Privacy Policy
Privacy & data protection
How we handle personal data depends on how you interact with Gridspertise.
Find the privacy information relevant to you!
This website collects the navigation data and the data provided directly by the users.
The controller of the personal data collected through the www.gridspertise.com website (“Website”) is Gridspertise S.r.l., with its registered office in via Ombrone 2, 00198 Rome, Italy VAT no. 15844561009, tax no. 16073691004 (“Gridspertise”).
Gridspertise has appointed a Data Protection Officer (DPO) who can be contacted at the following e-mail address: dpo@gridspertise.com
Gridspertise will process the personal data provided or legitimately collected through the website, including the following categories of data:
Browsing data: during the course of their normal functioning, the IT and telecommunications systems, as well as the software processes that ensure the proper functioning of the website, collect certain data: the access date and time, the pages visited, the selected language, the IP address used to access the Internet, etc. The transmission of such data is implicit in the use of web communication protocols or is useful for the improved management and optimization of the data and the website.
Identification and contact details: first name, last name, e-mail address, telephone number, the content of the message sent by the user and any other personal data you may have provided during your communications with Gridspertise. We may ask the job position of the reference contact of the company interested in the Gridspertise’s business to best address the requests on the basis of the company’s organization.
The following table lists the purposes for which the personal data will be collected and processed by Gridspertise, as well as the legal basis of processing. Information about cookies is available in the section containing our cookie policy.
Performance of a contract has the purposes to:
- Allow the use of all the features of the website and check its correctfunctioning
- Reply to questions or process users’ requests, for example those submitted compiling the forms available on the website
Consent has the purposes to:
- Send newsletter containing industry news regarding the sector in which Gridspertise operates
- Perform market researches and send commercial communications of Gridspertise’s products and services, also trough automatic means (ex. e-mails)
Legitimate interests have the purposes to:
- Conduct surveys concerning Gridspertise’s business
- Send invitations to events, projects or initiatives organized or participated by Gridspertise
- To ascertain responsibility in the event of computer crimes detrimental to the website; detection, prevention, mitigation, or verification of fraudulent or illegal activities in connection with the services provided by the website
The provision of personal data is necessary in all cases where the processing is carried out on the basis of a legal obligation, in order to perform a contract or the execution of pre-contractual measures adopted at request. The refusal to provide personal data may make it impossible for Gridspertise to process the request.
The provision of personal data is voluntary for the pursuit of additional purposes, and the failure to provide your consent in relation to them will have no consequences (ex. on the business relationship with the client).
It is always possible to object to the communications regarding events, surveys, newsletters and other informative or commercial content, by sending a request to the contact details available in the section “Data subjects’ rights” of this privacy notice.
Your personal data may be made available to:
- To subjects which shall receive such data on the basis of the regulation in force;
- to employees and contractors of other companies or other subjects which carry out outsourcing activities on behalf of Gridspertise (ex. management of the website, processing of the data collected through the website, etc.), in their capacity as data Processors
Your personal data will be processed and stored within the European Union. The same data may be processed in countries outside the European Union, provided that an adequate level of protection is guaranteed, recognized by a specific adequacy decision of the European Commission.
Any transfers of Personal Data to non-EU countries, in the absence of a European Commission adequacy decision, will only be possible if data Controllers and data Processors involved provide adequate guarantees of contractual nature, including Binding Corporate Rules and Standard Contractual Clauses.
The transfer of your personal data to third countries outside the European Union, in the absence of an adequacy decision or other appropriate measures as described above, will be made only if you have explicitly consented to it or in the cases provided for by the applicable data protection law and will be processed in your interest. In these cases, we inform you that, although Gridspertise adopts measures common to all the countries in which it operates, the transfer of your personal data may be exposed to risks related to the peculiarities of local legislation regarding the processing of personal data.
The personal data processed for the above-mentioned purposes will be retained in compliance with the principles of proportionality and necessity and deleted or anonymized after the retention period. For example, the navigation data such as the IP address will be processed for the duration of your navigation session and can be retained for few days in order to ascertain any liability in case of unlawful use of the website. For more information about cookies, you can consult our cookie policy.
