Privacy Policy

Pursuant to Regulation (EU) 2016/679 (hereinafter: GDPR), this page describes the methods for processing the personal data of users who visit the Balkan Energy School website (hereinafter: “Balkan Energy School” or “Controller”) www.balkanenergyshool.org (hereinafter: “Website”) or who communicate with Balkan Energy School through the contact details and/or forms provided on the Website.

This information does not apply to other websites, pages, or online services that may be accessible via hyperlinks on the Website but refer to external resources outside the Balkan Energy School domain.

This Privacy Policy exclusively concerns the data collected through the Website and the cookies used for browsing its web pages and does not extend to data collected directly or through cookies by sites managed by other entities to which the Website may refer.

Data Controller The Data Controller is Balkan Energy School, with its headquarters Piazza Cavour 5 – 20121 – Milano – email: info@balkanenergyshool.org.

Data Protection Officer The Data Protection Officer (DPO) can be contacted at the following email address: info@balkanenergyshool.org.

General Principles of Data Processing Balkan Energy School implements appropriate technical and organizational measures to ensure and demonstrate that the processing of the provided data is carried out in compliance with the GDPR, taking into account the nature, scope, context, and purposes of the processing, as well as the risks to the rights and freedoms of individuals associated with data processing. This Privacy Policy is subject to periodic review to ensure full adherence and compliance with the Controller’s procedures and practices.

Types of Data Processed, Legal Bases, and Purposes of Processing

Browsing Data The computer systems and software procedures used to operate this Website acquire, during normal operation, certain personal data whose transmission is implicit in the use of Internet communication protocols. This category of data includes IP addresses and/or domain names of the computers and devices used by users, addresses in Uniform Resource Identifier/Locator (URI/URL) notation of requested resources, request times, methods used to submit requests to the server, file sizes obtained in response, numerical codes indicating the status of the server response (successful, error, etc.), and other parameters related to the user’s operating system and computing environment. These data (“cookies”) are technically necessary for the Website’s functionality and are processed to allow access to the Website, pursuant to Article 6(1)(b) of the GDPR. For further details, refer to the Cookie Policy section below.

Data Provided Voluntarily by Users Common personal data (contact data and data included in requests for information/clarifications) may be voluntarily and spontaneously provided directly by users through complaints, requests, and reports via email or messages on the Website’s social media profiles (where applicable) and by filling out forms. These data are processed solely for response purposes (pursuant to Article 6(1)(b) and (e) of the GDPR) for the time necessary to provide a response unless the data is included in administrative proceedings and/or measures.

Users are advised to avoid including sensitive data in messages in any form, such as data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, or trade union membership, as well as genetic data, biometric data, health data, or data concerning sex life or sexual orientation. If necessary, such data will be specifically requested by the authorized personnel.

Regarding the processing of personal data by social media platform managers, reference should be made to their respective privacy policies. Balkan Energy School processes the personal data provided by users through its social media pages exclusively for institutional purposes, to manage interactions with users (comments, public posts, etc.), and in compliance with applicable regulations.

Processing Methods The Controller processes data in compliance with confidentiality guarantees and appropriate security measures as required by current regulations through IT tools with logic strictly related to the purposes of processing. Third parties may be appointed as data processors pursuant to Article 28 of the GDPR.

Personal data collected via the Website are processed by the Balkan Energy School staff, who act based on specific instructions regarding the purposes and methods of processing.

Data Communication and Transfer Personal data will be processed within the European Union and stored on servers located within the European Union. Personal data will not be disclosed to third parties unless expressly requested by judicial authorities.

Retention Period of Personal Data Data will be processed for the duration of browsing and aggregated for statistical purposes at the end of the session. Data voluntarily provided by users will be retained for the time necessary to provide a response unless included in administrative proceedings and/or measures, in which case a separate and specific privacy notice will be provided.

User Rights In relation to browsing data, under Articles 15-22 of the GDPR, users have the right to:

  • Access and request a copy;
  • Request rectification;
  • Request deletion;
  • Obtain restriction of processing;
  • Object to processing;
  • Receive the provided data in a structured, commonly used, and machine-readable format.

To exercise these rights, users may contact the DPO at info@balkanenergyshool.org.

Right to Lodge a Complaint Users who believe that their personal data have been processed in violation of GDPR provisions have the right to lodge a complaint with the relevant Data Protection Authority, as per Article 77 of the GDPR, or seek legal recourse (Article 79 of the GDPR).

This Privacy Policy was drafted on March 7, 2025.