1. PREAMBLE
ESGenius! – The Sustainability OS considers the safeguards of Personal Data of Users of its Services of paramount importance. For this reason, ESGenius! – The Sustainability OS complies with the EU General Data Protection Regulation 2016/679 (“GDPR”).
This Privacy Policy sets out how ESGenius! – The Sustainability OS will treat your Personal Data when using our Software.
2. DATA CONTROLLER
For the purpose of this Privacy Policy, ESGenius! – The Sustainability OS is the Data Controller of your Personal Data.
3. EMPLOYEES AND SERVICE PROVIDERS
We may disclose your Personal Data to some of our employees and our service providers insofar as reasonably necessary for the purposes set out in this Privacy Policy.
ESGenius! – The Sustainability OS has in place written agreements with each of its service providers that are compliant with GDPR. Nevertheless, the Software and the owner company ResNovae remain responsible for the processing of Personal Data within its Services. Except as provided in this Privacy Policy, we will not share your Personal Data to any third party.
4. COOKIES
To find out more about how we use cookies, please see our Cookies Policy.
5. PERSONAL DATA WE COLLECT
We collect personal data about you from a variety of sources, including information we collect from you directly (e.g. when you register and use the Software); from third parties (e.g. from your employer) or automatically (e.g. through cookies):
Personal data we may collect directly from you: Identification data (e.g. name, surname, email address, and telephone number); Login information (e.g. user name and password); Internet profiles (e.g. IP address, web browser, use of the Software and device information); Economic and financial data (e.g. users’ selected portfolio and preferences); Employment data (e.g. employer and position); Behavioural information (data collected using cookies and other device identifying technologies); and other information provided at your discretion from time to time.
Personal data we may collect from third parties: we may obtain from your employer certain information, such as your professional contact details (e.g. name, surname, email address, and telephone number).
Personal data we may collect automatically from you: when using the Software we collect automatically from you certain information which may include personal data. Further information about our use of cookies and tracking technologies is available in our Cookie Policy.
It is important that the personal data we hold about you is accurate and current. Please keep us informed if your personal data changes during your relationship with us. This Software may include links to third-party web platforms, plug-ins and applications. Clicking on those links or enabling those connections may allow third parties to collect or share data about you. We do not control these third-party web platforms and are not responsible for their privacy statements. When you leave our Software, we encourage you to read the privacy policy of every software you visit.
We also collect, use and share aggregated data such as statistical data for any purpose. Aggregated data could be derived from your personal data but is not considered personal data in law as this data will not directly or indirectly reveal your identity. We do not collect any special categories of personal data about you (this includes details about your race or ethnicity, religious or philosophical beliefs, sex life, sexual orientation, political opinions, trade union membership, information about your health, and genetic and biometric data). Nor do we collect any information about criminal convictions and offence.
6. HOW WE USE YOUR PERSONAL DATA AND ON WHAT LEGAL BASIS
We use and subsequently process personal data we collect about you on the following legal basis and for the purposes identified below:
We will process your personal data in order to comply with applicable laws, which may include the disclosure of your personal data and other complementary information to comply with requests received from authorities and/or bodies with compelling power.
You can ask us or third parties to stop sending you marketing messages at any time by following the opt-out links on any marketing message sent to you or by contacting us at any time. Where you opt out of receiving these marketing messages, this will not apply to personal data provided to us as a result of your purchase or use of our services.
7. HOW WE SHARE YOUR DATE AND WITH WHOM
ESGenius! – The Sustainability OS will be able to share your personal data with technology service providers, exclusively for the purposes of ESGenius! functionalities. Our service providers that support the IT infrastructure of ESGenius! – The Sustainability OS and provide other services that may be required to have access to and process your data, on our behalf and to the extent necessary in order to provide the service.
Should some of the recipients of your personal data mentioned in this section are located outside the EU, in countries not regarded as ensuring an adequate level of protection for personal data under EU law, we will put in place appropriate safeguards in accordance with applicable legal requirements to ensure that when transferred to such recipients, your data is adequately protected. In particular, we will enter into agreements with the recipients on the basis of the relevant sets of standard contractual clauses approved by the European Commission available for consultation at the Software of the European Commission.
8. HOW LONG WE STORE YOUR PERSONAL DATA
We will keep your personal data for as long as we have a relationship with you and insofar the agreement with your employer is in force. Afterwards, we will retain your personal data for a period of 3 years, to enable us to defend ourselves against potential legal and contractual actions (during their expiration period). Finally, once these actions expire, we will proceed to delete your information.
9. YOUR RIGHTS ON YOUR PERSONAL DATA
You have certain rights regarding your personal data. These include the following rights:
10. CHANGES TO OUR PRIVACY NOTICE
We may update our privacy policy from time to time. If we make material changes to how we treat our users’ personal information, we will post the new privacy policy on the Software. The date the privacy policy was last revised is identified at the top of the page. You are responsible for periodically visiting this privacy policy to check for any changes.