PRIVACY NOTICE REGARDING THE PROCESSING OF PERSONAL DATA

Fondazione Edison (hereinafter referred to as "Fondazione Edison"), informs you that, in accordance with Articles 13 and 14 of the European Regulation on Data Protection, n. 2016/679 ("Regulation" or "GDPR" General Data Protection Regulation), and Article 13 of Italian Legislative Decree 196/03 ("Privacy Code"), the personal data provided by the individuals mentioned below in this text, regarding the purposes of Processing under point 4 below, will be processed in compliance with the provisions set forth in the Regulation.

1. Source of data

The personal data subject to processing are directly collected from data subjects, from the reserved area of the Fondazione Edison's website, or from external entities or public institutions.

2. Recipients

This privacy notice applies to:
All natural persons registered to the mailing list of Fondazione Edison. In the following part of the privacy notice, the above-mentioned natural persons are referred to as "data subjects" of the processing of personal data.

3. Categories of data processed

The data processed are personal data (personal and contact data, address, companies to which data subjects belong, professional qualification).

4. Purpose, legal basis of the processing and data retention period

The personal data collected will be processed to allow Fondazione Edison to perform its institutional activities:

1. Purposes of processing, whose legal basis rests on the Data Controller's legitimate interest
- To organize events, conferences, seminars.
- To send papers, publications and newsletters.

For the above-mentioned purposes, each category of processing will be subject to a specific data retention period of 10 years from the date of the acquisition or update of said data.

5. Processing methods

With regard to the purposes described above, data will be either digitized (IT and telecommunications tools) or processed on hard copy; in any case, adequate tools will be used to guarantee the security, confidentiality, integrity, and availability of the data according to the requirements under the Regulation.

6. Categories of data recipients

Personal data of the data subjects will only be disclosed to individuals who have been authorized and duly instructed by the Data Controller or Data Processors. Furthermore, the following third parties may receive personal data: service providers, volunteers, consultants, and employees of other Edison Group companies who perform activities on behalf of Fondazione Edison.

7. Dissemination of data

The personal data of the data subjects will under no circumstances be disseminated without their consent, except as provided for under national law.

8. Data Controller and Data Processors

The Data Controller, namely the subject determining the purposes of processing, is Fondazione Edison, whose legal headquarters are at Foro Buonaparte 31, 20121 Milan.
The Data Processor, namely the subject processing data on behalf of the Data Controller, are Edison Group companies as well as service providers who have been appointed by the Data Controller pursuant to Regulation 2016/679.

9. Data Protection Officer

The Data Protection Officer, who shall ensure the rights of data subjects pursuant to the Regulation, has been chosen as a common reference point for all companies managed, coordinated, or controlled by Edison Spa or by other companies within its corporate scope, and who avail themselves of service agreements with Edison Spa or with other Group companies regarding Human Resources activities. The contact details of the DPO can be found below in this privacy notice (article 10).

10. Exercise of rights

Pursuant to Regulation 2016/679, the data subject shall be granted at any moment full access to their personal data, shall receive confirmation of their existence, have full knowledge of their content, origin, location, and shall be able to request a copy.
Furthermore, the data subject shall have the right to verify their accuracy or to have incomplete personal data completed, updated, or rectified; to the restriction, erasure, transformation into anonymous form of processed data, as well as to the erasure if personal data have unlawfully been processed or to object to their processing. The data subject shall also have the right to data portability and to lodge a complaint with a supervisory authority.

The data subject can exercise their rights by contacting the Data Protection Officer (DPO) at:
Ordinary e-mail
Certified e-mail
Fax 0262229105
Ordinary post DPO c/o Edison S.p.A., Foro Buonaparte 31 -20121- Milano