Privacy Policy
How Banco Energia processes the personal data collected through the website.
Convenience translation produced with artificial intelligence. Only the Italian version of this document is valid: in case of any discrepancy, the Italian text prevails. Read the Italian version
Notice on the processing of personal data
This notice concerns exclusively browsing of the public area of the website www.bancoenergia.it and the data collected through the contact form and the other contact details published on the website. Processing carried out within the Customer reserved area (see section 3), as well as processing relating to job applications, is governed by dedicated notices. The use of cookies and similar technologies is described in the Cookie Policy.
1. Controller
The controller is Banco Energia S.p.A. (“Banco Energia”), VAT No. 04319830271, with registered office at Sestiere Santa Croce 466/B, 30135 Venezia (VE), Italy.
For information on the processing of personal data or to exercise rights, it is possible to write to [email protected] or to contact Banco Energia at its registered office.
2. Personal data processed
While browsing and interacting with the website, Banco Energia may process the following categories of personal data:
- browsing data and technical logs, such as IP address, date and time of the request, URL or resource requested, method used, server response code, browser, operating system, device and other technical parameters;
- data provided through the contact form, such as first name, last name, e-mail address, telephone number where optionally provided, type and power of the plant and content of the request;
- data necessary to assess the plant and to prepare any proposal, including, where relevant, the role of the contact person, information on the company or the plant and tax or administrative data referable to natural persons;
- data contained in communications sent spontaneously to the e-mail addresses or other contact details published on the website;
- preferences relating to cookies and to any tracking tools, as set out in the Cookie Policy.
Banco Energia invites users not to transmit through the website special categories of personal data within the meaning of Art. 9 GDPR or data relating to criminal convictions and offences within the meaning of Art. 10 GDPR, unless this is strictly necessary and agreed in advance.
3. Methods of collection
Data may be collected directly from the data subject, for example by filling in a form or sending a communication, or automatically during browsing through the computer systems and Internet communication protocols.
The public website does not require the creation of a personal account for simple browsing. The Customer reserved area, accessible via the “Reserved area” button, is a separate service provided through the platform of Plank Italy S.p.a. società benefit: the data processed within it are governed by the notices provided to customers and, for the technical processing that Plank carries out as an independent controller, by Plank’s notice dedicated to the platform.
4. Purposes and legal bases
| Purpose | Legal basis |
|---|---|
| Enabling browsing, the proper functioning of the website and the provision of the technical features requested by the user. | Art. 6(1)(f) GDPR: Banco Energia’s legitimate interest in making its website available and secure; where relevant, Art. 6(1)(b) GDPR for activities requested by the user. |
| Managing requests for information, plant assessments, quotes and other contacts sent via the form, e-mail or other channels. | Art. 6(1)(b) GDPR when the processing is necessary for pre-contractual measures requested by the data subject; Art. 6(1)(f) GDPR for the management of B2B relationships with contact persons of legal entities. |
| Managing the administrative or operational activities necessary for the possible establishment of a contractual relationship. | Art. 6(1)(b) GDPR, where applicable; Art. 6(1)(f) GDPR for contact persons of legal entities; Art. 6(1)(c) GDPR for legal obligations. |
| Ensuring the security of the website and systems, preventing abuse, fraud, unauthorised access and IT incidents, and protecting Banco Energia’s rights. | Art. 6(1)(f) GDPR: legitimate interest in the security of infrastructure, operational continuity and the protection of its own rights. |
| Complying with legal or regulatory obligations or with legitimate requests from the competent Authorities. | Art. 6(1)(c) GDPR. |
5. Provision of data
Providing the data indicated as necessary in the form is essential to enable Banco Energia to handle the user’s request. Failure to provide them may make it impossible to respond to the request, assess the plant, prepare an offer or start the requested pre-contractual activities.
Technical browsing data are generated automatically by the systems and are necessary for the functioning, security and proper delivery of the website.
6. Browsing data
During browsing, the computer systems and software procedures used to operate the website acquire certain data whose transmission is implicit in the use of Internet communication protocols. This information is not collected for the purpose of directly identifying the user but may, by its very nature and through associations with data held by third parties, allow the data subject to be identified.
Browsing data are used to enable the functioning of the website, obtain aggregate statistical information, check the proper functioning of the services, diagnose anomalies and protect the security of the systems. Only information that has been effectively rendered anonymous and can no longer be traced back to a natural person ceases to be personal data within the meaning of the GDPR.
7. Cookies and similar technologies
The website uses cookies and, where present, similar technologies. Technical cookies and strictly necessary tools may be used without consent to the extent permitted by applicable law. Any non-necessary cookies or tracking tools may be activated only after valid consent has been obtained, when required.
Detailed information on the categories of cookies used, the providers, the purposes, the durations and the methods for changing or withdrawing preferences is contained in the Cookie Policy, accessible from the website.
