Legal documents and privacy
All the documents governing the use of IPGS ENERGY services and the processing of personal data, in the version currently in force and in previous ones.
Documents in force
- Terms and ConditionsVersion history
Version 2026-10-01 — in force since 1 October 2026
- Privacy PolicyVersion history
Version 2026-09-02 — in force since 2 September 2026
- Cookie PolicyVersion history
Version 2026-09-02 — in force since 2 September 2026
How we handle updates
Every version of each document remains published and available, together with the list of changes from the previous one and its SHA-256 cryptographic fingerprint.
Material changes are notified by email to registered users at least 30 days before the effective date and require fresh acceptance at the next portal login. Editorial updates are published and flagged, but require no action.
For every acceptance we keep the date, time, version and fingerprint of the accepted text: portal users can review their own history under Settings › Privacy.
Data processors
The providers that process personal data on behalf of IPGS ENERGY S.r.l., appointed under art. 28 GDPR.
| Provider | Purpose | Country | Safeguard |
|---|---|---|---|
| Supabase Inc. | Authentication, database and document storage for the client portal | United States (EU infrastructure — Frankfurt) | Standard Contractual Clauses |
| Amazon Web Services, Inc. | Sending transactional, service and informational email (AWS SES) | United States | Standard Contractual Clauses + EU-US Data Privacy Framework |
| Vercel Inc. | Hosting of the public website and the client portal | United States | Standard Contractual Clauses |
| Anthropic PBC | Automated reading and structuring of data from bills and supply documents uploaded to the portal. Content is not used to train the models | United States | Standard Contractual Clauses |
| Cloudflare, Inc. | Protection of public forms against automated submissions (Turnstile): processes IP address and technical browser signals | United States | Standard Contractual Clauses + EU-US Data Privacy Framework |
| Google LLC | Website traffic statistics (Google Analytics), with consent only | United States | Standard Contractual Clauses + EU-US Data Privacy Framework |
| Meta Platforms Ireland Ltd. | Advertising campaign measurement on the public website, only with consent to marketing cookies | Ireland (European Union) | Processing within the European Economic Area |
Your rights
- Art. 15Access to your personal data
- Art. 16Rectification of inaccurate data
- Art. 17Erasure (right to be forgotten)
- Art. 18Restriction of processing
- Art. 20Data portability
- Art. 21Objection to processing
Requests are handled within 30 days. You may also lodge a complaint at any time with the Italian Data Protection Authority.
Data controller
IPGS ENERGY S.r.l.
Via Ugo Ojetti 7, 20151 Milano (MI), Italia
P.IVA 07006920966 — REA MI-1928935
ipgsenergy@ipgsenergy.it