose described in section 2, the processing does not have a legal basis in consent but in legitimate interest. It is in any case understood that should the processing be based on consent, you would have the right to revoke consent at any time without affecting the lawfulness of the processing based on the consent given before revocation. You have the right to lodge a complaint with the data protection authority.
   Disclosure of personal data is not an obligation. You are free to provide personal data in the dedicated areas on the site. Failure to provide personal data will result in the inability to use the services offered by the data controller. There is no existence of an automated decision-making process.

Last update: 16/06/2025