Privacy Policy

This document (“Privacy Notice”) is provided pursuant to Regulation (EU) 2016/679 (the “GDPR”) and the applicable data protection legislation. FastWay S.p.A. S.B. hereby informs the users (“Data Subjects”) of this website (the “Website”) about the purposes and methods of the processing of their personal data (“Personal Data”) collected through the various functionalities of the Website.

👤 Data Controller

FastWay S.p.A. S.B., with its registered office at Via Enrico Forlanini no. 23, Milan (MI), VAT no. 12511460961, is the Data Controller (“FastWay” or the “Controller”).

FastWay can be contacted at the following email address: info@fastway.energy.

🔐 Data Protection Officer (“DPO” or “RPD” — Responsabile della Protezione dei Dati”)

FastWay has appointed a Data Protection Officer (DPO), who can be contacted at the following email address: privacy@fastway.energy.

🎯 Purpose and Legal Basis of the Processing

Personal Data are processed for the following purposes:

Browsing the Website: the processing of Personal Data is necessary to enable the Data Subject to properly navigate the Website. The legal basis for such processing is the legitimate interest, pursuant to Article 6(1)(f) of the GDPR.

Proper handling of Data Subject requests: the processing of Personal Data is necessary in order to respond to requests submitted by the Data Subject through the contact channels made available by the Controller in the dedicated “Contacts” section. The legal bases for such processing are, depending on the specific case, the Data Subject’s consent pursuant to Article 6(1)(a) of the GDPR and/or the performance of a contract or pre-contractual measures pursuant to Article 6(1)(b) of the GDPR.

Protection of rights and legal obligations: Personal Data may be processed, where necessary, to allow the Controller to establish, exercise or defend its rights in judicial or extrajudicial proceedings, as well as to comply with legal obligations or requests from competent authorities. The legal bases for such processing are, respectively, compliance with a legal obligation to which the Controller is subject, pursuant to Article 6(1)(c) of the GDPR, and, where applicable, the legitimate interest pursuant to Article 6(1)(f) of the GDPR.

📁 Types of Personal Data Processed

The Personal Data processed are as follows:

Browsing data: IP address, data related to the browser and operating system used.

Identification data: such as first name, last name, professional information (e.g., CV), as well as any additional information voluntarily shared by the Data Subject through the relevant sections of the Website;

Contact data: phone number, email address;

👥 Categories of Data Subjects

The processing activities concern the following categories of Data Subjects: Data Subjects who browse the Website and/or submit requests through the dedicated sections made available on the Website.

⚙️ Processing Methods and Retention Period

Data processing will be carried out by electronic means, adopting appropriate technical and organizational security measures to ensure data protection and to prevent unauthorized access.

Without prejudice to legal obligations, the processing will be carried out in compliance with applicable regulations and, in any case, depending on the specific circumstances, for no longer than:

the duration of the browsing session on the Website, for technical/statistical purposes;

the withdrawal of consent by the Data Subject;

the time necessary to properly handle the request submitted by the Data Subject;

the time necessary to ensure the proper fulfillment of pre-contractual and contractual obligations.

🗣️ Recipients of the Processing

Personal Data may be shared with the following categories of recipients:

a) personnel of the Data Controller who are authorized and properly trained, including with regard to security measures and confidentiality obligations;

b) external consultants engaged by the Data Controller for the performance of services offered on the Website, such as IT, legal, tax consultants, etc.;

c) IT service providers (e.g., hosting services) engaged by the Data Controller in various capacities and duly appointed as data processors;

d) competent authorities or other entities as required by law.

🌍 Transfer of Personal Data outside the EU

Personal Data will not be transferred to third countries or to international organizations.

📝 Data Subject Rights

In relation to the processing activities described in this Privacy Notice, the Data Subject may exercise the rights established under Articles 15 to 22 of the GDPR, and in particular the following rights:

Right of access (Article 15 GDPR): the right to obtain confirmation as to whether or not Personal Data concerning the Data Subject are being processed, and, if so, to gain access to such Personal Data.

Right to rectification (Article 16 GDPR): the right to obtain without undue delay the rectification of inaccurate Personal Data concerning the Data Subject and/or the completion of incomplete data.

Right to erasure (right to be forgotten) (Article 17 GDPR): the right to obtain the erasure of Personal Data concerning the Data Subject, unless the processing is necessary to comply with a legal obligation.

Right to restriction of processing (Article 18 GDPR): the right to obtain restriction of processing in the event of inaccurate data or for other legitimate reasons.

Right to data portability (Article 20 GDPR): the right to receive the Personal Data in a structured, commonly used and machine-readable format.

Right to object (Article 21 GDPR): the right to object at any time to the processing of Personal Data for legitimate reasons.

Diritto a non essere sottoposto a decisioni automatizzate (art. 22 GDPR), inclusa la profilazione.

Diritto di proporre reclamo all’Autorità Garante per la Protezione dei Dati Personali (www.garanteprivacy.it).

To exercise these rights, you may contact FastWay at the following address: info@fastway.energy