• Home
  • Marketing policy
Banco Villa

Marketing policy

Information on the processing of personal data pursuant to art. 13 Regulation (EU) 679/2016

The Data Controller is the Company 8853 S.p.A. with operational headquarters in Pero (MI), in via Pitagora 11, tel. 0288531, e-mail [email protected].

  1. PURPOSE AND LEGAL BASIS OF THE PROCESSING

We wish to inform you that the data collected will be used for processing purposes based on the legitimate interest of the Data Controller and specifically:

  1. to follow up on your request to register for the event and for the consequent administrative and organisational management of the event#PV#
  2. to send direct marketing communications, newsletters, advertising material including commercial or promotional communications. In this case, the consent, expressed in accordance with this policy, constitutes the legal basis#PV#
  3. for activities to determine habits and preferences through profiling treatments. In this case, the consent of the data subject expressed in accordance with this statement is the legal basis.

Consent, where required, may be expressed through specific flagboxes.

  1. PROCESSING METHODS
  • In relation to the personal data processed and stored for the purposes referred to in point a), number 1 of this disclosure (purpose of registration for the event), the processing will take place through automated logics and the use of CRM type management software#PV#
  • In relation to the personal data processed for the purposes referred to in point b) number 1 of this policy (marketing purposes), the processing will be performed by means of automated software for the sending of commercial information#PV#
  • In relation to the personal data processed for the purposes referred to in point c) number 1 of this policy (purposes of determining preferences), the processing will be performed through CRMs that are used to define tastes and preferences in order to offer personalised services and communications. For more details see the next point.
  1. AUTOMATED DECISION MAKING AND PROFILING

If you have given your consent to the processing of personal data for the purpose of using personalised services through profiling, they may be subject to an automated decision-making process, through a specific algorithm that will decide which communications are more suitable for your profile or which could be of greater interest. The processing thus performed has, as expected consequences, by way of example, the sending of highly profiled commercial communications, the sending of discounts, the sending of invitations to events considered of interest, etc.
The data subject has, in any case, the right to obtain human intervention in the decision-making process by the Data Controller, to express their opinion, to obtain an explanation of the decision reached and to challenge the decision itself.

  1. RECIPIENTS AND ANY CATEGORIES OF RECIPIENTS OF PERSONAL DATA

The following may be recipients of personal data:

  • Communications companies that perform commercial communication activities and
profiling

activities, as well as companies that offer drafting and newsletter services, which are Data Processors#PV#

  • Companies that provide platforms to access webinar services, in particular Google Meet, whose privacy policy can be consulted at the following link https://policies.google.com/privacy. The Company manages servers throughout the world and the information may be processed on servers outside the country you live in. In this case, the data may be transferred to countries outside the EU. Regardless of where the information is processed, the Company respects certain legal frameworks relating to data transfer, including the EU-U.S. Privacy Shield and the Swiss-U.S. Privacy Shield.

The Data Controller may communicate the data provided by you to Supervisory Bodies, Judicial Authorities, as well as to those subjects to whom the communication is mandatory by law.

Your data will not be disclosed.

  1. DATA RETENTION PERIOD
  • The personal data processed and stored for the purposes referred to in point a) number 1 of this information (purpose of registration for the event) are processed for the time strictly necessary for the performance of the event itself#PV#
  • The personal data processed for the purposes referred to in point b) number 1 of this policy (marketing purposes) are processed and stored until the relevant cancellation and/or revocation of consent is requested by the data subject#PV#
  • Personal data processed for the purposes referred to in point c) number 1 of this policy (purposes of determining preferences) are processed and stored for a period of time not exceeding 24 months from collection.
  1. PROVISION OF DATA

The provision of data marked as mandatory is essential for registration and participation in the event#PV# any refusal to provide such information will prevent its provision. The provision of data marked as optional is exclusively aimed at offering you a more personalised service#PV# in the event of failure to communicate such data, it will not be possible to perform any marketing and personalisation activities.

  1. RIGHT OF OBJECTION

The data subject has the right of objection in the following terms:

  • The right to object at any time, on grounds relating to your particular situation, to the processing of personal data concerning you pursuant to article 6, paragraph 1, letters e) or f) of the GDPR, including profiling on the basis of those provisions. The Data Controller shall refrain from further processing personal data unless it proves the existence of compelling legitimate reasons to proceed with the processing that prevail over the interests, rights and freedoms of the data subject or for the establishment, exercise or defence of a right in court#PV#
  • If personal data are processed for direct marketing purposes, the data subject has the right to object at any time to the processing of personal data concerning them performed for such purposes, including profiling to the extent that it is connected to such direct marketing#PV#
  • In the event of objection to processing for direct marketing purposes, personal data are no longer processed for these purposes.
  1. EXERCISE OF RIGHTS

The data subject also has the right to access their personal data, to request its correction, updating and cancellation or limitation, if incomplete, erroneous or collected in breach of the law, as well as to object to the processing for legitimate reasons or to obtain its portability (for a more detailed discussion, please refer to arts. 15-22 of the GDPR).

In cases where consent is necessary for data processing, the data subject has the right to withdraw their consent at any time. Withdrawal of consent does not affect the lawfulness of the processing based on the consent before its withdrawal.

All the rights listed above may be exercised by you by writing to [email protected].

If you believe that the processing of your data breaches the provisions contained in the Regulation (EU), you can contact a competent Data Protection Authority. The Italian Data Protection Authority's website is http://www.garanteprivacy.it/.