8. Recipients and disclosure of data
Personal data may be processed by employees and collaborators of Banco Energia who have been expressly authorised and instructed according to their respective duties.
To the extent necessary for the purposes indicated above, the data may also be disclosed to:
- providers of IT, hosting, cloud, security, website maintenance, e-mail, form management and technical support services, where actually used;
- consultants and professionals who assist Banco Energia in administrative, legal or technical management;
- group companies, when the disclosure is necessary to handle the request and in compliance with their respective privacy roles;
- Public authorities, judicial authorities or other parties to whom disclosure is required by law or by a legitimate order.
Parties that process personal data on behalf of Banco Energia are appointed as processors pursuant to Art. 28 GDPR when the relevant conditions are met. Other recipients may act as independent controllers. Personal data are not subject to indiscriminate dissemination or to sale to third parties.
9. Transfers to third countries
Where the use of technology providers or other parties involves a transfer of personal data outside the European Economic Area (EEA), Banco Energia applies the conditions laid down in Chapter V of the GDPR.
Depending on the recipient and the country concerned, the transfer may take place on the basis of an adequacy decision of the European Commission, including the EU-U.S. Data Privacy Framework for US recipients that are actually certified, or by means of Standard Contractual Clauses approved by the European Commission and, where necessary, supplementary measures.
Further information on the safeguards applied to a specific transfer may be requested from [email protected].
10. Data retention
| Category / purpose | Retention period or criterion |
|---|---|
| Contact, information or assessment requests that do not give rise to a contractual relationship | For the time necessary to handle the request and, subsequently, for a limited period proportionate to any follow-up, documentation and rights-protection needs, according to the retention criteria adopted by Banco Energia, save for legal obligations or disputes. |
| Data collected in the context of a negotiation that gives rise to a contractual relationship | For the duration of the pre-contractual activities and, if the relationship is established, according to the terms applicable to contractual, administrative and tax management and according to the relevant customer/contact person notice. |
| Browsing data and technical logs | For the time strictly necessary for functioning, security, event diagnosis and abuse prevention. Additional periods are permitted in the event of incidents, investigations, requests from the Authorities or needs for judicial protection. |
| Data processed for legal obligations or the protection of rights | For the period required by applicable law or necessary for the establishment, exercise or defence of a right, within the limits of the applicable limitation periods. |
At the end of the applicable periods, the data are deleted, anonymised or otherwise rendered no longer processable for incompatible purposes, unless their further retention is required by law.
11. Processing methods and security
Processing is carried out mainly using IT and telematic tools and, where necessary, also using paper-based tools, in a manner consistent with the purposes indicated in this notice.
Banco Energia adopts technical and organisational measures appropriate to the risk pursuant to Art. 32 GDPR, including, depending on the systems used, access and authorisation control measures, protection of communications, perimeter and endpoint security systems, backup, monitoring, vulnerability management and procedures for incident management and operational continuity.
12. Links to third-party websites and services
The website may contain links to third-party websites, social networks or services. This notice does not govern the processing carried out independently by such parties. The user is invited to consult their respective notices before providing personal data or using the related services.
13. Automated decision-making
For the processing described in this notice, Banco Energia does not take decisions based solely on automated processing that produce legal effects or similarly significantly affect the data subject within the meaning of Art. 22 GDPR.
14. Data subjects’ rights
In the cases and within the limits provided for by the GDPR, the data subject may exercise the rights referred to in Arts. 15-22 GDPR and, in particular:
- obtain access to their personal data and to information relating to the processing;
- obtain the rectification of inaccurate data and the completion of incomplete data;
- obtain the erasure of data in the cases provided for by Art. 17 GDPR;
- obtain the restriction of processing in the cases provided for by Art. 18 GDPR;
- receive the data in a structured, commonly used and machine-readable format and, where applicable, transmit them to another controller;
- object, on grounds relating to their particular situation, to processing based on Banco Energia’s legitimate interest, pursuant to Art. 21 GDPR.
Requests may be sent to [email protected] or by post to Banco Energia’s registered office.
Banco Energia responds without undue delay and, in any event, within one month of receipt of the request. Taking into account the complexity and number of the requests, this period may be extended by a further two months; in such case Banco Energia informs the data subject of the extension and of the reasons for it within one month of receipt of the request.
15. Right to lodge a complaint
A data subject who considers that the processing of their personal data infringes the GDPR has the right to lodge a complaint with a supervisory authority, without prejudice to any other administrative or judicial remedy. For Italy, the competent Authority is the Italian Data Protection Authority (Garante per la protezione dei dati personali).
16. Changes to this notice
Banco Energia may update this notice to reflect regulatory, organisational or technological changes or changes in processing methods. The version in force is published on the website and indicates the date of the last update. Previous versions may be retained for accountability purposes.
Last updated: September 2026