In case your consent is required for any processing, the related data will be stored until the fulfillment of the purposes of processing, or until the withdrawal of the consent.
Pursuant to the data protection law, you have the following rights on your personal data:
- to request access and a copy of your data
- to request rectification
- to request erasure
- to obtain restriction of processing
- to object to the processing
- to receive the personal data in a structured, commonly used, and machine-readable format
Some rights may not apply in relation to the specific processing. In any case, you have the right, at any time, to object to the processing of your personal data for the purpose of pursuing Gridspertise’s legitimate interests. In this case, the processing will be stopped, except where Gridspertise’s legitimate interests prevail on the interests of the data subject.
To exercise your rights, or withdraw any consent given for the processing of personal data, you can write an e-mail to dpo@gridspertise.com specifying in the subject of the request “Gridspertise – Data subject’s rights”.
Right to lodge a complaint
It is your right to submit a complaint to the competent data protection Authority, which in Italy is the Garante per la Protezione dei Dati Personali. For more information you can visit the Authority’s website at the following address: https://www.garanteprivacy.it/
Gridspertise operates in a “Business to Business” context and doesn’t directly process data of final customers. We protect the privacy of the persons who represent our business clients, and those of their employees and collaborators with whom we come into contact. Likewise, we protect as Data Processors the data which our DSO clients entrust us in the context of the services provides. For more information on the last point, don’t hesitate to contact us.
The controller of the personal data is Gridspertise S.r.l., with its registered office in via Ombrone 2, 00198 Rome, Italy VAT no. 15844561009, tax no. 16073691004 (“Gridspertise”).
Gridspertise has appointed a Data Protection Officer (DPO) who can be contacted at the following e-mail address: dpo@gridspertise.com
Gridspertise will process the personal data required for the standard management of business-to-business (“B2B”) relations and in particular those necessary for the conclusion and management of contracts and commercial communications, such as the identification and contact data of legal representatives, employees and internal contacts, which are communicated by the individuals involved or by the company with whom the relevant contract is concluded or the business exchange carried out.
The provision of personal data is required for the conclusion and execution of the contract; therefore, the refusal of such data may cause the impossibility for Gridspertise to enter into the contract or to do business with the reference company.
The following table lists the purposes for which the personal data will be collected and processed by Gridspertise, as well as the legal basis of processing:
Performance of a contract has the purpose to:
- Enter into the contract and manage the contractual relationship with the reference company
Legal obligation has the purpose to:
- Fulfill legal obligations, for example those deriving from the accounting and tax regulation
Legitimate interests have the purposes to:
- In the context of the contractual relationship with the company, perform market researches and send commercial communications of Gridspertise’s products and services, also trough automatic means (ex. e-mails), to the reference persons of the company already in contact with Gridspertise’s personnel
- Send newsletters to the reference persons of the company already in contact with Gridspertise’s personnel, containing industry news of the sector in which Gridspertise operates
- Conduct surveys of customer satisfaction or concerning Gridspertise’s business
- Send invitations to events, projects or initiatives organized or participated by Gridspertise
The provision of personal data is necessary in all cases where the processing is carried out on the basis of a legal obligation, in order to perform a contract or the execution of pre-contractual measures adopted at request. The refusal to provide personal data may make it impossible for Gridspertise to process the request or enter into the contract.
The provision of personal data is voluntary for the pursuit of additional purposes, and the failure to provide your consent in relation to them will have no consequences on the conclusion of the contract.
Your personal data may be made available to:
- To subjects which shall receive such data on the basis of the fiscal and accounting regulation in force;
- To employees and contractors of other companies or other subjects which carry out outsourcing activities on behalf of Gridspertise (ex. management of IT systems), in their capacity as data Processors.
Your personal data will be processed and stored within the European Union. The same data may be processed in countries outside the European Union, provided that an adequate level of protection is guaranteed, recognized by a specific adequacy decision of the European Commission.
