This document (hereinafter referred to as “Informative Document”) sets forth the methods of management of the website of Gruppo Banca Leonardo S.p.A. (hereinafter referred to as “GBL”), with reference to the processing of personal data of the users browsing it. This informative document is also prepared under art. 13 of Legislative Decree no. 196 of 30th June, 2003 (hereinafter referred to as the “Privacy Code”).
The Informative Document is only intended for the official website of GBL www.bancaleonardo.com (hereinafter referred to as the “Website”) and not for other websites possibly browsed by the user through links.
The Informative Document implements and is inspired by Recommendation no. 2, adopted on May 17, 2001 by the European Authorities for personal data protection, joined in a Group established under art. 29 of Directive no. 95/46/EC, in order to identify a number of minimum requirements for the online collection of personal data and, in particular, the methods, times and nature of the information that the authorized people for data processing have to supply the users with when the latter connect to webpages, regardless of the connection purposes.
AUTHORIZED COMPANY FOR DATA PROCESSING
Following the Website browsing, the personal data relating to identified or identifiable people may be processed. The Authorized company for the processing of said data is Gruppo Banca Leonardo S.p.A., with its registered office in Milan, via Broletto 46.
TYPE OF PROCESSED DATA
Surfing data
The IT systems and software procedures used for the operation of the Website collect, during their standard course of business, a number of personal data the transmission of which is implied in the use of internet communication protocols. Namely, this is information that is not gathered to be associated to identified people, but that for its nature could, through the processing and association with data held by third parties, allow to identify the surfing users.
This category of data includes "IP addresses" or the domain names of the PCs used by users connecting to the Website, the addresses in URI format (Uniform Resource Identifier) of the resources requested, the time of the request, the method used in making the request to the web server, the size of the file obtained as a reply, the numeric code indicating the status of the reply given by the web server (success, error etc.) and other parameters relating to the user's operating system and IT environment.
This data will be used by GBL exclusively for the collection of anonymous statistic information on the use of the Website and to control its correct operation.
It is worth mentioning that the above-mentioned data could be used to assess liability in the event of computer crimes to the detriment of the Website or of other websites connected or associated thereto: subject to this event, currently the data on web contacts are not held for longer than a few days.
Data voluntarily supplied by the user
Any possible mailing of electronic mail to the e-mail addresses contained in the Website leads to the obtainment of a number of personal data of the writer, including his/her e-mail address, required to answer the e-mail.
Cookies
Cookies and so-called persistent cookies, i.e. users tracking systems, are not used for the transmission of personal information.
The use of so-called session cookies (that are not persistently stored on the user's computer and are usually deleted when closing the browser) is strictly limited to the transmission of session identifications (made up of random numbers generated by GBL's web server), required for the safe and efficient surfing of the Website. The above-mentioned session cookies, used on the Website, prevent from using other IT techniques potentially prejudicial to the confidentiality of users surfing and do not collect user's identification data.
PROCESSING METHOD AND SAFETY MEASURES
Personal data is processed with automated and non-automated instruments, only for the time necessary to achieve the purposes for which it was collected. Specific safety measures are met to prevent the loss of data, illegal or wrong uses and unauthorized access.
RIGHTS OF THE PEOPLE CONCERNED
The subjects the personal data refers to, possibly collected in the above-mentioned specific sections, are entitled at any time to obtain the confirmation of whether or not said data exists and to learn of its contents and origin, control its accuracy or request its supplement or update, or correction under art. 7 of the Privacy Code.
The person concerned is entitled to request deletion, anonymity, as well as to object in any case, for legitimate reasons, against the processing of the data.
Any requests shall be addressed to:
Gruppo Banca Leonardo S.p.A.
Via Broletto, 46
20121 Milan
PRIVACY POLICY
Please note that this Information Document represents the "Privacy Policy" of the Site and will be subject to updates.