Privacy Policy

1. Who controls your data

The company identified above is the data controller for the processing described in this notice. Privacy requests can be sent to the privacy contact shown above. Data Protection Officer: [TO COMPLETE: add the DPO’s contact details if one is appointed; otherwise state that no DPO has been appointed].

This notice applies to this website and to enquiries sent through its contact channels. A third-party website you choose to visit, including the externally hosted Airtable contact form, may also provide its own notice.

2. Data we process

We may process:

• enquiry data: name, business contact details, organisation, role, project information, message, attachments, and subsequent correspondence;
• communications data: email headers, delivery information, and records needed to manage the relationship;
• technical and security data: IP address, date and time, requested resource, browser/device information, referring page, and server or security logs; and
• consent data: if optional technologies are introduced, the choices made, their date, and the policy version associated with them.

Please do not send special-category data or confidential information unless it is necessary and we have agreed an appropriate channel.

3. Purposes and legal bases

We process data to:

• answer enquiries and take steps requested before entering into a contract — Article 6(1)(b) GDPR where applicable;
• manage business relationships and ordinary correspondence — Article 6(1)(b) or our legitimate interests under Article 6(1)(f) in communicating with prospective and existing partners;
• operate, troubleshoot, and protect the website and prevent misuse — our legitimate interests under Article 6(1)(f) in maintaining a secure service;
• establish, exercise, or defend legal claims and retain required business records — Article 6(1)(c) and/or 6(1)(f); and
• use optional analytics or marketing technologies, if introduced — consent under Article 6(1)(a) and applicable ePrivacy rules. You may withdraw consent at any time without affecting earlier lawful processing.

Where we rely on legitimate interests, we assess necessity and balance those interests against your rights. You may object as explained below.

4. Recipients and service providers

Access is limited to authorised personnel and suppliers who need data for the purposes above. Categories may include hosting/CDN and security providers, email and collaboration providers, professional advisers, and the contact-form provider.

Current launch information to verify: hosting/CDN: [TO COMPLETE: provider, legal entity, role, and country]; email/collaboration: [TO COMPLETE]; contact form: Airtable — [TO COMPLETE: contracting Airtable entity, controller/processor role, workspace region, and data-processing agreement]. We do not sell personal data.

We may disclose data to public authorities or other parties where required by law or necessary to protect legal rights.

5. International transfers

Some suppliers may process data outside the European Economic Area. Before publication, SKS Energie must identify each relevant transfer and document the safeguard used, such as an adequacy decision, the European Commission’s Standard Contractual Clauses with any required supplementary measures, or another lawful mechanism.

[TO COMPLETE: list non-EEA destinations, providers, transfer mechanism, and how a copy or summary of safeguards can be obtained.]

6. Retention

• Enquiries and related correspondence: [TO COMPLETE: retention period or objective deletion criteria].
• Server and security logs: [TO COMPLETE: retention period].
• Contractual and accounting records: for the period required by applicable law and necessary to establish or defend claims.
• Consent records, if applicable: for as long as needed to demonstrate the choice and no longer than necessary, then deleted or anonymised.

We may retain specific information longer where a legal hold, dispute, or statutory obligation applies. Data is then deleted or anonymised securely.

7. Is providing data mandatory?

Providing data is voluntary, but we need the fields identified as required in order to answer an enquiry. If those details are not provided, we may be unable to respond. This website does not use solely automated decision-making or profiling that produces legal or similarly significant effects.

8. Your rights

Subject to the conditions in the GDPR, you may request access, rectification, erasure, restriction, or portability of your data; object to processing based on legitimate interests; and withdraw consent at any time. You may also lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali) or the supervisory authority in the EU/EEA country where you live, work, or believe an infringement occurred.

To exercise a right, contact us using the privacy address above. We may need information to verify your identity and will respond within the time required by law.

9. Security, links, and changes

We use proportionate technical and organisational measures designed to protect personal data. No internet transmission or storage system is completely secure. External links open services outside our control; review their information before submitting data.

We may revise this notice when processing or legal requirements change. Material changes will be highlighted where appropriate, and the current revision date appears above.