Any transfers of Personal Data to non-EU countries, in the absence of a European Commission adequacy decision, will only be possible if data Controllers and data Processors involved provide adequate guarantees of contractual nature, including Binding Corporate Rules and Standard Contractual Clauses.
The transfer of your personal data to third countries outside the European Union, in the absence of an adequacy decision or other appropriate measures as described above, will be made only if you have explicitly consented to it or in the cases provided for by the applicable data protection law and will be processed in your interest. In these cases, we inform you that, although Gridspertise adopts measures common to all the countries in which it operates, the transfer of your personal data may be exposed to risks related to the peculiarities of local legislation regarding the processing of personal data.
The personal data processed for the above-mentioned purposes will be retained in compliance with the principles of proportionality and necessity and, in any case, not more than 10 years after the end of the contractual relationship, notwithstanding any further processing necessary to defend Gridspertise’s rights and legitimate interests.
In case your consent is required for any processing, the related data will be stored until the fulfillment of the purposes of processing, or until the withdrawal of the consent.
Pursuant to the data protection law, you have the following rights on your personal data:
- to request access and a copy of your data
- to request rectification
- to request erasure
- to obtain restriction of processing
- to object to the processing
- to receive the personal data in a structured, commonly used, and machine-readable format
Some rights may not apply in relation to the specific processing. In any case, you have the right, at any time, to object to the processing of your personal data for the purpose of pursuing Gridspertise’s legitimate interests. In this case, the processing will be stopped, except where Gridspertise’s legitimate interests prevail on the interests of the data subject.
To exercise your rights, or withdraw any consent given for the processing of personal data, you can write an e-mail to dpo@gridspertise.com specifying in the subject of the request “Gridspertise – Data subject’s rights”.
Right to lodge a complaint
It is your right to submit a complaint to the competent data protection Authority, which in Italy is the Garante per la Protezione dei Dati Personali. For more information you can visit the Authority’s website at the following address: https://www.garanteprivacy.it/
Gridspertise is present on the web trough different digital channels, where users’ data may be collected and processed.
The controller of the personal data is Gridspertise S.r.l., with its registered office in via Ombrone 2, 00198 Rome, Italy VAT no. 15844561009, tax no. 16073691004 (“Gridspertise”).
Gridspertise has appointed a Data Protection Officer (DPO) who can be contacted at the following e-mail address: dpo@gridspertise.com.
Gridspertise will process personal data that you have provided or that we have legitimately collected through the digital channels and platforms (ex. LinkedIn) in compliance with their privacy policies.
Contact data: first name, last name, e-mail address, telephone number, the content of the message sent by the user and any other personal data you may have provided during your communications with Gridspertise.
Other: we may ask the job position in order to best address the request on the basis of the company’s organization, or to process your application for a job position in Gridspertise. Other data can be collected depending on the specific digital channels, such as the data made available by the third-party platforms in compliance with their privacy policy.
The contact data are necessary to answer the users’ requests and communicate with them. The provision of any further personal data should be considered optional.
The following table lists the purposes for which the personal data will be collected and processed by Gridspertise, as well as the legal basis of processing:
Performance of a contract has the purpose to:
- Reply to questions or process requests submitted by the users
Consent has the purpose to:
- Perform market researches and submit commercial communications of Gridspertise’s products and services, also trough automatic means (ex. e-mails)
Legitimate interests have the purposes to:
- Send newsletter containing industry news of the sector in which Gridspertise operates
- Conduct surveys concerning Gridspertise’s business
- Send invitations to events, projects or initiatives organized or participated by Gridspertise
The provision of personal data is necessary in all cases where the processing is carried out on the basis of a legal obligation, in order to perform a contract or the execution of pre-contractual measures adopted at request. The refusal to provide personal data may make it impossible for Gridspertise to process the request.
The provision of personal data is voluntary for the pursuit of additional purposes, and the failure to provide your consent in relation to them will have no consequences.
