PERSONAL DATA TRANSFER With the exception of the browsing data (which are necessary for the browsing of the website) and for the data related to purpose C) (which are necessary for the administrative and accounting activities), the users are free to decide whether to provide their personal data. Any failure to provide the data identified by the symbol * or the wording “required” shall entail the impossibility to obtain satisfaction of the user’s requests and enjoy the services offered on the website of the Data Controller RECIPIENTS OF THE DATA In order to fulfil the obligations of the contracts and its related purposes, your personal data will be processed by the following entities/persons, which are contractually bound to Enerion Renewables S.r.l.s.:

• Parties that provide services for managing the informatics system used by Enerion Renewables S.r.l.s. and the telecommunication networks; – companies, offices or independent contractors which/who provide Enerion Renewables S.r.l.s. with assistance and consulting services;
• The relevant authorities for compliance with legislative requirements and/or directives issued by public bodies, upon request.

Parties belonging to the abovementioned categories cover the function of Data Processor or operate independently as Data Controllers. The list of Data Processors is constantly updated and available at the offices of Enerion Renewables S.r.l.s., or by writing to admin@es.enerionrenewables.com. TRANSFER OF DATA TO A THIRD COUNTRY AND/OR INTERNATIONAL ORGANIZATION The Personal Data provided will not be transferred to countries outside the European Union. RIGHTS OF THE INTERESTED PARTY – COMPLAINT BEFORE THE DATA PROTECTION AUTHORITY You shall be able to exercise your rights under articles 15, 16, 17, 18, 19, 20, 21 and 22 of EU Regulation 2016/679 by sending an email to the Data Controller at the following address: admin@es.enerionrenewables.com or by calling the following phone number +39 347 044 9209. You shall have the right to obtain, at any moment, from the Data Controller, access to your personal data and their rectification or cancellation, as well as the restriction of their processing. Furthermore, you have the right to object at any time the processing of your data (including automated processing, such as, for instance, profiling) and to revoke the consent provided without prejudice for the legitimate processing of your data previously given. In case of a request for data portability, the Data Controller shall provide your personal data to you in a structured, commonly used and machine-readable format. Without prejudice for any other administrative and jurisdictional recourse, if you believe that the processing of your personal data violates the provisions of EU Reg. 2016/679, you have the right, pursuant to art. 15 letter f) of said EU Reg. 2016/679, to file a complaint before the Data Protection Authority. CHANGES TO THE PRIVACY INFORMATION SHEET The Data Controller reserves the right to change, update, implement or remove parts of the present Privacy Information Sheet at its sole discretion at any time. To facilitate such checking, the Privacy Information Sheet will contain its date of updating. Last update: August 2, 2018 The Data Controller Enerion Renewables S.r.l.s.