This page describes the method used to process the personal data of individuals using the website.

This privacy policy is provided pursuant to article 13 of Regulation (EU) 2016/679 (hereinafter GDPR) to individuals interacting with the website starting from the address:

www.compagniadisanpaolo.it

The privacy policy is provided for the aforementioned website only, not for any other websites that may be viewed by the user via links starting from this one.

For the sake of transparency, the privacy policy describes the method, timescales and nature of the information that must be supplied by the data controllers to users when they access the web pages, regardless of the purpose for accessing them.

THE DATA CONTROLLER

Data relating to identified or identifiable people may be processed as a result of visiting this website.
The data controller is Compagnia di San Paolo Corso Vittorio Emanuele II, 75 10128 Torino. 

PLACE OF PROCESSING

The processing operations connected with the web services provided by this website take place at the office address specified above and are undertaken only by technical personnel or personnel who may be appointed to carry out occasional maintenance operations.

No data deriving from the web service is disclosed or distributed outside the company. The personal data provided by users who submit requests for information are used only for the purpose of performing the service requested and are disclosed to third parties only if necessary for this purpose.  

Amazon AWS Server in Frankfurt (Germany)

TYPES OF DATA PROCESSED

Browsing data / cookies

Our organisation has read the Measure issued by the Autorità Garante per la Protezione dei dati personali [Italian data protection authority] entitled “Individuazione delle modalità semplificate per l’informativa e l’acquisizione del consenso per l’uso dei cookie” [Identification of simplified methods for providing information and obtaining consent regarding the use of cookies] of 8 May 2014 [doc. web n. 3118884] (Published in the Gazzetta Ufficiale [Official Journal of the Italian State] No. 126 of 3 June 2014).

“Cookies” are small files stored by the browser on your computer or mobile device. They allow websites to store some information, such as user preferences, the type of device used and other information, ensuring more efficient operation of the site, enriching the browsing experience and providing information to the website owners.
Some cookies are automatically deleted at the end of the browsing session (session cookies), whereas others remain stored on the device (persistent cookies).

www.compagniadisanpaolo.it uses cookies to improve the operation of the website, enrich the user experience and compile statistics on the use of the website.

A visit to one or more pages of the website may generate the following types of cookies:

Technical cookies:

Various technologies are used to store information on your computer, which are then collected by websites. The best-known and most widely used of these are HTML cookies. They are used for browsing and to help you access and use the website. They are necessary for sending electronic communications or to enable the provider to provide the service you request.

The settings for managing or deactivating cookies may vary according to the internet browser you use. In any event, you can manage, deactivate or delete cookies, by changing the settings of your internet browser. Deactivating them, however, may slow down or prevent access to certain parts of the website.

The use of technical cookies enables you to use the website safely and efficiently.

Cookies that get stored on your browser and re-sent through Google Analytics or the statistics service of bloggers or the like are considered to be technical, only if they are used directly by the website owner for the purpose of optimising the site. The website owner may collect aggregate information about the number of users and how they visit the website. In these conditions, analytics cookies are covered by the same rules as technical cookies, in terms of privacy policy and consent.

From the point of view of duration, cookies come in two types: temporary session cookies, which are automatically deleted at the end of the browsing session and serve to identify you so that you do not have to log into every page you visit, and permanent ones, which remain active on your PC until they expire or you delete them.

Session cookies may be installed to save your session and to perform other activities that are strictly necessary for the operation of this Application, for example in relation to traffic distribution.

They are not stored permanently, but only for the duration of your browsing session, and disappear when you close your browser. Their use is strictly limited to the transmission of session identifiers consisting of random numbers generated by the server, which are necessary to enable you to explore the website securely and efficiently.

www.compagniadisanpaolo.it uses the following technical cookies:

_icl_visitor_lang_js, to direct you to the website version on the basis of your browser’s language setting, which lasts 24 hours

Cookies on website performance: these are session cookies and are necessary to enable you to explore the website securely and efficiently.

Anonymous analysis cookies: these are defined as anonymous as they cannot be used to identify specific individuals.

Third-party cookies:certain pages linking to social networks and other multimedia applications contain anonymous third-party cookies intended to track and improve the operation and customisation of their applications. For the policies relating to the cookies associated with www.compagniadisanpaolo.it, view the individual privacy policies at: 

Google Analytics (Google Ireland Limited.)