It is always possible to object to the communications regarding events, surveys, newsletters and other informative or commercial content, by sending a request to the contact details available in the section “Data subjects’ rights” of this privacy notice.
Your personal data may be made available to:
- To subjects which shall receive such data on the basis of the regulation in force
- to employees and contractors of other companies or other subjects which carry out outsourcing activities on behalf of the Controller (ex. management of the Gridspertise’s account on digital channels such as LinkedIn, etc.), in their capacity as data Processors.
Your personal data will be processed and stored within the European Union. The same data may be processed in countries outside the European Union, provided that an adequate level of protection is guaranteed, recognized by a specific adequacy decision of the European Commission.
Any transfers of Personal Data to non-EU countries, in the absence of a European Commission adequacy decision, will only be possible if data Controllers and data Processors involved provide adequate guarantees of contractual nature, including Binding Corporate Rules and Standard Contractual Clauses.
The transfer of your personal data to third countries outside the European Union, in the absence of an adequacy decision or other appropriate measures as described above, will be made only if you have explicitly consented to it or in the cases provided for by the applicable data protection law and will be processed in your interest. In these cases, we inform you that, although Gridspertise adopts measures common to all the countries in which it operates, the transfer of your personal data may be exposed to risks related to the peculiarities of local legislation regarding the processing of personal data.
The personal data processed for the above-mentioned purposes will be retained in compliance with the principles of proportionality and necessity and deleted or anonymized after the retention period. For example, if you contact us through digital channels such as LinkedIn for business purposes, we will process your data throughout the business relationship with your company, or until your specific request has been processed.
In case for any processing Gridspertise requires your specific consent, the related data will be stored until the fulfillment of the purposes of processing, or the until the withdrawal of the consent.
Pursuant to the data protection law, you have the following rights on your personal data:
- to request access and a copy of your data
- to request rectification
- to request erasure
- to obtain restriction of processing
- to object to the processing
- to receive the personal data in a structured, commonly used, and machine-readable format
Some rights may not apply in relation to the specific processing. In any case, you have the right, at any time, to object to the processing of your personal data for the purpose of pursuing Gridspertise’s legitimate interests. In this case, the processing will be stopped, except where Gridspertise’s legitimate interests prevail on the interests of the data subject.
To exercise your rights, or withdraw any consent given for the processing of personal data, you can write an e-mail to dpo@gridspertise.com specifying in the subject of the request “Gridspertise – Data subject’s rights”.
Right to lodge a complaint
It is your right to submit a complaint to the competent data protection Authority, which in Italy is the Garante per la Protezione dei Dati Personali. For more information you can visit the Authority’s website at the following address: https://www.garanteprivacy.it/
Gridspertise organizes or participates to events where contact data of the participants are processed for Business purposes.
The controller of the personal data is Gridspertise S.r.l., with its registered office in via Ombrone 2, 00198 Rome, Italy VAT no. 15844561009, tax no. 16073691004 (“Gridspertise”).
Gridspertise has appointed a Data Protection Officer (DPO) who can be contacted at the following e-mail address: dpo@gridspertise.com
Gridspertise will process personal data provided or legitimately collected from the organizers of the event, internal or external to Gridspertise’s organization.
Depending on the event, the following categories of data may be collected:
- Contact data: first name, last name, e-mail address, telephone number.- Business data
- Business data: the company you work for, job title, professional qualifications.- Photos, recordings
- Photos, recordings: in case the event is documented, your images and voice may be included in photos, videos and audio recordings (ex. interview).
Other data can be collected depending on the specific event organized, including the data made available by the organizers of the event in compliance with their privacy policy.
Your contact data and business data are necessary for the participation to the event. Your refusal to provide such data may impede your participation to the event or to some activities organized within the event.
The provision of personal data is voluntary for the pursuit of additional purposes, and the failure to provide your consent in relation to them will have no consequences on the participation to the event. It is always possible to opt-out from commercial communications and similar based on the legitimate interest of Gridspertise. The mandatory or optional nature of the provision of data will be specified at the time of collection.
