Privacy Policy - Compliance with EU Regulations on International Project Data Management
Barrel S.r.l
Galleria delle Porte Contarine, 4
35137 Padova (PD)
VAT IT12616620964
REA PD-478495
Email: info@barrel.solar
Website: https://www.barrel.solar
1. Introduction
At Barrel S.r.l, we are committed to protecting the privacy and confidentiality of all personal data we collect and process in the course of our international projects. This Privacy Policy outlines how we handle personal data in compliance with the General Data Protection Regulation (GDPR) (EU) 2016/679. This policy applies to all data collected, processed, and stored by Barrel S.r.l in connection with international projects and partnerships, including those outside the European Economic Area (EEA).
2. Scope of the Policy
This Privacy Policy applies to all personal data processed by Barrel S.r.l in relation to:
• Clients, partners, contractors, and other stakeholders involved in international projects.
• Employees, consultants, and subcontractors who engage in the execution of our international activities.
• Any other individuals whose data is collected in the course of Barrel S.r.l’s international business operations.
3. Data Collection
Barrel S.r.l collects personal data only when necessary for specific business purposes, such as:
• Managing international energy projects, including contracts, project implementation, and training programs.
• Communicating with clients, partners, suppliers, and other stakeholders.
• Complying with regulatory requirements in countries where we operate.
The types of personal data we may collect include:
• Names, contact details (email, phone number), and job titles.
• Billing and financial information.
• Project-related data, including stakeholder communications and documentation.
We will only collect personal data that is necessary, relevant, and limited to what is required for the specific purpose of each project.
4. Legal Basis for Processing
The personal data we collect is processed based on the following legal grounds:
• Contractual necessity: Data is processed to fulfill contracts with clients, suppliers, or partners in the course of international project work.
• Legitimate interest: Data processing is required for legitimate business purposes, such as providing energy solutions, managing projects, and maintaining client relationships.
• Legal obligation: Data is processed to comply with applicable laws and regulatory requirements.
• Consent: Where applicable, personal data is processed based on the consent provided by individuals.
5. Data Storage and Retention
Personal data is stored securely within the European Economic Area (EEA) or in countries that provide an adequate level of data protection as determined by the European Commission. If data must be transferred outside the EEA to a third country, Barrel S.r.l will ensure that appropriate safeguards, such as Standard Contractual Clauses (SCCs) or Binding Corporate Rules (BCRs), are in place to protect the data.
We retain personal data only for as long as necessary to fulfill the purposes for which it was collected, or as required by applicable laws and regulations. When the data is no longer needed, it is securely deleted or anonymized.
6. Data Sharing and International Transfers
Barrel S.r.l may share personal data with third parties in the course of international projects, such as:
• Partners, contractors, and service providers engaged in the delivery of energy solutions.
• Governmental authorities or regulatory bodies, when required by law.
When transferring personal data outside the EEA, Barrel S.r.l ensures that all transfers are compliant with GDPR requirements and are subject to adequate safeguards, including:
• Adequacy decisions by the European Commission.
• Standard Contractual Clauses (SCCs) approved by the European Commission.
• Data Processing Agreements (DPAs) with third parties to ensure compliance with GDPR principles.
7. Data Security
Barrel S.r.l implements appropriate technical and organizational measures to safeguard personal data against unauthorized access, loss, alteration, or destruction. These measures include:
• Encryption of data where applicable.
• Secure access controls and authentication systems.
• Regular audits of data security procedures.
In the event of a data breach, Barrel S.r.l will promptly notify affected individuals and the relevant supervisory authorities as required under GDPR.
8. Rights of Data Subjects
Under the GDPR, individuals have the following rights regarding their personal data:
• Right of access: You have the right to request a copy of the personal data we hold about you.
• Right to rectification: You have the right to request that any inaccuracies in your personal data be corrected.
• Right to erasure: You have the right to request the deletion of your personal data under certain conditions.
• Right to restrict processing: You can request the restriction of processing of your personal data in certain circumstances.
• Right to data portability: You have the right to receive your personal data in a structured, commonly used, and machine-readable format, and to have it transmitted to another controller.
• Right to object: You have the right to object to the processing of your personal data for certain purposes.
To exercise any of these rights, or to make a complaint about our data processing practices, please contact Barrel S.r.l at info@barrel.solar.
9. Privacy Policy Updates
This Privacy Policy will be reviewed regularly to ensure compliance with GDPR and other relevant regulations. Any significant updates will be communicated to data subjects and will be reflected in the policy available on our website.
10. Contact Information
For any questions or concerns regarding this Privacy Policy, or to exercise your rights as a data subject, please contact:
Barrel S.r.l
Galleria delle Porte Contarine, 4
35137 Padova (PD)
Email: info@barrel.solar
Website: https://www.barrel.solar
This Privacy Policy reflects Barrel S.r.l’s commitment to upholding the highest standards of privacy protection and data security, in compliance with the GDPR and applicable international regulations.
Date: 20 Jan 2023
Reviewed: 21 Feb 2024
Approved by: Barrel S.r.l Board of Directors