Information pursuant to, and for the purposes of, the GDPR EU 2016/679 relating to the protection of personal data processing.

This information is provided to our clients (natural persons) and to natural persons working in the name and on behalf of clients (legal persons), pursuant to article 13 GDPR 679/2016 (European Regulation on the protection of personal data).

Data Controller and Data Processors.

The Data Controller, which you can contact to assert your rights referred to in art. 15 and 22 of EU Regulation 679/216e below, is C&C gas control Ltd, with registered office in Annis Komninis, 4 - 1060 Nicosia, Cyprus.
The list of Delegates and Persons in charge of the data processing is available at the above-mentioned address and can be requested by e-mail (

Data processing purposes:

  • execution of obligations arising from a contract of which you are a part of or adhere to, prior to and after the execution of the contract, at your specific requests;
  • fulfilment of legal obligations of an administrative, accounting, civil, tax, regulation, EU and non-EU legislation nature;
  • client management (data acquisition and pre-contractual information, client administration, reliability and solvency control to prevent possible fraud, insolvency and/or default, contract administration, orders, shipments and invoices);
  • litigation management (contractual breaches, warnings, transactions, debt collection, arbitrations, judicial disputes);
  • carrying out of market research;
  • sending advertising material;
  • promotional activities.

This data will be included in the Data Controller's archives and used to send technical, commercial, administrative and other services similar to those in relation to your previous purchases or subject to your specific requests. In particular, it will be used to send (via e-mail as well) information and communications concerning technical and commercial services, value-added services, interactive pre and post sales services, news and promotions.

Location of data processing: the personal data processed will not be circulated, however it will be passed on to well-defined subjects. Internal and external personnel are entitled to data processing, on the basis of the roles and tasks carried out, within the limits of their powers and in accordance with the instructions given to them by the Owner. This data may be disclosed to the parties entitled to access it under the provisions of the law, norms and regulations such as correspondence companies, banks and credit institutions, debt collection companies, law firms, insurance companies, computer equipment maintenance companies, professional firms/companies that provide accounting and tax services, self-employed/casual services, agents.

Mandatory or optional nature of the provision of data and consequences of refusal to provide such data.

The conferment of data is mandatory for all that is required by legal and contractual obligations and therefore any refusal to provide it, in whole or in part, may make it impossible to execute the contract or to correctly carry out all the obligations, such as those of an administrative and technical nature.

Data communication.

It being understood that the communications have been carried out in compliance with legal and contractual obligations, all data collected and processed may be passed on in Italy and transferred abroad, exclusively for the purposes specified above, to:

Furthermore, when handling your data, the following categories of appointed staff and/or internal and external managers that have been identified in writing and that have received specific written instructions, may receive your data:
  • Employees of the personnel and administration office;
  • Professionals or service companies, for administration and business management purposes, who work on behalf of our company.

Data retention times:

The data provided will be stored in our archives according to the following parameters:

  • For administration, accounting, contract and labour laws and management of any litigation: 10 years as established by law pursuant to the provisions as set forth in art. 2220 C.C., without prejudice to any delayed payments of amounts owing, which will justify its extension.

Scope of communication and dissemination

We also wish to inform you that the data collected will never be disclosed and will not be passed on without your explicit consent, except for the necessary communications that may involve the transfer of data to public bodies, consultants or other subjects for the fulfilment of legal obligations.

Existence of an automated decision-making process, including profiling

C&C gas control ltd does not use any automated decision-making process, including profiling, pursuant to article 22, paragraphs 1 and 4 of EU Regulation no. 679/2016.

Rights of the interested party

At any given moment, you may exercise, pursuant to articles 15 to 22 of EU Regulation no. 2016/679, the right to:
  • a) request confirmation of the existence, or otherwise, of personal data;
  • b) obtain information on the purposes of the processing, the categories of personal data, recipients or categories of recipients to whom the personal data has been or will be communicated and, where possible, the retention period;
  • c) obtain the correction and deletion of data;
  • d) obtain limitation of the processing;
  • e) obtain data portability, i.e. receive it from a data controller, in a structured format, commonly used and readable by an automatic device, and transmit it to another data controller without hindrance;
  • f) oppose the processing, at any time, and oppose its use for direct marketing purposes;
  • g) oppose the use of an automated decision-making process concerning individuals, including profiling.
  • h) ask the data controller to access personal data and to rectify, delete or limit it or to oppose its processing, in addition to the right to data portability;
  • i) withdraw the consent, at any time, without compromising the lawfulness of the processed data based on the consent given prior to the revocation;
  • j) to put forth a complaint to a supervisory authority.
You can exercise your rights via a written request sent to the following e-mail address
The exercise of these rights may, however, be delayed, limited or excluded by reasoned communication and sent, without delay, to the interested party, for the time and within the limits in which it constitutes a necessary and proportionate measure, taking into account fundamental rights and the legitimate interests of the interested party, so as to safeguard the interests referred to in paragraph 1, letters a), b), d) and e). In such cases, the rights of the data subject may also be exercised through the Guarantor.

Nicosia, 25/05/2018