Iccrea Banking Group Web site privacy policy
This page is aimed at describing Iccrea Banking Group Web site management procedure, with specific reference to the treatment of users personal data. This statement produced pursuant with Legislative Decree 196, June 30, 2003.- Personal Data Protection Code- for those users who interact with Iccrea Banking Group Web site, accessible on the internet starting from the e-mail address:
This statement is prompted by Recommendation no. 2/2001, adopted on May 17, 2001 by the European authorities for the protection of personal data, brought together in the Working Party established by art. 29 of Directive n.95/46/EC, on certain minimum requirement for collecting personal data on-line, and especially the procedures, timeframe and nature of information that data owners must supply users who connect to web pages, regardless of the purpose of the connection. This statement applies only to the web site
www.gruppobancarioiccrea.it and not to other web sites consulted by the user through possible links.
Only technical personnel in charge carries out the processing operations connected to the web services of this Web site.
Data handling
Data concerning identified or identifiable subjects can be processed following consultation of this Web site. The data treatment owner is Iccrea Holding S.p.A- with registered office in Via Lucrezia Romana, 41/47- 00178 Rome. BCC Multimedia – registered office in Via Lucrezia Romana, 41/47- 00178 Rome is responsible for data handling.
For the sole purpose of server management and maintenance and software application technical updating, subjects other than those “Responsible” or “Delegated” can process data. Not a single data coming from the Web service is communicated or disseminated to a company other than Iccrea Group. Personal data supplied by the user who request dispatch of informative material are used with the sole purpose of supplying of performing the service requested and are communicated to third parties only if necessary for this purpose.
Area where data are processed
Data are physically stored inside servers positioned at BCC Multimedia or other subject delegated by BCC Multimedia for the maintenance, through written assignment of the task and with adequate level of confidentiality.
Types of data processed
Navigation data
Computer systems and software procedures dedicated to the Web site operations acquire, during normal use, some personal data implicitly transmitted when using Internet communication protocols.
This information is not collected to be associated to identify interested parties, but for its specific nature, could, through the processing and association with data, enable user identification.
This category includes IP addresses or domain names of the computers used by the users to connect to the Web site, URI (Uniform Resource Identifiers) form addresses of the resources requested, time of the request, the method used to submit the request to the server, the size of the file obtained in reply, numerical code indicating the status of the reply given by the server (done, error, etc.) and parameters concerning the user’s operating system and computer environment.
These data are used with the sole purpose of obtaining anonymous statistical information concerning the use of the site and to check its correct operation. These data can be used to ascertain responsibility in the case of hypothetical computer crimes to the detriment of the website.
Cookies
No personal data concerning users are acquired by the website through cookies.
Cookies are not used to transmit information of a personal nature, nor are user-tracking and identification systems used.
The use of so-called cookies (not permanently stored on the user’s computer) is strictly limited to transmitting session identifiers (formed by random numbers generated by the server) necessary to allow a safe and efficient exploration of the website.
Session cookies used in this Website do not use other IT techniques that could be dangerous for user navigation confidentiality.
Data supplied voluntarily by the user
Optional, explicit and voluntary dispatching of e-mails to the addresses indicated in this website entails the subsequent acquisition of the sender’s address, needed to reply to the requests, and any other personal data contained in the message.
The use of personal data to dispatch commercial material needs prior consent by the receiver, given by ticking the specific box. Specific and summary information will be progressively reported or viewed in the website pages dedicated to specific requested services.
Submitting data is optional
Besides what was stated above regarding navigation data, the user is free to supply personal data in request forms, in the webside section “contact”.
However, not providing the data means that the above information cannot be sent.
How data is handled
Personal data is handled automatically for the time strictly needed to satisfy the purpose it was collected for.
Specific safety measures are taken to avoid data loss, illicit or incorrect use and unauthorised access.
Interested party rights
The subject’s to whom the personal data refer have the right, at any time, to obtain confirmation as to whether such data exists and to know its content and source check its accuracy or request its integration, updating or rectification check its accuracy or request its integration (art. 7 of legislative Decree no. 196/2003).
In compliance with the above article the Data subject is entitled to erase, render anonymous or block the data unlawfully processed, and also always on legitimate grounds object to its processing.
Any request must be addressed to privacy@iccreah.bcc.it or mailed to Icccrea Holding SpA- Via Lucrezia Romana, 41/47 – 00178 Rome.