Google Analytics is a web analytics service provided by Google Ireland Limited. (“Google”). Google uses the personal data it collects to track and examine the use of this Application, prepare reports and share them with other Google services. Google may use personal data to contextualise and customise the advertisements shown on its advertising network.

Personal data collected: Cookies and usage data

Place of processing: Ireland Privacy Policy – Opt Out. Privacy Shield Participant.

Google Analytics with anonymised IP (Google Ireland Limited.)

Google Analytics is a web analytics service provided by Google Ireland Limited. (“Google”). Google uses the personal data it collects to track and examine the use of this Application, prepare reports and share them with other Google services. Google may use personal data to contextualise and customise the advertisements shown on its advertising network. This Google Analytics integration makes your IP address anonymous. Anonymisation works by shortening your IP address within the Member States of the European Union or other Contracting States to the Agreement on the European Economic Area. Only in exceptional cases will the complete IP address be sent to a Google server and shortened within the US.

Personal data collected: Cookies

Place of processing: Ireland Privacy Policy – Opt Out.

Display Advertisers Extension for Google Analytics (Google Ireland Limited.)

On this Application, Google Analytics may use Google interest-based advertising, third-party audience data and information from the DoubleClick cookie to extend statistics with demographics, interests and ad interaction data.

Personal data collected: Cookies and usage data

Place of processing: Ireland Privacy Policy – Opt Out.

YouTube Video Widget (Google Ireland Limited.)

YouTube is a video content viewing service operated by Google Ireland Limited that enables this Application to integrate content of this type into its own pages.

Personal data collected: Cookies and usage data.

Place of processing: USA – Privacy Policy

Video Vimeo (Vimeo, LLC)

Vimeo is a video content viewing service operated by Vimeo, LLC that enables this Application to integrate content of this type into its own pages.

Personal data collected: Cookies and usage data.

Place of processing: United States – Privacy Policy . Privacy Shield Participant.

Font Awesome (Fonticons, Inc. ) 

Font Awesome is a font and icon toolkit operated by Fonticons, Inc. that enables this Website to integrate content of this type into its own pages.

Personal data collected: Usage data.

Place of processing: United States – Privacy Policy.

SMTP2GO (Sand Dune Mail Ltd)

SMTP2GO is an email delivery and address management service provided by Sand Dune Mail Ltd. Personal data collected: surname, cookies, date of birth, usage data, email address, postal address, country, first name, telephone number, occupation, gender and various types of data.

Place of processing: European Union – Privacy Policy.

Mailgun (Mailgun, Inc.)

Mailgun is an email delivery and address management service provided by Mailgun, Inc. Personal data collected: surname, cookies, date of birth, usage data, email address, postal address, country, first name, telephone number, occupation, gender and various types of data

Personal data collected: Cookies and usage data

Place of processing: USA Privacy Policy

Widget Google Maps (Google Ireland Limited.)

Google Maps is a map viewing service operated by Google Ireland Limited that enables this Application to integrate content of this type into its own pages.

Personal data collected: Cookies and usage data.

Place of processing: United States – Privacy Policy. Privacy Shield Participant.

Facebook Audience Network (Facebook, Inc.)

Facebook Audience Network is an advertising service provided by Facebook, Inc. To find out more about how Facebook uses the data, please refer to the Facebook Data Policy. To enable Facebook Audience Network to work, this Application may use mobile device identifiers (including Android Advertising ID or Advertising Identifier for OS) or cookie-like technologies. The ways in which Audience Network displays advertisements to you include the use of your advertising preferences. You can control the sharing of your advertising preferences in the Facebook Ad settings.

You may opt out of certain Audience Network targeting functions, using your device settings. For example, you can change the advertising settings available for mobile devices, or follow any instructions applicable to Audience Network that may be included in this privacy policy. Personal data collected: Cookies, usage data and unique device identifiers for advertising (e.g. Google Advertiser ID or the IDFA identifier).

Place of processing: USA Privacy Policy – Opt Out

Facebook Ads conversion tracking (Facebook, Inc.)

Facebook Ads conversion tracking is a statistics service provided by Facebook, Inc. that links data from the Facebook ad network with actions taken in this Application.

Personal data collected: Cookies and usage data

Place of processing: USA Privacy Policy.

Google AdSense (Google)

Google AdSense is an advertising service provided by Google Ireland Limited. This service uses the “DoubleClick” cookie, which tracks your use of this Application and your browsing behaviour in relation to the advertisements, products and services offered. You can opt out of the DoubleClick cookie at any time:  google.com/settings/ads/onweb/optout

Personal data collected: Cookies and usage data

Place of processing: USA Privacy Policy – Opt Out

Google reCAPTCHA (Google LLC) 

Google reCAPTCHA is an anti-spam service provided by Google LLC.

