In accordance with Regulation (EU) 2016/679 (“GDPR”), and other applicable laws, statutes, rules, and regulations governing the processing of personal data, Eni S.p.A. (“Company” or the “Owner”) is providing the following information regarding the processing of personal data to inform users ("User" or "Users") of the eni.com website ("Website") of its policy regarding the protection of personal data and how the personal information of Users is collected and managed during navigation on the Website and for the use of its services.
These activities may concern the products and services of the Owner, as well as of companies controlled by Eni S.p.A. or their business partners and may also be carried out through an automated call system, without the intervention of an operator, including electronic mail, and SMS (Short Message Service) messages.
Consent to the processing of data and communication on the below-mentioned topics for the aforesaid purposes is optional and may be revoked at any time through the Contacts section
In addition, the User's personal data will be processed whenever necessary for the purpose of ascertaining, exercising or defending a right in court of the Owner or of other companies falling within the sphere of control of Eni S.p.A.
The Owner may process, without the User's consent, the personal data collected in the following cases:
For the pursuit of the purposes indicated in point 3, the Owner may communicate the personal data of the User to third parties, such as, for example, those pertaining to the following topics or categories of topics:
The Owner guarantees the utmost care to ensure that the communication of the User’s personal data to the aforementioned recipients only concerns the data necessary to achieve the specific purposes for which they are intended.
The User's personal data is stored in the Owner’s databases and will be processed exclusively by authorised personnel. The latter will be provided with specific instructions on the methods and purposes of the processing. Furthermore, these data will not be disclosed to third parties, except as provided above and, in any case, within the limits indicated therein.
Finally, we remind you that the User’s personal data will not be disseminated, except in the cases described above and/or required by law.
Within the contractual relationships between Eni S.p.A. and its subsidiaries, as well as among the subsidiaries themselves, for some of the purposes set out in point 3, the personal data of the User may be transferred outside the EU, including through inclusion in shared databases and managed by third parties belonging or not to Eni SpA’s sphere of control. The management of the database and the processing of such data are bound to the purposes for which they were collected and are carried out in full compliance with the privacy and security standards set out in the applicable personal data protection laws.
Whenever the User's personal data are to be transferred internationally outside the territory of the EU, the Owner will take all appropriate contractual measures necessary to guarantee an adequate level of personal data protection in accordance with that stated within the present information document on the processing of personal data, including, among others, the Standard Contractual Clauses approved by the European Commission.
The data will be stored for a period of time not exceeding that necessary for the purposes for which they were collected or subsequently processed in accordance with the provisions of the legal obligations.
As an interested party, the User is granted the following rights to the personal data collected and processed by the Owner for the purposes indicated in point 3: (i) the right of access, in particular requesting, at any time, confirmation of the existence of personal data of the User in the Company’s archives and the provision of such information in a clear and intelligible way, as well as the right to know the origin, logic and purpose of the processing with express and specific indication of the persons in charge and responsible for the processing and third parties to whom the User’s personal data may be disclosed; (ii) the right to obtain, update and rectify data (except for evaluation data), deletion of superfluous data or transformation into an unrecognisable form, as well as the obstruction of processing and definitive cancellation in case of unlawful processing; and (iii) if these prerequisites are not satisfied, the restriction of the processing and the portability of data. The law also recognises the right of the interested parties to make a complaint to the Guarantor for the protection of the personal data, should the User discern a violation of their rights in accordance with applicable legislation regarding the protection of personal data.