4.3. The grant of your Personal Data is necessary in all cases where processing is carried out on the basis of a legal obligation or to perform a contract of which you are a party or due to the implementation of pre-contractual measures taken at your request. Your possible refusal could entail for Enel Global Trading the impossibility to proceed with the purpose for which the Personal Data are collected.
4.4. The grant of your Personal Data is voluntary for the pursuit of additional purposes and the failure to provide your consent in relation to them will have no consequences on the conclusion of the contract. The mandatory or optional nature of the grant will be specified at the time of collection.
5. Recipients of Personal Data
5.1. Your Personal Data may be made accessible for the purposes mentioned above:
a) to the employees and collaborators of the Controller, appointed for this purpose, or to the companies of Enel Group present in the European Union for the performance of organizational, administrative, financial and accounting activities;
b) to third-party companies or other entities that carry out outsourced activities on behalf of the Controller to enable the Site to operate, as external data processors.
6. Transfer of Personal Data
6.1. Your Personal Data will be processed within the European Union and stored on servers located in Rome, within the European Union.
6.2. The same data may be processed in countries outside the European Union, provided that an adequate level of protection is guaranteed, recognized by a specific decision of adequacy of the European Commission.
6.3. Any transfers of Personal Data to non-EU countries, in the absence of a European Commission adequacy decision, will only be possible if Data Controllers and Data Processors involved provide adequate guarantees of contractual nature, including Binding Corporate Rules and Standard Contractual Clauses.
6.4. The transfer of your Personal Data to third countries outside the European Union, in the absence of an adequacy decision or other appropriate measures as described above, will be made only if you have explicitly consented or in the cases provided for by the GDPR and will be processed in his interest. In these cases, we inform you that, despite the Enel Group adopting operational instructions common to all the countries in which it operates, the transfer of your Personal Data could be exposed to risks related to the peculiarities of local laws regarding the processing of Personal Data.
7. Personal data retention period
7.1. The Personal Data processed for the purposes set out above will be kept in compliance with the principles of proportionality and necessity, and in any case until the purposes of the processing have been pursued.
7.2. Your Personal Data will normally be stored for as long as you do not revoke your consent and in any case they will be deleted automatically after twelve months.
8. Rights of concerned parties
8.1. Pursuant to articles 15 - 21 of EU Regulation 2016/679 (GDPR), in relation to the Personal Data communicated, you have the right to:
a) access and request a copy;
b) request the rectification;
c) request the deletion;
d) obtain the restriction of processing;
e) object to the processing;
f) receive data in a structured format, commonly used and readable by an automatic device and to transmit them to another data controller, where technically feasible, without any impediment.
8.2. We inform you that you have the right to object at any time to the processing of Personal Data concerning you on the basis of the legitimate interest of Enel Global Trading.
8.3. If you object to the processing of your Personal Data as indicated in the article 8.2, the Controller will refrain from further processing the Personal Data, unless he demonstrates the existence of binding legitimate reasons to proceed with processing, or for the assessment, exercise or the defence of a right in court.
8.4. To exercise your rights and to revoke your consent you can send a notice to the email address firstname.lastname@example.org.
8.5. For further information regarding your Personal Data, you may contact Enel Data Protection Officer, who can be reached at the following e-mail address: email@example.com, indicating in the subject "[Privacy]".
8.6. We remind you that it is your right to lodge a complaint before the competent authority for the protection of personal data.