Use of the reCAPTCHA system is subject to Google’s privacy policy and terms of use.

Personal data collected: Cookies and usage data.

Place of processing: United States – Privacy Policy. Privacy Shield Participant.

Hotjar

https://help.hotjar.com/hc/en-us/articles/360038347874-Sample-Wording-for-Your-Privacy-Policy

CONSENT

Given the type of cookies used, browsing www.compagniadisanpaolo.it implies acceptance of the conditions of use, including the functions related to cookies, which can be disabled using the specific options available in the various types of browsers and illustrated in the next paragraph. 

DISABLING COOKIES

All browsers can be set to prevent cookies being accepted; by changing the preferences of the Internet browser used, you can accept all of them, accept only some of them, or reject all of them. However, disabling them permanently can lead to browsing difficulties or, sometimes, the inability to use some features and services offered on the websites.

Below are the methods for disabling cookies for the most frequently used browsers. To change the settings in browsers other than those listed, refer to the support documentation provided by the browser producer.

Internet Explorer 8.0+:

  • Click on “Tools” in the menu bar and select “Internet Options”
  • Click on the “Privacy” tab at the top
  • Drag the slider to “block all Cookies”

Firefox 4.0+:

  • Click on “Tools” in the menu bar
  • Select “Options”
  • Click on the “Privacy” tab
  • Select the “Use tracking protection” option

Chrome:

  • Click the “Chrome Menu” in the browser’s toolbar
  • Select “Settings”
  • Click “Show Advanced Settings”
  • In the Privacy section, click the “Content Settings” button
  • In the “Cookies” section, select “Block third-party cookies and site data” and “Block sites from setting any data”

Safari 5.0+:

  • Click the Safari menu and select “Preferences”
  • Click the “Privacy” tab
  • In the “Block Cookies” section, select whether you want to accept cookies always, never or only from sponsors and third parties. For an explanation of the different options, click the Help button (question mark icon). If Safari is set to block cookies, you may need to accept them temporarily to open the page. Then repeat the above steps and select “Always”. Once you have finished using Help, disable cookies again and delete them.

PURPOSES OF THE PROCESSING OF THE DATA COLLECTED
Your data is collected to enable the Data Controller to provide its services, as well as for the following purposes: Statistics and Interaction with social networks and external platforms.
The types of Personal Data used for each purpose are indicated in the specific sections of this document.

PROCESSING METHODS

Personal data are processed with automated tools for the time strictly necessary to achieve the purposes for which they were collected.

Specific security measures are taken to prevent data loss, illicit or incorrect use and unauthorised access. 

DATA PROVIDED VOLUNTARILY BY THE USER

The optional, explicit and voluntary sending of e-mails to the addresses stated on this website results in the recipient subsequently obtaining the sender’s address, which is needed to respond to requests, as well as any other personal data included in the message.

The data you submit when signing up for the newsletter via the website or sending requests using the form on the website, will be acquired subject to your consent to the processing of your personal data.

Specific summary information will be entered or displayed from time to time on the pages of the site set up for particular services provided on request. 

OPTIONAL NATURE OF THE SUPPLY OF DATA

Apart from the specified browsing data, you are free to submit or withhold the personal data asked for in any information request forms.
If you choose not to submit certain items of data, however, it may not be possible to fulfil your request. 

RIGHTS OF DATA SUBJECTS

The subjects to whom the personal data refer have the right at any time to obtain confirmation of the existence or otherwise of the same data and to know its content and origin, verify its accuracy or request that it be supplemented, updated or rectified (articles 15-20 of EU Regulation 679/2016).

Pursuant to the same article, data subjects are entitled to request the deletion, transformation into anonymous form or blocking of data processed in violation of the law, and to object in any case, for legitimate reasons, to their processing.

Requests must be addressed:

– by email to: privacy@compagniadisanpaolo.it

– or by post to:  Compagnia di San Paolo – Richieste Privacy, Corso Vittorio Emanuele II, 75 10128 Torino

Privacy policy format

This privacy policy statement can be viewed automatically using any internet browser

However, please report any difficulties encountered in viewing this information so that alternative means may be provided if necessary.

This document at

www.compagniadisanpaolo.it/en/privacy-policy

constitutes the Privacy Policy of this website and will be updated if necessary.