The controller of the personal data is Gridspertise S.r.l., with its registered office in via Ombrone 2, 00198 Rome, Italy VAT no. 15844561009, tax no. 16073691004 (“Gridspertise”).

Gridspertise has appointed a Data Protection Officer (DPO) who can be contacted at the following e-mail address: dpo@gridspertise.com.

Gridspertise will process personal data that you have provided or that we have legitimately collected through the digital channels and platforms (ex. LinkedIn) in compliance with their privacy policies. 

Contact data: first name, last name, e-mail address, telephone number, the content of the message sent by the user and any other personal data you may have provided during your communications with Gridspertise. 

Other: we may ask the job position in order to best address the request on the basis of the company’s organization, or to process your application for a job position in Gridspertise. Other data can be collected depending on the specific digital channels, such as the data made available by the third-party platforms in compliance with their privacy policy.

The contact data are necessary to answer the users’ requests and communicate with them. The provision of any further personal data should be considered optional.

The following table lists the purposes for which the personal data will be collected and processed by Gridspertise, as well as the legal basis of processing:

The provision of personal data is necessary in all cases where the processing is carried out on the basis of a legal obligation, in order to perform a contract or the execution of pre-contractual measures adopted at request. The refusal to provide personal data may make it impossible for Gridspertise to process the request.

The provision of personal data is voluntary for the pursuit of additional purposes, and the failure to provide your consent in relation to them will have no consequences. 

It is always possible to object to the communications regarding events, surveys, newsletters and other informative or commercial content, by sending a request to the contact details available in the section “Data subjects’ rights” of this privacy notice.

Your personal data may be made available to:

1. To subjects which shall receive such data on the basis of the regulation in force
2. to employees and contractors of other companies or other subjects which carry out outsourcing activities on behalf of the Controller (ex. management of the Gridspertise’s account on digital channels such as LinkedIn, etc.), in their capacity as data Processors.

Your personal data will be processed and stored within the European Union. The same data may be processed in countries outside the European Union, provided that an adequate level of protection is guaranteed, recognized by a specific adequacy decision of the European Commission.

Any transfers of Personal Data to non-EU countries, in the absence of a European Commission adequacy decision, will only be possible if data Controllers and data Processors involved provide adequate guarantees of contractual nature, including Binding Corporate Rules and Standard Contractual Clauses.

The transfer of your personal data to third countries outside the European Union, in the absence of an adequacy decision or other appropriate measures as described above, will be made only if you have explicitly consented to it or in the cases provided for by the applicable data protection law and will be processed in your interest. In these cases, we inform you that, although Gridspertise adopts measures common to all the countries in which it operates, the transfer of your personal data may be exposed to risks related to the peculiarities of local legislation regarding the processing of personal data.

The personal data processed for the above-mentioned purposes will be retained in compliance with the principles of proportionality and necessity and deleted or anonymized after the retention period. For example, if you contact us through digital channels such as LinkedIn for business purposes, we will process your data throughout the business relationship with your company, or until your specific request has been processed.

In case for any processing Gridspertise requires your specific consent, the related data will be stored until the fulfillment of the purposes of processing, or the until the withdrawal of the consent.

Pursuant to the data protection law, you have the following rights on your personal data:

1. to request access and a copy of your data
2. to request rectification
3. to request erasure
4. to obtain restriction of processing
5. to object to the processing
6. to receive the personal data in a structured, commonly used, and machine-readable format

Some rights may not apply in relation to the specific processing. In any case, you have the right, at any time, to object to the processing of your personal data for the purpose of pursuing Gridspertise’s legitimate interests. In this case, the processing will be stopped, except where Gridspertise’s legitimate interests prevail on the interests of the data subject.

To exercise your rights, or withdraw any consent given for the processing of personal data, you can write an e-mail to dpo@gridspertise.com specifying in the subject of the request “Gridspertise – Data subject’s rights”.

Right to lodge a complaint

It is your right to submit a complaint to the competent data protection Authority, which in Italy is the Garante per la Protezione dei Dati Personali. For more information you can visit the Authority’s website at the following address: https://www.garanteprivacy.it/