The following table lists the purposes for which the personal data will be collected and processed by Gridspertise, as well as the legal basis of processing:
Performance of a contract has the purpose to:
- Execute the organizational activities related to the event, such as send invitations, make reservations and arrange transportation, compile the participants’ lists and other meeting documents, and to correspond with the participants
Consent and Legitimate interests have the purpose to:
- Perform market researches and send commercial communications of Gridspertise’s products and services, also trough automatic means (ex. e-mails), to the reference persons of the company interested in Gridspertise’s business, whose data are exchanged with Gridspertise’s personnel in the context of the event (ex. exchange of business cards)
Legitimate interests have the purposes to:
- Send newsletters containing industry news of the sector in which Gridspertise operates, to the reference persons of the company interested in Gridspertise’s business, whose data are exchanged with Gridspertise’s personnel in the context of the event (ex. exchange of business cards)
- Conduct surveys concerning Gridspertise’s business
- Send invitations to other events, projects or initiatives organized or participated by Gridspertise
The provision of personal data is necessary in all cases where the processing is carried out in order to perform a contract or the execution of pre-contractual measures adopted at request. The refusal to provide personal data may make it impossible for Gridspertise to process the request or enter into the contract.
The provision of personal data is voluntary for the pursuit of additional purposes, and the failure to provide your consent in relation to them will have no consequences (ex. on the conclusion of the contract or on the fulfillment of the request).
It is always possible to object to the communications regarding events, surveys, newsletters and other informative or commercial content, by sending a request to the contact details available in the section “Data subjects’ rights” of this privacy notice.
Your personal data may be made available to:
- To subjects which shall receive such data on the basis of the regulation in force
- to employees and contractors of other companies or other subjects which carry out outsourcing activities on behalf of Gridspertise (ex. carry out the activities related to the organization of the event, etc.), in their capacity as data Processors.
Your personal data will be processed and stored within the European Union. The same data may be processed in countries outside the European Union, provided that an adequate level of protection is guaranteed, recognized by a specific adequacy decision of the European Commission.
Any transfers of Personal Data to non-EU countries, in the absence of a European Commission adequacy decision, will only be possible if data Controllers and data Processors involved provide adequate guarantees of contractual nature, including Binding Corporate Rules and Standard Contractual Clauses.
The transfer of your personal data to third countries outside the European Union, in the absence of an adequacy decision or other appropriate measures as described above, will be made only if you have explicitly consented to it or in the cases provided for by the applicable data protection law and will be processed in your interest. In these cases, we inform you that, although Gridspertise adopts measures common to all the countries in which it operates, the transfer of your personal data may be exposed to risks related to the peculiarities of local legislation regarding the processing of personal data.
The personal data processed for the above-mentioned purposes will be retained in compliance with the principles of proportionality and necessity and deleted or anonymized after the retention period. For example, the data necessary to organize the event can be stored until the finish of the event and the contact data can be kept to send you invitations to similar event unless you opt-out.
In case your consent is required for any processing, the related data will be stored until the fulfillment of the purposes of processing, or until the withdrawal of the consent.
Pursuant to the data protection law, you have the following rights on your personal data:
- to request access and a copy of your data
- to request rectification
- to request erasure
- to obtain restriction of processing
- to object to the processing
- to receive the personal data in a structured, commonly used, and machine-readable format
Some rights may not apply in relation to the specific processing. In any case, you have the right, at any time, to object to the processing of your personal data for the purpose of pursuing Gridspertise’s legitimate interests. In this case, the processing will be stopped, except where Gridspertise’s legitimate interests prevail on the interests of the data subject.
To exercise your rights, or withdraw any consent given for the processing of personal data, you can write an e-mail to dpo@gridspertise.com specifying in the subject of the request “Gridspertise – Data subject’s rights”.
Right to lodge a complaint
It is your right to submit a complaint to the competent data protection Authority, which in Italy is the Garante per la Protezione dei Dati Personali. For more information you can visit the Authority’s website at the following address: https://www.garanteprivacy.it/